last executing test programs:

15.391783907s ago: executing program 0 (id=4514):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0)

15.304188338s ago: executing program 0 (id=4516):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r5)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000fc0)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000000)={0x58, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x3c}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4)
r8 = socket(0x22, 0x2, 0x59)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r4, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x4, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000010301080000000000000000020000000c000200ffff71a916d100004ab1"], 0x20}}, 0x44)
close(r0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000002600)={0x22f8, 0x14, 0x1, 0x70bd27, 0x25dfdbfe, {0x3, 0xd}, [@INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "ec887cde03bc6fe94028ff98a7ddd68705a0c8f1d57c206b2c4f287274274421fb4444f0c397c0401c2ac7b0457779dd17df9ba0a1a11a8cfe89be9d581cb1d337484a18d5f1b47e1bf951694d8d7fb95187f74e6e668d116fd66f3e405e3d1bc51498d700235cbe4e4c722b0197b741ce0aab92065501cbce8bd5c91a92fa23d56dc38444e297a3"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "0b94a3deab9f5480d9ce720ef8ce08baeed94932b88885676e898297886b5e50e13811b52cc35e7e019b716fb28e08c5f656406f0546e3eb56a2f688a7265baea7ba127518a2461bc0a9fa9431ed681712d2784114cd221477889c7f71b4b998337881dd8f16b8c4f306f1a640cae6b5f80bfc004654bb37cba199ca59d498f795583d4882f1d6d5ea3d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "c0225d67bc1bf35d1af068d51cb7a55b97c1b28083b818f150f5c1c3c86ab219a8e8999796953c3df9dd672311bf541eff4976a64c5fbaf3cebb45cd44347f2cbd09041298ddf12f09e26093ccabb2042204d1b62fcd6992e9d0907546a4781840fb0e8e1f2777c963444c1b4fd75999ed6cea376cc84045c036b632ed66c3ac614955022ccc5ce86345de969687741ca2031926be04c86e3b65ecfd24ca02b606db853f71686260635c79b64f48b6211890845d74493631e28cc631031894beae50392c6cdb2531937349fc70366a47ad502b644470f7e3f75d0a9bbf8021829564d18961121b40298603ae30fd616d5fcfcaa6d83a2e50b637840d773fe9662f2c57caf4879c3ad83286eed53ed22d2888c1edb12ea586e427ae74c9a74941ebd6f4e486cbd3cc2a41d6d413cb59cb1ae54d02c8bcd1504d32fdf3e90c81efa6ebd2f3854f1b2adc0ee34466eb1255b3c3a9cc036e59119b3631890540d3f6261e4815a7f26429d305fa58268c1cf2f658dba92ec0c9925661ce0ab9a7f40a6d24b5355042b9f5c3db30079b3bf44266b3d14c509b33e9fad31c4ed5d7e6b2376817b1fdbf28242d8ab25f292661baf7d5e531d177be642c31e74e8069dbb144edfd47e2b92bcdd49861252d53a39f53522ee5cbc05cfe00058241ca79f05920f782e4edc9d8656d7af593071dd102baa619fd4cbf901ddb9bf6b63c39c357c4a03ecfedbc2685f3acc02c34d3ee902142a2706d3ba25de3d2c7b8dc3e56e400a1cad6bad3431d0f81a71f29833f7cba6db383fa3f8fc6d21ce7179ffa8051d617e5945784f39cf1e6fd57c882031647e43455e45b240667fbfee282c97dd277112a65e7f6cb7402030c4d40aa9b6bb7d89ecccec0e4b51f94c8c3c2d9a6c4da8ff0723e6bfdc270bd85dfca0dc6f353e3cb01940a3587b008a9743c1a67b24b6ac5692942cb3ccb5b66e9fa87db09b6081e477e665211f4bdfff804a13ea2b606630459494021a9784d3626d903c81e2f25690f23feeb048bca4f8cf0ff04e9a8545bb228a9c044de9c19c93f95935c391d41e8b53713cb5a77195d09d4d7dd40e58a66ae20f479555245fff35adbe848fdb31924ed0812b9dec445c8919de05a6e0e4c926d36d12ccf38ee468503342b050e46b2b73a7a1a1c679f4a05d4e18bf61596167fb94dd6ca18150168e020a0bdbece86d4a9d476f47497b1e933439faf28dc8196fc39eeead42154f7a65b39fedc948d7caf9cb178d5f48aec8741abbd2497a18d0ff6f669dc8e1ca4c0aa2792b82e10bb4bf46db16eec4bfc6cde25d65150af341296944d0f604e701a75f536c8d883546773fce46c29cd7d0127ff1ec639e3902516ef162585209434fa91af92c422db9682778306de1ae370edd46475acc918c1c73593668b803365b7baf4a5f7e511a493612d71f0b0f1ccfb73ea1b0111d9649d7dbaa03fbec3ccadc271b60225134c2561a3d3afdba59fc8e590e06d44f2c2a074de0b17e868e4ef0f403acfa8916d3b536e99b1dea0a6fab70ff2d71e1825b470ad2385704cbf7bfb8942d526345b55438d0752d8592c805f70aa7af40cc75695a3284786410a76e50f1c647fde7acf00a6c6127739f747250fb9afd7aa8c3143d1a2593407a7f4f52fb8642668602bde0d08d60f6d7ad78fbce93d21adad31f2c579f1ef624350127abbad75b59c0d9577cfd9de21e82ca05b1ebea3f7566b7f492517c53835dac5cbec861e98afb9dfb2d9fe2be56ec4ea03eefdc2e44b5408564d13a40d3754b9d5f880e151c9ca70a9d080f2327fd07d241ee8c222dc00fa4a27f9ccb9a8d51aba69825322ce229d76be427e6079d210c7ca004246bcc57397caacb2a3c3ceee4fa0036b30f64d6bc46afc17ed518c446bf2627868d64bd76d37d94672fce018f9f8a80f31e3802b890a2d59482aff6086f0f1f51badb0a7898cfbadb341757e1389ce67fc1e813459e8f1d8232265e4f45baed1b5afa69e39950d987b6e234d33556b671225a64daa70ec5e09e833ea0ac5cfe3e0b536f6f7230a3eef8e1b944e8a6f12cb812326665d2bda23a5e2003b573c4372ee8af8699824d1847c212b7cefac3b539407e3553eaf034d7ae198ea628e132d8fa522bb41f5a2eb8f9657a331feb80ed9b9057742980f11ec5d2b0a26a8b4f3e75e1880091ff10da8740745fca13c2995d9e56674f577cee1a7f3e0f44c127839be39c2fbdfd6b35b0b81a28ceddcd9c933497976e4902391973364fb691c2df72be1d14feb2f7ca50c80ea62d7741dfc3878495de8cb136d70cb33fb098274cf603accc9c9f125f5ed711788150442410f537a3867a04c7c27055e80cec0299d93604071d15abd1232a51fc303403ef0031538ea74ad3e7625333f0b73848cc69553712fe1391d84e4bc2cdfec033e35f9c4fd49fb636a70ed8c3fc87e7bd92116c74eaee36de49a8bf21c9fd61bbd41ef31be7c105ec8cba230e42cc656c784d8d886ae73b7ab416f10504e89f673596db32b9150621dc21f5240e053ab663fcc7f7f6832fa5362ffd8e6b79b5d51017cd5e859e740d93948cf25049f99929415220a7d3a2eaca9a673e06713e5c232187112c126c44477460f6f9f4ed2272dd18a968d1af2c8784a6d2be4ddbae5f768d5b151421dae4c22319fd224f9511df783a0422aa173e8882a34b54f2c51976cd6f90e482a6af706b43c18ca5cc108b4a61e27eb0b631b6a76a561ebfeb7770858cb3c88beac49579d98813c6c178ac8704d1131e6a91f8e1f2be81ba5670df21f5e9e892a641de56aad1dd507b1eedc8251f8f6aea4e0ee00150e2f7b9a5b5670af4087068f4a7e7f4dcb708bcb64e028c6cb148bccec18d5855093d87b6dd28349720c7ca0de2b79d51f3269acaa4f65d635d040f039576ddcb0f21f2d8a6633dcaa4356a036623a2f23fb0d4cdbf9e56d0c2b6cbcfa64c4bed140f22d9a786a61ba8187a88e4191d66e7a40746855d4b207631153dbcee9416e585dace13348cd2f9c2bdf25a35594d399d1a1430fe8dfd0434fc52254682d410e4e8f2a025df796baf8831bdb681f81c8c7650fd02fd1d8e4fb857679a94029f4a325f5512d1c02b80f9dfb4fce720f7e19f5e359d9a8b66b0564b8ca41006ff659694f0312ce35dc445419eac21a356a8f75c747bee9278fae20518ffdf2c2221848c04257bbb998432bcbe54d81e4cf59182ebb96e1809a4419c2ef9e43510bae7cce7919123b785301f21f58e1f9d4209f11c143b32bac2a01849b5859c123719ea66e4daed1983bb1dec596355b2ccc414351b4e1bf1728f02c287eda063eb94f3c0cb8617e6af4375e2b49f1852807770573fe19d4712cc8189e92e05f64ee9ae21c8066036a81d4732d0fca951abf9c7860b2b1002af08ddefd890d2f31ead21e19f842c7101c890ef2796dcddaa1e2a44d0ddb31c466a1298ebbcf32668bfa7d80e3f0f89c2872cb86e8488ffb1cd1f77fe7bb37f58087e8687ab34fc963105eb90a2bead31a5287e969132569477760d2a354f8d7502cdc441e776961bb27e29e40cc3152faa52705cb15bd1fe320fc67617ea7c4fc5f96428bae6ce287d1218686d3693f468e7060871f7fbe2239443fc72b432122728f114b40fc9f3c2d92301fe23c561048e7ee48762ec8d4607b28bf45a5803d1b9fdfdba565d7c62897b300f569c6a7726fac75494b920a1d3064d383760937e04f34b19a845ea3754988bd712650120bf49174b212c91198e947f2b636435bbb2be00abfbdb4474902ab3d5df457ca26ef192dad083d7ec5cc0387046d33cd17eed2b04badc0083c5b0faec85db96df5e3bb642a4a73daf3505232ea5409f00341b5c757a1eca7fd04404d175762d4a52a3dfd4e4c206ba7204698db6e3a993da6ef17aa2173f8717abeca390ff15a6b0845639f4031c6caf7117019b12cd7711ed046f40a6144d8712a846436b762f8ae65b49a2d86d86b2afa2e3c3f6ea3ff58b160f715d927723c560efd0788763c5c522c81ab8c14047551194772ea7762d7e5e10b98471195a2d2e478dee8ac0801ec60bf74beeff4e42e95818faddf69610defc755fa0ed89749770efcc90b29ffa716aa6fa5feb5378d3be91e505296a64deb36d58367b70736f6c44f71f43981c21566ec8af68b9ab78cfc741c48f64e6ef333ebc18dbad28465056f616a2c4238c43673b4370eaf5a28823a8a818593759bc48e380dbd0fd1b93655d6de6331507f5c7161891f5eb7f14e4147f0b3a3b44b2d8036f389c1188960ec8bc4a72f1f5ce585c3569dbe879afcfe759284fac4159606cb2c444bdb0168b6d99ea3f70719d6f026323c5859e5bb59b63e4a6128180464909636243526191059c02ae9c2c585605d508845dfab07d458b452807bc996e266b3f7a2b61d4a996d909e68a2fb9f2a7c670dfc04518c3ddb47424a8d9bcda2fb90117b6a02fec1d63b4fc9e92d6e85783353185f74bb301e3c9a3b4be8134aabd390e6566f783f2e993985eec31affaae3e2e0c67c9c458c8d94185c677b3db2b28e3f9badf6c21c8eb8a2c4b73ec6f5dfbe1fa608dc0ea742ba61f3d24894172a81976dcb4ed34c9576170827ad8d9fd1f7050287ef7ab09109443b103d11b9aa8ccb9b14e6a50b6ee0ccd061546afefcc08d481df793baa2b27ae06a0aa68effb2ac6c4ff8b56b6a753f5eee5f09e1bf7c977ec55572a6dde058bf5fbac29724377ca6703d1e2e5c69885e776425cf38b77dbd109554aa97661a016ce6f959ceca460f19baf92fc3bc98e41b0ac8a931ab0813cfce7771deaf6eae9705016f55d938816888439fd3f6a7ff27c8537a66ba0caaa7416c65d694012ae04348adea6faa275c7c43a75a99ed68cc939f5faf49e1ff9ee162b790701f67f95c61103f86b5c43f5a84f1948e81791cdc3a2da796bcd41d3da3a285f0c6928b0d38d4ce770796b505a619d04262789e41ee93cc610ed356e99f25e23cc3023efc31f456d82efcc7d6616fe912cc5aa2fdc70744454458988802ee02bd4ec0044d16f8b9ce45f34d8d59fee7e4eb3e16debede9dae0cd4ee898237f0feebdb227c98179ecf4d50b41b2b500a0f31d81cd01b4cb782ee6df4b1850ee1ff1ed38bf79a1958f9d0071dfd201852c68677e6f2aa50f68c52e00b17308cb3be80ad7a21d6f5ee7c860a7b85a81615d6b68785872b33abad321d3cc13f82ea341ebf038c59eab18bf032c4b89b2d8fbf56c6b041a099352f4e562f30d4f7fadb14b6ffaffa535652ffff4a384ff355f9131a0624d9c81d3c8a06517c36cc34df1b1d46bed7ca3e2301bfd2de13dff24fd9f30111856b28e7d67c52e523e2b40c8d4b8be8edc223b2b87d4b9618385f672a871c3da714d7369faa980d62ee03026f33d5dfb0799584e0f14e5ba491a6a58106ffca43f5b6d8744ecf5c349bb948d8bd87abf5e95f351bd723c2d618ad07061289b01c6a0ea4d2d5402ecbbd5a4e4b42162d8ac6d9821e02539abdf3efaed08028f6f696d9e542eefeb1b7c3cbcda6f1818c81a902a3f9a2d9c1839b02f31c6e0d8403967185fb4c5fee2c86f66d951642481e4f6a2753a35b5bf09bec72929623295b92a22f4801c818633293aac1c3adaa9a6f637b3f6811286098b492bf30c1c8582cff5e65cecec1aa2da2c4a7aa1f07932ea256bdf28e941c09c2dbde43e599393e854acda9013f43ea73f37aba3749be70dbd20f32f9958d7e7ba17459de2b479c0b05b2565fae4da9a97ecf24e37e4de69b8cfbde051cfef77d857b"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "5258fe2ef2fd2a826c370d13379f126c"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "05dd1bc176ff763ec14a6d0871c1c2e7b8547109450ebaa473433ca099aba29eb5d027a8ed3fdd35ce0b1ddab78b5688c0b03d6ed5ce3eeeb0651fd8907b57b09ea8b60bbdcf406a1e570e77e82b5bf8739aedce3feba69ca165bfd6af678b3f36962746b1e75e94d6d259944854e06ad29b0b461d8e"}, @INET_DIAG_REQ_BYTECODE={0x3a, 0x1, "66fee931b5f91a22a7b657fa91fbb55c4b8042b4135635403a5297bd47a98668e15476d7bf03584b2c314a3b3edcd473fab4cd17063d"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "ebc9757d92629c6cd3aacaba2afbd8e2f3a02a283e62ce8d875a90587408d97f9def0a04fd8faea1a2a2bc99d548bd476b2326934c5b3be933d698a2c14ae7d94a7b11122bdd42d1ef7a5b60391f98a3c7fa423bc10f77582b116a664c5eed38627402eb5408d9fa47207ff82682b5cf7caae2e738a60e90a1b73f5b7dccef57cb53ec0f"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "32436ea01233a589da6da8ecb0f269e780749369c42aca5373e69aaa0274a67ba1ff58ef0810aa46379416de33499a85e16a5cde71246d59f05be8e312d459806b8b6f1384551c99ce613418b6acfc829f0ba4343700fc34f557350c03ddb60773a34dbf55"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x22f8}}, 0x4000000)
r10 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xc11}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.191547369s ago: executing program 0 (id=4519):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000b3e1241c2b00000000000008000500e000000204d4756e7362f2dea762d69e9e000700756e636f6e6669ce0859895c618e750000000000"], 0x34}, 0x2, 0x34005}, 0x0)

15.038718865s ago: executing program 0 (id=4520):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080))

14.781405712s ago: executing program 0 (id=4526):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="139187539cae1a79"], 0x18, 0x20008880}}], 0x2, 0x4c054)
syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x0, 0x0, 0x1100}, {"5150e888"}}}}}}, 0x0)

14.622774347s ago: executing program 0 (id=4527):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000080), 0x12)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x1, 0x1000000}, 0x28)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="186b00000420000000000035fa736e00"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x90)
openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)

3.533025422s ago: executing program 3 (id=4768):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4)
sendmmsg(r0, &(0x7f0000005d00)=[{{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x44080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x14, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback}, 0x1c)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x14, r3, 0x711, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x4044094}, 0x8894)

2.663103848s ago: executing program 3 (id=4782):
r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) (async)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1001, @fixed}, 0xe) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2f, 0x9, 0x0, 0x0, 0x40, 0x0, 0x401}})

1.795962322s ago: executing program 3 (id=4795):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480", @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b00)={@cgroup, 0xffffffffffffffff, 0x1b, 0x2020}, 0x20)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x7e8, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x4}, {0x7d0, 0x1, [@m_ipt={0x7cc, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x7a1, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x4}, 0x24040001)
recvmmsg$unix(r3, &(0x7f0000000300), 0x0, 0x40012081, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r4, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d464c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

1.251625156s ago: executing program 3 (id=4797):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @sack_perm, @window={0x3, 0x2, 0x1}, @mss={0x2, 0x7fff}], 0x4)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @loopback}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x007\x00\x00\x00\x00*'], 0x58}}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r4, &(0x7f0000000240)={0x2, @long}, 0x14)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r2}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r6=>0x0}, 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x31}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000600000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x16, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000001a29b3b300000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000400eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910500623d241957b41215c184e731fb129f27e1731a9d8d8a216b877a5d5d6ccdf373a81853cbb85e2884929c73c9f7f466ed2df2107588aeecdb1f77d8cbea4e0cad82df912804051a2ef7432c65c230d650c25046bcb01136970cb2c7c7850193f06b08e888a1703dc8923dc030a343d3c8e4953555564185ae5da382a93613325dc6a18c85b9909b00809a43609c77000000000000000", @ANYRESHEX=r0], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r10, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r9, &(0x7f0000000ec0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000d40)={0x178, r12, 0x100, 0x200, 0xf, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xde}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffd84a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff71f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9f}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcd}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3b58726c}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x312}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8011}, 0x11)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r13, r8, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read$nci(r15, &(0x7f0000000340)=""/211, 0xd3)
setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000840), 0x7)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})

778.809582ms ago: executing program 1 (id=4805):
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x700, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

720.788024ms ago: executing program 1 (id=4808):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @local}, 0x2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000000100)="2f1128bcb76ce37d7ab49213ec84085145bb0424ac229a9ec86877d513d51c214a965fe684d788eb8d39c6b481c9f3f996e3fa17d567ed1a8c13af2c124ed8ec8a39efcdefd5f6d7478cbe86fe68ae265c8ccc63d3826fafb936a4348f4cf1e5ce28976b7b0c3d7932", 0x69}], 0x2, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x17a1}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}], 0x48}, 0x14) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc080}, 0x10000010)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000c840) (async, rerun: 32)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005}, 0x80) (rerun: 32)

628.881336ms ago: executing program 1 (id=4812):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1ce8, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x258, 0x30, 0xb, 0x0, 0x0, {}, [{0x244, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0xc8, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8d74}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xd}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @random="21d420e10ebb"}]}, {0x4a, 0x6, "0daa1d772b63547fcd8e8871eac4893b61b1fa32dd536a861a2c3a7cb55de41b80360832149046e2250c4ea6c798fda4809e16b0866fbf6b3ad29dbc79f5d4f2d12d260d6441"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x108, 0xb, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "fb6cc4a4691e32ca9a60fd463037235d"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010101}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_LABELS_MASK={0x14, 0x8, "06df80e9c493dc131b3d3954f5f8c567"}]}, {0x9b, 0x6, "b9947b02fb4398de99f41a33d9ca8862e5c2260159d609f34f47e2410cebf3c522d0888535ea538d6f95aacd952e3978eb4f7256fc4cae94ee2865610d5fc1fa015a6fabd7df33270210d49d0f401a3138d2d44d7e84720d6f509373176a70f29bece419a9917b3f8d006a0b4f13d021fdf63b65d6a55321fcc7fba5d1906deefb9dba21a1be3974256cc12f8d794ab27f2d6c5935623d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x258}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

522.734453ms ago: executing program 1 (id=4813):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x9, 0x4, 0x0, 0x9, 0x0, 0x4, 0x3, 0x7, 0x0, 0xfd, 0x0, 0x0, 0xfc}, 0xe)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90)
r3 = socket$kcm(0x2, 0x1, 0x84)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
listen(r4, 0x802)
r5 = socket$isdn(0x22, 0x2, 0x23)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@remote, @netrom, @netrom, @remote, @rose, @bcast, @netrom]}, &(0x7f0000000380)=0x48)
bind$netrom(r8, &(0x7f0000000480)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000005300010002000000fcffff7f000000000000000014000200010000000400000000000000fe00000004000b00"], 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000), 0x90)
sendmsg$inet(r3, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r9=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r9, 0x3}, 0x8)

521.729568ms ago: executing program 4 (id=4814):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000305000000000000000000000000b6ed04a1704db3", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b00010000000500090001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x401)
listen(r2, 0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
shutdown(r2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x2})

513.630158ms ago: executing program 2 (id=4815):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r3=>0x0})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000080)=r3)
r6 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0xf2)

454.102496ms ago: executing program 1 (id=4816):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c0000006a825c2f3ede1425"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000480))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002c06008b5200"/20, @ANYRES32=r3, @ANYBLOB="080005000b000000"], 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)

367.693731ms ago: executing program 1 (id=4817):
syz_emit_ethernet(0x36, &(0x7f0000000400)={@link_local={0xd}, @empty, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @empty}, {0xfffc, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000001c0)='vlan0\x00')
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe000000007110100000000000e5000200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000300)=0xa3e, 0x4)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000c40)='./file0\x00', 0x0, 0x4008, r2}, 0x18)
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000001240)=ANY=[@ANYBLOB="080008000700020000001400000046200fc000680000030690780a010100ac1414bb000000004e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x110, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2895}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x79af}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "47d55cd84691be8ae9863008cdcb1ff613f6f14c44c476f4b0eee4e6549d5dd9fc99f2"}}]}]}, 0x9c}}, 0x2000c044)

365.93268ms ago: executing program 4 (id=4818):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

365.264205ms ago: executing program 3 (id=4819):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x2)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x2)
shutdown(r2, 0x0)
connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r4 = accept(r3, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000000)="35ebc9747b", 0x5, 0x400440e9, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r1, 0x8, 0x1, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000100)=[0x0, 0x0]}, 0x40)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000300)=0x6)

295.464178ms ago: executing program 2 (id=4820):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000))
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "27bfcffca79a789ceab1c8b50785aeb1"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

275.295793ms ago: executing program 3 (id=4821):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$inet(0x2, 0x0, 0x3)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x2, 0xe, 0x19, 0x2, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r0}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc)
getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r4}, 0x8)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x20000, 0x9, 0x6a, 0x58875, r5, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xf, @value=r10, @void, @value=r11}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r12, 0x0, &(0x7f0000000400)=""/55}, 0x20)
socket$packet(0x11, 0xa, 0x300)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000000c0)=0x8, 0x11)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @broadcast}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="b40800000000000073114900000000008510000002000000b7000000000000009500c20000002c459500001200000000", @ANYRESDEC=r2, @ANYRESOCT=r13], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)

275.079116ms ago: executing program 4 (id=4822):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

233.951222ms ago: executing program 2 (id=4823):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000001800))
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req={0x5, 0x80000000, 0xfffffff7, 0x6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

138.756885ms ago: executing program 4 (id=4824):
r0 = socket(0xa, 0x3, 0x3a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xd4, 0x0, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'})
close(r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))

121.030315ms ago: executing program 2 (id=4825):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000d0a010300000000c7652c855b60a5d4edef0000000000000000ff00020073797a31000021000900010073797a31000000000000000000efd4f4a7f48e3acdce1ab88fdaa027a38ace1972e731b5e3242af93d3405acee9abc539c1c47ef02e7c5cdda0b86b1187a0aba9fed344e28950083895b3a4122df"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000d0a010300000000c7652c855b60a5d4edef0000000000000000ff00020073797a31000021000900010073797a31000000000000000000efd4f4a7f48e3acdce1ab88fdaa027a38ace1972e731b5e3242af93d3405acee9abc539c1c47ef02e7c5cdda0b86b1187a0aba9fed344e28950083895b3a4122df"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)

100.200588ms ago: executing program 4 (id=4826):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d0400"})

2.592076ms ago: executing program 4 (id=4827):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close(0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x7d, &(0x7f00000009c0)=@assoc_value={r5, 0x3}, 0x8)
r7 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00', <r9=>0x0})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x7a1242, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x8)
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890)
sendmmsg(r7, &(0x7f00000002c0), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r11)
r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r13, 0x890b, &(0x7f0000000440)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x7, 'syz1\x00', @default, 0x8000008, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @default, @default, @default]})
sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0)

1.345826ms ago: executing program 2 (id=4828):
syz_emit_ethernet(0x196, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x160, 0x29, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr, {[@hopopts={0x11, 0x0, '\x00', [@padn]}, @routing={0x33, 0x0, 0x1, 0x3}, @dstopts={0x0, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x7, 0xff, [0x1]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0xd, [0x12]}}]}, @dstopts={0xff, 0x1c, '\x00', [@hao={0xc9, 0x10, @local}, @generic={0x4, 0x9a, "5e2eda006f9aadc0538d275d6dab8062ff9117b158a0ae27ee1588d2597b52883ab59f91227caa7d226c787d492636c939184d97285cb1b33d0894b8d09b0ab97bb6d76fb4deed77a761dbc00c0287a866f7b73a91c84787c013e417a7c5f2589838515756dc0dbb7147014391f177adaae169fc036e6b4a19cdf6f2c79f61f451cce5d3f5d889fc7d1a5186dec6a32ef324341bcbf0d9be2fe1"}, @calipso={0x7, 0x30, {0x0, 0xa, 0xf, 0x9, [0x0, 0x6, 0xf, 0x665, 0x9]}}, @enc_lim={0x4, 0x1, 0x54}, @pad1]}, @srh={0x4c, 0x4, 0x4, 0x2, 0x5, 0x0, 0x47, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}]}}}}}, 0x0)

0s ago: executing program 2 (id=4829):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffe, 0x10000, 0x670e, 0x0, 0xffffffff}, 0x0, 0x200000, 0x7, 0x8, 0x0, 0x14, 0x0, 0x1b, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}}}}]}, 0x78}}, 0xc090)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r5, 0x0)
ioctl$FIBMAP(r5, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@dellinkprop={0x38, 0x6d, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x40800, 0x8036}, [@IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)

kernel console output (not intermixed with test programs):

3] Bluetooth: hci5: command tx timeout
[  253.509934][T16326] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.536651][T16326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.565809][T16326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.598765][T16421] netlink: 'syz.0.2984': attribute type 1 has an invalid length.
[  253.700932][T16326] hsr_slave_0: entered promiscuous mode
[  253.743930][T16326] hsr_slave_1: entered promiscuous mode
[  253.761375][T16326] debugfs: 'hsr0' already exists in 'hsr'
[  253.789770][T16326] Cannot create hsr debugfs directory
[  253.916374][T16443] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2993'.
[  253.928210][T16443] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.996309][ T5183] Bluetooth: hci0: command tx timeout
[  254.012223][T16447] netlink: 'syz.0.2996': attribute type 1 has an invalid length.
[  254.032808][T16449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2997'.
[  254.050908][T16449] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2997'.
[  254.070289][T16447] tipc: Failed to obtain node identity
[  254.079324][T16447] tipc: Enabling of bearer <ib:gretap0> rejected, failed to enable media
[  254.141767][T16459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2996'.
[  254.202831][T16326] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.224156][T16326] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.283518][T16326] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.300314][T16326] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.364230][T16471] nr0: entered promiscuous mode
[  254.371133][T16471] nr0: entered allmulticast mode
[  254.386765][T16326] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.412981][T16326] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.426827][T16471] nr0: left promiscuous mode
[  254.431528][T16471] nr0: left allmulticast mode
[  254.484151][T16326] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.501069][T16326] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.719063][T16326] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  254.734144][T16326] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  254.759419][T16326] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  254.809160][T16326] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  254.817693][T16502] __nla_validate_parse: 1 callbacks suppressed
[  254.817711][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3015'.
[  254.851111][T16502] netlink: 'syz.0.3015': attribute type 1 has an invalid length.
[  255.184441][T16326] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.220833][T16326] 8021q: adding VLAN 0 to HW filter on device team0
[  255.232948][T16534] netlink: 'syz.0.3019': attribute type 1 has an invalid length.
[  255.250676][T16534] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3019'.
[  255.272013][T16535] netlink: 'syz.0.3019': attribute type 1 has an invalid length.
[  255.284821][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.286866][T16535] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3019'.
[  255.292126][ T6587] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.371653][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.378856][ T6587] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.516430][ T5183] Bluetooth: hci5: command tx timeout
[  255.728384][T16564] netlink: 'syz.3.3029': attribute type 1 has an invalid length.
[  255.729115][T16559] sctp: [Deprecated]: syz.1.3028 (pid 16559) Use of int in max_burst socket option deprecated.
[  255.729115][T16559] Use struct sctp_assoc_value instead
[  255.744629][T16564] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3029'.
[  255.803920][T16566] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3029'.
[  255.833768][T16566] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3029'.
[  255.922836][T16326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.971846][T16572] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  255.988447][T16572] team0: Device macvtap1 is already an upper device of the team interface
[  256.000490][T16577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3033'.
[  256.080558][ T5183] Bluetooth: hci0: command tx timeout
[  256.199565][T16588] netlink: 'syz.0.3036': attribute type 10 has an invalid length.
[  256.254320][T16589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3036'.
[  256.288361][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3036'.
[  256.327095][T16588] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  256.430886][T16607] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3041'.
[  256.532957][T16326] veth0_vlan: entered promiscuous mode
[  256.554655][T16326] veth1_vlan: entered promiscuous mode
[  256.637916][T16326] veth0_macvtap: entered promiscuous mode
[  256.673767][T16326] veth1_macvtap: entered promiscuous mode
[  256.696139][T16326] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.713188][T16326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.769480][ T6588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.779202][ T6588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.810975][ T6588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.822736][ T6569] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.836550][T16622] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  256.932440][T16632] netlink: 'syz.1.3051': attribute type 1 has an invalid length.
[  256.973991][T16632] 8021q: adding VLAN 0 to HW filter on device bond14
[  256.999108][T16632] bond14: (slave gretap4): making interface the new active one
[  257.008468][T16632] bond14: (slave gretap4): Enslaving as an active interface with an up link
[  257.032741][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.063194][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.090974][ T6588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.095000][T16632] syz.1.3051 (16632) used greatest stack depth: 17968 bytes left
[  257.104108][ T6588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.150121][T16643] xt_policy: too many policy elements
[  257.190612][T16645] netlink: 'syz.1.3055': attribute type 1 has an invalid length.
[  257.309157][T16643] 8021q: adding VLAN 0 to HW filter on device bond16
[  257.377700][T16643] bond15: (slave bond16): making interface the new active one
[  257.423840][T16643] bond15: (slave bond16): Enslaving as an active interface with an up link
[  257.463761][T16654] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  257.474002][T16661] dvmrp1: entered allmulticast mode
[  257.660861][T16672] veth0: entered promiscuous mode
[  257.867927][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.878267][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.888940][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.898562][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.916191][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  257.956630][T16688] wg1 speed is unknown, defaulting to 1000
[  258.134212][T16688] chnl_net:caif_netlink_parms(): no params data found
[  258.156708][ T5183] Bluetooth: hci0: command tx timeout
[  258.311337][T16688] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.325598][T16688] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.333096][T16688] bridge_slave_0: entered allmulticast mode
[  258.343654][T16688] bridge_slave_0: entered promiscuous mode
[  258.360728][T16688] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.372397][T16688] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.380426][T16688] bridge_slave_1: entered allmulticast mode
[  258.387919][T16688] bridge_slave_1: entered promiscuous mode
[  258.411396][T16731] netlink: 'syz.3.3079': attribute type 1 has an invalid length.
[  258.429566][T16731] netlink: 'syz.3.3079': attribute type 1 has an invalid length.
[  258.458714][T16688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.485072][T16736] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  258.500743][T16688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.524617][T16738] veth7: entered promiscuous mode
[  258.532296][T16738] bond9: (slave veth7): Enslaving as a backup interface with a down link
[  258.551630][T16731] 8021q: adding VLAN 0 to HW filter on device bond9
[  258.573945][T16739] smc: net device erspan0 applied user defined pnetid SYZ0
[  258.601157][T16688] team0: Port device team_slave_0 added
[  258.614916][T16740] netdevsim netdevsim0: Direct firmware load for 	 failed with error -2
[  258.623955][T16742] openvswitch: netlink: Unknown key attributes 2
[  258.633775][T16740] netdevsim netdevsim0: Falling back to sysfs fallback for: 	
[  258.639503][T16688] team0: Port device team_slave_1 added
[  259.152807][T16742] hsr1: left allmulticast mode
[  259.158810][T16742] syz_tun: left allmulticast mode
[  259.164331][T16742] batadv_slave_0: left allmulticast mode
[  259.191315][T16742] sit1: left promiscuous mode
[  259.204193][T16742] sit1: left allmulticast mode
[  259.213671][T16742] tipc: Resetting bearer <eth:syzkaller0>
[  259.238798][T16742] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  259.249082][T16742] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  259.258319][T16742] A link change request failed with some changes committed already. Interface veth2 may have been left with an inconsistent configuration, please check.
[  259.279282][T16743] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  259.325732][ T6568] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.339010][ T6568] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.378241][ T6568] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.424927][T16688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.446714][T16688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.475826][T16688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.489179][T16688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.508951][T16785] netlink: 'syz.4.3087': attribute type 1 has an invalid length.
[  259.513051][T16688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.559964][T16688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.567133][T16785] netlink: 'syz.4.3087': attribute type 1 has an invalid length.
[  259.581468][T16785] netlink: 'syz.4.3087': attribute type 2 has an invalid length.
[  259.581884][ T6568] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.687122][T16688] hsr_slave_0: entered promiscuous mode
[  259.697158][T16688] hsr_slave_1: entered promiscuous mode
[  259.707841][T16688] debugfs: 'hsr0' already exists in 'hsr'
[  259.714567][T16688] Cannot create hsr debugfs directory
[  259.980671][T16817] tipc: Started in network mode
[  259.994324][T16817] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711
[  260.003767][ T5183] Bluetooth: hci2: command tx timeout
[  260.021381][T16817] tipc: Enabled bearer <udp:syz1>, priority 10
[  260.208200][T16688] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.237342][ T5183] Bluetooth: hci0: command tx timeout
[  260.283081][T16688] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.297651][T16846] netlink: 'syz.0.3106': attribute type 21 has an invalid length.
[  260.309747][T16846] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  260.370658][T16688] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.416900][T16855] netlink: 'syz.3.3110': attribute type 4 has an invalid length.
[  260.444215][T16688] netdevsim netdevsim2 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.464953][T16856] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  260.596395][T16688] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  260.607879][T16688] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  260.634864][T16688] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  260.670901][T16688] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  260.779712][T16887] netlink: 'syz.3.3117': attribute type 10 has an invalid length.
[  260.813796][T16688] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.860278][T16892] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 4, id = 0
[  260.866594][T16688] 8021q: adding VLAN 0 to HW filter on device team0
[  260.890523][T16891] __nla_validate_parse: 10 callbacks suppressed
[  260.890548][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'.
[  260.901761][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.913014][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.949319][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.956554][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.978108][T16894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3120'.
[  261.021654][T16897] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3121'.
[  261.038099][T16899] netlink: 'syz.4.3122': attribute type 1 has an invalid length.
[  261.070538][T16899] netlink: 'syz.4.3122': attribute type 1 has an invalid length.
[  261.087114][T16897] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3121'.
[  261.135911][T16770] tipc: Node number set to 4269801514
[  261.192030][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3124'.
[  261.261799][T16919] sctp: [Deprecated]: syz.3.3126 (pid 16919) Use of int in maxseg socket option.
[  261.261799][T16919] Use struct sctp_assoc_value instead
[  261.288203][T16688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.372142][T16926] tipc: Enabling of bearer <eth:ipvlan0> rejected, failed to enable media
[  261.393611][T16688] veth0_vlan: entered promiscuous mode
[  261.427410][T16688] veth1_vlan: entered promiscuous mode
[  261.463342][T16688] veth0_macvtap: entered promiscuous mode
[  261.504211][T16688] veth1_macvtap: entered promiscuous mode
[  261.553666][T16688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.583968][T16688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.617503][ T6568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.629163][ T6568] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.704113][ T6568] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.748626][ T6568] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.801074][T16952] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  261.869746][ T6588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.893490][ T6588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.978071][ T6573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.986739][ T6573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.014131][T16963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'.
[  262.077709][ T5183] Bluetooth: hci2: command tx timeout
[  262.191620][T16971] openvswitch: netlink: Flow key attr not present in new flow.
[  262.218906][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'.
[  262.260445][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'.
[  262.300311][T16974] pim6reg1: entered promiscuous mode
[  262.319398][T16974] pim6reg1: entered allmulticast mode
[  262.501787][ T6573] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  262.522377][ T6573] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  262.569799][ T6573] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  262.598864][T16983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'.
[  262.635965][ T6573] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  262.921571][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  262.932448][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  262.941225][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  262.950384][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  262.959578][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  263.099803][T17003] wg1 speed is unknown, defaulting to 1000
[  263.320400][T17016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3157'.
[  263.439793][T17034] validate_nla: 4 callbacks suppressed
[  263.439816][T17034] netlink: 'syz.3.3162': attribute type 7 has an invalid length.
[  263.456719][T17037] netlink: 'syz.0.3164': attribute type 1 has an invalid length.
[  263.611972][T17003] chnl_net:caif_netlink_parms(): no params data found
[  263.731337][T17061] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001
[  263.773307][T17051] 8021q: VLANs not supported on syzkaller1
[  263.780543][T17053] 8021q: VLANs not supported on syzkaller1
[  263.809231][T17054] netlink: 'syz.0.3168': attribute type 1 has an invalid length.
[  263.809237][T17003] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.843092][T17003] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.854032][T17003] bridge_slave_0: entered allmulticast mode
[  263.862566][T17003] bridge_slave_0: entered promiscuous mode
[  263.891197][T17054] netlink: 'syz.0.3168': attribute type 7 has an invalid length.
[  263.913683][T17003] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.931456][T17054] netlink: 'syz.0.3168': attribute type 8 has an invalid length.
[  263.946979][T17003] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.966260][T17003] bridge_slave_1: entered allmulticast mode
[  263.971307][T17079] netlink: 'syz.4.3174': attribute type 28 has an invalid length.
[  263.973277][T17003] bridge_slave_1: entered promiscuous mode
[  264.004326][T17079] netlink: 'syz.4.3174': attribute type 3 has an invalid length.
[  264.042976][T17084] netlink: 'syz.2.3176': attribute type 1 has an invalid length.
[  264.058768][T17084] netlink: 'syz.2.3176': attribute type 1 has an invalid length.
[  264.116242][T17003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.155594][ T5183] Bluetooth: hci2: command tx timeout
[  264.163547][T17003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.283024][T17003] team0: Port device team_slave_0 added
[  264.292202][T17098] netlink: 'syz.3.3180': attribute type 1 has an invalid length.
[  264.323797][T17098] bond10: entered promiscuous mode
[  264.332992][T17098] 8021q: adding VLAN 0 to HW filter on device bond10
[  264.350246][T17003] team0: Port device team_slave_1 added
[  264.370018][T17098] 8021q: adding VLAN 0 to HW filter on device bond10
[  264.396401][T17098] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address
[  264.409067][T17098] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  264.453386][T17098] bond10: (slave wireguard0): making interface the new active one
[  264.470505][T17098] wireguard0: entered promiscuous mode
[  264.481144][T17098] bond10: (slave wireguard0): Enslaving as an active interface with an up link
[  264.542988][T17003] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.565114][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.594797][T17003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.612073][T17003] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.624598][T17003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.667090][T17003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.791687][T17003] hsr_slave_0: entered promiscuous mode
[  264.800074][T17003] hsr_slave_1: entered promiscuous mode
[  264.808802][T17003] debugfs: 'hsr0' already exists in 'hsr'
[  264.814650][T17003] Cannot create hsr debugfs directory
[  265.036192][ T5183] Bluetooth: hci4: command tx timeout
[  265.088636][T17003] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.287392][T17003] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.397648][T17003] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.418219][T17165] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  265.514992][T17003] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.740349][T17003] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  265.758091][T17003] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  265.774212][T17003] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  265.793788][T17003] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  265.913725][T17194] : entered promiscuous mode
[  265.960583][T17206] __nla_validate_parse: 11 callbacks suppressed
[  265.960605][T17206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3208'.
[  266.034488][T17003] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.090365][T17003] 8021q: adding VLAN 0 to HW filter on device team0
[  266.120470][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.127681][ T6573] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.211672][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.218894][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.235929][ T5183] Bluetooth: hci2: command tx timeout
[  266.322948][T17233] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3214'.
[  266.617166][T17259] 8021q: VLANs not supported on syzkaller1
[  266.643493][T17260] 8021q: VLANs not supported on syzkaller1
[  266.653693][T17259] rdma_rxe: rxe_newlink: failed to add bond0
[  266.671162][T17263] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  266.710587][T17003] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.731470][T17267] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3221'.
[  266.829206][T17003] veth0_vlan: entered promiscuous mode
[  266.878027][T17003] veth1_vlan: entered promiscuous mode
[  266.938194][T17003] veth0_macvtap: entered promiscuous mode
[  266.973428][T17003] veth1_macvtap: entered promiscuous mode
[  267.023066][T17003] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.054705][T17003] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.088434][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3229'.
[  267.108400][ T6573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.117834][ T5183] Bluetooth: hci4: command tx timeout
[  267.148579][ T6573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.163149][ T6573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.214156][T17290] 8021q: adding VLAN 0 to HW filter on device bond2
[  267.228289][ T6573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.257074][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'.
[  267.266570][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'.
[  267.349818][T17311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3234'.
[  267.560539][ T6573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.583049][ T6573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.791943][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.819876][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.620298][T17382] wg1 speed is unknown, defaulting to 1000
[  268.712462][ T5868] syz_tun (unregistering): left promiscuous mode
[  268.762985][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  268.773367][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  268.782810][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  268.792588][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  268.801298][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  268.849923][T17402] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3255'.
[  268.911919][T17404] bond1 (unregistering): Released all slaves
[  268.955078][T17398] wg1 speed is unknown, defaulting to 1000
[  269.197996][ T5183] Bluetooth: hci4: command tx timeout
[  269.517196][ T6588] dvmrp0 (unregistering): left allmulticast mode
[  269.520964][T17441] validate_nla: 6 callbacks suppressed
[  269.520984][T17441] netlink: 'syz.0.3264': attribute type 1 has an invalid length.
[  269.549799][ T6588] dvmrp1 (unregistering): left allmulticast mode
[  269.552065][T17441] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3264'.
[  269.566679][T17441] netlink: 'syz.0.3264': attribute type 1 has an invalid length.
[  269.616915][T17443] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3263'.
[  269.800967][ T6588] bond0 (unregistering): Released all slaves
[  269.811805][ T6588] bond1 (unregistering): Released all slaves
[  269.822558][ T6588] bond2 (unregistering): Released all slaves
[  269.834202][ T6588] bond3 (unregistering): Released all slaves
[  269.849283][ T6588] bond4 (unregistering): Released all slaves
[  269.859365][ T6588] bond5 (unregistering): Released all slaves
[  269.875558][ T6588] bond6 (unregistering): Released all slaves
[  269.890229][ T6588] bond7 (unregistering): (slave bond8): Releasing backup interface
[  269.899362][ T6588] bond7 (unregistering): Released all slaves
[  269.911582][ T6588] bond8 (unregistering): Released all slaves
[  269.923837][ T6588] bond9 (unregistering): (slave veth7): Releasing backup interface
[  269.933665][ T6588] bond9 (unregistering): Released all slaves
[  269.944861][ T6588] bond10 (unregistering): (slave wireguard0): Releasing backup interface
[  269.954357][ T6588] wireguard0: left promiscuous mode
[  269.963143][ T6588] bond10 (unregistering): Released all slaves
[  270.008774][T17398] chnl_net:caif_netlink_parms(): no params data found
[  270.159989][ T6588] tipc: Disabling bearer <eth:syzkaller0>
[  270.172056][ T6588] tipc: Left network mode
[  270.486574][T17398] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.521142][T17398] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.542490][T17398] bridge_slave_0: entered allmulticast mode
[  270.551318][T17398] bridge_slave_0: entered promiscuous mode
[  270.580576][T17398] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.595601][T17398] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.603130][T17398] bridge_slave_1: entered allmulticast mode
[  270.613439][T17398] bridge_slave_1: entered promiscuous mode
[  270.713651][T17501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.733696][T17501] netlink: 'syz.4.3273': attribute type 11 has an invalid length.
[  270.753648][T17398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.784287][T17398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.852172][T17398] team0: Port device team_slave_0 added
[  270.875362][ T5183] Bluetooth: hci1: command tx timeout
[  270.893224][T17398] team0: Port device team_slave_1 added
[  270.976569][T17398] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.987711][T17398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.014589][T17398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.032066][ T6588] batadv_slave_0: left promiscuous mode
[  271.061360][ T6588] hsr_slave_0: left promiscuous mode
[  271.074469][ T6588] hsr_slave_1: left promiscuous mode
[  271.114338][ T6588] pim6reg (unregistering): left allmulticast mode
[  271.138844][T17519] __nla_validate_parse: 3 callbacks suppressed
[  271.138865][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'.
[  271.156190][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'.
[  271.278177][ T5183] Bluetooth: hci4: command tx timeout
[  271.531484][T17398] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.543104][T17398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.571974][T17398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.578190][T17534] netlink: 'syz.1.3281': attribute type 3 has an invalid length.
[  271.634323][T17534] netlink: 'syz.1.3281': attribute type 3 has an invalid length.
[  271.661270][T17534] team0: No ports can be present during mode change
[  271.779545][T17398] hsr_slave_0: entered promiscuous mode
[  271.794882][T17398] hsr_slave_1: entered promiscuous mode
[  271.806340][T17398] debugfs: 'hsr0' already exists in 'hsr'
[  271.812134][T17398] Cannot create hsr debugfs directory
[  271.969560][T17559] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3289'.
[  272.120348][ T6588] IPVS: stop unused estimator thread 0...
[  272.143358][T17569] batadv_slave_0: entered promiscuous mode
[  272.249294][T17567] batadv_slave_0: left promiscuous mode
[  272.280588][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'.
[  272.310572][T17575] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3293'.
[  272.376190][T17575] netlink: 'syz.1.3293': attribute type 1 has an invalid length.
[  272.444070][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3296'.
[  272.833706][T17398] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  272.877615][T17398] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  272.888635][T17632] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3304'.
[  272.931833][T17398] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  272.958563][ T5183] Bluetooth: hci1: command tx timeout
[  272.959136][T17398] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  273.196561][   T25] block nbd0: Possible stuck request ffff888024f00000: control (read@0,1024B). Runtime 180 seconds
[  273.211324][   T25] block nbd0: Possible stuck request ffff888024f001c0: control (read@1024,1024B). Runtime 180 seconds
[  273.222895][   T25] block nbd0: Possible stuck request ffff888024f00380: control (read@2048,1024B). Runtime 180 seconds
[  273.235350][   T25] block nbd0: Possible stuck request ffff888024f00540: control (read@3072,1024B). Runtime 180 seconds
[  273.235831][T17661] netlink: 'syz.2.3311': attribute type 7 has an invalid length.
[  273.289123][T17398] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.326843][T17398] 8021q: adding VLAN 0 to HW filter on device team0
[  273.339102][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.346246][ T6573] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.411949][T17661] : entered promiscuous mode
[  273.451086][T17672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3315'.
[  273.470847][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.478230][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.694114][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3320'.
[  273.724623][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3320'.
[  274.012988][T17713] bridge_slave_1: left allmulticast mode
[  274.032689][T17713] bridge_slave_1: left promiscuous mode
[  274.053124][T17713] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.074262][T17713] bridge_slave_0: left allmulticast mode
[  274.089074][T17713] bridge_slave_0: left promiscuous mode
[  274.103290][T17713] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.194347][T17398] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.282395][T17398] veth0_vlan: entered promiscuous mode
[  274.314054][T17398] veth1_vlan: entered promiscuous mode
[  274.394238][T17398] veth0_macvtap: entered promiscuous mode
[  274.435066][T17398] veth1_macvtap: entered promiscuous mode
[  274.483383][T17398] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.501658][T17744] netlink: 'syz.0.3332': attribute type 17 has an invalid length.
[  274.506355][T17398] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.532023][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.547814][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.568448][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.582251][T17744] netlink: 'syz.0.3332': attribute type 17 has an invalid length.
[  274.594743][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.739660][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.760591][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.891202][ T6588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.911687][ T6588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.039235][ T5183] Bluetooth: hci1: command tx timeout
[  275.231403][T17785] syzkaller1: entered promiscuous mode
[  275.242173][T17785] syzkaller1: entered allmulticast mode
[  275.375693][T17788] syzkaller0: entered promiscuous mode
[  275.385340][T17788] syzkaller0: entered allmulticast mode
[  275.535015][T17805] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  275.559141][T17788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.574507][T17810] netlink: 'syz.3.3346': attribute type 11 has an invalid length.
[  275.592696][T17811] macvlan0: entered promiscuous mode
[  275.621457][T17811] macvlan0: entered allmulticast mode
[  275.725919][T17822] netlink: 'syz.1.3348': attribute type 20 has an invalid length.
[  275.776058][T17822] netlink: 'syz.1.3348': attribute type 20 has an invalid length.
[  275.789947][   T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  275.804054][   T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  275.859095][   T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  275.890664][   T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  276.222854][T17859] tipc: Started in network mode
[  276.224199][T17861] netlink: 'syz.0.3361': attribute type 1 has an invalid length.
[  276.242515][T17859] tipc: Node identity ae92ec28bfaf, cluster identity 4711
[  276.282917][T17861] netlink: 'syz.0.3361': attribute type 1 has an invalid length.
[  276.301361][T17859] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.349359][T17876] syzkaller0: entered promiscuous mode
[  276.355066][T17876] syzkaller0: entered allmulticast mode
[  276.431265][T17859] tipc: Resetting bearer <eth:syzkaller0>
[  276.669719][T17896] __nla_validate_parse: 16 callbacks suppressed
[  276.669743][T17896] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3371'.
[  276.723848][T17898] netlink: 'syz.0.3372': attribute type 29 has an invalid length.
[  276.758651][T17898] netlink: 'syz.0.3372': attribute type 29 has an invalid length.
[  276.811505][T17898] netlink: 'syz.0.3372': attribute type 29 has an invalid length.
[  276.873975][T17898] netlink: 'syz.0.3372': attribute type 29 has an invalid length.
[  276.902713][T17911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3375'.
[  277.029012][T17857] tipc: Resetting bearer <eth:syzkaller0>
[  277.090032][T17857] tipc: Disabling bearer <eth:syzkaller0>
[  277.117294][ T5183] Bluetooth: hci1: command tx timeout
[  277.246134][T17937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3382'.
[  277.344725][T17937] vlan2: entered allmulticast mode
[  277.365277][T17937] bridge0: entered allmulticast mode
[  277.583628][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3391'.
[  277.597162][T17966] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3391'.
[  277.609236][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3391'.
[  277.797189][T17980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3394'.
[  278.113976][T18004] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3401'.
[  278.114350][T18003] netlink: 'syz.4.3402': attribute type 5 has an invalid length.
[  278.138289][T18004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3401'.
[  278.149455][T18006] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  278.156275][T18004] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  278.161879][T18003] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3402'.
[  278.215816][T18006] syzkaller0: entered promiscuous mode
[  278.221479][T18006] syzkaller0: entered allmulticast mode
[  278.421366][T18020] team0: Device vti0 is of different type
[  278.609166][T18026] wg1 speed is unknown, defaulting to 1000
[  278.758142][T18040] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  279.114908][T18057] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  279.326428][T18076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  279.402402][T18081] ip6gre0: Master is either lo or non-ether device
[  279.411126][T18082] ip6gre0: Master is either lo or non-ether device
[  279.492887][T18088] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  279.599879][T18092] batman_adv: batadv0: Adding interface: dummy0
[  279.609464][T18092] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.638085][T18092] batman_adv: batadv0: Interface activated: dummy0
[  279.649715][T18092] batadv0: mtu less than device minimum
[  279.656472][T18092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  279.667818][T18092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  279.678799][T18092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  279.690059][T18092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  279.700871][T18092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  279.711947][T18092] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  279.856693][T18100] pim6reg1: entered promiscuous mode
[  279.862211][T18100] pim6reg1: entered allmulticast mode
[  280.670708][T18161] validate_nla: 1 callbacks suppressed
[  280.670729][T18161] netlink: 'syz.3.3450': attribute type 17 has an invalid length.
[  280.682869][T18163] netlink: 'syz.1.3449': attribute type 18 has an invalid length.
[  280.712693][T18161] gretap0: entered promiscuous mode
[  280.742801][T18161] gretap0: left promiscuous mode
[  280.781955][T18171] IPVS: Error connecting to the multicast addr
[  280.842343][T18172] IPVS: Error connecting to the multicast addr
[  280.899429][T18174] wg1 speed is unknown, defaulting to 1000
[  281.451149][T18225] netlink: 'syz.0.3470': attribute type 10 has an invalid length.
[  282.144767][T18271] netlink: 'syz.4.3487': attribute type 10 has an invalid length.
[  282.198976][T18271] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.206554][T18271] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.269306][T18271] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.276565][T18271] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.284107][T18271] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.291405][T18271] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.343786][T18271] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  282.577871][T18296] __nla_validate_parse: 24 callbacks suppressed
[  282.577893][T18296] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3494'.
[  282.597034][T18302] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.604468][T18302] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.628605][T18302] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.674685][T18302] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.783861][T18306] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3497'.
[  282.827863][T18306] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3497'.
[  282.868642][T18311] tipc: Enabling of bearer <wdp:syz1> rejected, media not registered
[  283.043773][T18335] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3505'.
[  283.065078][T18333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3504'.
[  283.284438][T18350] tipc: Started in network mode
[  283.312849][T18350] tipc: Node identity e6634dffe67d, cluster identity 4711
[  283.345734][T18350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.389505][T18350] netlink: 'syz.1.3509': attribute type 1 has an invalid length.
[  283.396641][T18358] syzkaller0: entered promiscuous mode
[  283.405472][T18358] syzkaller0: entered allmulticast mode
[  283.480854][T18350] tipc: Resetting bearer <eth:syzkaller0>
[  283.517225][T18349] tipc: Resetting bearer <eth:syzkaller0>
[  283.543951][T18349] tipc: Disabling bearer <eth:syzkaller0>
[  283.901416][T18407] net_ratelimit: 14 callbacks suppressed
[  283.901439][T18407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.993918][T18409] netlink: 'syz.4.3525': attribute type 1 has an invalid length.
[  284.000590][T18411] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3526'.
[  284.002026][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3525'.
[  284.062706][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3526'.
[  284.127545][T18411] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  284.157361][T18416] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  284.300388][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3533'.
[  284.330919][T18430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3532'.
[  284.342548][T18422] netlink: 'syz.2.3530': attribute type 10 has an invalid length.
[  284.350612][T18422] mac80211_hwsim hwsim34 wlan1: left allmulticast mode
[  284.367665][T18422] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  284.623199][T18458] IPv6: NLM_F_CREATE should be specified when creating new route
[  284.673497][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806afe1400: rx timeout, send abort
[  284.683002][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806afe1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  284.751419][T18466] IPv6: NLM_F_CREATE should be specified when creating new route
[  285.032220][T18492] wg1 speed is unknown, defaulting to 1000
[  285.160313][T18492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  285.167603][T18492] IPv6: NLM_F_CREATE should be set when creating new route
[  285.174873][T18492] IPv6: NLM_F_CREATE should be set when creating new route
[  285.182152][T18492] IPv6: NLM_F_CREATE should be set when creating new route
[  285.192321][T18492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  285.602817][T18522] netlink: 'syz.4.3555': attribute type 1 has an invalid length.
[  285.636859][T18522] 8021q: adding VLAN 0 to HW filter on device bond2
[  285.676126][T18522] 8021q: adding VLAN 0 to HW filter on device bond2
[  285.683516][T18522] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  285.697979][T18522] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  285.729102][T18532] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  285.818415][ T1166] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  286.226912][T18576] pim6reg: entered allmulticast mode
[  286.233090][T18576] pim6reg: left allmulticast mode
[  286.650398][T18602] netlink: 'syz.1.3577': attribute type 2 has an invalid length.
[  287.014037][T18631] tipc: Started in network mode
[  287.042043][T18631] tipc: Node identity , cluster identity 4711
[  287.080608][T18631] tipc: Failed to obtain node identity
[  287.123592][T18631] tipc: Enabling of bearer <eth:caif0> rejected, failed to enable media
[  287.385988][T18640] IPVS: set_ctl: invalid protocol: 115 100.1.1.1:20001
[  287.820530][T18675] netlink: 'syz.4.3596': attribute type 11 has an invalid length.
[  287.951774][T18690] __nla_validate_parse: 16 callbacks suppressed
[  287.951797][T18690] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3601'.
[  287.981601][T18696] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3603'.
[  288.010665][T18695] geneve2: entered promiscuous mode
[  288.026121][T18695] geneve2: entered allmulticast mode
[  288.170882][T18713] netlink: 'syz.4.3610': attribute type 28 has an invalid length.
[  288.183283][T18717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.197191][T18713] netlink: 'syz.4.3610': attribute type 3 has an invalid length.
[  288.207846][T18713] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3610'.
[  288.226812][T18713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3610'.
[  288.322648][T18723] netlink: 'syz.4.3613': attribute type 6 has an invalid length.
[  288.344117][T18723] netlink: 'syz.4.3613': attribute type 6 has an invalid length.
[  288.444961][T18723] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.452342][T18723] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.603360][T18723] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.630055][T18723] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.774662][   T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.789521][   T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.851521][   T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.873322][   T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  288.932617][T18744] netlink: 'syz.1.3617': attribute type 10 has an invalid length.
[  288.943621][T18744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3617'.
[  288.982657][T18744] team0: Port device geneve0 added
[  288.998281][T18745] sch_fq: defrate 3081 ignored.
[  289.004048][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3617'.
[  289.024257][T18744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3617'.
[  289.081137][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3619'.
[  289.298145][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3624'.
[  289.312703][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3624'.
[  289.465714][T18775] netlink: 'syz.2.3628': attribute type 6 has an invalid length.
[  289.479477][T18775] netlink: 'syz.2.3628': attribute type 6 has an invalid length.
[  289.644388][T18796] netem: incorrect ge model size
[  290.155097][T18839] veth0_macvtap: left promiscuous mode
[  290.601768][T18873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  290.664197][T18881] Bluetooth: MGMT ver 1.23
[  290.886772][T18908] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  291.111848][T18937] l2tp_ppp: sess 2/0: no socket in recv
[  291.178766][T18937] sctp: [Deprecated]: syz.3.3675 (pid 18937) Use of int in maxseg socket option.
[  291.178766][T18937] Use struct sctp_assoc_value instead
[  291.404912][T18969] netem: incorrect ge model size
[  291.414799][T18969] netem: change failed
[  291.439329][T18969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.460931][T18969] syzkaller0: entered promiscuous mode
[  291.471678][T18969] syzkaller0: entered allmulticast mode
[  291.497834][T18968] tipc: Resetting bearer <eth:syzkaller0>
[  291.518016][T18968] tipc: Disabling bearer <eth:syzkaller0>
[  291.755289][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  291.873304][T19006] netlink: 'syz.3.3698': attribute type 1 has an invalid length.
[  291.997196][T19015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.027319][T19022] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  292.143272][T19015] tipc: Disabling bearer <eth:syzkaller0>
[  292.309138][T19039] 8021q: adding VLAN 0 to HW filter on device bond1
[  292.459186][T19055] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  292.463817][T19058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  292.479073][T19058] IPv6: NLM_F_CREATE should be set when creating new route
[  292.715301][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout
[  292.721474][ T5183] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  293.043503][T19109] warn_alloc: 2 callbacks suppressed
[  293.043522][T19109] syz.2.3729: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  293.144305][T19109] CPU: 1 UID: 0 PID: 19109 Comm: syz.2.3729 Not tainted syzkaller #0 PREEMPT(full) 
[  293.144335][T19109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  293.144346][T19109] Call Trace:
[  293.144353][T19109]  <TASK>
[  293.144361][T19109]  dump_stack_lvl+0x189/0x250
[  293.144391][T19109]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.144413][T19109]  ? __pfx__printk+0x10/0x10
[  293.144436][T19109]  ? lock_release+0x4b/0x3e0
[  293.144464][T19109]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  293.144488][T19109]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  293.144510][T19109]  warn_alloc+0x214/0x310
[  293.144538][T19109]  ? stack_depot_save_flags+0x40/0x860
[  293.144564][T19109]  ? __pfx_warn_alloc+0x10/0x10
[  293.144591][T19109]  ? kasan_save_track+0x4f/0x80
[  293.144613][T19109]  ? xskq_create+0x56/0x170
[  293.144637][T19109]  ? xsk_init_queue+0xb0/0x110
[  293.144658][T19109]  ? xsk_setsockopt+0x4dc/0x8d0
[  293.144680][T19109]  ? do_sock_setsockopt+0x17c/0x1b0
[  293.144697][T19109]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  293.144714][T19109]  ? do_syscall_64+0xfa/0x3b0
[  293.144740][T19109]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.144763][T19109]  __vmalloc_node_range_noprof+0x125/0x12f0
[  293.144805][T19109]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  293.144831][T19109]  ? xsk_setsockopt+0x462/0x8d0
[  293.144854][T19109]  ? __kasan_kmalloc+0x93/0xb0
[  293.144879][T19109]  vmalloc_user_noprof+0xad/0xf0
[  293.144905][T19109]  ? xskq_create+0xbf/0x170
[  293.144929][T19109]  xskq_create+0xbf/0x170
[  293.144954][T19109]  xsk_init_queue+0xb0/0x110
[  293.144977][T19109]  xsk_setsockopt+0x4dc/0x8d0
[  293.145000][T19109]  ? __pfx_xsk_setsockopt+0x10/0x10
[  293.145022][T19109]  ? __pfx_aa_sk_perm+0x10/0x10
[  293.145049][T19109]  ? lock_release+0x4b/0x3e0
[  293.145074][T19109]  ? aa_sock_opt_perm+0xff/0x1b0
[  293.145094][T19109]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  293.145120][T19109]  ? __pfx_xsk_setsockopt+0x10/0x10
[  293.145143][T19109]  do_sock_setsockopt+0x17c/0x1b0
[  293.145163][T19109]  __x64_sys_setsockopt+0x13f/0x1b0
[  293.145184][T19109]  do_syscall_64+0xfa/0x3b0
[  293.145220][T19109]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.145238][T19109]  ? clear_bhb_loop+0x60/0xb0
[  293.145258][T19109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.145276][T19109] RIP: 0033:0x7ff40db8ebe9
[  293.145293][T19109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.145310][T19109] RSP: 002b:00007ff40e9a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  293.145333][T19109] RAX: ffffffffffffffda RBX: 00007ff40ddb5fa0 RCX: 00007ff40db8ebe9
[  293.145346][T19109] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  293.145358][T19109] RBP: 00007ff40dc11e19 R08: 0000000000000004 R09: 0000000000000000
[  293.145369][T19109] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  293.145381][T19109] R13: 00007ff40ddb6038 R14: 00007ff40ddb5fa0 R15: 00007fff497cee88
[  293.145403][T19109]  </TASK>
[  293.152221][T19129] __nla_validate_parse: 28 callbacks suppressed
[  293.152239][T19129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3732'.
[  293.185465][T19109] Mem-Info:
[  293.289399][T19135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3735'.
[  293.291548][T19109] active_anon:5660 inactive_anon:0 isolated_anon:0
[  293.291548][T19109]  active_file:3206 inactive_file:39919 isolated_file:0
[  293.291548][T19109]  unevictable:768 dirty:96 writeback:0
[  293.291548][T19109]  slab_reclaimable:12768 slab_unreclaimable:122760
[  293.291548][T19109]  mapped:29406 shmem:1373 pagetables:1300
[  293.291548][T19109]  sec_pagetables:0 bounce:0
[  293.291548][T19109]  kernel_misc_reclaimable:0
[  293.291548][T19109]  free:1290042 free_pcp:18001 free_cma:0
[  293.298952][T19135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3735'.
[  293.332407][T19109] Node 0 active_anon:22740kB inactive_anon:0kB active_file:12824kB inactive_file:159472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117624kB dirty:384kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16560kB pagetables:5152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  293.459538][T19138] netlink: 'syz.1.3736': attribute type 1 has an invalid length.
[  293.502819][T19109] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  293.536117][T19138] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3736'.
[  293.545091][T19109] Node 0 
[  293.580143][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3737'.
[  293.621510][T19109] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  293.683225][T19109] lowmem_reserve[]: 0 2497 2499 2499 2499
[  293.703402][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3737'.
[  293.713052][T19141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3737'.
[  293.730189][T19109] Node 0 DMA32 free:1257580kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22496kB inactive_anon:0kB active_file:12824kB inactive_file:157904kB unevictable:1536kB writepending:384kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:47524kB local_pcp:26512kB free_cma:0kB
[  293.738281][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3737'.
[  293.765230][T19109] lowmem_reserve[]: 0 0 1 1 1
[  293.796549][T19109] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  293.798595][T19149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3740'.
[  293.829233][T19109] lowmem_reserve[]:
[  293.838917][T19149] openvswitch: netlink: Flow key attr not present in new flow.
[  293.850647][T19109]  0 0 0 0 0
[  293.850691][T19109] Node 1 Normal free:3886676kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24792kB local_pcp:10496kB free_cma:0kB
[  293.850751][T19109] lowmem_reserve[]: 0 0 0 0 0
[  293.850788][T19109] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  293.850913][T19109] Node 0 DMA32: 1589*4kB (UME) 647*8kB (UME) 96*16kB (UME) 298*32kB (UM) 113*64kB (UME) 59*128kB (UME) 33*256kB (UM) 18*512kB (UM) 8*1024kB (UM) 1*2048kB (U) 291*4096kB (M) = 1257228kB
[  293.851103][T19109] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 
[  293.854719][T19141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3737'.
[  293.893820][T19109] 0*64kB 
[  294.023711][T19161] netlink: 'syz.1.3742': attribute type 7 has an invalid length.
[  294.034818][T19161] netlink: 'syz.1.3742': attribute type 8 has an invalid length.
[  294.059148][T19164] netlink: 'syz.1.3742': attribute type 7 has an invalid length.
[  294.076999][T19109] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  294.085099][T19164] netlink: 'syz.1.3742': attribute type 8 has an invalid length.
[  294.101685][T19109] Node 1 Normal: 134*4kB (U) 52*8kB (UME) 45*16kB (UME) 78*32kB (UME) 31*64kB (UME) 9*128kB (UME) 6*256kB (UME) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3886728kB
[  294.201211][T19109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  294.235640][T19109] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  294.276066][T19109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  294.307325][T19109] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  294.326125][T19109] 45319 total pagecache pages
[  294.331041][T19109] 0 pages in swap cache
[  294.335865][T19109] Free swap  = 124996kB
[  294.340206][T19109] Total swap = 124996kB
[  294.344609][T19109] 2097051 pages RAM
[  294.349353][T19109] 0 pages HighMem/MovableOnly
[  294.354127][T19109] 425661 pages reserved
[  294.358903][T19109] 0 pages cma reserved
[  294.563792][T19206] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  294.650379][T19212] netlink: 'syz.3.3756': attribute type 15 has an invalid length.
[  294.679654][T19212] netlink: 'syz.3.3756': attribute type 15 has an invalid length.
[  297.785975][ T5232] udevd[5232]: worker [5878] /devices/virtual/block/nbd0 timeout; kill it
[  297.794726][ T5232] udevd[5232]: seq 12508 '/devices/virtual/block/nbd0' killed
[  301.995397][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  303.277201][   T25] block nbd0: Possible stuck request ffff888024f00000: control (read@0,1024B). Runtime 210 seconds
[  303.288130][   T25] block nbd0: Possible stuck request ffff888024f001c0: control (read@1024,1024B). Runtime 210 seconds
[  303.299685][   T25] block nbd0: Possible stuck request ffff888024f00380: control (read@2048,1024B). Runtime 210 seconds
[  303.311057][   T25] block nbd0: Possible stuck request ffff888024f00540: control (read@3072,1024B). Runtime 210 seconds
[  311.824876][T19259] netlink: 'syz.2.3767': attribute type 1 has an invalid length.
[  311.834132][T19259] __nla_validate_parse: 12 callbacks suppressed
[  311.834154][T19259] netlink: 784 bytes leftover after parsing attributes in process `syz.2.3767'.
[  311.868331][T19261] syzkaller0: entered promiscuous mode
[  311.898576][T19261] syzkaller0: entered allmulticast mode
[  312.009264][T19271] veth0: entered promiscuous mode
[  312.749980][T19286] sctp: [Deprecated]: syz.3.3774 (pid 19286) Use of struct sctp_assoc_value in delayed_ack socket option.
[  312.749980][T19286] Use struct sctp_sack_info instead
[  312.810581][T19291] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3775'.
[  312.828634][T19294] netlink: 'syz.4.3776': attribute type 10 has an invalid length.
[  312.844816][T19295] netlink: 'syz.2.3777': attribute type 10 has an invalid length.
[  312.846651][T19294] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  312.855931][T19291] netlink: 'syz.1.3775': attribute type 24 has an invalid length.
[  312.879682][T19273] veth0: left promiscuous mode
[  312.897318][T19298] netlink: 'syz.2.3777': attribute type 10 has an invalid length.
[  312.897892][T19295] 8021q: adding VLAN 0 to HW filter on device team0
[  312.967158][T19295] bond0: (slave team0): Enslaving as an active interface with an up link
[  312.998152][T19298] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  313.077349][T19301] 8021q: adding VLAN 0 to HW filter on device bond1
[  313.114153][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3783'.
[  313.139478][T19295] bond_slave_0: entered promiscuous mode
[  313.145257][T19295] bond_slave_1: entered promiscuous mode
[  313.150940][T19295] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode
[  313.158093][T19295] team_slave_0: entered promiscuous mode
[  313.163780][T19295] team_slave_1: entered promiscuous mode
[  313.169501][T19295] syz_tun: entered promiscuous mode
[  313.175825][T19295] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  313.185368][T19295] bond1: (slave macvlan3): Enslaving as a backup interface with an up link
[  313.290956][T19323] 
: renamed from vlan1 (while UP)
[  313.307191][T19325] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  313.349390][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'.
[  313.372822][T19333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3790'.
[  313.394000][T19334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3790'.
[  313.664431][T19355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3796'.
[  313.679938][T19355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3796'.
[  313.844025][T19369] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  314.033714][T19378] netlink: 'syz.0.3803': attribute type 12 has an invalid length.
[  314.253188][T19364] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.260905][T19364] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.294734][T19364] bond_slave_0: left promiscuous mode
[  314.304677][T19364] bond_slave_1: left promiscuous mode
[  314.311834][T19364] mac80211_hwsim hwsim34 wlan1: left promiscuous mode
[  314.321262][T19364] team_slave_0: left promiscuous mode
[  314.326795][T19364] team_slave_1: left promiscuous mode
[  314.351104][T19364] batman_adv: batadv0: Interface deactivated: dummy0
[  314.513471][T19364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.536351][T19357] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  314.569613][T19364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.918397][ T6568] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.942860][T19405] IPVS: ip_vs_edit_dest(): server weight less than zero
[  314.948254][ T6568] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.951879][  T847] IPVS: starting estimator thread 0...
[  314.999364][T19408] netlink: 'syz.0.3809': attribute type 1 has an invalid length.
[  315.003567][T19405] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  315.007849][ T6568] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.065838][T19412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  315.095250][T19406] IPVS: using max 33 ests per chain, 79200 per kthread
[  315.129214][ T6568] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.186013][T19419] batadv_slave_0: entered promiscuous mode
[  315.201848][T19428] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  315.274223][T19433] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3815'.
[  315.406329][T19418] batadv_slave_0: left promiscuous mode
[  315.502480][T19447] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg1, syncid = 3, id = 0
[  315.647592][T19467] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3824'.
[  315.755392][ T5183] Bluetooth: hci0: command 0x0c1a tx timeout
[  315.871347][T19477] netlink: 'syz.0.3826': attribute type 1 has an invalid length.
[  315.887497][T19482] netlink: 'syz.4.3828': attribute type 39 has an invalid length.
[  315.934962][T19477] netlink: 'syz.0.3826': attribute type 1 has an invalid length.
[  316.178203][ T6588] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.198019][ T6588] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  316.236180][ T6588] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  316.285787][ T6588] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.300302][T19511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.053528][T19579] __nla_validate_parse: 34 callbacks suppressed
[  317.053549][T19579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3856'.
[  317.083946][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3856'.
[  317.102627][ T5183] Bluetooth: hci1: link tx timeout
[  317.110194][ T5183] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  317.160982][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3856'.
[  317.171458][T19579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3856'.
[  317.192767][T19579] netlink: 'syz.0.3856': attribute type 1 has an invalid length.
[  317.243338][T19580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3856'.
[  317.321791][ T5863] Bluetooth: hci1: link tx timeout
[  317.327594][ T5863] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  317.347460][ T5863] Bluetooth: hci1: link tx timeout
[  317.352633][ T5863] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  317.355551][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.609117][T19622] netlink: 'syz.4.3865': attribute type 10 has an invalid length.
[  317.627713][T19620] netlink: 'syz.3.3864': attribute type 1 has an invalid length.
[  317.631542][T19622] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  317.681112][T19622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  317.773740][T19620] 8021q: adding VLAN 0 to HW filter on device bond2
[  317.798294][T19632] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3867'.
[  317.816138][ T5863] Bluetooth: hci1: link tx timeout
[  317.821314][ T5863] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  317.876749][T19637] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3869'.
[  317.914325][T19639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3870'.
[  317.933606][T19645] openvswitch: netlink: Duplicate or invalid key (type 0).
[  317.947430][T19645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.069576][T19657] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3874'.
[  318.212354][T19665] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3878'.
[  318.289276][T19675] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  318.318049][ T5863] Bluetooth: hci1: link tx timeout
[  318.323836][ T5863] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  318.430385][T19681] openvswitch: netlink: IP tunnel dst address not specified
[  318.447952][T19684] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  318.478853][T19684] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  318.566989][T19691] FAULT_INJECTION: forcing a failure.
[  318.566989][T19691] name failslab, interval 1, probability 0, space 0, times 0
[  318.594788][ T5863] Bluetooth: hci1: link tx timeout
[  318.600052][ T5863] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  318.630090][T19691] CPU: 0 UID: 0 PID: 19691 Comm: syz.1.3884 Not tainted syzkaller #0 PREEMPT(full) 
[  318.630120][T19691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  318.630132][T19691] Call Trace:
[  318.630140][T19691]  <TASK>
[  318.630148][T19691]  dump_stack_lvl+0x189/0x250
[  318.630176][T19691]  ? __pfx____ratelimit+0x10/0x10
[  318.630213][T19691]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.630235][T19691]  ? __pfx__printk+0x10/0x10
[  318.630262][T19691]  ? __pfx___might_resched+0x10/0x10
[  318.630282][T19691]  ? lock_acquire+0x5f/0x360
[  318.630310][T19691]  should_fail_ex+0x414/0x560
[  318.630337][T19691]  should_failslab+0xa8/0x100
[  318.630365][T19691]  __kmalloc_noprof+0xcb/0x4f0
[  318.630389][T19691]  ? tomoyo_encode+0x28b/0x550
[  318.630410][T19691]  tomoyo_encode+0x28b/0x550
[  318.630431][T19691]  tomoyo_realpath_from_path+0x58d/0x5d0
[  318.630452][T19691]  ? tomoyo_domain+0xd9/0x130
[  318.630474][T19691]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  318.630500][T19691]  tomoyo_path_number_perm+0x1e8/0x5a0
[  318.630525][T19691]  ? lock_release+0x4b/0x3e0
[  318.630551][T19691]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  318.630579][T19691]  ? rcu_is_watching+0x15/0xb0
[  318.630598][T19691]  ? lock_release+0x4b/0x3e0
[  318.630622][T19691]  ? vfs_write+0x956/0xb30
[  318.630648][T19691]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  318.630685][T19691]  ? lock_release+0x4b/0x3e0
[  318.630713][T19691]  ? __fget_files+0x2a/0x420
[  318.630740][T19691]  ? __fget_files+0x3a0/0x420
[  318.630766][T19691]  ? __fget_files+0x2a/0x420
[  318.630795][T19691]  security_file_ioctl+0xcb/0x2d0
[  318.630820][T19691]  __se_sys_ioctl+0x47/0x170
[  318.630844][T19691]  do_syscall_64+0xfa/0x3b0
[  318.630872][T19691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.630891][T19691]  ? clear_bhb_loop+0x60/0xb0
[  318.630912][T19691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.630932][T19691] RIP: 0033:0x7f952b38ebe9
[  318.630948][T19691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.630966][T19691] RSP: 002b:00007f952c27d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  318.630988][T19691] RAX: ffffffffffffffda RBX: 00007f952b5b5fa0 RCX: 00007f952b38ebe9
[  318.631003][T19691] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003
[  318.631016][T19691] RBP: 00007f952c27d090 R08: 0000000000000000 R09: 0000000000000000
[  318.631029][T19691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.631041][T19691] R13: 00007f952b5b6038 R14: 00007f952b5b5fa0 R15: 00007fff5df67148
[  318.631064][T19691]  </TASK>
[  318.631082][T19691] ERROR: Out of memory at tomoyo_realpath_from_path.
[  318.910802][ T5863] Bluetooth: hci1: link tx timeout
[  318.916253][ T5863] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  319.078992][ T5863] Bluetooth: hci1: link tx timeout
[  319.097745][ T5863] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  319.111488][T19710] netlink: 'syz.0.3891': attribute type 1 has an invalid length.
[  319.133441][T19711] netlink: 'syz.3.3892': attribute type 11 has an invalid length.
[  319.161187][T19711] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:20002
[  319.195607][ T5863] Bluetooth: hci1: command 0x0406 tx timeout
[  319.300349][T19720] pimreg3: entered allmulticast mode
[  319.418516][T19724] netlink: 'syz.0.3898': attribute type 10 has an invalid length.
[  319.477171][T19733] FAULT_INJECTION: forcing a failure.
[  319.477171][T19733] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  319.491363][T19733] CPU: 0 UID: 0 PID: 19733 Comm: syz.2.3900 Not tainted syzkaller #0 PREEMPT(full) 
[  319.491391][T19733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  319.491402][T19733] Call Trace:
[  319.491410][T19733]  <TASK>
[  319.491417][T19733]  dump_stack_lvl+0x189/0x250
[  319.491447][T19733]  ? __pfx____ratelimit+0x10/0x10
[  319.491474][T19733]  ? __pfx_dump_stack_lvl+0x10/0x10
[  319.491497][T19733]  ? __pfx__printk+0x10/0x10
[  319.491521][T19733]  ? __might_fault+0xb0/0x130
[  319.491549][T19733]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  319.491578][T19733]  ? rcu_is_watching+0x15/0xb0
[  319.491600][T19733]  should_fail_ex+0x414/0x560
[  319.491628][T19733]  _copy_from_user+0x2d/0xb0
[  319.491650][T19733]  wext_handle_ioctl+0xba/0x1c0
[  319.491681][T19733]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  319.491708][T19733]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  319.491745][T19733]  sock_ioctl+0x15f/0x790
[  319.491768][T19733]  ? lock_release+0x4b/0x3e0
[  319.491796][T19733]  ? __pfx_sock_ioctl+0x10/0x10
[  319.491819][T19733]  ? __fget_files+0x2a/0x420
[  319.491847][T19733]  ? __fget_files+0x3a0/0x420
[  319.491874][T19733]  ? __fget_files+0x2a/0x420
[  319.491903][T19733]  ? bpf_lsm_file_ioctl+0x9/0x20
[  319.491927][T19733]  ? __pfx_sock_ioctl+0x10/0x10
[  319.491960][T19733]  __se_sys_ioctl+0xfc/0x170
[  319.491984][T19733]  do_syscall_64+0xfa/0x3b0
[  319.492013][T19733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.492032][T19733]  ? clear_bhb_loop+0x60/0xb0
[  319.492054][T19733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.492074][T19733] RIP: 0033:0x7ff40db8ebe9
[  319.492092][T19733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.492110][T19733] RSP: 002b:00007ff40e9a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  319.492134][T19733] RAX: ffffffffffffffda RBX: 00007ff40ddb5fa0 RCX: 00007ff40db8ebe9
[  319.492149][T19733] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003
[  319.492162][T19733] RBP: 00007ff40e9a4090 R08: 0000000000000000 R09: 0000000000000000
[  319.492175][T19733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.492187][T19733] R13: 00007ff40ddb6038 R14: 00007ff40ddb5fa0 R15: 00007fff497cee88
[  319.492209][T19733]  </TASK>
[  319.771898][T19739] netlink: 'syz.4.3903': attribute type 29 has an invalid length.
[  319.781470][T19739] netlink: 'syz.4.3903': attribute type 29 has an invalid length.
[  319.925495][T19743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  319.936571][T19747] netlink: 'syz.3.3906': attribute type 21 has an invalid length.
[  319.983151][T19743] syzkaller0: entered promiscuous mode
[  319.990343][T19743] syzkaller0: entered allmulticast mode
[  320.011815][T19743] tipc: Resetting bearer <eth:syzkaller0>
[  320.038292][T19742] tipc: Resetting bearer <eth:syzkaller0>
[  320.051448][T19742] tipc: Disabling bearer <eth:syzkaller0>
[  320.185940][T19764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.206763][T19764] tipc: Resetting bearer <eth:syzkaller0>
[  320.264557][T19762] tipc: Disabling bearer <eth:syzkaller0>
[  320.292005][T19767] tipc: Started in network mode
[  320.338339][T19767] tipc: Node identity 4eb59fdf4dea, cluster identity 4711
[  320.352415][T19767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.362096][T19768] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.384661][T19781] syzkaller0: entered promiscuous mode
[  320.391237][T19781] syzkaller0: entered allmulticast mode
[  320.407797][T19780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.418836][T19767] tipc: Resetting bearer <eth:syzkaller0>
[  320.435657][T19765] tipc: Resetting bearer <eth:syzkaller0>
[  320.454855][T19765] tipc: Disabling bearer <eth:syzkaller0>
[  320.534497][T19780] syzkaller0: entered promiscuous mode
[  320.540956][T19780] syzkaller0: entered allmulticast mode
[  320.563412][T19780] tipc: Resetting bearer <eth:syzkaller0>
[  320.599593][T19791] tipc: Resetting bearer <eth:syzkaller0>
[  320.673272][T19791] tipc: Disabling bearer <eth:syzkaller0>
[  320.707500][T19795] dvmrp0: entered allmulticast mode
[  320.713973][T19795] dvmrp0: left allmulticast mode
[  320.828429][T19816] openvswitch: netlink: Multiple metadata blocks provided
[  320.867249][T19816] netlink: 'syz.1.3926': attribute type 3 has an invalid length.
[  321.392280][T19857] mac80211_hwsim hwsim34 �
: renamed from wlan1
[  321.404568][T16767] IPVS: starting estimator thread 0...
[  321.404565][T19855] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  321.442804][T19857] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  321.515415][T19862] IPVS: using max 42 ests per chain, 100800 per kthread
[  321.696033][T19885] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.944132][T19907] `: renamed from bond0 (while UP)
[  322.182254][T19926] FAULT_INJECTION: forcing a failure.
[  322.182254][T19926] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.206522][T19928] __nla_validate_parse: 12 callbacks suppressed
[  322.206543][T19928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3964'.
[  322.222724][T19926] CPU: 0 UID: 0 PID: 19926 Comm: syz.3.3963 Not tainted syzkaller #0 PREEMPT(full) 
[  322.222752][T19926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  322.222762][T19926] Call Trace:
[  322.222769][T19926]  <TASK>
[  322.222785][T19926]  dump_stack_lvl+0x189/0x250
[  322.222817][T19926]  ? __pfx____ratelimit+0x10/0x10
[  322.222842][T19926]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.222863][T19926]  ? __pfx__printk+0x10/0x10
[  322.222892][T19926]  ? rcu_is_watching+0x15/0xb0
[  322.222913][T19926]  should_fail_ex+0x414/0x560
[  322.222937][T19926]  _copy_to_user+0x31/0xb0
[  322.222956][T19926]  simple_read_from_buffer+0xe1/0x170
[  322.222981][T19926]  proc_fail_nth_read+0x1b3/0x220
[  322.223001][T19926]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  322.223022][T19926]  ? rw_verify_area+0x2a6/0x4d0
[  322.223046][T19926]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  322.223068][T19926]  vfs_read+0x200/0xa30
[  322.223091][T19926]  ? fdget_pos+0x247/0x320
[  322.223111][T19926]  ? __pfx___mutex_lock+0x10/0x10
[  322.223141][T19926]  ? __pfx_vfs_read+0x10/0x10
[  322.223189][T19926]  ? __fget_files+0x3a0/0x420
[  322.223216][T19926]  ? __fget_files+0x2a/0x420
[  322.223246][T19926]  ksys_read+0x145/0x250
[  322.223269][T19926]  ? __fget_files+0x3a0/0x420
[  322.223296][T19926]  ? __pfx_ksys_read+0x10/0x10
[  322.223319][T19926]  ? __pfx_sock_ioctl+0x10/0x10
[  322.223343][T19926]  ? rcu_is_watching+0x15/0xb0
[  322.223362][T19926]  do_syscall_64+0xfa/0x3b0
[  322.223389][T19926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.223408][T19926]  ? clear_bhb_loop+0x60/0xb0
[  322.223429][T19926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.223453][T19926] RIP: 0033:0x7f02e358d5fc
[  322.223471][T19926] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  322.223487][T19926] RSP: 002b:00007f02e44be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  322.223509][T19926] RAX: ffffffffffffffda RBX: 00007f02e37b5fa0 RCX: 00007f02e358d5fc
[  322.223523][T19926] RDX: 000000000000000f RSI: 00007f02e44be0a0 RDI: 0000000000000004
[  322.223534][T19926] RBP: 00007f02e44be090 R08: 0000000000000000 R09: 0000000000000000
[  322.223546][T19926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.223557][T19926] R13: 00007f02e37b6038 R14: 00007f02e37b5fa0 R15: 00007ffd256fa798
[  322.223580][T19926]  </TASK>
[  322.469114][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3964'.
[  322.553984][T19940] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3968'.
[  322.659163][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3972'.
[  322.783645][T19958] validate_nla: 1 callbacks suppressed
[  322.783667][T19958] netlink: 'syz.1.3975': attribute type 1 has an invalid length.
[  322.810971][T19959] netlink: 'syz.2.3976': attribute type 1 has an invalid length.
[  322.829371][T19958] 8021q: adding VLAN 0 to HW filter on device bond1
[  322.863611][T19958] bond1: (slave geneve2): making interface the new active one
[  322.869003][T19963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3977'.
[  322.873124][T19958] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  322.935011][T19970] netlink: 'syz.3.3978': attribute type 1 has an invalid length.
[  322.950814][T19965] bond2: (slave gretap1): making interface the new active one
[  322.959571][T19965] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  323.070355][T19970] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.080764][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'.
[  323.099583][T19977] syzkaller1: entered promiscuous mode
[  323.105858][T19977] syzkaller1: entered allmulticast mode
[  323.117980][T19988] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[  323.184567][T19994] tipc: Failed to remove unknown binding: 66,1,1/0:1027662754/1027662756
[  323.196510][T19995] tipc: Failed to remove unknown binding: 66,1,1/0:1027662754/1027662756
[  323.283317][T20017] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3987'.
[  323.283363][T20018] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3987'.
[  323.293574][T19997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3984'.
[  323.356122][ T5183] Bluetooth: hci1: command 0x0406 tx timeout
[  323.436730][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3989'.
[  323.679414][T20051] IPv6: sit1: Disabled Multicast RS
[  323.710722][T20051] sit1: entered allmulticast mode
[  323.882150][T20067] netdevsim netdevsim2: Direct firmware load for 	 failed with error -2
[  323.922226][T20067] netdevsim netdevsim2: Falling back to sysfs fallback for: 	
[  324.114617][T20087] netlink: 'syz.1.4007': attribute type 1 has an invalid length.
[  324.189785][T20102] openvswitch: netlink: Message has 4 unknown bytes.
[  324.460548][T20123] netlink: 'syz.0.4018': attribute type 83 has an invalid length.
[  324.514287][T20133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  333.357848][   T25] block nbd0: Possible stuck request ffff888024f00000: control (read@0,1024B). Runtime 240 seconds
[  333.368815][   T25] block nbd0: Possible stuck request ffff888024f001c0: control (read@1024,1024B). Runtime 240 seconds
[  333.381930][   T25] block nbd0: Possible stuck request ffff888024f00380: control (read@2048,1024B). Runtime 240 seconds
[  333.393212][   T25] block nbd0: Possible stuck request ffff888024f00540: control (read@3072,1024B). Runtime 240 seconds
[  343.276137][T20252] __nla_validate_parse: 7 callbacks suppressed
[  343.276161][T20252] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4026'.
[  343.372454][ T6588] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  343.408574][ T6588] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  343.439306][ T6588] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  343.481497][ T6588] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  343.670497][T20292] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4036'.
[  343.744150][T20300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4038'.
[  343.757202][T20299] siw: device registration error -23
[  343.842615][T20309] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20001
[  344.018564][T20320] FAULT_INJECTION: forcing a failure.
[  344.018564][T20320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  344.034437][T20320] CPU: 0 UID: 0 PID: 20320 Comm: syz.2.4046 Not tainted syzkaller #0 PREEMPT(full) 
[  344.034466][T20320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  344.034479][T20320] Call Trace:
[  344.034486][T20320]  <TASK>
[  344.034494][T20320]  dump_stack_lvl+0x189/0x250
[  344.034522][T20320]  ? __pfx____ratelimit+0x10/0x10
[  344.034549][T20320]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.034570][T20320]  ? __pfx__printk+0x10/0x10
[  344.034593][T20320]  ? __might_fault+0xb0/0x130
[  344.034622][T20320]  ? rcu_is_watching+0x15/0xb0
[  344.034643][T20320]  should_fail_ex+0x414/0x560
[  344.034671][T20320]  _copy_from_user+0x2d/0xb0
[  344.034693][T20320]  ___sys_sendmsg+0x158/0x2a0
[  344.034715][T20320]  ? __pfx____sys_sendmsg+0x10/0x10
[  344.034753][T20320]  ? __fget_files+0x2a/0x420
[  344.034780][T20320]  ? __fget_files+0x3a0/0x420
[  344.034812][T20320]  __x64_sys_sendmsg+0x19b/0x260
[  344.034833][T20320]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  344.034857][T20320]  ? __pfx_ksys_write+0x10/0x10
[  344.034881][T20320]  ? rcu_is_watching+0x15/0xb0
[  344.034900][T20320]  ? rcu_is_watching+0x15/0xb0
[  344.034920][T20320]  do_syscall_64+0xfa/0x3b0
[  344.034947][T20320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.034965][T20320]  ? clear_bhb_loop+0x60/0xb0
[  344.034986][T20320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.035005][T20320] RIP: 0033:0x7ff40db8ebe9
[  344.035022][T20320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.035041][T20320] RSP: 002b:00007ff40e9a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  344.035064][T20320] RAX: ffffffffffffffda RBX: 00007ff40ddb5fa0 RCX: 00007ff40db8ebe9
[  344.035077][T20320] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  344.035095][T20320] RBP: 00007ff40e9a4090 R08: 0000000000000000 R09: 0000000000000000
[  344.035107][T20320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.035119][T20320] R13: 00007ff40ddb6038 R14: 00007ff40ddb5fa0 R15: 00007fff497cee88
[  344.035140][T20320]  </TASK>
[  344.062629][T20322] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4048'.
[  344.258108][T20322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4048'.
[  344.284890][T20329] netlink: 'syz.4.4051': attribute type 1 has an invalid length.
[  344.302217][T20322] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4048'.
[  344.327970][T20322] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4048'.
[  344.418243][T20342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4055'.
[  344.424131][T20344] tap0: tun_chr_ioctl cmd 1074025677
[  344.432936][T20344] tap0: linktype set to 65534
[  344.568267][T20354] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.4056'.
[  344.630708][T16758] IPVS: starting estimator thread 0...
[  344.637737][T20353] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  344.683421][T20344] tap0: tun_chr_ioctl cmd 1074025673
[  344.710363][T20361] tap0: tun_chr_ioctl cmd 1074025677
[  344.724038][T20361] tap0: linktype set to 65534
[  344.735813][T20359] IPVS: using max 47 ests per chain, 112800 per kthread
[  344.769237][T20369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.831831][T20372] pimreg: entered allmulticast mode
[  344.928939][T20379] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4066'.
[  345.081666][T20385] netlink: 'syz.2.4067': attribute type 16 has an invalid length.
[  345.210814][T20393] bridge_slave_1: left allmulticast mode
[  345.217841][T20393] bridge_slave_1: left promiscuous mode
[  345.223792][T20393] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.235874][T20393] bridge_slave_0: left allmulticast mode
[  345.241857][T20393] bridge_slave_0: left promiscuous mode
[  345.249129][T20393] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.473101][T20400] syzkaller0: entered promiscuous mode
[  345.479527][T20400] syzkaller0: entered allmulticast mode
[  345.623713][T20412] team_slave_0: entered promiscuous mode
[  345.629501][T20412] team_slave_1: entered promiscuous mode
[  345.672681][T20417] netlink: 'syz.1.4079': attribute type 10 has an invalid length.
[  345.934159][T20448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.956124][T20448] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.993603][T20457] pimreg3: entered allmulticast mode
[  346.031536][T20448] tipc: Disabling bearer <eth:syzkaller0>
[  346.057805][T20465] FAULT_INJECTION: forcing a failure.
[  346.057805][T20465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  346.074570][T20465] CPU: 1 UID: 0 PID: 20465 Comm: syz.1.4092 Not tainted syzkaller #0 PREEMPT(full) 
[  346.074625][T20465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  346.074638][T20465] Call Trace:
[  346.074645][T20465]  <TASK>
[  346.074653][T20465]  dump_stack_lvl+0x189/0x250
[  346.074682][T20465]  ? __pfx____ratelimit+0x10/0x10
[  346.074710][T20465]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.074732][T20465]  ? __pfx__printk+0x10/0x10
[  346.074756][T20465]  ? __might_fault+0xb0/0x130
[  346.074787][T20465]  ? rcu_is_watching+0x15/0xb0
[  346.074807][T20465]  should_fail_ex+0x414/0x560
[  346.074834][T20465]  _copy_from_iter+0x1db/0x16f0
[  346.074855][T20465]  ? rcu_is_watching+0x15/0xb0
[  346.074874][T20465]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  346.074901][T20465]  ? __pfx__copy_from_iter+0x10/0x10
[  346.074921][T20465]  ? __build_skb_around+0x257/0x3e0
[  346.074950][T20465]  ? netlink_sendmsg+0x642/0xb30
[  346.074976][T20465]  ? skb_put+0x11b/0x210
[  346.074995][T20465]  netlink_sendmsg+0x6b2/0xb30
[  346.075028][T20465]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.075057][T20465]  ? aa_sock_msg_perm+0xf1/0x1d0
[  346.075075][T20465]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  346.075102][T20465]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.075128][T20465]  __sock_sendmsg+0x21c/0x270
[  346.075153][T20465]  ____sys_sendmsg+0x505/0x830
[  346.075174][T20465]  ? __pfx_____sys_sendmsg+0x10/0x10
[  346.075207][T20465]  ? import_iovec+0x74/0xa0
[  346.075230][T20465]  ___sys_sendmsg+0x21f/0x2a0
[  346.075249][T20465]  ? __pfx____sys_sendmsg+0x10/0x10
[  346.075287][T20465]  ? __fget_files+0x2a/0x420
[  346.075314][T20465]  ? __fget_files+0x3a0/0x420
[  346.075346][T20465]  __x64_sys_sendmsg+0x19b/0x260
[  346.075365][T20465]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  346.075389][T20465]  ? __pfx_ksys_write+0x10/0x10
[  346.075411][T20465]  ? rcu_is_watching+0x15/0xb0
[  346.075432][T20465]  ? rcu_is_watching+0x15/0xb0
[  346.075451][T20465]  do_syscall_64+0xfa/0x3b0
[  346.075478][T20465]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.075496][T20465]  ? clear_bhb_loop+0x60/0xb0
[  346.075517][T20465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.075535][T20465] RIP: 0033:0x7f952b38ebe9
[  346.075552][T20465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.075569][T20465] RSP: 002b:00007f952c27d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  346.075590][T20465] RAX: ffffffffffffffda RBX: 00007f952b5b5fa0 RCX: 00007f952b38ebe9
[  346.075604][T20465] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  346.075616][T20465] RBP: 00007f952c27d090 R08: 0000000000000000 R09: 0000000000000000
[  346.075628][T20465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  346.075639][T20465] R13: 00007f952b5b6038 R14: 00007f952b5b5fa0 R15: 00007fff5df67148
[  346.075662][T20465]  </TASK>
[  346.512560][T20487] netlink: 'syz.4.4100': attribute type 1 has an invalid length.
[  346.515008][T20491] netlink: 'syz.1.4099': attribute type 21 has an invalid length.
[  346.521505][T20487] netlink: 'syz.4.4100': attribute type 1 has an invalid length.
[  346.538356][T20487] netlink: 'syz.4.4100': attribute type 1 has an invalid length.
[  346.546432][T20487] netlink: 'syz.4.4100': attribute type 1 has an invalid length.
[  346.554494][T20487] netlink: 'syz.4.4100': attribute type 1 has an invalid length.
[  346.562443][T20487] netlink: 'syz.4.4100': attribute type 1 has an invalid length.
[  346.667726][T20499] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  346.719252][T20502] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  347.244266][T20546] 8021q: adding VLAN 0 to HW filter on device team0
[  347.255062][T20546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  347.298340][T20554] pimreg3: entered allmulticast mode
[  347.371230][T20556] sctp: [Deprecated]: syz.0.4122 (pid 20556) Use of struct sctp_assoc_value in delayed_ack socket option.
[  347.371230][T20556] Use struct sctp_sack_info instead
[  347.432078][T20558] delete_channel: no stack
[  347.704355][T20580] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  347.788829][T20585] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  347.810432][T20587] openvswitch: netlink: IP tunnel dst address not specified
[  347.983780][T20602] openvswitch: netlink: Key type 9226 is out of range max 32
[  348.069075][T20606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.401972][T20629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  348.548285][T20658] __nla_validate_parse: 28 callbacks suppressed
[  348.548307][T20658] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4155'.
[  348.607996][T20662] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4157'.
[  348.619555][ T5942] IPVS: starting estimator thread 0...
[  348.652483][T20669] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20000
[  348.665520][T20668] sctp: [Deprecated]: syz.2.4158 (pid 20668) Use of struct sctp_assoc_value in delayed_ack socket option.
[  348.665520][T20668] Use struct sctp_sack_info instead
[  348.727053][T20664] IPVS: using max 40 ests per chain, 96000 per kthread
[  349.121660][T20700] netlink: 788 bytes leftover after parsing attributes in process `syz.1.4171'.
[  349.127872][T20713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4174'.
[  349.170677][T20710] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.221875][T20710] syzkaller0: entered promiscuous mode
[  349.242307][T20710] syzkaller0: entered allmulticast mode
[  349.287021][T20710] tipc: Resetting bearer <eth:syzkaller0>
[  349.302463][T20709] tipc: Resetting bearer <eth:syzkaller0>
[  349.312314][T20709] tipc: Disabling bearer <eth:syzkaller0>
[  349.363461][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4180'.
[  349.532987][T20743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4184'.
[  349.589502][T20749] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.4188'.
[  349.600530][T20750] validate_nla: 53 callbacks suppressed
[  349.600553][T20750] netlink: 'syz.4.4187': attribute type 21 has an invalid length.
[  349.631095][T20750] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4187'.
[  349.647318][T20752] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4189'.
[  349.664958][T20752] gretap0: entered promiscuous mode
[  349.694147][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4191'.
[  349.759152][T20752] 0��{X��: renamed from gretap0
[  349.767262][T20752] 0��{X��: left promiscuous mode
[  349.772729][T20752] 0��{X��: entered allmulticast mode
[  349.797346][T20752] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  349.884420][T20769] FAULT_INJECTION: forcing a failure.
[  349.884420][T20769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  349.923657][T20769] CPU: 1 UID: 0 PID: 20769 Comm: syz.2.4194 Not tainted syzkaller #0 PREEMPT(full) 
[  349.923687][T20769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  349.923699][T20769] Call Trace:
[  349.923707][T20769]  <TASK>
[  349.923715][T20769]  dump_stack_lvl+0x189/0x250
[  349.923743][T20769]  ? __pfx____ratelimit+0x10/0x10
[  349.923768][T20769]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.923789][T20769]  ? __pfx__printk+0x10/0x10
[  349.923816][T20769]  ? rcu_is_watching+0x15/0xb0
[  349.923836][T20769]  should_fail_ex+0x414/0x560
[  349.923864][T20769]  _copy_to_user+0x31/0xb0
[  349.923886][T20769]  simple_read_from_buffer+0xe1/0x170
[  349.923914][T20769]  proc_fail_nth_read+0x1b3/0x220
[  349.923935][T20769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  349.923957][T20769]  ? rw_verify_area+0x2a6/0x4d0
[  349.923976][T20769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  349.923993][T20769]  vfs_read+0x200/0xa30
[  349.924012][T20769]  ? fdget_pos+0x247/0x320
[  349.924026][T20769]  ? __pfx___mutex_lock+0x10/0x10
[  349.924049][T20769]  ? __pfx_vfs_read+0x10/0x10
[  349.924071][T20769]  ? __fget_files+0x3a0/0x420
[  349.924093][T20769]  ? __fget_files+0x2a/0x420
[  349.924119][T20769]  ksys_read+0x145/0x250
[  349.924139][T20769]  ? __pfx_ksys_read+0x10/0x10
[  349.924164][T20769]  ? rcu_is_watching+0x15/0xb0
[  349.924180][T20769]  ? rcu_is_watching+0x15/0xb0
[  349.924195][T20769]  do_syscall_64+0xfa/0x3b0
[  349.924219][T20769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.924234][T20769]  ? clear_bhb_loop+0x60/0xb0
[  349.924250][T20769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.924265][T20769] RIP: 0033:0x7ff40db8d5fc
[  349.924280][T20769] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  349.924294][T20769] RSP: 002b:00007ff40e9a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  349.924312][T20769] RAX: ffffffffffffffda RBX: 00007ff40ddb5fa0 RCX: 00007ff40db8d5fc
[  349.924324][T20769] RDX: 000000000000000f RSI: 00007ff40e9a40a0 RDI: 0000000000000004
[  349.924334][T20769] RBP: 00007ff40e9a4090 R08: 0000000000000000 R09: 0000000000000000
[  349.924344][T20769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.924354][T20769] R13: 00007ff40ddb6038 R14: 00007ff40ddb5fa0 R15: 00007fff497cee88
[  349.924371][T20769]  </TASK>
[  350.230464][T20778] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  350.416072][T20795] tap0: tun_chr_ioctl cmd 1074025678
[  350.421554][T20795] tap0: group set to 0
[  350.558034][T20802] wg1 speed is unknown, defaulting to 1000
[  350.849155][T20822] syzkaller0: entered promiscuous mode
[  350.854956][T20822] syzkaller0: entered allmulticast mode
[  351.096490][T20841] tipc: Enabled bearer <eth:ip_vti0>, priority 0
[  351.151648][T20845] block nbd1: Unsupported socket: shutdown callout must be supported.
[  351.168448][T20844] team0: Device ip6gre2 is of different type
[  351.175838][T20846] block nbd1: Unsupported socket: shutdown callout must be supported.
[  351.612557][T20884] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20000
[  352.012658][T20921] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  352.095306][T16761] tipc: Node number set to 289270824
[  352.131934][T20936] netlink: 'syz.1.4251': attribute type 83 has an invalid length.
[  352.232232][T20949] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  352.592964][ T6568] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  352.660611][T20993] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  352.780642][T21003] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  353.009418][T21009] bridge4: entered promiscuous mode
[  353.016103][T21009] bridge4: entered allmulticast mode
[  353.618929][T21036] __nla_validate_parse: 8 callbacks suppressed
[  353.618951][T21036] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4280'.
[  353.816961][T21057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4285'.
[  353.836399][T21057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4285'.
[  353.984368][T21072] vlan3: entered allmulticast mode
[  353.992617][T21072] bond0: entered allmulticast mode
[  353.998902][T21072] bond_slave_0: entered allmulticast mode
[  354.004824][T21072] bond_slave_1: entered allmulticast mode
[  354.011481][T21072] bridge0: entered allmulticast mode
[  354.018405][T21072] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode
[  354.033128][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4290'.
[  354.049566][ T1166] tipc: Subscription rejected, illegal request
[  354.111622][T21081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4293'.
[  354.120743][T21081] netlink: 'syz.2.4293': attribute type 11 has an invalid length.
[  354.128911][T21083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4294'.
[  354.166605][T21081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4293'.
[  354.210772][T21081] netlink: 'syz.2.4293': attribute type 11 has an invalid length.
[  354.291306][T21096] netlink: 'syz.3.4300': attribute type 4 has an invalid length.
[  354.342939][T21099] netlink: 'syz.3.4300': attribute type 4 has an invalid length.
[  354.486164][T21110] netlink: 'syz.3.4305': attribute type 4 has an invalid length.
[  354.760227][T21141] netlink: 'syz.0.4313': attribute type 14 has an invalid length.
[  354.772037][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4313'.
[  354.783877][T21141] netlink: 'syz.0.4313': attribute type 14 has an invalid length.
[  354.804256][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4316'.
[  354.819221][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4316'.
[  354.830863][T21148] netlink: 'syz.3.4317': attribute type 21 has an invalid length.
[  355.409294][T21196] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  355.432969][T21196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.779463][T21223] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  356.056421][T21252] netlink: 'syz.4.4350': attribute type 1 has an invalid length.
[  356.079033][T21254] rdma_rxe: rxe_newlink: failed to add vxcan1
[  356.096010][T21252] netlink: 'syz.4.4350': attribute type 1 has an invalid length.
[  356.104687][T21256] netlink: 'syz.2.4351': attribute type 2 has an invalid length.
[  356.142257][T21259] netlink: 'syz.2.4351': attribute type 2 has an invalid length.
[  356.211035][T21261] netlink: 'syz.0.4352': attribute type 25 has an invalid length.
[  356.264358][T21264] netlink: 'syz.4.4353': attribute type 16 has an invalid length.
[  356.530444][T21290] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  356.657075][T21302] netlink: 'syz.0.4363': attribute type 1 has an invalid length.
[  356.702802][T21302] 8021q: adding VLAN 0 to HW filter on device bond3
[  356.733189][T21312] bond3: (slave gretap1): making interface the new active one
[  356.743637][T21312] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  356.758807][T21314] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  357.352869][T21328] syzkaller0: entered promiscuous mode
[  357.360230][T21328] syzkaller0: entered allmulticast mode
[  358.416452][T21408] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  358.455236][T21408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  358.752751][T21441] __nla_validate_parse: 32 callbacks suppressed
[  358.752774][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4413'.
[  358.781670][T21443] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4412'.
[  358.782332][T21444] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4414'.
[  358.832102][T21443] veth5: entered allmulticast mode
[  358.924731][T21449] netlink: 45 bytes leftover after parsing attributes in process `syz.3.4415'.
[  358.937066][T21449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4415'.
[  358.947723][T21449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4415'.
[  359.260740][T21475] batman_adv: batadv0: Adding interface: dummy0
[  359.268222][T21475] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.300355][T21475] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  359.320798][T21477] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  359.329539][T21485] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  359.374245][T21485] tipc: Started in network mode
[  359.380327][T21485] tipc: Node identity 4288e435d38c, cluster identity 4711
[  359.389014][T21485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.396821][T21477] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  359.416653][T21485] syzkaller0: entered promiscuous mode
[  359.428887][T21485] syzkaller0: entered allmulticast mode
[  359.438380][T21477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4424'.
[  359.480670][T21477] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4424'.
[  359.591163][T21504] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  359.599515][T21477] tipc: Resetting bearer <eth:syzkaller0>
[  359.634346][T21477] tipc: Disabling bearer <eth:syzkaller0>
[  359.654201][T21503] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1
[  359.670608][T21503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4432'.
[  359.683506][T21507] team0 (unregistering): Port device team_slave_0 removed
[  359.722514][T21508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4432'.
[  359.737068][T21507] team0 (unregistering): Port device team_slave_1 removed
[  359.833693][T21524] team_slave_0: entered promiscuous mode
[  359.839498][T21524] team_slave_1: entered promiscuous mode
[  359.851186][T21524] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  359.861329][T21524] team0: Device macvtap1 is already an upper device of the team interface
[  359.890591][T21524] team_slave_0: left promiscuous mode
[  359.896225][T21524] team_slave_1: left promiscuous mode
[  359.920735][T21529] validate_nla: 6 callbacks suppressed
[  359.920755][T21529] netlink: 'syz.2.4440': attribute type 6 has an invalid length.
[  359.936902][T21529] netlink: 'syz.2.4440': attribute type 5 has an invalid length.
[  360.278926][T21559] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  360.301379][T21562] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  360.441346][T21568] openvswitch: netlink: Multiple metadata blocks provided
[  360.612074][T21593] netlink: 'syz.0.4463': attribute type 1 has an invalid length.
[  360.631331][T21593] wg2: entered promiscuous mode
[  360.651779][T21593] wg2: entered allmulticast mode
[  360.786726][T21604] netlink: 'syz.0.4466': attribute type 2 has an invalid length.
[  361.848007][T21659] wg1 speed is unknown, defaulting to 1000
[  361.880066][T21649] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  362.127311][T21684] netlink: 'syz.0.4492': attribute type 4 has an invalid length.
[  362.182006][T21691] netlink: 'syz.4.4494': attribute type 1 has an invalid length.
[  362.190701][T21687] veth1_to_bond: entered allmulticast mode
[  362.310742][T21691] 8021q: adding VLAN 0 to HW filter on device bond4
[  362.377956][T21694] bond4: (slave geneve2): making interface the new active one
[  362.392645][T21694] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  362.403421][T21692] veth1_to_bond: left allmulticast mode
[  362.434901][ T6573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.449683][T21710] sctp: [Deprecated]: syz.3.4500 (pid 21710) Use of struct sctp_assoc_value in delayed_ack socket option.
[  362.449683][T21710] Use struct sctp_sack_info instead
[  362.473223][ T6573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.513214][ T6573] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.560592][ T6573] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.669336][T21727] netlink: 'syz.3.4504': attribute type 12 has an invalid length.
[  362.692067][T21729] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  362.729521][T21729] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  363.176713][T21774] netlink: 'syz.0.4516': attribute type 1 has an invalid length.
[  363.255635][T21777] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  363.268605][T21777] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.276152][T21777] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.279438][T21764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.437522][   T25] block nbd0: Possible stuck request ffff888024f00000: control (read@0,1024B). Runtime 270 seconds
[  363.440011][T21783] netlink: 'syz.0.4520': attribute type 10 has an invalid length.
[  363.448370][   T25] block nbd0: Possible stuck request ffff888024f001c0: control (read@1024,1024B). Runtime 270 seconds
[  363.448406][   T25] block nbd0: Possible stuck request ffff888024f00380: control (read@2048,1024B). Runtime 270 seconds
[  363.448431][   T25] block nbd0: Possible stuck request ffff888024f00540: control (read@3072,1024B). Runtime 270 seconds
[  363.489828][T21787] netlink: 'syz.2.4522': attribute type 2 has an invalid length.
[  363.504335][T21784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.517844][T21784] syzkaller0: entered promiscuous mode
[  363.523458][T21784] syzkaller0: entered allmulticast mode
[  363.537682][T21783] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  363.549714][T21787] team0: Port device geneve0 added
[  363.576031][T21784] tipc: Resetting bearer <eth:syzkaller0>
[  363.614636][ T1166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.658213][ T1166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.673575][T21796] IPv6: NLM_F_CREATE should be specified when creating new route
[  363.690863][ T1166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.717692][T21782] tipc: Resetting bearer <eth:syzkaller0>
[  363.753962][T21782] tipc: Disabling bearer <eth:syzkaller0>
[  363.818738][T21794] 8021q: VLANs not supported on gre0
[  363.824125][ T1166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.336909][T21852] __nla_validate_parse: 21 callbacks suppressed
[  364.336932][T21852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4543'.
[  364.469425][T21861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4547'.
[  364.479851][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4547'.
[  365.180906][T21878] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4550'.
[  365.198302][T21878] macvlan0: entered promiscuous mode
[  365.203693][T21878] macvlan0: entered allmulticast mode
[  365.369997][T21884] validate_nla: 3 callbacks suppressed
[  365.370018][T21884] netlink: 'syz.4.4554': attribute type 58 has an invalid length.
[  365.386735][T21884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4554'.
[  365.478949][T21893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4557'.
[  365.567665][T21894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4557'.
[  365.586563][T21896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4557'.
[  365.779769][T21924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4567'.
[  365.860082][T21927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4569'.
[  366.042591][T21942] bridge0: port 1(veth0_to_bridge) entered blocking state
[  366.067176][T21942] bridge0: port 1(veth0_to_bridge) entered disabled state
[  366.075795][T21942] veth0_to_bridge: entered allmulticast mode
[  366.083055][T21942] veth0_to_bridge: entered promiscuous mode
[  366.092718][T21942] bridge0: port 1(veth0_to_bridge) entered blocking state
[  366.100086][T21942] bridge0: port 1(veth0_to_bridge) entered forwarding state
[  366.386256][T21969] tipc: New replicast peer: 255.255.255.255
[  366.401287][T21969] tipc: Enabled bearer <udp:syz2>, priority 10
[  366.550698][T21978] netlink: 'syz.2.4585': attribute type 1 has an invalid length.
[  366.577001][T21980] netlink: 'syz.3.4587': attribute type 7 has an invalid length.
[  366.577755][T21978] netlink: 'syz.2.4585': attribute type 3 has an invalid length.
[  366.969797][T22004] netlink: 'syz.2.4596': attribute type 4 has an invalid length.
[  367.083041][T22012] nbd: couldn't find a device at index 2
[  367.093110][T22014] nbd: couldn't find a device at index 2
[  367.348384][T22035] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  367.370468][T22035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.435945][T16767] tipc: Node number set to 56598495
[  367.501236][T22046] netlink: 'syz.2.4609': attribute type 1 has an invalid length.
[  367.613505][T22059] 8021q: VLANs not supported on lo
[  367.621337][T22058] netlink: 'syz.2.4612': attribute type 1 has an invalid length.
[  367.696716][T22058] 8021q: adding VLAN 0 to HW filter on device bond4
[  367.763769][T22076] xt_policy: too many policy elements
[  367.870664][T22085] openvswitch: netlink: IP tunnel dst address not specified
[  367.880668][T22087] syzkaller1: entered promiscuous mode
[  367.887365][T22087] syzkaller1: entered allmulticast mode
[  368.082824][T22104] NCSI netlink: No device for ifindex 0
[  368.084717][   T30] audit: type=1107 audit(1756437424.188:4): pid=22102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  368.310613][T22125] netlink: 'syz.1.4632': attribute type 6 has an invalid length.
[  369.180366][T22167] netlink: 'syz.1.4648': attribute type 1 has an invalid length.
[  369.192415][T22167] netlink: 'syz.1.4648': attribute type 1 has an invalid length.
[  369.310608][T22177] bridge0: port 1(veth0_to_bridge) entered disabled state
[  369.622370][T22199] __nla_validate_parse: 21 callbacks suppressed
[  369.622817][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4654'.
[  370.263246][T22247] 8021q: adding VLAN 0 to HW filter on device bond3
[  370.272417][T22247] bond2: (slave bond3): making interface the new active one
[  370.286308][T22247] bond2: (slave bond3): Enslaving as an active interface with an up link
[  370.358360][T22258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4667'.
[  370.432416][T22266] validate_nla: 3 callbacks suppressed
[  370.432437][T22266] netlink: 'syz.1.4670': attribute type 4 has an invalid length.
[  370.530710][T22275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4672'.
[  370.636747][ T5863] Bluetooth: hci5: command 0x0406 tx timeout
[  370.996870][T22318] pimreg: left allmulticast mode
[  371.089963][T22323] netem: unknown loss type 0
[  371.094750][T22323] netem: change failed
[  371.189652][T22328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4692'.
[  371.492799][T22349] netlink: 'syz.2.4698': attribute type 1 has an invalid length.
[  371.508833][T22349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.540387][T22353] openvswitch: netlink: VXLAN extension 10 out of range max 1
[  371.629858][T22361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4702'.
[  371.890573][T22375] netlink: 'syz.1.4708': attribute type 4 has an invalid length.
[  371.922263][T22378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4709'.
[  371.941363][T22380] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4708'.
[  372.018498][T22386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4712'.
[  372.152375][T22401] netlink: 'syz.2.4717': attribute type 1 has an invalid length.
[  372.162681][T22401] netlink: 'syz.2.4717': attribute type 1 has an invalid length.
[  372.248086][T22408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4720'.
[  372.261449][T22408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4720'.
[  372.277863][T22408] bridge0: port 1(vlan1) entered blocking state
[  372.284294][T22408] bridge0: port 1(vlan1) entered disabled state
[  372.291287][T22408] vlan1: entered allmulticast mode
[  372.296557][T22408] bridge0: entered allmulticast mode
[  372.302754][T22408] vlan1: left allmulticast mode
[  372.308197][T22408] bridge0: left allmulticast mode
[  372.469857][T22417] can: request_module (can-proto-0) failed.
[  372.550641][T22427] veth3: entered allmulticast mode
[  372.672321][T22444] netlink: 'syz.2.4728': attribute type 26 has an invalid length.
[  372.692833][T22445] netlink: 'syz.3.4727': attribute type 16 has an invalid length.
[  372.699986][T22444] netlink: 'syz.2.4728': attribute type 26 has an invalid length.
[  372.701636][T22445] netlink: 'syz.3.4727': attribute type 17 has an invalid length.
[  372.718523][T22445] netlink: 'syz.3.4727': attribute type 27 has an invalid length.
[  372.739513][T22445] 8021q: adding VLAN 0 to HW filter on device `
[  372.749468][T22445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  372.766561][T22442] syz_tun: entered allmulticast mode
[  374.467827][T22539] netem: incorrect gi model size
[  374.472921][T22539] netem: change failed
[  374.550379][T22548] veth0: entered promiscuous mode
[  374.618251][T22547] veth0: left promiscuous mode
[  374.654452][T22551] __nla_validate_parse: 14 callbacks suppressed
[  374.654469][T22551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4760'.
[  374.708184][T22553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4761'.
[  374.746965][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4762'.
[  374.812145][T22558] team1: entered promiscuous mode
[  374.817469][T22558] team1: entered allmulticast mode
[  375.084619][T22586] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4772'.
[  375.094712][T22586] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4772'.
[  375.233319][T22594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4775'.
[  375.456638][T22610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4780'.
[  375.470354][T22610] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  375.480256][T22610] tipc: Enabled bearer <udp:s>, priority 10
[  375.613081][T22613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.632127][T22613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.690789][T22613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.713016][T22613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.755705][ T5871] Bluetooth: hci0: command 0x0c1a tx timeout
[  375.784665][T22613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.797010][T22613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.819393][T22622] netdevsim netdevsim3: Direct firmware load for /.� failed with error -2
[  375.831755][T22622] netdevsim netdevsim3: Falling back to sysfs fallback for: /.�
[  375.870372][T22613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.890368][T22613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.958496][T22624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4783'.
[  375.971797][ T6573] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  375.981115][ T6573] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.004528][ T6573] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  376.018079][ T6573] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.028621][ T6573] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  376.038959][ T6573] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.068611][   T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  376.079954][   T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.128824][T22630] unknown channel width for channel at 909000KHz?
[  376.199525][T22635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4787'.
[  376.291474][T22643] ������: renamed from vlan0
[  376.342251][T22648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4790'.
[  376.476170][ T5183] Bluetooth: hci1: command 0x0406 tx timeout
[  376.595596][T16769] tipc: Node number set to 1986047
[  377.188468][ T5183] Bluetooth: hci1: link tx timeout
[  377.194328][ T5183] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  377.302325][T22691] validate_nla: 2 callbacks suppressed
[  377.302348][T22691] netlink: 'syz.1.4800': attribute type 4 has an invalid length.
[  377.777406][T22727] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  377.839765][T22730] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  377.916628][T22737] delete_channel: no stack
[  378.123348][T22747] syzkaller1: entered promiscuous mode
[  378.143512][T22747] syzkaller1: entered allmulticast mode
[  378.213497][T22756] netlink: 'syz.4.4822': attribute type 1 has an invalid length.
[  378.253621][T22761] netlink: 'syz.3.4821': attribute type 7 has an invalid length.
[  378.270922][T22761] netlink: 'syz.3.4821': attribute type 8 has an invalid length.
[  378.468976][T22775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.474791][T22780] netlink: 'syz.2.4829': attribute type 15 has an invalid length.
[  378.478938][T22775] syzkaller0: entered promiscuous mode
[  378.490224][T22775] syzkaller0: entered allmulticast mode
[  378.524344][T22774] tipc: Resetting bearer <eth:syzkaller0>
[  378.564003][ T5183] Bluetooth: hci1: command 0x0406 tx timeout
[  378.588683][T22774] tipc: Disabling bearer <eth:syzkaller0>
[  378.614356][T22788] team0: Device gtp0 is of different type
[  378.644901][T22789] netlink: 'syz.2.4833': attribute type 8 has an invalid length.
[  378.722944][T22794] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  378.799076][    C1] ------------[ cut here ]------------
[  378.804611][    C1] ODEBUG: free active (active state 0) object: ffff8880552dc890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  378.818005][    C1] WARNING: CPU: 1 PID: 22798 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[  378.820515][T22799] netlink: 'syz.3.4836': attribute type 1 has an invalid length.
[  378.827630][    C1] Modules linked in:
[  378.827654][    C1] CPU: 1 UID: 0 PID: 22798 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  378.827678][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  378.827690][    C1] RIP: 0010:debug_print_object+0x16b/0x1e0
[  378.827721][    C1] Code: 4c 89 ff e8 97 e8 52 fd 4d 8b 0f 48 c7 c7 20 40 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 1e b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 8a d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  378.827739][    C1] RSP: 0000:ffffc90000a08a10 EFLAGS: 00010292
[  378.827756][    C1] RAX: ef9b9100e5725c00 RBX: dffffc0000000000 RCX: ffff88806018bc00
[  378.827771][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  378.827785][    C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  378.827797][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6c9770
[  378.827811][    C1] R13: ffffffff8be341a0 R14: ffff8880552dc890 R15: ffffffff8b8cdfa0
[  378.827827][    C1] FS:  0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
[  378.827843][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  378.827856][    C1] CR2: 00007f3f2d728060 CR3: 000000007d0c2000 CR4: 00000000003526f0
[  378.827876][    C1] Call Trace:
[  378.827884][    C1]  <IRQ>
[  378.827896][    C1]  debug_check_no_obj_freed+0x3a2/0x470
[  378.827924][    C1]  ? do_raw_spin_lock+0x121/0x290
[  378.827959][    C1]  ? rose_timer_expiry+0x4cb/0x600
[  378.827984][    C1]  kfree+0x112/0x440
[  378.828010][    C1]  rose_timer_expiry+0x4cb/0x600
[  378.828033][    C1]  ? call_timer_fn+0x155/0x5f0
[  378.828061][    C1]  call_timer_fn+0x17e/0x5f0
[  378.828087][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  378.828111][    C1]  ? call_timer_fn+0xbe/0x5f0
[  378.828135][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  378.828166][    C1]  ? rcu_is_watching+0x15/0xb0
[  378.828184][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  378.828209][    C1]  __run_timer_base+0x61a/0x860
[  378.828233][    C1]  ? ktime_get+0x3e/0x1f0
[  378.828260][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  378.828282][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  378.828312][    C1]  run_timer_softirq+0xb7/0x180
[  378.828335][    C1]  handle_softirqs+0x283/0x870
[  378.828356][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  378.828376][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  378.828399][    C1]  __irq_exit_rcu+0xca/0x1f0
[  378.828417][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  378.828440][    C1]  irq_exit_rcu+0x9/0x30
[  378.828457][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  378.828484][    C1]  </IRQ>
[  378.828491][    C1]  <TASK>
[  378.828498][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  378.828519][    C1] RIP: 0010:its_return_thunk+0x0/0x10
[  378.828541][    C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 6b e3 b6 f5 cc
[  378.828558][    C1] RSP: 0000:ffffc9000aa67230 EFLAGS: 00000202
[  378.828575][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ef9b9100e5725c00
[  378.828587][    C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620
[  378.828601][    C1] RBP: ffffffff8172c195 R08: 0000000000000000 R09: 0000000000000000
[  378.828614][    C1] R10: ffffc9000aa673f8 R11: ffffffff81ac3810 R12: 0000000000000002
[  378.828627][    C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000000
[  378.828642][    C1]  ? unwind_next_frame+0xa5/0x2390
[  378.828663][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  378.828691][    C1]  lock_acquire+0x5f/0x360
[  378.828719][    C1]  ? rcu_is_watching+0x15/0xb0
[  378.887096][T22802] netlink: 'syz.4.4838': attribute type 10 has an invalid length.
[  378.892061][    C1]  ? unwind_next_frame+0xa5/0x2390
[  378.892093][    C1]  ? lock_release+0x4b/0x3e0
[  378.892115][    C1]  ? unwind_next_frame+0x19ae/0x2390
[  378.892132][    C1]  ? deref_stack_reg+0x19f/0x230
[  378.892153][    C1]  ? exc_page_fault+0x76/0xf0
[  378.892178][    C1]  ? unwind_next_frame+0xa5/0x2390
[  378.892196][    C1]  unwind_next_frame+0xc2/0x2390
[  378.892217][    C1]  ? unwind_next_frame+0xa5/0x2390
[  378.902102][T22802] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  378.908236][    C1]  ? unwind_next_frame+0xa5/0x2390
[  378.908277][    C1]  ? do_user_addr_fault+0xa81/0x1390
[  378.908308][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  378.908331][    C1]  arch_stack_walk+0x11c/0x150
[  378.908358][    C1]  ? exc_page_fault+0x76/0xf0
[  378.908386][    C1]  stack_trace_save+0x9c/0xe0
[  378.908407][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  378.908434][    C1]  save_stack+0xf5/0x1f0
[  378.908460][    C1]  ? __pfx_save_stack+0x10/0x10
[  378.908482][    C1]  ? post_alloc_hook+0x240/0x2a0
[  378.908506][    C1]  ? get_page_from_freelist+0x21e4/0x22c0
[  378.908525][    C1]  ? __alloc_frozen_pages_noprof+0x181/0x370
[  378.908543][    C1]  ? alloc_pages_mpol+0x232/0x4a0
[  378.908578][    C1]  ? vma_alloc_folio_noprof+0xe4/0x200
[  378.908603][    C1]  ? folio_prealloc+0x30/0x180
[  378.908627][    C1]  ? __handle_mm_fault+0x16fd/0x5440
[  378.908650][    C1]  ? handle_mm_fault+0x40a/0x8e0
[  378.908672][    C1]  ? do_user_addr_fault+0xa81/0x1390
[  378.908699][    C1]  ? exc_page_fault+0x76/0xf0
[  378.908725][    C1]  ? bad_range+0x8b/0x2c0
[  378.908746][    C1]  ? rcu_is_watching+0x15/0xb0
[  378.908768][    C1]  __set_page_owner+0x8d/0x4a0
[  378.908793][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  378.908820][    C1]  post_alloc_hook+0x240/0x2a0
[  379.372286][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  379.377978][    C1]  ? folios_put_refs+0x560/0x640
[  379.382950][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  379.388883][    C1]  ? prepare_alloc_pages+0x213/0x610
[  379.394460][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  379.400412][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  379.406892][    C1]  ? policy_nodemask+0x27c/0x720
[  379.411881][    C1]  ? lock_release+0x4b/0x3e0
[  379.416503][    C1]  alloc_pages_mpol+0x232/0x4a0
[  379.421396][    C1]  vma_alloc_folio_noprof+0xe4/0x200
[  379.426730][    C1]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  379.432737][    C1]  ? rcu_is_watching+0x15/0xb0
[  379.437537][    C1]  ? lock_release+0x4b/0x3e0
[  379.442178][    C1]  folio_prealloc+0x30/0x180
[  379.446829][    C1]  __handle_mm_fault+0x16fd/0x5440
[  379.451964][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  379.457649][    C1]  ? lock_release+0x4b/0x3e0
[  379.462467][    C1]  ? rcu_is_watching+0x15/0xb0
[  379.467345][    C1]  ? lock_vma_under_rcu+0xdf/0x3d0
[  379.472481][    C1]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  379.478067][    C1]  handle_mm_fault+0x40a/0x8e0
[  379.482880][    C1]  do_user_addr_fault+0xa81/0x1390
[  379.488226][    C1]  ? rcu_is_watching+0x15/0xb0
[  379.493007][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  379.498457][    C1]  exc_page_fault+0x76/0xf0
[  379.503008][    C1]  asm_exc_page_fault+0x26/0x30
[  379.507892][    C1] RIP: 0033:0x7f3f2d5a6e04
[  379.512322][    C1] Code: 66 0f 1f 44 00 00 48 8b 38 8b 50 08 4c 01 ff 48 83 fa 26 74 0a 48 83 fa 08 0f 85 1b 0a 00 00 48 8b 50 10 48 83 c0 18 4c 01 fa <48> 89 17 48 39 d8 72 d4 4c 8b b1 e8 01 00 00 49 01 f0 4d 85 f6 0f
[  379.531980][    C1] RSP: 002b:00007fff8a16d5d0 EFLAGS: 00010202
[  379.538109][    C1] RAX: 00007f3f2d41ed98 RBX: 00007f3f2d448a38 RCX: 00007f3f2d788720
[  379.546248][    C1] RDX: 00007f3f2d624e15 RSI: 00007f3f2d4003c0 RDI: 00007f3f2d728060
[  379.554257][    C1] RBP: 00007f3f2d788720 R08: 0000000000048a68 R09: 00007f3f2d448e28
[  379.562301][    C1] R10: 0000000070000025 R11: 00007f3f2d4003a0 R12: 00007fff8a16d610
[  379.570439][    C1] R13: 00007fff8a16d798 R14: 00007fff8a16d730 R15: 00007f3f2d400000
[  379.578742][    C1]  </TASK>
[  379.581809][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  379.589196][    C1] CPU: 1 UID: 0 PID: 22798 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  379.598777][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  379.608956][    C1] Call Trace:
[  379.612348][    C1]  <IRQ>
[  379.615200][    C1]  dump_stack_lvl+0x99/0x250
[  379.620009][    C1]  ? __asan_memcpy+0x40/0x70
[  379.624637][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.629869][    C1]  ? __pfx__printk+0x10/0x10
[  379.634486][    C1]  vpanic+0x281/0x750
[  379.638472][    C1]  ? __pfx__printk+0x10/0x10
[  379.643073][    C1]  ? __pfx_vpanic+0x10/0x10
[  379.647684][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  379.653063][    C1]  panic+0xb9/0xc0
[  379.656872][    C1]  ? __pfx_panic+0x10/0x10
[  379.661290][    C1]  __warn+0x31b/0x4b0
[  379.665270][    C1]  ? debug_print_object+0x16b/0x1e0
[  379.670571][    C1]  ? debug_print_object+0x16b/0x1e0
[  379.675911][    C1]  report_bug+0x2be/0x4f0
[  379.680271][    C1]  ? debug_print_object+0x16b/0x1e0
[  379.685564][    C1]  ? debug_print_object+0x16b/0x1e0
[  379.690781][    C1]  ? debug_print_object+0x16d/0x1e0
[  379.695982][    C1]  handle_bug+0x84/0x160
[  379.700258][    C1]  exc_invalid_op+0x1a/0x50
[  379.704930][    C1]  asm_exc_invalid_op+0x1a/0x20
[  379.709799][    C1] RIP: 0010:debug_print_object+0x16b/0x1e0
[  379.715701][    C1] Code: 4c 89 ff e8 97 e8 52 fd 4d 8b 0f 48 c7 c7 20 40 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 1e b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 8a d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  379.735487][    C1] RSP: 0000:ffffc90000a08a10 EFLAGS: 00010292
[  379.741577][    C1] RAX: ef9b9100e5725c00 RBX: dffffc0000000000 RCX: ffff88806018bc00
[  379.749705][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  379.757776][    C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  379.765763][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffffffff8a6c9770
[  379.773752][    C1] R13: ffffffff8be341a0 R14: ffff8880552dc890 R15: ffffffff8b8cdfa0
[  379.782238][    C1]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  379.788084][    C1]  debug_check_no_obj_freed+0x3a2/0x470
[  379.793659][    C1]  ? do_raw_spin_lock+0x121/0x290
[  379.798762][    C1]  ? rose_timer_expiry+0x4cb/0x600
[  379.803997][    C1]  kfree+0x112/0x440
[  379.807919][    C1]  rose_timer_expiry+0x4cb/0x600
[  379.812863][    C1]  ? call_timer_fn+0x155/0x5f0
[  379.817635][    C1]  call_timer_fn+0x17e/0x5f0
[  379.822238][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  379.827689][    C1]  ? call_timer_fn+0xbe/0x5f0
[  379.832383][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  379.837502][    C1]  ? rcu_is_watching+0x15/0xb0
[  379.842362][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  379.847961][    C1]  __run_timer_base+0x61a/0x860
[  379.852834][    C1]  ? ktime_get+0x3e/0x1f0
[  379.857181][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  379.862828][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  379.869112][    C1]  run_timer_softirq+0xb7/0x180
[  379.873995][    C1]  handle_softirqs+0x283/0x870
[  379.878868][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  379.883663][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  379.888950][    C1]  __irq_exit_rcu+0xca/0x1f0
[  379.893544][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  379.898891][    C1]  irq_exit_rcu+0x9/0x30
[  379.903153][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  379.908894][    C1]  </IRQ>
[  379.911836][    C1]  <TASK>
[  379.914765][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  379.920786][    C1] RIP: 0010:its_return_thunk+0x0/0x10
[  379.926167][    C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 6b e3 b6 f5 cc
[  379.945967][    C1] RSP: 0000:ffffc9000aa67230 EFLAGS: 00000202
[  379.952043][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ef9b9100e5725c00
[  379.960117][    C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620
[  379.968178][    C1] RBP: ffffffff8172c195 R08: 0000000000000000 R09: 0000000000000000
[  379.976162][    C1] R10: ffffc9000aa673f8 R11: ffffffff81ac3810 R12: 0000000000000002
[  379.984236][    C1] R13: ffffffff8e139ee0 R14: 0000000000000000 R15: 0000000000000000
[  379.992329][    C1]  ? unwind_next_frame+0xa5/0x2390
[  379.997485][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  380.003660][    C1]  lock_acquire+0x5f/0x360
[  380.008114][    C1]  ? rcu_is_watching+0x15/0xb0
[  380.012888][    C1]  ? unwind_next_frame+0xa5/0x2390
[  380.018028][    C1]  ? lock_release+0x4b/0x3e0
[  380.022621][    C1]  ? unwind_next_frame+0x19ae/0x2390
[  380.027901][    C1]  ? deref_stack_reg+0x19f/0x230
[  380.032844][    C1]  ? exc_page_fault+0x76/0xf0
[  380.037518][    C1]  ? unwind_next_frame+0xa5/0x2390
[  380.042745][    C1]  unwind_next_frame+0xc2/0x2390
[  380.047709][    C1]  ? unwind_next_frame+0xa5/0x2390
[  380.052865][    C1]  ? unwind_next_frame+0xa5/0x2390
[  380.058075][    C1]  ? do_user_addr_fault+0xa81/0x1390
[  380.063379][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  380.069650][    C1]  arch_stack_walk+0x11c/0x150
[  380.074453][    C1]  ? exc_page_fault+0x76/0xf0
[  380.079273][    C1]  stack_trace_save+0x9c/0xe0
[  380.083984][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  380.089365][    C1]  save_stack+0xf5/0x1f0
[  380.093631][    C1]  ? __pfx_save_stack+0x10/0x10
[  380.098493][    C1]  ? post_alloc_hook+0x240/0x2a0
[  380.103449][    C1]  ? get_page_from_freelist+0x21e4/0x22c0
[  380.109221][    C1]  ? __alloc_frozen_pages_noprof+0x181/0x370
[  380.115223][    C1]  ? alloc_pages_mpol+0x232/0x4a0
[  380.120368][    C1]  ? vma_alloc_folio_noprof+0xe4/0x200
[  380.125945][    C1]  ? folio_prealloc+0x30/0x180
[  380.130713][    C1]  ? __handle_mm_fault+0x16fd/0x5440
[  380.136101][    C1]  ? handle_mm_fault+0x40a/0x8e0
[  380.141039][    C1]  ? do_user_addr_fault+0xa81/0x1390
[  380.146333][    C1]  ? exc_page_fault+0x76/0xf0
[  380.151024][    C1]  ? bad_range+0x8b/0x2c0
[  380.155363][    C1]  ? rcu_is_watching+0x15/0xb0
[  380.160154][    C1]  __set_page_owner+0x8d/0x4a0
[  380.164920][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  380.170290][    C1]  post_alloc_hook+0x240/0x2a0
[  380.175073][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  380.180635][    C1]  ? folios_put_refs+0x560/0x640
[  380.185599][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  380.191521][    C1]  ? prepare_alloc_pages+0x213/0x610
[  380.196918][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  380.202746][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  380.209101][    C1]  ? policy_nodemask+0x27c/0x720
[  380.214236][    C1]  ? lock_release+0x4b/0x3e0
[  380.218856][    C1]  alloc_pages_mpol+0x232/0x4a0
[  380.223729][    C1]  vma_alloc_folio_noprof+0xe4/0x200
[  380.229029][    C1]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  380.234947][    C1]  ? rcu_is_watching+0x15/0xb0
[  380.239735][    C1]  ? lock_release+0x4b/0x3e0
[  380.244367][    C1]  folio_prealloc+0x30/0x180
[  380.248985][    C1]  __handle_mm_fault+0x16fd/0x5440
[  380.254108][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  380.259671][    C1]  ? lock_release+0x4b/0x3e0
[  380.264285][    C1]  ? rcu_is_watching+0x15/0xb0
[  380.269058][    C1]  ? lock_vma_under_rcu+0xdf/0x3d0
[  380.274206][    C1]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  380.279847][    C1]  handle_mm_fault+0x40a/0x8e0
[  380.284617][    C1]  do_user_addr_fault+0xa81/0x1390
[  380.289857][    C1]  ? rcu_is_watching+0x15/0xb0
[  380.294641][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  380.300031][    C1]  exc_page_fault+0x76/0xf0
[  380.304721][    C1]  asm_exc_page_fault+0x26/0x30
[  380.309588][    C1] RIP: 0033:0x7f3f2d5a6e04
[  380.314009][    C1] Code: 66 0f 1f 44 00 00 48 8b 38 8b 50 08 4c 01 ff 48 83 fa 26 74 0a 48 83 fa 08 0f 85 1b 0a 00 00 48 8b 50 10 48 83 c0 18 4c 01 fa <48> 89 17 48 39 d8 72 d4 4c 8b b1 e8 01 00 00 49 01 f0 4d 85 f6 0f
[  380.333622][    C1] RSP: 002b:00007fff8a16d5d0 EFLAGS: 00010202
[  380.339716][    C1] RAX: 00007f3f2d41ed98 RBX: 00007f3f2d448a38 RCX: 00007f3f2d788720
[  380.347688][    C1] RDX: 00007f3f2d624e15 RSI: 00007f3f2d4003c0 RDI: 00007f3f2d728060
[  380.355667][    C1] RBP: 00007f3f2d788720 R08: 0000000000048a68 R09: 00007f3f2d448e28
[  380.363666][    C1] R10: 0000000070000025 R11: 00007f3f2d4003a0 R12: 00007fff8a16d610
[  380.371650][    C1] R13: 00007fff8a16d798 R14: 00007fff8a16d730 R15: 00007f3f2d400000
[  380.379720][    C1]  </TASK>
[  380.383095][    C1] Kernel Offset: disabled
[  380.387417][    C1] Rebooting in 86400 seconds..