last executing test programs:

2.831381732s ago: executing program 1 (id=3423):
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "01a102e9493a5d5b"}}}}}}}, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@private, @rand_addr, <r1=>0x0}, &(0x7f00000000c0)=0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x53c0a02f}]}]}], {0x14}}, 0x9c}}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x81, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50)

2.693930423s ago: executing program 1 (id=3428):
r0 = socket$inet(0x2, 0x2, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044000}, 0x844)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x480280, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x24000050)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xb})
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x84, 0x0, 0x7, 0x0, @loopback, @mcast2={0xff, 0x3}, 0x20, 0x40, 0x1, 0x3}})
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0xb, 0x5)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000240)=0x42, 0x4)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2)
socket$unix(0x1, 0x5, 0x0)

2.121464118s ago: executing program 2 (id=3436):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000700)="ce2ede98d4bde4b9a7931c4e260090a647151bacb721146be7ff4494578b050dc8c56c1571aa57d0f79d3ce5cc42977a719f4a8c88be34", 0x37}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da24c3341e27416f38e3251fe0", 0x4f}], 0x3, 0x0, 0x0, 0x4001}], 0x1, 0x48800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000001700)=ANY=[@ANYBLOB="0800080007000100000014000000450a0fbc006400000b8890780a0100feac14141a3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e100000000ecd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd18119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b75a9ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717c57aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c9eaacb5793498be490de32baba49172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19411e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb97800763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f60"], 0xfca)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
close(r4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r7 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x6180, 0x0)
writev(r7, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000002940)="59721f1223e8d1f829bfa3e27a317bdab2973149c7b70b981e5e3dbd2a155a52d656b4905bdd65efe73e0d7896bd62023c88703efa4f3caea27440771a984b72af9c1b77c769c079910affdf3a6062f4e02dab52e170341db4f21427ceff61104fb0733ad13a4eabd6", 0x69}], 0x2)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
gettid()
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20)
setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000140)=0x6, 0x4)

1.909662102s ago: executing program 0 (id=3440):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010200000000000000000a0000094400028006000340000200000c0002800500af88539e2f4bf168088014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000aa"], 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000)=0xff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000090900020073797a32000000000900010073797a30000000002c0004802800018007000100637400001c00028008000140000000130800024000000015"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='netfs_rreq\x00', r6}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f08000840000000000800034000000110140000001000010000000000000000000384000ad8fc066c6658459fc1b146f975e5bdb7d4c72262f1969a7c6ca08b9af752415a7086806c0d7172"], 0x94}}, 0x20050800)

1.896129619s ago: executing program 4 (id=3441):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x28000600)
unshare(0x24020400)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x800, 0x4)

1.85005167s ago: executing program 1 (id=3442):
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x53, 0x4, 0x7b, @private1, @mcast2={0xff, 0x5}, 0x8, 0x0, 0x40007d, 0x7f}})

1.777816431s ago: executing program 0 (id=3443):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x48051)

1.714585786s ago: executing program 1 (id=3444):
socket$isdn_base(0x22, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xa01c, 0x0, 0x9, 0x0, 0x2, 0x7fffffff}, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c000240000000000000000008000540000040000c00014000000000000004000800044000000001"], 0xc0}}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0)
unshare(0x62040200)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x100}})
shutdown(0xffffffffffffffff, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB="fffffffbffff6487a2bed3d60800460000200000000000029078ac1e0001e00000019404000093e19078ac1e0001"], 0x0)
unshare(0x24060400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x0, 0x93, 0x0, 0x0, 0x1}, 0x28)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0)

1.684094091s ago: executing program 3 (id=3445):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc005}, 0x104)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {0x0}], 0x2}, 0x0)

1.61405256s ago: executing program 4 (id=3446):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f387817d3ea8a3190bb0ba482b1fe0a41ae2e41c60772cc4c4df594be54e217521", 0x40}, {&(0x7f0000000700)="de06d7c0f63c8dcf89efd1ecec11bc5e44b55ed2ef610a4b8e0dc68d8656264f7ceab08fa652088b32e084028fea254a162e5305554212296838ae98d5decb63197b2cf60134a1b9cb080b4e851cf7faefc889dec38fec7874038c79f9f19af85fd7aea4b7ffd3fd929264013aa452020d84b2e03fb4fd5912fecf4116cf42dd65a1333afbcffd305105474f12174cc7e9a3346f1b28", 0x96}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0x1a}, {&(0x7f0000000800)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0xc1}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09a152c8eb", 0x26}], 0x5, &(0x7f0000000000)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x2e, 0x13, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x3b, 0x6}}, @generic={0x7, 0x61, "8093d6953e3cf69f8741e27308de243698099e6f9e3703cf9552657db2edc4002bff008bdf72be72e6b97dab5d4a0b91368071aca885def2fc50e3d8ed58b9b40f4a336aeefa8ba4d60e016c9f52021b41c43590eee6591dbc9305a06921cf0bea"}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x1ff}, @generic={0xf, 0x3, "21c8d5"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x98, 0x3ff, [0x0, 0x9]}}, @pad1, @enc_lim={0x4, 0x1, 0x81}, @jumbo={0xc2, 0x4, 0x7fff}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x6, 0x4, 0x0, 0xff, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x108}}], 0x3, 0x24000045)

1.613616568s ago: executing program 0 (id=3447):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="880000000314010000000000000000000900020073797a3100000000080041007278650014003300627269646765300000000000000000000900020073797a31000000000800410072786500140033006d6163766c616e392a1e5600000000000900020073797a30000000000800410001786500140033006c6f00000000"], 0x88}}, 0x20000000)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0fcf34", @ANYRES16=0x0, @ANYBLOB="11072abd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001200991e4c4501000000000000000000ac141400000000000000000000000000000000000000000014000d00200100000000000000000000000000001500000000000000"], 0x48}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r3, &(0x7f0000000f40)="ba40cdbbce875bd2d21997bf84d4ececb1ddb442e734c6b5f509f7844678ae575dc31d5f50f42aeadb3ca50d25419dc62db1fcb6f278f589b886104536e85a16945138085a8658dd828ff205af45f5e7f48bae8e56a1c6d36967d22ea682af4313a6e15848accf2ee0c5bcd581c9e5121307e1f6e2af5cfed999e61c652154eedeb4f01903748ac3a6ae1d06e7e7b56999cd37aa4d07d37cc0", 0x99)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001040)=0x1c, 0x800)
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000001080)=@hopopts={0x73, 0x14, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x48f, [0x1ff, 0xffff, 0x6, 0x6]}}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x30, {0x0, 0xa, 0xb, 0x3, [0x0, 0x0, 0x7, 0x9, 0x6]}}, @calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x4, [0x0, 0xf, 0x2, 0x7f, 0x8, 0x7, 0x0]}}]}, 0xb0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f00000000c0)=0xffff6a4b, 0x4)
unshare(0x20000400)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10)
recvmmsg(r6, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1}, 0x100}], 0x1, 0x40010000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001240)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001004048d46d2d7bbdae28e7aa177fda4723631f15cb28066e7174d45ed05433112ce542d2", @ANYRES32=0x0, @ANYBLOB="010003dd000086de00000000002d616e88f0ff0000000000"], 0x38}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003c00)=ANY=[@ANYBLOB="e00000001000090500c63703b60000000000d00008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27d08000000337c000400bf852c8986626691b01b5f44e4ce28715f2828"], 0xe0}], 0x1}, 0x0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x30020400}, 0xc, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="b8020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2b8}, 0x1, 0x0, 0x0, 0x40004}, 0x4045815)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1.54645322s ago: executing program 3 (id=3448):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x84}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x0, 0x80000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x400000007, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c)
sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000070000000001000000031e964f6e71c046a46ca072"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048884)

1.531770614s ago: executing program 4 (id=3449):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="d4000000010901040000000000000000000000000900010073797a31000000000900010073797a310000000008000340000000000c00048008000140000000000c00048008000140000000070800054000000000740002001400018008000100ffffffff08000200ac1414bb0c0002"], 0xd4}}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1, <r2=>0x0}, &(0x7f0000000100)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8b5}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000180)=""/164, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x3, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x0, 0x4, 0x0, 0x3}, {0x3, 0x2, 0x10, 0xa}, {0x5, 0x2, 0x8, 0x4}], 0x10, 0x9}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x40, @empty, 0xc3ee}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001b80)="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", 0x585}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="d4000000010901040000000000000000000000000900010073797a31000000000900010073797a310000000008000340000000000c00048008000140000000000c00048008000140000000070800054000000000740002001400018008000100ffffffff08000200ac1414bb0c0002"], 0xd4}}, 0x0) (async)
socket$kcm(0x21, 0x2, 0x2) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1}, &(0x7f0000000100)=0x14) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8b5}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000180)=""/164, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x3, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x0, 0x4, 0x0, 0x3}, {0x3, 0x2, 0x10, 0xa}, {0x5, 0x2, 0x8, 0x4}], 0x10, 0x9}, 0x94) (async)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x40, @empty, 0xc3ee}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001b80)="8a1b996248ad04f2901dccda2b508e0d94704a664bc042244743f2ec22df8cde2f0d23a80411343b64dbc6e1c4bb26d7ec951303c88c5968b260a9732271e04861c62baaf2595f0e762d79ea8e1b7be3acb08c38ef16a1b83c1c3a80fceb1cdb3cad88f0bc38ab167b1fdc4a28f12e8ea65a20512d2a1712ceae324173d0211f63d924ef505c5148338c12b2d68ceea3ea22a3431b5b627baecca4a99e719f612a2643de9b232ddc3f054d8713648736f932f40d83441630fdd76eb8d57efe793436973536e860985e33898c4c2edbfb104a80264be2a4e400b60a016e18dba5e87e900d6914854dc4001ac37b0c51bebf5846e7cccf1f4a5e2f9d6aa55dfd0cabb3e929239abca20f183c2c4662d4702379f80bb414de10278720c94825049104b0234af896a3600f78969ca7d50a6d74f3559b4ef5108e2897727ff4a67261d519362e36eabeb75d4a016e796a08092cbe22c1127b30320313cdef32a58d8fb83b48e089308091f72886ef11a2e49729edb539db2c0a9548185e4bbbca439653bc363e2b72a1fc61d6b755c4210a29fa5628ba5e47468ce57dc790fbe9b8e71819e36636f6a72fbdabf650bebd3f93ccf43eb86e605b0c75066ee487942131f98a231d224ca4b7eaf64f35fdf378cc42f0099e211e0194a166e3ecd69ad6615d93d1cdc1462ba2f6aa604dd4a8a4fedf240e6a0cfad5c2e3e1e7a6a7016550a034713567178caa987e010fbc209db319ffd5ec9d7c8e55c009b2e63de27097ba7b00ddbb7abf205ee9ce37cbc158b8e59e9252307f19922a0dd76ff16bbd62b2b6e38ac58b1065af18bcf18cbe364d3196ffca065fd1aa280447f11647ba9324c5206b6e176dc04fd0eef840c0b221ff03a193a1cc54c8d5e914a9ce9e8013a44c95b94b0f676f700ff92306e1a1302b67bfffca85db545d0a4ad9c6a5696bef25011a14bd55bcb95e6755ab77cd6498a452d37cd8afe44cf72bf33bdb997c4154e5fbf01977d72c515097d6b622c88b1adb5147395f73651c37c2061f13dca666e059fa72673520b319ba78c53ec08400d6ec2824c1d96f9a53febf7409ce252303a98e39d715c83168fb0a2e375f839542f5797d478a820737d68dba99d2e9b1350cd5fd15ed894995fe1418de80e13ba24cbf605fc0d668eb3c4fa766413675abfc67b6ccde9344d1527c42297cbbf99daf59e4d56f944d83614f89cae2011abf2365c201e0c364318d53ebb8dd0d1cd0d5804d2794486f99371e4452b7d2234e9a29452d64406b85bc7ed80bf407fae8e4af5c9d9006e28eeeca784376496295f6ea893c389f5e78c344cfae962a11e7149644ef58d0874d9afa3906869fe085dc03fd6aa60cd2e73c952072c269f68ec027fbafc0ef8b9d0c611a4d7684c25807c4e936c04a1d72fbe411480d33ce213ea140ff4cb2e74315a431ac57da68660de3d0547f8466eb12bbfe07d5c363db720aea464d1b3615f08f2c5f30e9a7b265421d343280d13d35ca0587dbc3f34f562ad691b6546c366c99ea7a3b14b2096493eb02566a36b6bfe4f4a6466644e0b7f73c79afbf7bea7954e193cab12c2e05c7e68f6ded965c3f81ed3de4e2d6075c9ff417c1e9764b6e70c48273580ef98c503f6d857e16a765f877fd375565767e1943d7577218db77273b3bbdabea84ad6fbfc14da9c3d41aac01c5740c492d9c55bb34643de6508e0bfe63d35b4b7c562b04053f29bf808d5aac5b0689407327a957c53f8f217cb5da1633170fffb0dacf8e6a20cfe9afa3ee024a79dd44c1238d9f3d93cb94f638a04e7d383334e935fcf6fcb8aa1a3def8d719544fc2c3be3e592b4a077b05926ed547b482aa85ecc8b82c1739e6ccdeba7b2f4eb4ac5f8fa9ea1919a4eb8944454dee12d42a34d49c9920bb2696e27af31d7abfe3bea9f328854c471f0bd357533eec2cc6969ee6ef1ce5241e12876f5a88b41175ff422a8830f701175246de9fa1bbf269617e2dc59", 0x585}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async)

1.28598304s ago: executing program 4 (id=3450):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001c00)=[{&(0x7f0000002000)="f8", 0x1}], 0x1, 0x9)
close(r1)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {}, 0x1}, 0x18)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000003180)=[{{&(0x7f0000000440)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f00000028c0)=[{&(0x7f00000032c0)="0f7c", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @dstopts_2292={{0x18, 0x84, 0x4, {0x11}}}], 0x30}}], 0x2, 0x4000)

1.216419114s ago: executing program 2 (id=3451):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async, rerun: 32)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x1b, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000a12100000000000000", @ANYRES32=0x0, @ANYBLOB="0008000007500500300012800b00010062726964676500002000028005001700010000000c00220006000000000000000800040081000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xb52a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x98, 0x10, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xf5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x3}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0xffffffff}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x98}, 0x1, 0x0, 0x0, 0x810}, 0xc080)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f00000004c0)=0x9b6, 0x12) (async)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r10, 0x0) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r10, 0x4000, r10}, 0x18) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="80498d9aeb2a2bb6a9bd9ae7f84a7c4502b93193d67abc4ea56d55a7199d6df45241d6886a5f5764daf129a7c9b600b8a7c3b02cad1f1666e6b9ac0203f902e62345ef6b913e0a19e138275225", 0x4d) (rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) (async)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x40, r8, 0x1ff}, 0xc) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x48, 0x0, 0x2}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8815)
sendto$inet6(r1, 0x0, 0x0, 0x40800, 0x0, 0x0)

1.061116875s ago: executing program 4 (id=3452):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000240)=0x42, 0x4)
socket$unix(0x1, 0x5, 0x0)

997.675687ms ago: executing program 2 (id=3453):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0xb, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '*\x00'}, @NFTA_COMPAT_NAME={0x9, 0x1, '\xd6#--\x00'}]}, 0x40}}, 0x800)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)="9ef71141967921b10c1b221db9477886", 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), r2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x13)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', <r5=>0x0, 0x7, 0xcf, 0xffffffff, 0x6, {{0x21, 0x4, 0x1, 0x3a, 0x84, 0x65, 0x0, 0x2, 0x4, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x8, 0x22, 0x0, 0x0, [0xb]}, @timestamp={0x44, 0xc, 0x9c, 0x0, 0x5, [0xca, 0x0]}, @end, @rr={0x7, 0x7, 0xb6, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xe4, 0x1, 0xa, [{@multicast1, 0x1}, {@multicast1, 0x8}, {@loopback}]}, @timestamp_prespec={0x44, 0x34, 0x87, 0x3, 0x2, [{@multicast2, 0x5}, {@multicast2, 0x3}, {@local, 0x1}, {@loopback, 0x10000}, {@loopback, 0x7ff}, {@broadcast, 0x1}]}, @end]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'gre0\x00', &(0x7f00000005c0)={'gretap0\x00', <r7=>0x0, 0x7800, 0x8, 0x6, 0x96c, {{0x29, 0x4, 0x2, 0x7, 0xa4, 0x68, 0x0, 0xf, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0xf2, 0x0, 0xd, [0xddbc, 0xd, 0x3, 0xf1]}, @rr={0x7, 0x2b, 0x49, [@private=0xa010101, @rand_addr=0x64010100, @multicast2, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x3c, 0x1a, 0x3, 0xf, [{@rand_addr=0x64010102, 0x800}, {@empty, 0x6}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010101, 0xd98}, {@multicast2, 0x81}]}, @end, @lsrr={0x83, 0xf, 0xda, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000700)={'sit0\x00', <r8=>0x0, 0x7800, 0x7, 0x5, 0x8, {{0x36, 0x4, 0x2, 0x2a, 0xd8, 0x64, 0x0, 0x8, 0x2b, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0xb8, 0x3, 0x1, [{@local, 0x4}, {@loopback, 0x4}]}, @cipso={0x86, 0x56, 0xffffffffffffffff, [{0x0, 0x8, "6ef5d2592710"}, {0x2, 0xa, "1006c8d1c00165e8"}, {0x1, 0x8, "ea1ca5f1b3fa"}, {0x7, 0x5, "05444e"}, {0x4, 0xf, "9cff29808a1b0acfd07958136a"}, {0x5, 0x10, "706b6b647a6b7ea66e1d104c505f"}, {0x1, 0x12, "6fa5e74a98bfcbb67b7f497e268d1be2"}]}, @timestamp_prespec={0x44, 0x44, 0x2f, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@remote, 0x7ff}, {@loopback, 0xc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast2, 0x9}, {@multicast2, 0x80000000}, {@loopback, 0x9}, {@private=0xa010101, 0x8}]}, @generic={0x89, 0x4, "045b"}, @timestamp={0x44, 0x10, 0x4a, 0x0, 0x4, [0x101, 0xfffffe00, 0x7ee]}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000940)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xb0, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x440c1}, 0x44041)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x15, &(0x7f0000000980)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xbed}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000a40)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x61, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x4, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r9, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0], 0x0, 0x6a, &(0x7f0000000d00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x28, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r2)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r10, 0x10, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x1)
sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0xab}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7f}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r11 = socket(0x1, 0x4, 0x7fff)
getsockopt$inet6_tcp_buf(r11, 0x6, 0x1c, &(0x7f0000001180)=""/156, &(0x7f0000001240)=0x9c)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x34, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x34}}, 0x4000004)
r12 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000001380), 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000001500)={'syztnl1\x00', &(0x7f00000013c0)={'tunl0\x00', r7, 0x7800, 0x7, 0x0, 0x3ff, {{0x47, 0x4, 0x1, 0xf, 0x11c, 0x67, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @loopback, {[@ssrr={0x89, 0x7, 0x6e, [@broadcast]}, @lsrr={0x83, 0x3, 0x22}, @rr={0x7, 0x1f, 0x14, [@multicast1, @local, @rand_addr=0x64010102, @remote, @remote, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xa6, 0x1, 0x5, [{@empty, 0x3}, {@remote, 0x5}, {@rand_addr=0x64010101, 0x80000000}]}, @rr={0x7, 0xf, 0xa9, [@rand_addr=0x64010101, @multicast2, @private=0xa010100]}, @generic={0x94, 0x8, "2c2d13e98002"}, @rr={0x7, 0x2b, 0x1b, [@local, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x44}, @remote, @private=0xa010100, @local, @broadcast, @private=0xa010101, @private=0xa010101]}, @lsrr={0x83, 0x1b, 0x51, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x15}]}, @ssrr={0x89, 0xf, 0x68, [@multicast2, @rand_addr=0x64010100, @remote]}, @timestamp_addr={0x44, 0x54, 0x4e, 0x1, 0x2, [{@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@multicast2, 0x3}, {@multicast2, 0x7fffffff}, {@multicast2, 0xfffffffc}, {@broadcast, 0x100}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x300000}, {@empty, 0x7}]}]}}}}})
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000001540)='wg0\x00', 0x4)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001580)=@in6={0xa, 0x4e20, 0x8, @private0, 0x400}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000015c0)="30e8f4e0310748732d9349c9629affabb212bfbd133fc727eb315d936fc3cdfe34591447fc03c1abebbe753be630341dc080c607c8e5115dada4cf9f78adcd5aaa034c15c9e73615a776bd366214bcdf4277fbc17ed00892cec99a3e1183598ea05595dfd8089c846b610422773280e90382e9b7c485671e8d4c532df499f427f745c6b8070e656acba4d3a9f692169d63c72ff9e333c0a7b6035c521ff7177541ac50145eb11dfd356058cc0d431ad6f22433825fbb5b85fa1ef7890e14241c65b54a7a480bd26f3d24ba0b9aaa4da79eb8d7", 0xd3}, {&(0x7f00000016c0)}, {&(0x7f0000001700)="3f12051385092ba3596328589d843a65d2df2d45176a993df82aa2165efb057d59ae9d", 0x23}, {&(0x7f0000001740)="67d6eb05b8283406d9f6ca2ca4562a310c9be8c969b738f41e9eefb70754ac6dfe7a8894caeca104456f380e5e5c5bfe9ad7fa80a83e8de20a231e3b62a7b40713cc", 0x42}, {&(0x7f00000017c0)="46f51225462da791c32e19e27cd77f866d73ba786269ac017e2e01bf8d588f08d55d9d3c514ca67369c751dea71d4bd1496c217cb1c3933889ff27dc8b35a0e1e52226442758292e37ba093f072fb0c800d4c8c6bd2b4a8f78f135144217cf8cd27b1088d66520574f1be55b65fe7875f405a0fa6f0a096e38bff951e2f19cdd082ec7f2240f47297b3d75565828fd61ec159aef9b3ce8531e9118b7cf93c07790ab71f0c3cbc181c35aba5d7c769bb638050f272b1af46fcc6fb87be3c74a6f4819a994833dbb12cb1c160a2c496cc954a249fbfd427471ddb6def0a6cc606ffa31db8000b83490d8218f09ae2a89827432310cc5993a386d9c4b", 0xfb}, {&(0x7f00000018c0)="5caf1e394a139f1d2e4b152c6630", 0xe}, {&(0x7f0000001900)="cdc3e97b24b1bfa82a77d8024aca70b7b08eb5e7e80bab330e9b7dd9b4d24c16a2489c84896eaee0153636c68537bc6448d40b180d3a26fe7a68be1de85d513c69c7f77fd3e9f6f8a1dc0515b342534579af36e9703c7a61aca334d1788b3ed94d5cda0edf5171a432dba9aa85b1fadd507e908a0b5c742c80a1b9a8fcd4cba86162704c543f783d3bc26f656d9c1ee1046f518065946fe5dfe5342f7b7efe8da3aa505328f31f1ee079", 0xaa}, {&(0x7f00000019c0)="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", 0xfb}, {&(0x7f0000001ac0)="4872934e8a5f1fbbd8298d14776efc5e3635fa82427f000750724f", 0x1b}, {&(0x7f0000001b00)="c1ac38279c3df452d8f295c3b2faa442079c4691a4bcd8b0ca6f15adc3080b", 0x1f}], 0xa, &(0x7f0000001c00)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0xfffff3fa}}], 0x18, 0x4004004}, 0x4000)
getpid()

895.924641ms ago: executing program 4 (id=3454):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r2, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f00000002c0)=0x48, 0x800)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x62040200)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0)

806.953673ms ago: executing program 1 (id=3455):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0xff}, 0x32})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1a, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd35}}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @generic={0x40, 0x5, 0x4, 0x1fc, 0x80200001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xfef, &(0x7f0000000cc0)=""/4079, 0x41100, 0x40}, 0x94)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=@newchain={0x454, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xb, 0xffff}, {0xb, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x428, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x410, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x280000}, @TCA_POLICE_RATE={0x404, 0x2, [0x1fe, 0x80, 0x9, 0x1, 0xce, 0x5, 0xbf1a, 0x80000000, 0xf6b, 0x0, 0x7, 0x7, 0x0, 0x2, 0x4, 0x8, 0x9, 0x1, 0x7, 0x2, 0x9, 0x4, 0x0, 0xc67, 0x80000000, 0x4, 0x5, 0xffffffff, 0x1, 0x0, 0x3, 0x80000001, 0x3, 0x2, 0x10, 0x5, 0x9, 0x3, 0x3, 0x10001, 0x9, 0x4, 0x5, 0x0, 0x7, 0x40, 0xffff7fff, 0xb5, 0xff, 0x7db, 0x4, 0x7a, 0x7fff, 0x7fffffff, 0xffffffff, 0x9, 0x4, 0x5, 0x0, 0x7, 0x7, 0x0, 0x8, 0x1, 0x2d2a, 0x3, 0x6, 0x6, 0x5, 0x200, 0x7fff, 0x5, 0xffff8001, 0x74, 0x2, 0x0, 0x101, 0xa00, 0xf, 0xf03, 0xc53, 0x7, 0x2, 0x4, 0x7, 0x9c0f, 0x0, 0x6, 0x2, 0x4, 0x10000, 0xe9, 0x3, 0x7, 0x6f1, 0x9, 0x140, 0x5, 0x0, 0x6, 0x5, 0x3, 0x9, 0x1000, 0x3, 0x3, 0xffff, 0x1, 0x3, 0x580, 0xfffffffa, 0xffffffc0, 0x2, 0x80000000, 0x1ff, 0xd, 0x3, 0x800, 0x9, 0xfffffff2, 0x7, 0xe, 0x8, 0x3, 0xfffffff8, 0xcc, 0x5, 0x4, 0x4, 0x6, 0x4, 0x5, 0x4, 0x0, 0x3e, 0xfffffff8, 0x45d, 0x8, 0x3f3898ed, 0x2, 0x8, 0x3, 0x1, 0x1, 0x6, 0xffffff62, 0xfffffffc, 0x4c72, 0x7, 0x5, 0x9, 0xfffffbf5, 0xa4, 0x101, 0x9, 0x1, 0x7, 0x38, 0x8, 0x401, 0x5, 0x2, 0x7, 0x0, 0x3, 0x6, 0x1ff, 0x2, 0x6, 0x2, 0x3, 0x8, 0x7, 0x9, 0x7, 0x0, 0x6b, 0x7, 0x5, 0xb, 0x1ff, 0xe00000, 0x6, 0x9, 0x6, 0x3, 0x81, 0x5, 0x1, 0x401, 0x9, 0x6, 0x804, 0xfffffff9, 0x4, 0x3ff, 0x2017, 0x82, 0x5, 0x9c64, 0x623, 0x4, 0xe, 0x6, 0x2, 0x0, 0x593, 0x4, 0x7, 0x4, 0x4f2eb6dd, 0x7fffffff, 0x3ff, 0x401, 0x4, 0x0, 0x22d, 0x1, 0x4d17, 0x7, 0x3, 0x4, 0x6da, 0x7, 0x1, 0xb400000, 0x4, 0x9, 0x800, 0x4, 0x2, 0x4, 0x7, 0x6, 0x5, 0x2, 0x3ff, 0xffffff7f, 0x5, 0x0, 0x3, 0x2, 0x6, 0x80000001, 0x7, 0x3b5, 0x400, 0x7, 0x0, 0x2, 0x8, 0x400, 0xbbc2, 0x3, 0x2, 0x2]}]}]}}]}, 0x454}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000007000000890704"], 0x18}}], 0x1, 0x4880)

732.854441ms ago: executing program 0 (id=3456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801}, 0x94)

629.772036ms ago: executing program 2 (id=3457):
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000009199f21a077ebbf26bd57dee9dc935cc36ddfaee7e8e3c83eae166ed9483d993e3d118eab21125323ead016d9b3ca2728e6f1a43620056af9717183eaedadff05e36e7cfdea204e08e876052d3efc81803ba851324"], 0xb)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x184, r2, 0xf12, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x44}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x4}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xbd7}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8a}]}, @NL80211_ATTR_IE={0x134, 0x2a, [@preq={0x82, 0x36, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0xd, 0xe, 0x0, @device_a, 0x3, @value=@broadcast, 0x7, 0x3, 0x2, [{{0x1, 0x0, 0x1}, @device_a, 0xb9}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}, @channel_switch={0x25, 0x3, {0x0, 0xb7, 0xfc}}, @mic={0x8c, 0x18, {0x9be, "604abfcb8dfe", @long="8ed2b8c335ba7e30dc58a3ac83d1542c"}}, @gcr_ga={0xbd, 0x6, @device_b}, @tim={0x5, 0xcf, {0x46, 0x7a, 0xa, "f50f5c7b9bef715ae4027f10fc444ff2c00694abe132e10a3ac23e3fef12bbefbd808bb2cba931228533864fa7b7a90f66d8582fda2ba40247dc6d349e296a484e7a36246d8a6c42ee305a0033a7d783b7815594fea506e442b5fb3182eae3261029b2543cf7a9e01d237c51d497c497d061e842060ca348e2a43b6edc86a1a7bc0b258d92782c35144111dbf46e4a9da3440c5ff5d5e222c22bdc6e5d43bd9e4cef3158677efdb8696ab1d15cf6a8581028d30ca771a0937faec713cab32fa7aa9a8809028dedfdfc7f9bb4"}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="016f0800010027000000140000004600003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400050200000000000004000002d58838068b91000000c701e3cb2fb96d17f46603f8ee82f0c815f201b917a87bb0adc32a980000529dcf"], 0xfd6c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r9, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)

607.387555ms ago: executing program 0 (id=3458):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8951, &(0x7f0000000000)={0xa, 0xffdc, 0x0, @mcast1, 0xfffffffc}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
readv(r2, &(0x7f0000000080)=[{&(0x7f0000000200)=""/245, 0xf5}], 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4)
sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x48001)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0)
ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000100)=0x1)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000000c0)=0x1cd, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
shutdown(r0, 0x1)

555.660994ms ago: executing program 1 (id=3459):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x5, 0x0, 0xfe, 0xfffff00c}, {0x9, 0x0, 0x1, 0x8000000}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

547.035031ms ago: executing program 3 (id=3460):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket(0x11, 0x800000003, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000bc0)}, {&(0x7f0000000c00)="2e308a929d75993fa8ba04055f51d213222111d5858db40f005d92b3530dbfc61e98d09defd32a2c99240dcab6ae145a9c46a1d7b29f6d1f3ba74af039ffbcd933ae436a6eedb7730844af457af649d6bccdef3d5929f1bea6b478819a7648149b635fdf9489dd27b394520f583ffeff3b093929a9caa2f76622a66194bca463c9dfb9f1a4fb31b973d4c270015cb111f0c2ff7574df6e277c924f15251f883ed7c4efb5ee29936fe9eeeaabee9d341c01f9901a381fde24c5e51e3978812d22555ce94726f3fc74a08f0dcd2b5a8f7464ffb85ad1eb18d8deec5c1856bebb7d4f38b245b80d5085f19d7489b88feaec994a4ae3e02311d1", 0xf8}, {&(0x7f0000002040)="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", 0x480}], 0x3, &(0x7f0000000fc0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x87, 0x6, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x6, [0xffff, 0x5]}}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x78}}], 0x1, 0x4040005)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000107000004416f1800000a0000000c0002006e6c383032313100"], 0x20}}, 0x0)

366.618343ms ago: executing program 0 (id=3461):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x118)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)={0x60, r5, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x5, 0x1, r3}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000080)=@caif=@util={0x25, "75adcbd148733d933ec540ece258ec22"}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000100)="87eae8e51c7af4f9daf0caac2cdebcdffaa2b6dbb3e8a8b77a4a1464a4442ad797045f896ac48055ee1a3fca0de6f5182237d2a0fcbcdcb2", 0x38}, {&(0x7f0000000240)="00aa3e29bbc02b4f6ff4427628af470be288c0539893ed515bc54a25cb3878f568b8afe17f6b540c4b27b332dd213daa8ef0ecf3910fa411979abe0819be46d69f4f26626e1e081431105a4b7dbee602a106edda1308c7e8649ac770758b3dc1cb2b2040e0154e1b52660d73801e16edca294b258e7d7cfcff6e06d307afb51ff4d2016c53fe377f5d80cd760a", 0x8d}, {&(0x7f0000000300)="6b14d1ef0f70f2394401d67c60b079f5e435132e347e4992047e8d3709beed18940c92b459533dbb23103bf409fafdd3d427cb427f46f0fd7b983e3553c0b8226090fe3e68ceeb13a129ebf74cbb2884a0bf3ca6fc47c63897638f0506474c3d1ed0e890b2917fa3bc518c3d75a24c393f6fe0905104a5502d6f576a8a7622b8ac86b7051e9fa813d788bf78e847268d888f1b8ff392ad7973825ccdabbeaff73376de80830306983fc061434c7b66d447fd4b0c1cffd04ca8c387bd8e7e8d8da5d85e83f364fcb7c63904bf4178ae64fec6fc4d3ac9f832b5ca8e5783d495bfd5a73ac81cebeef79fd98c", 0xeb}, {&(0x7f0000000400)="8538a53d17d8597251adbb4a1956cebb1287db1690729105ce90278eb89acfc7384335310fc2a6b6a0b614af544a2882a5fabd55fd45bb1014e2556822261706ded65f4481e1185650330162c128aca738338ad56b27579b4e2949f66286f3a4d2ed95277adf7c3add7240e1baedc73ff7022301c77d4af4bbfeef9ba45a5aad3a0f5b361ccf82a34376926aba7cc6e2a4c1e70b4128048e97e3156e5b39c3779879e866def08c09888d2f517db953d911d3ba664bfa8a9648882d5b2a1347f5d2149c77a0b618886290030340b63267bb31e22df3632f54d1704964a03950500b8d37e4021a441eb46bac08b02c6f88", 0xf0}, {&(0x7f0000000500)="bf1a94e0271a53f7fff05990fccafd788489b93471f8391f520c691f309b14289231a9e7fe83e848795233141591b1d60179ff919a19ffa081d93658b5c9da49220b23cb6d9e0551db1fc9d666437126de95de5b092b664962dca3442df3a9ffab690f5e945250a20836c8d761c62c068c42bf268e1aaba9166d6c3f29903d01671689506f732274165e1b9d4034dc373730fcfb9386c07c7cd2ae1847c6ce1beeeb7522bf5e6687cd5ec376c4b578e9b24dc06ff58c137b54a4affa7b9af909e6a547be781c29b61a49ca757c5eb293f70d474251cedfebbc61315a9332f1e484075347982c1ee29041b5597e", 0xed}, {&(0x7f0000000600)="c3bd4468d4a4ffdfa0cf2aaf7308b814efe920b9ec318bf46c81987395160b1f084e0e268ea18ed553cc9b1740f3fd7356050dbd3a0a37f9809658e58605e212739e4da8b74b2baccf36e1b2a1a3368a35856c648d52df38a4411bae061ac8a1457046ecc39f54d0df32a39e6b25191961a7b2ca4901ca40d561cf93ca6598e71783c381b0420d9abc5e0484eae8a24397fed3c4f41f413a62b03c33786dc66f", 0xa0}, {&(0x7f00000006c0)="40f12688d1c860879d433bf231357deb0c0f75dc289fa3eab4f71e26129dcf04cc73f360c848f60a6aaef8404e55daa45bbd1ed50adeda9853cd682f2084c622819beb5c0b710710096c7e82b35a74573cfe4fbd7b9017bcde94a28e2801538af68a0ebf899c0c0798fe408805e2ecc1d3ffb8ba6e3bda92a148ecf11ff3df7529427961dd7226d5728569d0726a03d9a46f16ceea00661490ea548f75140d1e951fcb0d3b3937c8c0a0b7e80f05d7cea17a2895904c098732be2fda", 0xbc}, {&(0x7f0000000780)="c98b18f9fee8e9d1b0a432960787bcda506d07179754c039c39f68689d9ea21bdb24c283201d4d3e80002ede8e2b18c16ac105998b87edf0731a159bbfa4bc968f6eddf3bfc3139809f2fd53b7e97b", 0x4f}], 0x8, &(0x7f0000000880)=[{0xc8, 0x104, 0x2, "61d0c713d8f53876be3e0542e817a7a11ed17cac2e991ec39668fe11cd6c31dafecc901400337669c8ec774b1ac1e40a6a96370d1691f5be5f73698ca5503e48b6b9e35770ebc3becb3a4e3f2f03a562be7c1377764a55f1958ce85f82cc4e76293b53a35bb65f13340e13ead50e3c41f5d7c43a9dee466b307b263d9b51d037fcc77fb2462a734f028b4b31c1a8c3db39137d6754b6c13ead9d7cef9147619b58abcd493fa3467a08356077b9fa3b7744c904ad"}, {0x58, 0x115, 0x1, "ba3eb60fd6ca01de0e95eceb205b51039365dcf4a3afd8162efa7da0b4a624070611f001ca666a220d30455bbecfa214bd4c25f42929fa1dc0bd2c64042f470f0cc6f5fc59c1"}, {0xd8, 0x113, 0xe52f, "7779de22f603b7949fd4d6b27d408835543f2ededc2c5e52c60395b855d31e95cb64d8f552b8a32b9cb37f932faa7a7bc0f34e08b87d8f27d4f029e98c307aeb36cf6380609fe76bde38f32722cb755b4c1843e93db5badd82f3c931c48ec57e16f7fe19d5351d12e8ab3ea2776c62799ee6bb39d9a376a183364608d052eb573cd7ef447931ca93a20710554a52033a67075edfc580c749aa84888f88e9a13b978e1c3f5b00e94410f31901e62c9637a97ad74b301e8060913ff4cab08bb02113af"}], 0x1f8}, 0x8085)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040))
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)

366.172761ms ago: executing program 3 (id=3462):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r4, &(0x7f00000000c0), 0x12)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x89}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x90, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x90}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

121.991007ms ago: executing program 3 (id=3463):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xa000000000000}, 0x18)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=<r1=>0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, r0, 0x0, 0xa, &(0x7f0000000040)='\x00\xe2\x88d\x00\x00\n\x00\x00\x80'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)

119.104007ms ago: executing program 2 (id=3464):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
r2 = socket(0x10, 0x80003, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x10b}]}}]}, 0x40}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080088000a00", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x8, 0xffff}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x0)
syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0017010000000000000000000000000000ff0200000000000000000000000000010004c9101a"], 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)

28.121421ms ago: executing program 3 (id=3465):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018e20000000000003000000030000000020000000000000000000006040000000000000001000005fdffffff0000000003000000000000000000000000000009010000000000"], 0x0, 0x4a, 0x0, 0x1}, 0x28)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x410, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x10)

0s ago: executing program 2 (id=3466):
socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x8, 0x1, 0x3}}}}}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x7, 0x0, 0x0, 0x2}, {0x8000000, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002c000480059ab0c0ff244fa4cb000300020000000500030001000000050003000100000005000300020000000800020002000000c392a417fdd61df63970de477cdedf8216b095e4b2e20e0ad5496d06110f88104ca6ce2e93e58ba9655452549e0b5f23736442578810ecc0da3e7f2a768439f6cfe2dc4e8334f7731c628c173405cfcf82a35dc33c87b87438b2745d06d9b7d8a506c0cc2ed2bb44d536af225c7a77819582"], 0x50}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x28c, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x180, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79343676}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36799caa}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77e3ebcc}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7180bfe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c9d1207}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c908d22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fc15162}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x162e6be7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61e05401}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6350cfa9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a7f4c77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e1afd9a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x297ddaf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71a62541}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13c0d46a}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51b393dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x728f9dd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x605d2194}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21c2fb06}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xad0658a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f5ff07c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15cfdb7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e208114}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36637854}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37a14896}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58e1642a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11079c85}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x734c75ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x364a7f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x482cc3aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4739ac8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x741d}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ee8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a4c5aff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x784a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x68c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc0a8f71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x955e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e34}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eb91b2f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x83fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2de43fce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcaf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79b533e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x24040095}, 0x4080)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x880}, 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x68, r6, 0x8, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0xffffffffffffff75, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x9}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$inet6(0xa, 0x2, 0x0)

kernel console output (not intermixed with test programs):

2234'.
[  234.687198][T14078] lo speed is unknown, defaulting to 1000
[  234.694226][T14078] lo speed is unknown, defaulting to 1000
[  234.723335][T14075] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.742436][T14075] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.775343][T14083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.788738][T14075] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.799914][T14075] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.815580][T14099] sctp: [Deprecated]: syz.4.2235 (pid 14099) Use of struct sctp_assoc_value in delayed_ack socket option.
[  234.815580][T14099] Use struct sctp_sack_info instead
[  234.857410][T14075] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.868207][T14075] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.958320][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'.
[  234.967786][T14113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2238'.
[  235.019928][  T181] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  235.032126][  T181] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.053096][  T181] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  235.067786][  T181] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.089553][  T181] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  235.098058][  T181] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.119108][  T181] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  235.137459][  T181] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.181335][T14124] netlink: 'syz.2.2241': attribute type 21 has an invalid length.
[  235.189987][T14124] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2241'.
[  235.202480][T14124] netlink: 'syz.2.2241': attribute type 4 has an invalid length.
[  235.210576][T14124] netlink: 'syz.2.2241': attribute type 5 has an invalid length.
[  235.219009][T14124] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2241'.
[  235.231646][T14125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.241204][T14125] syzkaller0: entered promiscuous mode
[  235.248104][T14125] syzkaller0: entered allmulticast mode
[  235.291357][T14129] netlink: 'syz.4.2244': attribute type 1 has an invalid length.
[  235.299946][T14129] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2244'.
[  235.311458][T14125] tipc: Resetting bearer <eth:syzkaller0>
[  235.407465][T14131] sit0: left promiscuous mode
[  235.481439][T14131] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  235.502196][T14131] macsec1: left promiscuous mode
[  235.519270][T14131] macsec1: left allmulticast mode
[  235.580991][T14131] bond6: left promiscuous mode
[  235.600406][T14131] batadv1: left promiscuous mode
[  235.621795][T14131] batadv1: left allmulticast mode
[  235.643193][T14131] bridge8: left promiscuous mode
[  235.781038][T14148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.919037][T14147] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  235.936090][T14147] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  236.009064][T14119] tipc: Resetting bearer <eth:syzkaller0>
[  236.050490][T14119] tipc: Disabling bearer <eth:syzkaller0>
[  236.090698][T14141] lo speed is unknown, defaulting to 1000
[  236.123710][T14143] lo speed is unknown, defaulting to 1000
[  236.150604][T14143] lo speed is unknown, defaulting to 1000
[  236.194105][T14141] lo speed is unknown, defaulting to 1000
[  236.681536][T14186] netlink: 'syz.4.2260': attribute type 21 has an invalid length.
[  237.027263][T14197] netlink: 508 bytes leftover after parsing attributes in process `syz.3.2264'.
[  237.733534][T14243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2276'.
[  237.747385][T14243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2276'.
[  237.772933][T14246] syzkaller0: entered promiscuous mode
[  237.779747][T14246] syzkaller0: entered allmulticast mode
[  237.791640][T14245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.822626][T14246] tipc: Resetting bearer <eth:syzkaller0>
[  237.835619][T14246] tipc: Disabling bearer <eth:syzkaller0>
[  237.940829][T14257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2281'.
[  238.193737][T14280] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  238.208727][T14269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  238.820076][T14305] netlink: 'syz.4.2295': attribute type 1 has an invalid length.
[  239.172207][T14322] pim6reg: entered allmulticast mode
[  239.648031][T14334] __nla_validate_parse: 4 callbacks suppressed
[  239.648055][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2303'.
[  239.696899][T14337] netlink: 'syz.3.2304': attribute type 1 has an invalid length.
[  239.707812][T14337] netlink: 'syz.3.2304': attribute type 2 has an invalid length.
[  239.774860][T14340] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2304'.
[  239.798239][T14340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2304'.
[  239.805751][T14342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2305'.
[  239.809930][T14340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2304'.
[  239.828004][T14340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2304'.
[  239.890896][T14320] pim6reg: left allmulticast mode
[  240.081518][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2308'.
[  240.094640][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2308'.
[  240.211636][T14371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2312'.
[  240.214627][T14369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2313'.
[  240.348605][T14379] tipc: New replicast peer: 208.253.78.183
[  240.357576][T14379] tipc: Enabled bearer <udp:s>, priority 26
[  241.019439][T14436] netlink: 'syz.3.2337': attribute type 1 has an invalid length.
[  241.037866][T14436] 8021q: adding VLAN 0 to HW filter on device bond7
[  241.218027][T14455] IPVS: length: 209 != 3672
[  241.223878][T14455] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  241.320787][T14463] lo speed is unknown, defaulting to 1000
[  241.334502][T14463] lo speed is unknown, defaulting to 1000
[  241.463332][T14471] macvlan2: entered promiscuous mode
[  241.469872][T14471] macvlan2: entered allmulticast mode
[  241.475386][    T9] tipc: Node number set to 2886997162
[  241.482884][T14471] bond8: (slave macvlan2): Opening slave failed
[  241.511436][T14475] netlink: 'syz.3.2350': attribute type 1 has an invalid length.
[  241.691962][T14493] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  241.956347][T14508] netlink: 'syz.1.2362': attribute type 3 has an invalid length.
[  241.979785][  T181] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  242.002711][T14519] Ã: (slave dummy0): Releasing backup interface
[  242.020777][T14524] netlink: 'syz.3.2367': attribute type 8 has an invalid length.
[  242.363298][T14534] openvswitch: netlink: IP tunnel dst address not specified
[  242.566212][T14536] lo speed is unknown, defaulting to 1000
[  242.586971][T14536] lo speed is unknown, defaulting to 1000
[  242.705571][T14540] 8021q: adding VLAN 0 to HW filter on device team0
[  242.724346][T14540] bridge0: port 2(dummy0) entered blocking state
[  242.730869][T14540] bridge0: port 2(dummy0) entered forwarding state
[  242.868452][T14540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.951690][ T9303] lo speed is unknown, defaulting to 1000
[  242.958048][ T9303] syz1: Port: 1 Link ACTIVE
[  243.126579][T14567] lo speed is unknown, defaulting to 1000
[  243.133270][T14567] lo speed is unknown, defaulting to 1000
[  243.148458][T14572] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  243.212498][T14576] netlink: 'syz.3.2381': attribute type 3 has an invalid length.
[  243.283467][T14578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  243.442241][T14594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.459564][T14594] bridge0: port 2(dummy0) entered disabled state
[  243.511533][T14575] lo speed is unknown, defaulting to 1000
[  243.523084][T14575] lo speed is unknown, defaulting to 1000
[  243.972166][T14616] netlink: 'syz.4.2392': attribute type 10 has an invalid length.
[  244.554445][   T30] audit: type=1800 audit(1756504736.318:8): pid=14632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2396" name="memory.events" dev="tmpfs" ino=2400 res=0 errno=0
[  244.784685][T14641] __nla_validate_parse: 20 callbacks suppressed
[  244.784707][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'.
[  244.844104][T14642] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2399'.
[  245.103113][T14657] netlink: 'syz.4.2405': attribute type 2 has an invalid length.
[  245.114173][T14655] netlink: 'syz.2.2404': attribute type 1 has an invalid length.
[  245.119651][T14657] k›*·]‘: entered promiscuous mode
[  245.143931][T14655] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2404'.
[  245.521808][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2412'.
[  245.543883][T14686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2412'.
[  245.553661][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2412'.
[  245.916557][T14705] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  246.446903][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2426'.
[  246.462231][T14725] netlink: 'syz.3.2426': attribute type 21 has an invalid length.
[  246.598374][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2430'.
[  246.679058][T14749] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2434'.
[  246.718624][T14748] openvswitch: netlink: Flow actions attr not present in new flow.
[  246.737647][T14748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2435'.
[  246.908014][T14765] lo speed is unknown, defaulting to 1000
[  246.919280][T14765] lo speed is unknown, defaulting to 1000
[  247.004787][T14771] netlink: 'syz.3.2440': attribute type 11 has an invalid length.
[  247.253945][T14781] netlink: 'syz.4.2442': attribute type 2 has an invalid length.
[  247.267402][T14781] þ
: entered promiscuous mode
[  248.043643][T14812] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  248.267965][T14821] lo speed is unknown, defaulting to 1000
[  248.303263][T14821] lo speed is unknown, defaulting to 1000
[  248.419813][T14837] tipc: Invalid UDP bearer configuration
[  248.419854][T14837] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  248.590339][T14834] lo speed is unknown, defaulting to 1000
[  248.604178][T14834] lo speed is unknown, defaulting to 1000
[  249.183973][T14892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.208104][T14886] lo speed is unknown, defaulting to 1000
[  249.215697][T14892] syzkaller0: entered promiscuous mode
[  249.226401][T14892] syzkaller0: entered allmulticast mode
[  249.245108][T14886] lo speed is unknown, defaulting to 1000
[  249.247925][T14892] tipc: Resetting bearer <eth:syzkaller0>
[  249.261107][T14890] tipc: Resetting bearer <eth:syzkaller0>
[  249.279865][T14890] tipc: Disabling bearer <eth:syzkaller0>
[  249.394848][T14898] gretap0: entered promiscuous mode
[  249.404615][T14898] gretap0: left promiscuous mode
[  249.422178][T14912] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 3, id = 0
[  250.321382][T14955] __nla_validate_parse: 7 callbacks suppressed
[  250.321402][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'.
[  250.423395][T14963] vcan0: tx drop: invalid da for name 0x0000000000000002
[  250.432241][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2496'.
[  250.543419][T14970] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2499'.
[  250.573829][T14975] netlink: 'syz.1.2500': attribute type 1 has an invalid length.
[  250.579967][T14977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2501'.
[  250.592465][T14975] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2500'.
[  250.608594][T14975] netlink: 'syz.1.2500': attribute type 1 has an invalid length.
[  250.616668][T14975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2500'.
[  250.809932][T14989] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  250.822629][T14989] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  251.043651][T15002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2507'.
[  251.334522][   T30] audit: type=1800 audit(1756504743.098:9): pid=15016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2512" name="memory.events" dev="tmpfs" ino=2600 res=0 errno=0
[  251.366129][T15013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.406592][ T5939] lo speed is unknown, defaulting to 1000
[  251.412497][ T5939] syz1: Port: 1 Link DOWN
[  251.667164][T15031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  251.683691][T15048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.823242][T15048] tipc: Disabling bearer <eth:syzkaller0>
[  252.194739][T15073] syz_tun: entered allmulticast mode
[  252.348551][T15087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2526'.
[  252.376924][T15089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.386628][T15083] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2523'.
[  252.396054][T15087] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2526'.
[  252.408369][T15089] syzkaller0: entered promiscuous mode
[  252.413976][T15089] syzkaller0: entered allmulticast mode
[  252.439885][T15082] IPv6: sit1: Disabled Multicast RS
[  252.474067][T15089] tipc: Resetting bearer <eth:syzkaller0>
[  252.560803][T15086] tipc: Resetting bearer <eth:syzkaller0>
[  252.568659][T15086] tipc: Disabling bearer <eth:syzkaller0>
[  252.582918][T15101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.649587][T15101] syzkaller0: entered promiscuous mode
[  252.669926][T15101] syzkaller0: entered allmulticast mode
[  252.793251][T15101] tipc: Resetting bearer <eth:syzkaller0>
[  252.835872][T15100] tipc: Resetting bearer <eth:syzkaller0>
[  252.864141][T15100] tipc: Disabling bearer <eth:syzkaller0>
[  252.980287][T15130] netlink: 'syz.1.2540': attribute type 1 has an invalid length.
[  253.019061][T15130] 8021q: adding VLAN 0 to HW filter on device bond4
[  253.224426][T15145] openvswitch: netlink: Flow key attr not present in new flow.
[  253.961169][T15175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.980552][T15177] lo speed is unknown, defaulting to 1000
[  253.990491][T15177] lo speed is unknown, defaulting to 1000
[  254.003033][T15175] syzkaller0: entered promiscuous mode
[  254.009373][T15175] syzkaller0: entered allmulticast mode
[  254.042162][T15175] tipc: Resetting bearer <eth:syzkaller0>
[  254.057736][T15173] tipc: Resetting bearer <eth:syzkaller0>
[  254.080743][T15173] tipc: Disabling bearer <eth:syzkaller0>
[  254.124105][T15183] lo speed is unknown, defaulting to 1000
[  254.165375][T15183] lo speed is unknown, defaulting to 1000
[  254.347240][T15206] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  254.593027][T15225] netlink: 'syz.3.2562': attribute type 1 has an invalid length.
[  254.601573][T15225] netlink: 'syz.3.2562': attribute type 2 has an invalid length.
[  254.611626][T15225] netlink: 'syz.3.2562': attribute type 1 has an invalid length.
[  254.620041][T15225] netlink: 'syz.3.2562': attribute type 2 has an invalid length.
[  254.781737][T15232] IPv6: sit1: Disabled Multicast RS
[  254.891287][T15240] netlink: 'syz.1.2566': attribute type 18 has an invalid length.
[  255.012977][T15247] netlink: 'syz.3.2569': attribute type 6 has an invalid length.
[  255.033594][T15250] Ã: entered promiscuous mode
[  255.052027][T15250] openvswitch: netlink: IPv4 tun info is not correct
[  255.175520][T15258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.192869][T15260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.193419][T15258] syzkaller0: entered promiscuous mode
[  255.210240][T15258] syzkaller0: entered allmulticast mode
[  255.229652][T15258] tipc: Resetting bearer <eth:syzkaller0>
[  255.237264][T15262] openvswitch: netlink: Flow key attr not present in new flow.
[  255.247294][T15257] tipc: Resetting bearer <eth:syzkaller0>
[  255.256672][T15257] tipc: Disabling bearer <eth:syzkaller0>
[  255.586685][T15276] netlink: 'syz.2.2579': attribute type 1 has an invalid length.
[  255.595414][T15274] netlink: 'syz.2.2579': attribute type 1 has an invalid length.
[  255.792244][T15269] lo speed is unknown, defaulting to 1000
[  255.799869][T15279] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  255.826236][T15269] lo speed is unknown, defaulting to 1000
[  256.180988][T15313] netlink: 'syz.2.2589': attribute type 7 has an invalid length.
[  256.204158][T15310] lo speed is unknown, defaulting to 1000
[  256.205575][T15313] __nla_validate_parse: 19 callbacks suppressed
[  256.205594][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'.
[  256.256161][T15310] lo speed is unknown, defaulting to 1000
[  256.339128][T15313] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.359922][T15313] bridge12: port 1(bond0) entered blocking state
[  256.373468][T15313] bridge12: port 1(bond0) entered disabled state
[  256.382035][T15313] bond0: entered allmulticast mode
[  256.393066][T15313] bridge12: port 1(bond0) entered blocking state
[  256.399716][T15313] bridge12: port 1(bond0) entered forwarding state
[  256.881664][   T36] bridge12: port 1(bond0) entered disabled state
[  256.893354][T15347] netlink: 'syz.0.2598': attribute type 1 has an invalid length.
[  257.011764][    C1] vcan0: j1939_tp_txtimer: 0xffff88807db19800: tx aborted with unknown reason: -2
[  257.021463][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807db1bc00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  257.040843][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807db19800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[  257.260130][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2605'.
[  257.424766][T15376] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:19999
[  257.433785][T15374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.444759][T15376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2607'.
[  257.459470][T15374] syzkaller0: entered promiscuous mode
[  257.470866][T15374] syzkaller0: entered allmulticast mode
[  257.591505][T15381] tipc: Resetting bearer <eth:syzkaller0>
[  257.675457][T15373] tipc: Resetting bearer <eth:syzkaller0>
[  257.678398][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'.
[  257.694020][T15373] tipc: Disabling bearer <eth:syzkaller0>
[  257.702972][T15387] dummy0: left allmulticast mode
[  257.708434][T15387] dummy0: left promiscuous mode
[  257.713719][T15387] bridge0: port 2(dummy0) entered disabled state
[  257.722557][T15387] macsec0: left allmulticast mode
[  257.727932][T15387] macsec0: left promiscuous mode
[  257.733187][T15387] bridge0: port 1(macsec0) entered disabled state
[  258.075962][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'.
[  258.076959][T15406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2618'.
[  258.250141][T15420] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2622'.
[  258.358020][T15424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2624'.
[  258.582097][T15437] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2630'.
[  258.593492][T15441] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2631'.
[  258.695884][T15444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.717690][T15444] syzkaller0: entered promiscuous mode
[  258.756065][T15444] syzkaller0: entered allmulticast mode
[  258.808353][T15444] tipc: Resetting bearer <eth:syzkaller0>
[  258.831550][T15443] tipc: Resetting bearer <eth:syzkaller0>
[  258.857178][T15443] tipc: Disabling bearer <eth:syzkaller0>
[  259.163847][T15472] pimreg: entered allmulticast mode
[  259.196779][T15473] 8021q: adding VLAN 0 to HW filter on device bond5
[  259.208688][T15473] bridge0: port 1(bond5) entered blocking state
[  259.220424][T15473] bridge0: port 1(bond5) entered disabled state
[  259.249079][T15473] bond5: entered allmulticast mode
[  259.257135][T15473] bond5: entered promiscuous mode
[  259.263248][T15473] bridge0: port 1(bond5) entered blocking state
[  259.269744][T15473] bridge0: port 1(bond5) entered forwarding state
[  259.300678][T15472] 8021q: adding VLAN 0 to HW filter on device bond6
[  259.308927][T15472] bridge0: port 2(bond6) entered blocking state
[  259.318120][T15472] bridge0: port 2(bond6) entered disabled state
[  259.325312][T15472] bond6: entered allmulticast mode
[  259.334528][T15472] bond6: entered promiscuous mode
[  259.344466][T15472] bridge0: port 2(bond6) entered blocking state
[  259.350996][T15472] bridge0: port 2(bond6) entered forwarding state
[  259.951062][T15520] lo speed is unknown, defaulting to 1000
[  259.979887][T15520] lo speed is unknown, defaulting to 1000
[  260.017003][   T36] bridge0: port 1(bond5) entered disabled state
[  260.024547][   T36] bridge0: port 2(bond6) entered disabled state
[  260.072639][   T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  260.092852][T15529] syzkaller1: entered promiscuous mode
[  260.115266][T15529] syzkaller1: entered allmulticast mode
[  260.559290][T15554] netlink: 'syz.0.2666': attribute type 1 has an invalid length.
[  260.614315][T15560] macsec0: entered allmulticast mode
[  260.620520][T15560] macvlan1: entered allmulticast mode
[  260.646531][T15560] macvlan1: left allmulticast mode
[  260.724861][T15554] team0: Port device dummy0 removed
[  260.828078][T15572] vlan3: entered allmulticast mode
[  260.833747][T15572] bridge0: entered allmulticast mode
[  260.841565][T15572] bridge4: port 1(vlan3) entered blocking state
[  260.849154][T15572] bridge4: port 1(vlan3) entered disabled state
[  260.859055][T15572] vlan3: entered promiscuous mode
[  260.864229][T15572] bridge0: entered promiscuous mode
[  260.900858][T15572] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  261.154154][T15594] Unsupported ieee802154 address type: 0
[  261.320150][T15603] __nla_validate_parse: 13 callbacks suppressed
[  261.320175][T15603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2681'.
[  261.438787][T15609] sch_tbf: burst 0 is lower than device tunl0 mtu (1280) !
[  261.653480][T15626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2689'.
[  261.825699][ T5864] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  262.454472][T15657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2700'.
[  262.539857][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'.
[  262.754710][T15670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2706'.
[  262.873946][T15674] !
: renamed from dummy0
[  265.864513][T15684] netlink: 'syz.1.2710': attribute type 1 has an invalid length.
[  265.870917][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2711'.
[  265.882037][T15684] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2710'.
[  265.900908][T15684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2710'.
[  266.098841][T15697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2714'.
[  266.201434][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2716'.
[  266.585318][T15744] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.733497][T15755] openvswitch: netlink: IP tunnel dst address not specified
[  266.773430][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'.
[  266.782717][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'.
[  266.867849][T15760] lo speed is unknown, defaulting to 1000
[  266.876904][T15760] lo speed is unknown, defaulting to 1000
[  266.948940][T15761] lo speed is unknown, defaulting to 1000
[  267.060579][T15761] lo speed is unknown, defaulting to 1000
[  267.083967][T15755] Ã: left promiscuous mode
[  267.108696][T15755] 8021q: adding VLAN 0 to HW filter on device Ã
[  267.123809][T15755] 8021q: adding VLAN 0 to HW filter on device team0
[  267.146584][T15755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.314822][T15788] lo speed is unknown, defaulting to 1000
[  267.322343][T15788] lo speed is unknown, defaulting to 1000
[  267.473604][T15792] syzkaller0: left promiscuous mode
[  267.479176][T15792] syzkaller0: left allmulticast mode
[  267.504468][T15796] pim6reg1: entered promiscuous mode
[  267.515913][T15796] pim6reg1: entered allmulticast mode
[  267.538704][T15799] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2743'.
[  267.644360][T15803] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  267.654104][T15803] CPU: 1 UID: 0 PID: 15803 Comm: syz.2.2746 Not tainted syzkaller #0 PREEMPT(full) 
[  267.654135][T15803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  267.654147][T15803] Call Trace:
[  267.654153][T15803]  <TASK>
[  267.654162][T15803]  dump_stack_lvl+0x189/0x250
[  267.654193][T15803]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.654216][T15803]  ? __pfx__printk+0x10/0x10
[  267.654244][T15803]  ? kernfs_root+0x1c/0x230
[  267.654268][T15803]  ? kernfs_path_from_node+0x2f/0x290
[  267.654288][T15803]  ? kernfs_path_from_node+0x250/0x290
[  267.654307][T15803]  ? kernfs_path_from_node+0x2f/0x290
[  267.654330][T15803]  sysfs_warn_dup+0x8e/0xa0
[  267.654350][T15803]  sysfs_do_create_link_sd+0xc0/0x110
[  267.654371][T15803]  device_add_class_symlinks+0x1cf/0x240
[  267.654394][T15803]  device_add+0x475/0xb50
[  267.654414][T15803]  wiphy_register+0x1ba6/0x28d0
[  267.654450][T15803]  ? __pfx_wiphy_register+0x10/0x10
[  267.654476][T15803]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  267.654501][T15803]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  267.654524][T15803]  ieee80211_register_hw+0x3425/0x4080
[  267.654555][T15803]  ? ieee80211_register_hw+0x1481/0x4080
[  267.654579][T15803]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  267.654603][T15803]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  267.654633][T15803]  ? __hrtimer_setup+0x187/0x210
[  267.654651][T15803]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  267.654680][T15803]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  267.654717][T15803]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  267.654740][T15803]  ? trace_kmalloc+0x1f/0xd0
[  267.654772][T15803]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  267.654797][T15803]  ? kstrndup+0xbf/0x160
[  267.654822][T15803]  hwsim_new_radio_nl+0xea4/0x1b10
[  267.654847][T15803]  ? __pfx___nla_validate_parse+0x10/0x10
[  267.654883][T15803]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  267.654912][T15803]  ? __nla_parse+0x40/0x60
[  267.654940][T15803]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  267.654969][T15803]  genl_family_rcv_msg_doit+0x212/0x300
[  267.654997][T15803]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  267.655027][T15803]  ? bpf_lsm_capable+0x9/0x20
[  267.655053][T15803]  ? security_capable+0x7e/0x2e0
[  267.655082][T15803]  genl_rcv_msg+0x60e/0x790
[  267.655107][T15803]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.655128][T15803]  ? __kasan_slab_alloc+0x6c/0x80
[  267.655152][T15803]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  267.655177][T15803]  ? __netlink_lookup+0xbd/0x810
[  267.655194][T15803]  ? rcu_is_watching+0x15/0xb0
[  267.655217][T15803]  netlink_rcv_skb+0x208/0x470
[  267.655245][T15803]  ? __pfx_genl_rcv_msg+0x10/0x10
[  267.655268][T15803]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  267.655302][T15803]  ? lock_release+0x4b/0x3e0
[  267.655331][T15803]  ? down_read+0x1ad/0x2e0
[  267.655351][T15803]  genl_rcv+0x28/0x40
[  267.655371][T15803]  netlink_unicast+0x82f/0x9e0
[  267.655401][T15803]  ? __pfx_netlink_unicast+0x10/0x10
[  267.655427][T15803]  ? netlink_sendmsg+0x642/0xb30
[  267.655443][T15803]  ? skb_put+0x11b/0x210
[  267.655463][T15803]  netlink_sendmsg+0x805/0xb30
[  267.655485][T15803]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.655503][T15803]  ? futex_unqueue+0x22/0x240
[  267.655523][T15803]  ? aa_sock_msg_perm+0xf1/0x1d0
[  267.655542][T15803]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  267.655562][T15803]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.655581][T15803]  __sock_sendmsg+0x21c/0x270
[  267.655607][T15803]  ____sys_sendmsg+0x505/0x830
[  267.655629][T15803]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.655653][T15803]  ? import_iovec+0x74/0xa0
[  267.655676][T15803]  ___sys_sendmsg+0x21f/0x2a0
[  267.655698][T15803]  ? __pfx____sys_sendmsg+0x10/0x10
[  267.655720][T15803]  ? futex_wait+0x285/0x360
[  267.655768][T15803]  ? __fget_files+0x2a/0x420
[  267.655785][T15803]  ? __fget_files+0x3a0/0x420
[  267.655806][T15803]  __x64_sys_sendmsg+0x19b/0x260
[  267.655827][T15803]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  267.655852][T15803]  ? rcu_is_watching+0x15/0xb0
[  267.655873][T15803]  ? rcu_is_watching+0x15/0xb0
[  267.655892][T15803]  do_syscall_64+0xfa/0x3b0
[  267.655911][T15803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.655930][T15803]  ? clear_bhb_loop+0x60/0xb0
[  267.655951][T15803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.655969][T15803] RIP: 0033:0x7f970a38ebe9
[  267.655987][T15803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.656004][T15803] RSP: 002b:00007f970b2b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.656026][T15803] RAX: ffffffffffffffda RBX: 00007f970a5b5fa0 RCX: 00007f970a38ebe9
[  267.656040][T15803] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  267.656052][T15803] RBP: 00007f970a411e19 R08: 0000000000000000 R09: 0000000000000000
[  267.656064][T15803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.656076][T15803] R13: 00007f970a5b6038 R14: 00007f970a5b5fa0 R15: 00007ffef86ccb38
[  267.656098][T15803]  </TASK>
[  268.301384][T15810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2748'.
[  268.322760][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2750'.
[  268.419498][T15815] netlink: 'syz.4.2750': attribute type 1 has an invalid length.
[  268.644869][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'.
[  268.710316][T15828] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  268.731247][T15828] tipc: Resetting bearer <eth:team0>
[  268.742889][T15828] team0: Port device vlan0 removed
[  268.750979][T15828] bond2: (slave wireguard0): Releasing backup interface
[  268.759862][T15828] bond2: (slave wireguard1): making interface the new active one
[  268.772925][T15828] bond2: (slave wireguard1): Releasing backup interface
[  268.783648][T15828] bond3: (slave geneve2): Releasing active interface
[  268.796777][T15828] bond5: (slave veth7): Releasing active interface
[  268.811614][T15828] vlan3: left promiscuous mode
[  268.817557][T15828] bridge0: left promiscuous mode
[  268.823094][T15828] bridge4: port 1(vlan3) entered disabled state
[  268.841735][T15828] netlink: 'syz.0.2754': attribute type 10 has an invalid length.
[  268.850033][T15828] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  268.993742][T15843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2758'.
[  269.206444][T15850] syzkaller0: entered promiscuous mode
[  269.214520][T15850] syzkaller0: entered allmulticast mode
[  269.230251][T15854] tipc: Resetting bearer <eth:team0>
[  269.463955][T15880] netlink: 'syz.3.2768': attribute type 1 has an invalid length.
[  269.510157][T15888] netlink: 'syz.4.2770': attribute type 1 has an invalid length.
[  269.586787][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.600461][T15880] 8021q: adding VLAN 0 to HW filter on device bond9
[  269.605147][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.626289][T15888] 8021q: adding VLAN 0 to HW filter on device bond4
[  269.647041][T15890] bond9: (slave bridge2): making interface the new active one
[  269.657537][T15890] bond9: (slave bridge2): Enslaving as an active interface with an up link
[  269.690347][T15880] bond9: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  269.856302][T15897] lo speed is unknown, defaulting to 1000
[  269.864105][T15897] lo speed is unknown, defaulting to 1000
[  269.922310][T15916] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.2775'.
[  269.936172][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2775'.
[  269.958586][T15915] delete_channel: no stack
[  270.042563][T15920] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2776'.
[  270.307341][T15931] lo speed is unknown, defaulting to 1000
[  270.326540][T15932] lo speed is unknown, defaulting to 1000
[  270.333973][T15931] lo speed is unknown, defaulting to 1000
[  270.341387][T15934] netlink: 'syz.4.2781': attribute type 18 has an invalid length.
[  270.363738][T15932] lo speed is unknown, defaulting to 1000
[  270.762161][T15959] netlink: 'syz.4.2785': attribute type 1 has an invalid length.
[  270.920104][T15959] 8021q: adding VLAN 0 to HW filter on device bond5
[  270.933535][T15969] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  270.976400][T15969] bond5: (slave wlan0): Enslaving as an active interface with a down link
[  271.002259][T15959] vlan0: entered allmulticast mode
[  271.024609][T15959] veth1: entered allmulticast mode
[  271.041673][T15959] bond5: (slave vlan0): Opening slave failed
[  271.058265][T15981] nbd: socks must be embedded in a SOCK_ITEM attr
[  271.070168][T15981] block nbd2: shutting down sockets
[  271.465566][T16020] syzkaller0: entered promiscuous mode
[  271.471580][T16020] syzkaller0: entered allmulticast mode
[  272.112812][T16028] __nla_validate_parse: 4 callbacks suppressed
[  272.112836][T16028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2801'.
[  272.220785][T16030] lo speed is unknown, defaulting to 1000
[  272.258316][T16030] lo speed is unknown, defaulting to 1000
[  272.740234][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  272.751196][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  272.761119][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  272.770034][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  272.777993][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  272.814207][T16054] lo speed is unknown, defaulting to 1000
[  272.821031][T16054] lo speed is unknown, defaulting to 1000
[  272.903118][T16054] chnl_net:caif_netlink_parms(): no params data found
[  272.944102][T16054] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.952033][T16054] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.960011][T16054] bridge_slave_0: entered allmulticast mode
[  272.966811][T16054] bridge_slave_0: entered promiscuous mode
[  272.973971][T16054] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.981468][T16054] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.989238][T16054] bridge_slave_1: entered allmulticast mode
[  272.996573][T16054] bridge_slave_1: entered promiscuous mode
[  273.014547][T16054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.026141][T16054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.049568][T16054] team0: Port device team_slave_0 added
[  273.058636][T16054] team0: Port device team_slave_1 added
[  273.077304][T16054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.084301][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.110803][T16054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.123023][T16054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.130354][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.157731][T16054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.187968][T16054] hsr_slave_0: entered promiscuous mode
[  273.194616][T16054] hsr_slave_1: entered promiscuous mode
[  273.200932][T16054] debugfs: 'hsr0' already exists in 'hsr'
[  273.206811][T16054] Cannot create hsr debugfs directory
[  273.494285][T16054] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  273.504812][T16054] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  273.514043][T16054] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  273.523626][T16054] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  273.545322][T16054] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.552474][T16054] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.560227][T16054] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.567640][T16054] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.607006][T16054] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.622584][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.630600][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.642655][T16054] 8021q: adding VLAN 0 to HW filter on device team0
[  273.657286][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.664462][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.673191][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.680320][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.804048][T16054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.950251][T16054] veth0_vlan: entered promiscuous mode
[  273.961456][T16054] veth1_vlan: entered promiscuous mode
[  273.981143][T16054] veth0_macvtap: entered promiscuous mode
[  273.991832][T16054] veth1_macvtap: entered promiscuous mode
[  274.005612][T16054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.018269][T16054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.030866][ T7874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.040311][ T7874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.049938][ T6531] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.064710][ T6531] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.102580][ T7874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.110835][ T7874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.129661][ T7874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.138355][ T7874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.169951][T16080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2804'.
[  274.865674][ T5864] Bluetooth: hci0: command tx timeout
[  276.945092][ T5864] Bluetooth: hci0: command tx timeout
[  279.025903][ T5872] Bluetooth: hci0: command tx timeout
[  281.105248][ T5872] Bluetooth: hci0: command tx timeout
[  322.110650][T16106] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2816'.
[  322.114130][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2815'.
[  322.142918][T16096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.144724][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2815'.
[  322.160105][T16105] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2816'.
[  322.170293][T16096] syzkaller0: entered promiscuous mode
[  322.176242][T16096] syzkaller0: entered allmulticast mode
[  322.201998][T16096] tipc: Resetting bearer <eth:syzkaller0>
[  322.212056][T16091] tipc: Resetting bearer <eth:syzkaller0>
[  322.237616][T16091] tipc: Disabling bearer <eth:syzkaller0>
[  322.418762][T16126] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2822'.
[  322.451196][T16130] bond0 (unregistering): Released all slaves
[  322.757560][T16146] netlink: zone id is out of range
[  322.763179][T16146] netlink: zone id is out of range
[  322.772116][T16146] netlink: zone id is out of range
[  322.782513][T16146] netlink: zone id is out of range
[  322.810848][T16146] netlink: zone id is out of range
[  322.816852][T16146] netlink: zone id is out of range
[  322.822427][T16146] netlink: zone id is out of range
[  322.837673][T16146] netlink: zone id is out of range
[  322.847414][T16146] netlink: zone id is out of range
[  322.855414][T16155] lo speed is unknown, defaulting to 1000
[  322.861358][T16146] netlink: zone id is out of range
[  322.889343][    T9] IPVS: starting estimator thread 0...
[  322.896781][T16155] lo speed is unknown, defaulting to 1000
[  322.979057][T16157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2829'.
[  322.993553][T16156] IPVS: using max 34 ests per chain, 81600 per kthread
[  323.230668][T16164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2830'.
[  323.337171][T16181] macsec0: entered promiscuous mode
[  323.342584][T16181] netlink: 'syz.2.2836': attribute type 1 has an invalid length.
[  323.366862][T16181] netlink: 'syz.2.2836': attribute type 2 has an invalid length.
[  323.400076][T16181] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2836'.
[  323.508673][T16183] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  323.519720][T16183] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  323.545600][T16183] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  323.610330][T16183] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  323.621392][T16183] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  323.632574][T16183] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  323.665533][T16188] ÿ: renamed from bond_slave_0
[  323.678580][T16183] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  323.690001][T16183] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  323.700443][T16183] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  323.741070][T16183] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  323.751306][T16183] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  323.761549][T16183] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  323.834264][ T7878] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  323.844500][ T7878] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  323.853780][ T7878] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  323.886491][ T7878] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  323.906762][ T7878] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  323.920182][ T7878] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  323.927851][T16193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2840'.
[  323.939248][T16193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2840'.
[  323.952842][   T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  323.972870][   T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  323.983260][   T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  324.020569][ T7876] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  324.039083][ T7876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  324.059207][ T7876] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  324.377311][T16208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.418492][T16206] tipc: Resetting bearer <eth:syzkaller0>
[  325.009706][T16206] tipc: Disabling bearer <eth:syzkaller0>
[  325.040513][T16223] lo speed is unknown, defaulting to 1000
[  325.048766][T16223] lo speed is unknown, defaulting to 1000
[  325.162768][ T9301] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  325.210933][ T9301] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  325.285958][ T9301] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  325.744383][T16310] netlink: 'syz.2.2862': attribute type 13 has an invalid length.
[  325.753032][T16310] netlink: 'syz.2.2862': attribute type 17 has an invalid length.
[  325.821119][ T9301] lo speed is unknown, defaulting to 1000
[  325.828065][ T9301] syz1: Port: 1 Link ACTIVE
[  325.902474][T16310] lo speed is unknown, defaulting to 1000
[  325.909524][T16310] lo speed is unknown, defaulting to 1000
[  326.405660][T16322] lo speed is unknown, defaulting to 1000
[  326.420893][T16322] lo speed is unknown, defaulting to 1000
[  326.684830][T16347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.743968][T16347] tipc: Disabling bearer <eth:syzkaller0>
[  326.763632][T16350] lo speed is unknown, defaulting to 1000
[  326.773271][T16350] lo speed is unknown, defaulting to 1000
[  326.792312][T16351] gretap1: entered promiscuous mode
[  327.520991][T16376] __nla_validate_parse: 8 callbacks suppressed
[  327.521014][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2880'.
[  327.996999][T16400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.014558][T16394] syzkaller0: entered promiscuous mode
[  328.029626][T16394] syzkaller0: entered allmulticast mode
[  328.053871][T16400] tipc: Resetting bearer <eth:syzkaller0>
[  328.080488][T16400] tipc: Disabling bearer <eth:syzkaller0>
[  328.334572][T16427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2895'.
[  328.353392][T16427] net_ratelimit: 240 callbacks suppressed
[  328.353411][T16427] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  328.394742][T16431] netlink: 'syz.3.2897': attribute type 1 has an invalid length.
[  328.587542][T16445] netlink: 'syz.1.2901': attribute type 10 has an invalid length.
[  328.610912][T16445] 8021q: adding VLAN 0 to HW filter on device Ã
[  328.621108][T16445] Ã: (slave wlan1): Enslaving as an active interface with an up link
[  328.662220][T16451] netlink: 'syz.3.2903': attribute type 1 has an invalid length.
[  329.003414][T16466] sctp: [Deprecated]: syz.3.2906 (pid 16466) Use of int in max_burst socket option deprecated.
[  329.003414][T16466] Use struct sctp_assoc_value instead
[  329.037822][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2906'.
[  329.291628][T16477] batman_adv: batadv0: Removing interface: gretap2
[  329.318202][T16477] bond3: (slave geneve3): Releasing active interface
[  329.361915][T16477] bond4: (slave gretap3): Releasing active interface
[  329.413045][T16477] bond0: (slave bond6): Releasing backup interface
[  329.444667][T16477] bond9: (slave bridge2): Releasing active interface
[  329.456079][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2914'.
[  329.489259][ T7882] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.501845][T16499] netlink: 'syz.3.2910': attribute type 10 has an invalid length.
[  329.509534][ T7882] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.535068][T16492] netlink: 452 bytes leftover after parsing attributes in process `syz.0.2914'.
[  329.571896][ T7882] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.616743][ T7882] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.440136][T16534] FAULT_INJECTION: forcing a failure.
[  330.440136][T16534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  330.485633][T16534] CPU: 1 UID: 0 PID: 16534 Comm: syz.3.2926 Not tainted syzkaller #0 PREEMPT(full) 
[  330.485664][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  330.485676][T16534] Call Trace:
[  330.485684][T16534]  <TASK>
[  330.485692][T16534]  dump_stack_lvl+0x189/0x250
[  330.485722][T16534]  ? __pfx____ratelimit+0x10/0x10
[  330.485749][T16534]  ? __pfx_dump_stack_lvl+0x10/0x10
[  330.485771][T16534]  ? __pfx__printk+0x10/0x10
[  330.485795][T16534]  ? __might_fault+0xb0/0x130
[  330.485824][T16534]  ? rcu_is_watching+0x15/0xb0
[  330.485844][T16534]  should_fail_ex+0x414/0x560
[  330.485871][T16534]  _copy_from_user+0x2d/0xb0
[  330.485891][T16534]  ___sys_sendmsg+0x158/0x2a0
[  330.485912][T16534]  ? __pfx____sys_sendmsg+0x10/0x10
[  330.485934][T16534]  ? kstrtouint+0x6e/0xe0
[  330.485970][T16534]  ? __fget_files+0x2a/0x420
[  330.485987][T16534]  ? __fget_files+0x3a0/0x420
[  330.486007][T16534]  __sys_sendmmsg+0x227/0x430
[  330.486029][T16534]  ? __pfx___sys_sendmmsg+0x10/0x10
[  330.486048][T16534]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  330.486086][T16534]  ? ksys_write+0x22a/0x250
[  330.486111][T16534]  ? __pfx_ksys_write+0x10/0x10
[  330.486133][T16534]  ? rcu_is_watching+0x15/0xb0
[  330.486155][T16534]  __x64_sys_sendmmsg+0xa0/0xc0
[  330.486175][T16534]  do_syscall_64+0xfa/0x3b0
[  330.486192][T16534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.486211][T16534]  ? clear_bhb_loop+0x60/0xb0
[  330.486232][T16534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.486250][T16534] RIP: 0033:0x7f7b7258ebe9
[  330.486279][T16534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  330.486297][T16534] RSP: 002b:00007f7b733eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  330.486319][T16534] RAX: ffffffffffffffda RBX: 00007f7b727b5fa0 RCX: 00007f7b7258ebe9
[  330.486334][T16534] RDX: 0000000000000002 RSI: 0000200000000e80 RDI: 0000000000000003
[  330.486346][T16534] RBP: 00007f7b733eb090 R08: 0000000000000000 R09: 0000000000000000
[  330.486358][T16534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  330.486368][T16534] R13: 00007f7b727b6038 R14: 00007f7b727b5fa0 R15: 00007ffe5169b0b8
[  330.486389][T16534]  </TASK>
[  331.021933][T16544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2932'.
[  331.109445][T16548] syzkaller0: entered promiscuous mode
[  331.116073][T16548] syzkaller0: entered allmulticast mode
[  331.334072][T16552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.342747][T16558] syzkaller0: entered promiscuous mode
[  331.349043][T16558] syzkaller0: entered allmulticast mode
[  331.361934][T16552] tipc: Resetting bearer <eth:syzkaller0>
[  331.374093][T16549] tipc: Resetting bearer <eth:syzkaller0>
[  331.377854][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2936'.
[  331.392737][T16549] tipc: Disabling bearer <eth:syzkaller0>
[  331.448895][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  331.457258][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  331.464727][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  331.476786][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  331.486527][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  331.591360][T16568] FAULT_INJECTION: forcing a failure.
[  331.591360][T16568] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  331.605326][T16563] lo speed is unknown, defaulting to 1000
[  331.612054][T16563] lo speed is unknown, defaulting to 1000
[  331.637316][T16568] CPU: 1 UID: 0 PID: 16568 Comm: syz.0.2938 Not tainted syzkaller #0 PREEMPT(full) 
[  331.637348][T16568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  331.637361][T16568] Call Trace:
[  331.637369][T16568]  <TASK>
[  331.637377][T16568]  dump_stack_lvl+0x189/0x250
[  331.637407][T16568]  ? __pfx____ratelimit+0x10/0x10
[  331.637436][T16568]  ? __pfx_dump_stack_lvl+0x10/0x10
[  331.637459][T16568]  ? __pfx__printk+0x10/0x10
[  331.637483][T16568]  ? rcu_is_watching+0x15/0xb0
[  331.637503][T16568]  ? lock_acquire+0x5f/0x360
[  331.637530][T16568]  ? __might_fault+0xb0/0x130
[  331.637556][T16568]  ? rcu_is_watching+0x15/0xb0
[  331.637576][T16568]  should_fail_ex+0x414/0x560
[  331.637604][T16568]  _copy_from_user+0x2d/0xb0
[  331.637627][T16568]  __copy_msghdr+0x3c5/0x5b0
[  331.637651][T16568]  ___sys_sendmsg+0x1a5/0x2a0
[  331.637671][T16568]  ? __pfx____sys_sendmsg+0x10/0x10
[  331.637694][T16568]  ? kstrtouint+0x6e/0xe0
[  331.637730][T16568]  ? __fget_files+0x2a/0x420
[  331.637746][T16568]  ? __fget_files+0x3a0/0x420
[  331.637768][T16568]  __sys_sendmmsg+0x227/0x430
[  331.637791][T16568]  ? __pfx___sys_sendmmsg+0x10/0x10
[  331.637809][T16568]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  331.637841][T16568]  ? ksys_write+0x22a/0x250
[  331.637867][T16568]  ? __pfx_ksys_write+0x10/0x10
[  331.637890][T16568]  ? rcu_is_watching+0x15/0xb0
[  331.637912][T16568]  __x64_sys_sendmmsg+0xa0/0xc0
[  331.637933][T16568]  do_syscall_64+0xfa/0x3b0
[  331.637951][T16568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.637971][T16568]  ? clear_bhb_loop+0x60/0xb0
[  331.637992][T16568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.638011][T16568] RIP: 0033:0x7f6a5df8ebe9
[  331.638029][T16568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.638047][T16568] RSP: 002b:00007f6a5ee75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  331.638070][T16568] RAX: ffffffffffffffda RBX: 00007f6a5e1b5fa0 RCX: 00007f6a5df8ebe9
[  331.638085][T16568] RDX: 0000000000000002 RSI: 0000200000000e80 RDI: 0000000000000003
[  331.638098][T16568] RBP: 00007f6a5ee75090 R08: 0000000000000000 R09: 0000000000000000
[  331.638111][T16568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.638123][T16568] R13: 00007f6a5e1b6038 R14: 00007f6a5e1b5fa0 R15: 00007ffcb4d51698
[  331.638147][T16568]  </TASK>
[  332.073929][T16574] tipc: Resetting bearer <eth:team0>
[  332.093726][T16563] chnl_net:caif_netlink_parms(): no params data found
[  332.191842][T16578] netlink: 'syz.0.2939': attribute type 10 has an invalid length.
[  332.201518][T16563] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.212528][T16563] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.220674][T16563] bridge_slave_0: entered allmulticast mode
[  332.232647][T16563] bridge_slave_0: entered promiscuous mode
[  332.293933][T16580] netlink: 'syz.2.2940': attribute type 1 has an invalid length.
[  332.296445][T16563] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.317118][T16563] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.324609][T16563] bridge_slave_1: entered allmulticast mode
[  332.346023][T16563] bridge_slave_1: entered promiscuous mode
[  332.376880][T16580] 8021q: adding VLAN 0 to HW filter on device bond8
[  332.447876][T16583] 8021q: adding VLAN 0 to HW filter on device bond8
[  332.487202][T16583] bond8: (slave gre5): The slave device specified does not support setting the MAC address
[  332.517695][T16583] bond8: (slave gre5): Error -95 calling set_mac_address
[  332.570649][T16586] netlink: 'syz.2.2940': attribute type 1 has an invalid length.
[  332.575036][T16563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  332.594417][T16563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  332.688424][T16588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2942'.
[  332.688449][T16563] team0: Port device team_slave_0 added
[  332.706505][T16563] team0: Port device team_slave_1 added
[  332.743545][T16563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.761825][T16563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.826015][T16563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.856490][T16563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.873641][T16563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.911840][T16563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.953979][   T49] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.007649][T16595] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  333.038012][   T49] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.138039][   T49] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.161425][T16604] netlink: 'syz.4.2947': attribute type 11 has an invalid length.
[  333.179840][T16563] hsr_slave_0: entered promiscuous mode
[  333.196443][T16563] hsr_slave_1: entered promiscuous mode
[  333.209736][T16563] debugfs: 'hsr0' already exists in 'hsr'
[  333.212097][T16607] FAULT_INJECTION: forcing a failure.
[  333.212097][T16607] name failslab, interval 1, probability 0, space 0, times 0
[  333.236326][T16607] CPU: 0 UID: 0 PID: 16607 Comm: syz.2.2948 Not tainted syzkaller #0 PREEMPT(full) 
[  333.236357][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  333.236369][T16607] Call Trace:
[  333.236376][T16607]  <TASK>
[  333.236384][T16607]  dump_stack_lvl+0x189/0x250
[  333.236411][T16607]  ? __pfx____ratelimit+0x10/0x10
[  333.236440][T16607]  ? __pfx_dump_stack_lvl+0x10/0x10
[  333.236463][T16607]  ? __pfx__printk+0x10/0x10
[  333.236489][T16607]  ? __pfx_fib_rules_lookup+0x10/0x10
[  333.236508][T16607]  ? l3mdev_update_flow+0x29/0x640
[  333.236529][T16607]  ? l3mdev_update_flow+0x4d1/0x640
[  333.236549][T16607]  should_fail_ex+0x414/0x560
[  333.236576][T16607]  should_failslab+0xa8/0x100
[  333.236602][T16607]  kmem_cache_alloc_noprof+0x73/0x3c0
[  333.236626][T16607]  ? dst_alloc+0x105/0x170
[  333.236648][T16607]  dst_alloc+0x105/0x170
[  333.236673][T16563] Cannot create hsr debugfs directory
[  333.236673][T16607]  ip_route_output_key_hash_rcu+0x14e1/0x23d0
[  333.236698][T16607]  ? ip_route_output_key_hash_rcu+0x1301/0x23d0
[  333.236720][T16607]  ? ip_route_output_key_hash+0xc1/0x280
[  333.236741][T16607]  ip_route_output_key_hash+0x174/0x280
[  333.236761][T16607]  ? rcu_is_watching+0x15/0xb0
[  333.236779][T16607]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  333.236801][T16607]  ? udp_sendmsg+0xc8f/0x2170
[  333.236825][T16607]  ? lock_release+0x4b/0x3e0
[  333.236852][T16607]  ip_route_output_flow+0x2a/0x150
[  333.236869][T16607]  ? security_sk_classify_flow+0x70/0x180
[  333.236891][T16607]  udp_sendmsg+0x142e/0x2170
[  333.236919][T16607]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  333.236949][T16607]  ? __pfx_udp_sendmsg+0x10/0x10
[  333.236976][T16607]  ? ip4_datagram_release_cb+0x82/0xbb0
[  333.237000][T16607]  ? __local_bh_enable_ip+0x12d/0x1c0
[  333.237017][T16607]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  333.237035][T16607]  ? do_raw_spin_unlock+0x122/0x240
[  333.237055][T16607]  ? inet_sendmsg+0x14f/0x370
[  333.237077][T16607]  ? inet_sendmsg+0x29c/0x370
[  333.237100][T16607]  __sock_sendmsg+0x19c/0x270
[  333.237125][T16607]  ____sys_sendmsg+0x52d/0x830
[  333.237145][T16607]  ? __pfx_____sys_sendmsg+0x10/0x10
[  333.237166][T16607]  ? import_iovec+0x74/0xa0
[  333.237187][T16607]  ___sys_sendmsg+0x21f/0x2a0
[  333.237206][T16607]  ? __pfx____sys_sendmsg+0x10/0x10
[  333.237226][T16607]  ? kstrtouint+0x6e/0xe0
[  333.237261][T16607]  ? __fget_files+0x2a/0x420
[  333.237276][T16607]  ? __fget_files+0x3a0/0x420
[  333.237294][T16607]  __sys_sendmmsg+0x227/0x430
[  333.237315][T16607]  ? __pfx___sys_sendmmsg+0x10/0x10
[  333.237332][T16607]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  333.237359][T16607]  ? ksys_write+0x22a/0x250
[  333.237382][T16607]  ? __pfx_ksys_write+0x10/0x10
[  333.237402][T16607]  ? rcu_is_watching+0x15/0xb0
[  333.237422][T16607]  __x64_sys_sendmmsg+0xa0/0xc0
[  333.237441][T16607]  do_syscall_64+0xfa/0x3b0
[  333.237458][T16607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.237475][T16607]  ? clear_bhb_loop+0x60/0xb0
[  333.237494][T16607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.237511][T16607] RIP: 0033:0x7f970a38ebe9
[  333.237527][T16607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.237544][T16607] RSP: 002b:00007f970b2b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  333.237565][T16607] RAX: ffffffffffffffda RBX: 00007f970a5b5fa0 RCX: 00007f970a38ebe9
[  333.237578][T16607] RDX: 0000000000000002 RSI: 0000200000000e80 RDI: 0000000000000003
[  333.237590][T16607] RBP: 00007f970b2b5090 R08: 0000000000000000 R09: 0000000000000000
[  333.237601][T16607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.237611][T16607] R13: 00007f970a5b6038 R14: 00007f970a5b5fa0 R15: 00007ffef86ccb38
[  333.237631][T16607]  </TASK>
[  333.449872][T16615] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2950'.
[  333.506678][ T5872] Bluetooth: hci4: command tx timeout
[  333.651225][   T49] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.828366][T16624] lo speed is unknown, defaulting to 1000
[  333.855599][T16628] netlink: 'syz.2.2953': attribute type 3 has an invalid length.
[  333.887436][T16624] lo speed is unknown, defaulting to 1000
[  333.910528][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'.
[  334.369278][   T49] bond1 (unregistering): Released all slaves
[  334.380760][   T49] bond2 (unregistering): Released all slaves
[  334.391519][   T49] smc: removing net device bond0 with user defined pnetid SYZ2
[  334.399934][   T49] bond0 (unregistering): Released all slaves
[  334.410619][   T49] bond3 (unregistering): Released all slaves
[  334.423780][   T49] bond4 (unregistering): Released all slaves
[  334.433922][   T49] bond5 (unregistering): Released all slaves
[  334.444206][   T49] bond6 (unregistering): Released all slaves
[  334.454455][   T49] bond7 (unregistering): Released all slaves
[  334.471125][   T49] bond8 (unregistering): Released all slaves
[  334.482754][   T49] bond9 (unregistering): Released all slaves
[  334.492982][   T49] bond10 (unregistering): Released all slaves
[  334.517586][T16634] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  334.590627][T16631] lo speed is unknown, defaulting to 1000
[  334.592088][   T49] tipc: Left network mode
[  334.613897][T16631] lo speed is unknown, defaulting to 1000
[  334.862015][T16563] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  334.888898][T16563] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  334.908149][T16563] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  334.929994][T16563] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  334.958974][   T49] batadv0: left promiscuous mode
[  334.967826][   T49] hsr_slave_0: left promiscuous mode
[  334.974322][   T49] hsr_slave_1: left promiscuous mode
[  335.478897][ T3506] tipc: Subscription rejected, illegal request
[  335.506631][T16563] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.557447][T16563] 8021q: adding VLAN 0 to HW filter on device team0
[  335.573036][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.580503][ T7871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.589659][ T5872] Bluetooth: hci4: command tx timeout
[  335.629493][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.636914][ T7874] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.722593][   T49] IPVS: stop unused estimator thread 0...
[  336.019579][T16698] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2970'.
[  336.161462][T16563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.233029][T16563] veth0_vlan: entered promiscuous mode
[  336.268150][T16563] veth1_vlan: entered promiscuous mode
[  336.310715][T16563] veth0_macvtap: entered promiscuous mode
[  336.324413][T16720] netlink: 'syz.0.2975': attribute type 10 has an invalid length.
[  336.340492][T16563] veth1_macvtap: entered promiscuous mode
[  336.359921][T16720] team0: Port device 
0!
 added
[  336.367081][T16720] netlink: 'syz.0.2975': attribute type 10 has an invalid length.
[  336.372150][T16722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'.
[  336.385499][T16722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2977'.
[  336.401340][T16720] team0: Port device 
0!
 removed
[  336.426141][T16563] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.444821][T16563] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.480954][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.526467][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.546403][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.589363][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.628169][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.639493][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.673798][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.682669][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.692143][T16732] syzkaller0: mtu less than device minimum
[  336.777054][T16739] tap0: tun_chr_ioctl cmd 1074025677
[  336.783436][T16739] tap0: linktype set to 270
[  336.867606][T16750] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  336.909470][T16750] CPU: 1 UID: 0 PID: 16750 Comm: syz.2.2985 Not tainted syzkaller #0 PREEMPT(full) 
[  336.909501][T16750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  336.909513][T16750] Call Trace:
[  336.909521][T16750]  <TASK>
[  336.909529][T16750]  dump_stack_lvl+0x189/0x250
[  336.909559][T16750]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.909582][T16750]  ? __pfx__printk+0x10/0x10
[  336.909605][T16750]  ? kernfs_root+0x1c/0x230
[  336.909628][T16750]  ? kernfs_path_from_node+0x2f/0x290
[  336.909649][T16750]  ? kernfs_path_from_node+0x250/0x290
[  336.909669][T16750]  ? kernfs_path_from_node+0x2f/0x290
[  336.909691][T16750]  sysfs_warn_dup+0x8e/0xa0
[  336.909712][T16750]  sysfs_do_create_link_sd+0xc0/0x110
[  336.909734][T16750]  device_add_class_symlinks+0x1cf/0x240
[  336.909757][T16750]  device_add+0x475/0xb50
[  336.909777][T16750]  wiphy_register+0x1ba6/0x28d0
[  336.909813][T16750]  ? __pfx_wiphy_register+0x10/0x10
[  336.909839][T16750]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  336.909865][T16750]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  336.909888][T16750]  ieee80211_register_hw+0x3425/0x4080
[  336.909930][T16750]  ? ieee80211_register_hw+0x1481/0x4080
[  336.909957][T16750]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  336.909982][T16750]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  336.910018][T16750]  ? __hrtimer_setup+0x187/0x210
[  336.910036][T16750]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  336.910065][T16750]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  336.910103][T16750]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  336.910126][T16750]  ? trace_kmalloc+0x1f/0xd0
[  336.910148][T16750]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  336.910174][T16750]  ? kstrndup+0xbf/0x160
[  336.910198][T16750]  hwsim_new_radio_nl+0xea4/0x1b10
[  336.910223][T16750]  ? __pfx___nla_validate_parse+0x10/0x10
[  336.910259][T16750]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  336.910287][T16750]  ? __nla_parse+0x40/0x60
[  336.910316][T16750]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  336.910345][T16750]  genl_family_rcv_msg_doit+0x212/0x300
[  336.910371][T16750]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  336.910399][T16750]  ? bpf_lsm_capable+0x9/0x20
[  336.910424][T16750]  ? security_capable+0x7e/0x2e0
[  336.910453][T16750]  genl_rcv_msg+0x60e/0x790
[  336.910476][T16750]  ? __pfx_genl_rcv_msg+0x10/0x10
[  336.910497][T16750]  ? __kasan_slab_alloc+0x6c/0x80
[  336.910522][T16750]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  336.910546][T16750]  ? __netlink_lookup+0xbd/0x810
[  336.910562][T16750]  ? rcu_is_watching+0x15/0xb0
[  336.910585][T16750]  netlink_rcv_skb+0x208/0x470
[  336.910613][T16750]  ? __pfx_genl_rcv_msg+0x10/0x10
[  336.910636][T16750]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  336.910669][T16750]  ? lock_release+0x4b/0x3e0
[  336.910697][T16750]  ? down_read+0x1ad/0x2e0
[  336.910717][T16750]  genl_rcv+0x28/0x40
[  336.910738][T16750]  netlink_unicast+0x82f/0x9e0
[  336.910768][T16750]  ? __pfx_netlink_unicast+0x10/0x10
[  336.910794][T16750]  ? netlink_sendmsg+0x642/0xb30
[  336.910810][T16750]  ? skb_put+0x11b/0x210
[  336.910831][T16750]  netlink_sendmsg+0x805/0xb30
[  336.910853][T16750]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.910871][T16750]  ? futex_unqueue+0x22/0x240
[  336.910892][T16750]  ? aa_sock_msg_perm+0xf1/0x1d0
[  336.910921][T16750]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  336.910941][T16750]  ? __pfx_netlink_sendmsg+0x10/0x10
[  336.910959][T16750]  __sock_sendmsg+0x21c/0x270
[  336.910986][T16750]  ____sys_sendmsg+0x505/0x830
[  336.911008][T16750]  ? __pfx_____sys_sendmsg+0x10/0x10
[  336.911032][T16750]  ? import_iovec+0x74/0xa0
[  336.911056][T16750]  ___sys_sendmsg+0x21f/0x2a0
[  336.911077][T16750]  ? __pfx____sys_sendmsg+0x10/0x10
[  336.911100][T16750]  ? futex_wait+0x285/0x360
[  336.911138][T16750]  ? __fget_files+0x2a/0x420
[  336.911154][T16750]  ? __fget_files+0x3a0/0x420
[  336.911176][T16750]  __x64_sys_sendmsg+0x19b/0x260
[  336.911198][T16750]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  336.911223][T16750]  ? rcu_is_watching+0x15/0xb0
[  336.911243][T16750]  ? rcu_is_watching+0x15/0xb0
[  336.911263][T16750]  do_syscall_64+0xfa/0x3b0
[  336.911281][T16750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.911300][T16750]  ? clear_bhb_loop+0x60/0xb0
[  336.911322][T16750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.911340][T16750] RIP: 0033:0x7f970a38ebe9
[  336.911358][T16750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.911376][T16750] RSP: 002b:00007f970b273038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  336.911400][T16750] RAX: ffffffffffffffda RBX: 00007f970a5b6180 RCX: 00007f970a38ebe9
[  336.911414][T16750] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  336.911427][T16750] RBP: 00007f970a411e19 R08: 0000000000000000 R09: 0000000000000000
[  336.911440][T16750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.911452][T16750] R13: 00007f970a5b6218 R14: 00007f970a5b6180 R15: 00007ffef86ccb38
[  336.911474][T16750]  </TASK>
[  337.175247][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2984'.
[  337.431277][T16750] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  337.439207][T16750] CPU: 0 UID: 0 PID: 16750 Comm: syz.2.2985 Not tainted syzkaller #0 PREEMPT(full) 
[  337.439235][T16750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  337.439246][T16750] Call Trace:
[  337.439252][T16750]  <TASK>
[  337.439259][T16750]  dump_stack_lvl+0x189/0x250
[  337.439285][T16750]  ? __pfx_dump_stack_lvl+0x10/0x10
[  337.439304][T16750]  ? __pfx__printk+0x10/0x10
[  337.439323][T16750]  ? kernfs_root+0x1c/0x230
[  337.439343][T16750]  ? kernfs_path_from_node+0x2f/0x290
[  337.439359][T16750]  ? kernfs_path_from_node+0x250/0x290
[  337.439375][T16750]  ? kernfs_path_from_node+0x2f/0x290
[  337.439478][T16750]  sysfs_warn_dup+0x8e/0xa0
[  337.439511][T16750]  sysfs_do_create_link_sd+0xc0/0x110
[  337.439533][T16750]  device_add_class_symlinks+0x1cf/0x240
[  337.439553][T16750]  device_add+0x475/0xb50
[  337.439570][T16750]  wiphy_register+0x1ba6/0x28d0
[  337.439601][T16750]  ? __pfx_wiphy_register+0x10/0x10
[  337.439629][T16750]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  337.439654][T16750]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  337.439676][T16750]  ieee80211_register_hw+0x3425/0x4080
[  337.439707][T16750]  ? ieee80211_register_hw+0x1481/0x4080
[  337.439733][T16750]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  337.439758][T16750]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  337.439786][T16750]  ? __hrtimer_setup+0x187/0x210
[  337.439801][T16750]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  337.439827][T16750]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  337.439875][T16750]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  337.439897][T16750]  ? trace_kmalloc+0x1f/0xd0
[  337.439917][T16750]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  337.439940][T16750]  ? kstrndup+0xbf/0x160
[  337.440030][T16750]  hwsim_new_radio_nl+0xea4/0x1b10
[  337.440054][T16750]  ? __pfx___nla_validate_parse+0x10/0x10
[  337.440086][T16750]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  337.440112][T16750]  ? __nla_parse+0x40/0x60
[  337.440136][T16750]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  337.440162][T16750]  genl_family_rcv_msg_doit+0x212/0x300
[  337.440185][T16750]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  337.440209][T16750]  ? bpf_lsm_capable+0x9/0x20
[  337.440232][T16750]  ? security_capable+0x7e/0x2e0
[  337.440258][T16750]  genl_rcv_msg+0x60e/0x790
[  337.440280][T16750]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.440297][T16750]  ? __kasan_slab_alloc+0x6c/0x80
[  337.440319][T16750]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  337.440340][T16750]  ? __netlink_lookup+0xbd/0x810
[  337.440355][T16750]  ? rcu_is_watching+0x15/0xb0
[  337.440375][T16750]  netlink_rcv_skb+0x208/0x470
[  337.440399][T16750]  ? __pfx_genl_rcv_msg+0x10/0x10
[  337.440418][T16750]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  337.440447][T16750]  ? lock_release+0x4b/0x3e0
[  337.440472][T16750]  ? down_read+0x1ad/0x2e0
[  337.440489][T16750]  genl_rcv+0x28/0x40
[  337.440507][T16750]  netlink_unicast+0x82f/0x9e0
[  337.440533][T16750]  ? __pfx_netlink_unicast+0x10/0x10
[  337.440555][T16750]  ? netlink_sendmsg+0x642/0xb30
[  337.440569][T16750]  ? skb_put+0x11b/0x210
[  337.440586][T16750]  netlink_sendmsg+0x805/0xb30
[  337.440604][T16750]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.440619][T16750]  ? futex_unqueue+0x22/0x240
[  337.440637][T16750]  ? aa_sock_msg_perm+0xf1/0x1d0
[  337.440653][T16750]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  337.440671][T16750]  ? __pfx_netlink_sendmsg+0x10/0x10
[  337.440686][T16750]  __sock_sendmsg+0x21c/0x270
[  337.440708][T16750]  ____sys_sendmsg+0x505/0x830
[  337.440726][T16750]  ? __pfx_____sys_sendmsg+0x10/0x10
[  337.440748][T16750]  ? import_iovec+0x74/0xa0
[  337.440769][T16750]  ___sys_sendmsg+0x21f/0x2a0
[  337.440789][T16750]  ? __pfx____sys_sendmsg+0x10/0x10
[  337.440810][T16750]  ? futex_wait+0x285/0x360
[  337.440846][T16750]  ? __fget_files+0x2a/0x420
[  337.440863][T16750]  ? __fget_files+0x3a0/0x420
[  337.440882][T16750]  __x64_sys_sendmsg+0x19b/0x260
[  337.440904][T16750]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  337.440927][T16750]  ? rcu_is_watching+0x15/0xb0
[  337.440947][T16750]  ? rcu_is_watching+0x15/0xb0
[  337.440975][T16750]  do_syscall_64+0xfa/0x3b0
[  337.440994][T16750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.441027][T16750]  ? clear_bhb_loop+0x60/0xb0
[  337.441049][T16750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.441068][T16750] RIP: 0033:0x7f970a38ebe9
[  337.441087][T16750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.441105][T16750] RSP: 002b:00007f970b273038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  337.441129][T16750] RAX: ffffffffffffffda RBX: 00007f970a5b6180 RCX: 00007f970a38ebe9
[  337.441146][T16750] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  337.441159][T16750] RBP: 00007f970a411e19 R08: 0000000000000000 R09: 0000000000000000
[  337.441172][T16750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  337.441183][T16750] R13: 00007f970a5b6218 R14: 00007f970a5b6180 R15: 00007ffef86ccb38
[  337.441205][T16750]  </TASK>
[  337.451710][T16764] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2988'.
[  337.725190][ T5864] Bluetooth: hci4: command tx timeout
[  337.767909][T16768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2989'.
[  338.034736][T16771] Bluetooth: MGMT ver 1.23
[  338.118404][T16769] netlink: 'syz.4.2989': attribute type 2 has an invalid length.
[  338.127591][T16769] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2989'.
[  338.171466][T16782] veth0_vlan: entered allmulticast mode
[  338.479608][T16805] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3001'.
[  338.540001][T16802] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.547808][T16802] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.672534][T16802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.697276][T16802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.860116][   T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.879795][   T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.903413][   T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.941067][T16814] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004
[  338.954004][   T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  339.158221][T16825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.612400][T16847] lo speed is unknown, defaulting to 1000
[  339.623680][T16847] lo speed is unknown, defaulting to 1000
[  339.709641][T16858] netlink: 'syz.1.3018': attribute type 9 has an invalid length.
[  339.733716][T16858] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.3018'.
[  339.762799][T16858] siw: device registration error -23
[  339.828396][ T5864] Bluetooth: hci4: command 0x0419 tx timeout
[  339.948875][T16872] vlan2: entered promiscuous mode
[  339.956947][T16872] bond0: entered promiscuous mode
[  339.962233][T16872] bond_slave_0: entered promiscuous mode
[  339.968339][T16872] bond_slave_1: entered promiscuous mode
[  340.661401][T16911] lo speed is unknown, defaulting to 1000
[  340.689030][T16911] lo speed is unknown, defaulting to 1000
[  340.944397][T16921] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3036'.
[  340.975760][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  340.983529][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  340.994996][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  341.004146][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  341.013191][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  341.088745][T16925] lo speed is unknown, defaulting to 1000
[  341.092592][T16931] openvswitch: netlink: Duplicate or invalid key (type 0).
[  341.095557][T16925] lo speed is unknown, defaulting to 1000
[  341.109669][T16931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.214779][T16935] netlink: 'syz.0.3039': attribute type 3 has an invalid length.
[  341.313589][T16925] chnl_net:caif_netlink_parms(): no params data found
[  341.335858][T16945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3043'.
[  341.393154][T16945] 8021q: VLANs not supported on ipvlan1
[  341.454104][T16945] macsec2: entered promiscuous mode
[  341.464521][T16945] macsec2: entered allmulticast mode
[  341.514544][T16925] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.534301][T16925] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.554564][T16925] bridge_slave_0: entered allmulticast mode
[  341.562453][T16925] bridge_slave_0: entered promiscuous mode
[  341.586845][T16956] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3045'.
[  341.616632][T16956] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3045'.
[  341.631492][T16925] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.653187][T16925] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.664629][T16925] bridge_slave_1: entered allmulticast mode
[  341.685175][T16925] bridge_slave_1: entered promiscuous mode
[  341.802731][T16925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.827767][T16925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.872555][T16973] tipc: Started in network mode
[  341.880517][T16973] tipc: Node identity f210f3c13561, cluster identity 4711
[  341.890214][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'.
[  341.900229][T16973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.911238][ T5872] Bluetooth: hci4: command 0x0419 tx timeout
[  341.960513][T16925] team0: Port device team_slave_0 added
[  341.969811][T16972] tipc: Disabling bearer <eth:syzkaller0>
[  341.988945][T16925] team0: Port device team_slave_1 added
[  342.039361][T16925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.061920][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.091091][T16925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.105601][T16925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.113149][T16925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.163228][T16998] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3056'.
[  342.173999][T16925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.193752][T16998] 0·: renamed from hsr0 (while UP)
[  342.202014][T16998] 0·: entered allmulticast mode
[  342.207446][T16998] hsr_slave_0: entered allmulticast mode
[  342.213456][T16998] hsr_slave_1: entered allmulticast mode
[  342.220398][T16998] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  342.237244][T16995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.262342][T16995] syzkaller0: entered promiscuous mode
[  342.270326][T16995] syzkaller0: entered allmulticast mode
[  342.303887][T16995] bridge: RTM_NEWNEIGH with invalid ether address
[  342.343226][T16995] tipc: Resetting bearer <eth:syzkaller0>
[  342.353061][T16992] tipc: Resetting bearer <eth:syzkaller0>
[  342.364644][T16992] tipc: Disabling bearer <eth:syzkaller0>
[  342.382658][T17004] batman_adv: batadv0: Adding interface: ip6gretap3
[  342.392477][T17004] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.438328][T17004] batman_adv: batadv0: Interface activated: ip6gretap3
[  342.458909][T16925] hsr_slave_0: entered promiscuous mode
[  342.466508][T16925] hsr_slave_1: entered promiscuous mode
[  342.473230][T16925] debugfs: 'hsr0' already exists in 'hsr'
[  342.479977][T16925] Cannot create hsr debugfs directory
[  342.493692][T16998] vlan2: entered allmulticast mode
[  342.541901][T17011] lo speed is unknown, defaulting to 1000
[  342.581418][T17011] lo speed is unknown, defaulting to 1000
[  342.760713][T17020] lo speed is unknown, defaulting to 1000
[  342.775613][T16925] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.810275][T16925] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  342.831237][T16925] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  342.856970][T17020] lo speed is unknown, defaulting to 1000
[  343.048515][T16925] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.063099][T16925] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  343.073652][T16925] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  343.095952][T17035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.107734][T17036] tipc: Resetting bearer <eth:syzkaller0>
[  343.108756][ T5872] Bluetooth: hci1: command tx timeout
[  343.120633][T16925] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.131919][T16925] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  343.142999][T16925] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  343.160257][T17034] tipc: Disabling bearer <eth:syzkaller0>
[  343.252542][T16925] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.272010][T16925] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  343.289826][T16925] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  343.476973][T16925] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  343.488934][T16925] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  343.508934][T16925] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  343.532528][T16925] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  343.689247][T16925] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.760463][T16925] 8021q: adding VLAN 0 to HW filter on device team0
[  343.810424][ T7882] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.817937][ T7882] bridge0: port 1(bridge_slave_0) entered forwarding state
[  343.948087][T17062] batadv_slave_1: entered promiscuous mode
[  343.954231][T17062] batadv_slave_1: entered allmulticast mode
[  343.968347][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.975526][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.013904][T17066] __nla_validate_parse: 3 callbacks suppressed
[  344.013925][T17066] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3076'.
[  344.064161][T17068] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3077'.
[  344.382707][T17092] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  344.406450][T16925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.464422][T17096] netem: incorrect gi model size
[  344.480462][T17096] netem: change failed
[  344.607283][T16925] veth0_vlan: entered promiscuous mode
[  344.618204][T16925] veth1_vlan: entered promiscuous mode
[  344.695061][T16925] veth0_macvtap: entered promiscuous mode
[  344.708426][T16925] veth1_macvtap: entered promiscuous mode
[  344.727821][T17102] lo speed is unknown, defaulting to 1000
[  344.736645][T17102] lo speed is unknown, defaulting to 1000
[  344.761399][T16925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.778697][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'.
[  344.783710][T16925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.793937][T17105] netlink: 'syz.3.3087': attribute type 30 has an invalid length.
[  344.818907][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'.
[  344.840973][ T7882] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  344.861478][T17105] netlink: 'syz.3.3087': attribute type 30 has an invalid length.
[  344.878315][ T7882] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  344.899574][ T7882] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  344.925485][ T7882] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  344.940171][ T7882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.961548][ T7882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.986664][ T7882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.005521][ T7874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.019456][ T7874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.038690][ T7882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.070350][ T7882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.093399][ T7882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.186462][ T5872] Bluetooth: hci1: command tx timeout
[  345.632744][T17130] netlink: 'syz.2.3092': attribute type 7 has an invalid length.
[  345.641821][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3092'.
[  345.722398][T17130] netlink: 'syz.2.3092': attribute type 10 has an invalid length.
[  345.748670][T17133] netlink: 'syz.2.3092': attribute type 10 has an invalid length.
[  345.788772][ T5863] syz_tun (unregistering): left allmulticast mode
[  345.796728][T17134] netlink: 'syz.2.3092': attribute type 10 has an invalid length.
[  345.859234][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  345.867073][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  345.875433][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  345.883334][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  345.890936][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  345.900340][T17130] team0: Port device dummy0 added
[  345.920791][T17134] team0: Port device dummy0 removed
[  345.944330][T17149] lo speed is unknown, defaulting to 1000
[  345.951316][T17149] lo speed is unknown, defaulting to 1000
[  346.022479][T17147] lo speed is unknown, defaulting to 1000
[  346.058740][T17147] lo speed is unknown, defaulting to 1000
[  346.124306][T17165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.138127][T17165] syzkaller0: entered promiscuous mode
[  346.174342][T17165] syzkaller0: entered allmulticast mode
[  346.233194][T17162] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  346.264846][T17162] tipc: Resetting bearer <eth:syzkaller0>
[  346.278980][T17162] tipc: Disabling bearer <eth:syzkaller0>
[  346.651641][T17205] siw: device registration error -23
[  346.667835][T17195] lo speed is unknown, defaulting to 1000
[  346.674534][T17195] lo speed is unknown, defaulting to 1000
[  346.681569][T17147] chnl_net:caif_netlink_parms(): no params data found
[  346.718442][T17208] netlink: 'syz.3.3113': attribute type 1 has an invalid length.
[  346.790406][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3114'.
[  346.904538][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3116'.
[  346.933856][T17210] syzkaller1: entered promiscuous mode
[  346.942100][T17210] syzkaller1: entered allmulticast mode
[  346.949411][T17147] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.959465][T17147] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.967116][T17147] bridge_slave_0: entered allmulticast mode
[  346.974220][T17147] bridge_slave_0: entered promiscuous mode
[  346.999419][T17221] hsr_slave_1 (unregistering): left promiscuous mode
[  347.086808][T17228] netlink: 'syz.4.3117': attribute type 13 has an invalid length.
[  347.094679][T17228] netlink: 'syz.4.3117': attribute type 17 has an invalid length.
[  347.134069][T17147] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.153462][T17147] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.161227][T17147] bridge_slave_1: entered allmulticast mode
[  347.171600][T17147] bridge_slave_1: entered promiscuous mode
[  347.200696][T17233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3118'.
[  347.265342][ T5872] Bluetooth: hci1: command tx timeout
[  347.302189][T17228] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.314538][T17228] 8021q: adding VLAN 0 to HW filter on device team0
[  347.330746][T17247] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3121'.
[  347.344369][T17228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  347.374548][T17227] lo speed is unknown, defaulting to 1000
[  347.407208][T17250] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  347.407411][T17227] lo speed is unknown, defaulting to 1000
[  347.439285][T17147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.446149][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3121'.
[  347.451629][T17147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.478094][T17243] vlan1: entered promiscuous mode
[  347.483778][T17243] macvtap0: entered promiscuous mode
[  347.611006][T17147] team0: Port device team_slave_0 added
[  347.645697][T17147] team0: Port device team_slave_1 added
[  347.703243][T17147] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.745851][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.773675][T17147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.796259][T17147] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.804295][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.844120][T17147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.882011][T17272] netlink: 'syz.3.3127': attribute type 13 has an invalid length.
[  347.985814][ T5872] Bluetooth: hci3: command tx timeout
[  348.008376][T17272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  348.026304][T17263] infiniband syz!: set active
[  348.031070][T17263] infiniband syz!: added team_slave_0
[  348.132305][T17147] hsr_slave_0: entered promiscuous mode
[  348.149598][T17147] hsr_slave_1: entered promiscuous mode
[  348.159347][T17147] debugfs: 'hsr0' already exists in 'hsr'
[  348.166195][T17147] Cannot create hsr debugfs directory
[  348.181236][T17280] syzkaller1: entered promiscuous mode
[  348.187584][T17280] syzkaller1: entered allmulticast mode
[  348.188647][T17263] RDS/IB: syz!: added
[  348.199452][T17263] smc: adding ib device syz! with port count 1
[  348.206568][T17263] smc:    ib device syz! port 1 has pnetid 
[  348.709319][T17270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  348.780625][T17147] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  348.830985][T17147] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  348.877374][T17147] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  348.955050][T17147] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  349.089980][T17147] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.108631][T17147] 8021q: adding VLAN 0 to HW filter on device team0
[  349.132889][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.140185][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.200499][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.207982][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.346694][ T5872] Bluetooth: hci1: command tx timeout
[  349.379440][T17344] lo speed is unknown, defaulting to 1000
[  349.386414][T17344] lo speed is unknown, defaulting to 1000
[  349.503563][T17147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.571824][T17147] veth0_vlan: entered promiscuous mode
[  349.606915][T17147] veth1_vlan: entered promiscuous mode
[  349.652829][T17147] veth0_macvtap: entered promiscuous mode
[  349.668768][T17147] veth1_macvtap: entered promiscuous mode
[  349.698001][T17147] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.730832][T17147] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.754476][ T3506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.768698][ T3506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.788496][ T3506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.870528][ T3506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.917042][T17360] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  350.066948][ T5872] Bluetooth: hci3: command tx timeout
[  350.091117][T17361] lo speed is unknown, defaulting to 1000
[  350.102697][T17361] lo speed is unknown, defaulting to 1000
[  350.129483][T16248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.142412][ T7882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.158892][ T7882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.178428][T16248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.549263][T17372] lo speed is unknown, defaulting to 1000
[  350.825946][T17372] lo speed is unknown, defaulting to 1000
[  351.274581][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  351.283423][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  351.292832][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  351.304233][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  351.324563][T17399] lo speed is unknown, defaulting to 1000
[  351.331634][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  351.474576][T17399] lo speed is unknown, defaulting to 1000
[  351.481000][T17409] __nla_validate_parse: 2 callbacks suppressed
[  351.481023][T17409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3155'.
[  351.515679][T17409] team0: invalid flags given to default FDB implementation
[  351.538589][T17411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3155'.
[  351.582379][T17409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3155'.
[  351.630404][T17409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.818536][T17406] lo speed is unknown, defaulting to 1000
[  351.868990][T17406] lo speed is unknown, defaulting to 1000
[  352.145113][ T5864] Bluetooth: hci3: command tx timeout
[  352.171172][T17429] vxcan3: entered allmulticast mode
[  352.264204][T17432] pimreg: entered allmulticast mode
[  352.281270][T17432] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3164'.
[  352.285110][T17433] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3164'.
[  352.346645][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3165'.
[  352.546583][T17406] chnl_net:caif_netlink_parms(): no params data found
[  352.612579][T17452] vti0: entered promiscuous mode
[  352.618172][T17452] vti0: entered allmulticast mode
[  352.729715][T17457] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3170'.
[  352.739020][T17457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3170'.
[  352.748334][T17457] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3170'.
[  352.763353][T17406] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.778139][T17457] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3170'.
[  352.799012][T17406] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.811746][T17406] bridge_slave_0: entered allmulticast mode
[  352.824527][T17406] bridge_slave_0: entered promiscuous mode
[  352.833321][T17406] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.843321][T17406] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.860684][T17406] bridge_slave_1: entered allmulticast mode
[  352.871239][T17406] bridge_slave_1: entered promiscuous mode
[  352.885573][T17464] smc: net device bond0 applied user defined pnetid SYZ2
[  352.960541][ T3506] veth0_to_bond: left allmulticast mode
[  352.972759][ T3506] veth0_to_bond: left promiscuous mode
[  352.994357][ T3506] bridge5: port 2(veth0_to_bond) entered disabled state
[  353.012758][ T3506] veth3: left allmulticast mode
[  353.024038][ T3506] veth3: left promiscuous mode
[  353.039461][ T3506] bridge5: port 1(veth3) entered disabled state
[  353.080809][ T3506] bond0: left allmulticast mode
[  353.091758][ T3506] bridge12: port 1(bond0) entered disabled state
[  353.144378][T17476] sctp: [Deprecated]: syz.3.3175 (pid 17476) Use of int in max_burst socket option.
[  353.144378][T17476] Use struct sctp_assoc_value instead
[  353.425289][ T5864] Bluetooth: hci5: command tx timeout
[  353.709369][ T3506] bond3 (unregistering): (slave bridge6): Releasing active interface
[  354.040500][ T3506] bond1 (unregistering): Released all slaves
[  354.052463][ T3506] bond2 (unregistering): (slave wireguard1): Releasing backup interface
[  354.063252][ T3506] bond2 (unregistering): Released all slaves
[  354.074169][ T3506] bond3 (unregistering): Released all slaves
[  354.087908][ T3506] bond4 (unregistering): Released all slaves
[  354.100122][ T3506] bond5 (unregistering): Released all slaves
[  354.112798][ T3506] bond6 (unregistering): (slave batadv1): Releasing active interface
[  354.123466][ T3506] bond6 (unregistering): Released all slaves
[  354.133859][ T3506] bond0 (unregistering): Released all slaves
[  354.144739][ T3506] bond7 (unregistering): Released all slaves
[  354.158995][ T3506] bond8 (unregistering): Released all slaves
[  354.171612][T17406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.225889][ T5864] Bluetooth: hci3: command tx timeout
[  354.239633][T17495] tipc: Started in network mode
[  354.244578][T17495] tipc: Node identity 8eedfe04cf6d, cluster identity 4711
[  354.256551][T17495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.271392][T17406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.348637][T17495] tipc: Disabling bearer <eth:syzkaller0>
[  354.410268][T17406] team0: Port device team_slave_0 added
[  354.426914][ T3506] _ÐZ`Ô€@S!: left promiscuous mode
[  354.464698][T17406] team0: Port device team_slave_1 added
[  354.552030][ T3506] tipc: Disabling bearer <udp:s>
[  354.567976][ T3506] tipc: Left network mode
[  354.583847][ T3506] IPVS: stopping backup sync thread 17250 ...
[  354.607965][T17406] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.615610][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.651451][T17406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.692598][T17406] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.708953][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.747318][T17406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.907914][T17529] validate_nla: 2 callbacks suppressed
[  354.907937][T17529] netlink: 'syz.3.3191': attribute type 42 has an invalid length.
[  354.938452][T17406] hsr_slave_0: entered promiscuous mode
[  354.947539][T17406] hsr_slave_1: entered promiscuous mode
[  354.954215][T17406] debugfs: 'hsr0' already exists in 'hsr'
[  354.961248][T17406] Cannot create hsr debugfs directory
[  355.508897][ T5864] Bluetooth: hci5: command tx timeout
[  355.619444][   T30] audit: type=1800 audit(1756504847.278:10): pid=17557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3201" name="blkio.bfq.time_recursive" dev="tmpfs" ino=418 res=0 errno=0
[  355.764802][T17547] lo speed is unknown, defaulting to 1000
[  356.032379][T17575] netlink: 'syz.4.3203': attribute type 10 has an invalid length.
[  356.241703][T17547] lo speed is unknown, defaulting to 1000
[  356.241723][ T9303] lo speed is unknown, defaulting to 1000
[  356.256179][ T9303] syz1: Port: 1 Link DOWN
[  356.262972][T17575] syz_tun: entered promiscuous mode
[  356.289000][T17575] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  356.364633][T17578] bridge_slave_0: left allmulticast mode
[  356.371938][T17578] bridge_slave_0: left promiscuous mode
[  356.379413][T17578] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.400280][T17578] bridge_slave_1: left allmulticast mode
[  356.408176][T17578] bridge_slave_1: left promiscuous mode
[  356.414033][T17578] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.434596][T17578] bond0: (slave bond_slave_0): Releasing backup interface
[  356.459957][T17578] bond0: (slave bond_slave_1): Releasing backup interface
[  356.493428][T17578] team0: Port device team_slave_0 removed
[  356.523600][T17578] team0: Port device team_slave_1 removed
[  356.546118][T17578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.556807][T17578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.565838][T17578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.573726][T17578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.648228][T17588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  356.661683][T17588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.683136][T17590] __nla_validate_parse: 6 callbacks suppressed
[  356.683155][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3209'.
[  356.810537][T17588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  356.838526][T17588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.009414][T17406] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  357.023559][T17406] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  357.044625][T17588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.075041][T17588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.101400][T17605] netlink: 'syz.0.3213': attribute type 1 has an invalid length.
[  357.113498][T17406] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  357.125540][T17406] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  357.178759][T17588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  357.192470][T17588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.221184][ T3506] IPVS: stop unused estimator thread 0...
[  357.354309][ T7876] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  357.398726][ T7876] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.411691][ T7876] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  357.431341][ T7876] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.446049][ T7876] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  357.455365][ T7876] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.484353][ T3506] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  357.514316][ T3506] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  357.586181][ T5864] Bluetooth: hci5: command tx timeout
[  357.591977][T17406] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.636584][T17406] 8021q: adding VLAN 0 to HW filter on device team0
[  357.666278][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.673443][ T7871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.709049][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.716324][ T7871] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.720993][T17632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3220'.
[  357.789786][T17406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  357.818721][T17406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  358.098234][T17646] netlink: 201916 bytes leftover after parsing attributes in process `syz.4.3224'.
[  358.206539][T17650] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3224'.
[  358.346686][T17406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.542827][T17406] veth0_vlan: entered promiscuous mode
[  358.574139][T17406] veth1_vlan: entered promiscuous mode
[  358.597015][T17663] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3228'.
[  358.644304][T17406] veth0_macvtap: entered promiscuous mode
[  358.667383][T17406] veth1_macvtap: entered promiscuous mode
[  358.729727][T17406] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.777624][T17406] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.816238][ T7874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.833231][ T7874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.886238][ T7874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.913238][ T7874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.052606][ T6524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.079430][ T6524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.165532][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.176163][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.474667][T17687] lo speed is unknown, defaulting to 1000
[  359.498643][T17684] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  359.670317][ T5864] Bluetooth: hci5: command tx timeout
[  359.776210][T17699] netlink: 'syz.4.3237': attribute type 5 has an invalid length.
[  359.789408][T17701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.801846][ T9303] IPVS: starting estimator thread 0...
[  359.807212][T17699] netlink: 'syz.4.3237': attribute type 5 has an invalid length.
[  359.837141][T17701] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3236'.
[  359.908116][T17702] IPVS: using max 51 ests per chain, 122400 per kthread
[  359.945908][T17708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3237'.
[  360.012373][T17711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3240'.
[  360.057959][T17708] bridge_slave_1: left allmulticast mode
[  360.091224][T17708] bridge_slave_1: left promiscuous mode
[  360.110997][T17708] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.161194][T17708] bridge_slave_0: left allmulticast mode
[  360.179549][T17708] bridge_slave_0: left promiscuous mode
[  360.186361][T17708] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.438174][T17710] netlink: 'syz.3.3241': attribute type 1 has an invalid length.
[  360.538424][T17733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3247'.
[  360.560822][T17731] lo speed is unknown, defaulting to 1000
[  360.685243][T17737] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  360.769684][T17740] sctp: [Deprecated]: syz.4.3248 (pid 17740) Use of int in max_burst socket option.
[  360.769684][T17740] Use struct sctp_assoc_value instead
[  361.193959][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3253'.
[  361.300725][T17762] !
: renamed from dummy0 (while UP)
[  361.552199][T17768] lo speed is unknown, defaulting to 1000
[  361.801451][T17781] __nla_validate_parse: 3 callbacks suppressed
[  361.801473][T17781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3259'.
[  361.882456][T17785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3260'.
[  362.558091][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3266'.
[  362.571465][T17816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3266'.
[  362.606081][T17816] netlink: 'syz.4.3266': attribute type 5 has an invalid length.
[  362.658651][T17789] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.666161][T17789] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.728171][T17820] netlink: 'syz.2.3267': attribute type 2 has an invalid length.
[  362.748402][T17820] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.3267'.
[  363.038897][T17789] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.070619][T17789] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.079125][T17789] batadv_slave_1: left promiscuous mode
[  363.091078][T17789] batadv_slave_1: left allmulticast mode
[  363.416779][T17789] vti0: left promiscuous mode
[  363.421805][T17789] vti0: left allmulticast mode
[  363.429940][T17796] tc_dump_action: action bad kind
[  363.481047][ T7882] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.510322][ T7882] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.523605][ T7882] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.549899][ T7882] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.639847][ T7882] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.683210][ T7882] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.702934][ T7882] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.712951][ T7882] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.743420][T17844] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3273'.
[  363.753697][T17844] netlink: 'syz.3.3273': attribute type 83 has an invalid length.
[  363.835364][T17848] tipc: Started in network mode
[  363.840905][T17848] tipc: Node identity f266a594893d, cluster identity 4711
[  363.856003][T17848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.897080][T17848] syzkaller0: entered promiscuous mode
[  363.927057][T17848] syzkaller0: entered allmulticast mode
[  364.011930][T17848] tipc: Resetting bearer <eth:syzkaller0>
[  364.044818][T17846] tipc: Resetting bearer <eth:syzkaller0>
[  364.073741][T17846] tipc: Disabling bearer <eth:syzkaller0>
[  364.942530][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3298'.
[  365.271184][T17935] bond0: (slave syz_tun): Releasing backup interface
[  365.288752][T17935] bond0: (slave bond_slave_0): Releasing backup interface
[  365.308416][T17935] bond_slave_0: left promiscuous mode
[  365.344099][T17935] bond0: (slave bond_slave_1): Releasing backup interface
[  365.366552][T17935] bond_slave_1: left promiscuous mode
[  365.378737][T17935] team0: Port device team_slave_0 removed
[  365.391723][T17935] team0: Port device team_slave_1 removed
[  365.411663][T17935] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.429908][T17935] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.462013][T17907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.508815][T17945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3304'.
[  365.601631][T17956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3307'.
[  365.604777][T17957] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.3305'.
[  365.621365][T17957] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  365.629856][T17957] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  365.806863][T17975] geneve2: entered promiscuous mode
[  366.079732][T17994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.104096][T17993] tipc: Disabling bearer <eth:syzkaller0>
[  366.671064][T18037] netlink: 'syz.2.3334': attribute type 5 has an invalid length.
[  366.719340][T18047] 8021q: VLANs not supported on ip_vti0
[  366.772845][T18053] netlink: 'syz.1.3339': attribute type 2 has an invalid length.
[  366.793634][T18053] k›*·]‘: entered promiscuous mode
[  366.956898][T18064] __nla_validate_parse: 7 callbacks suppressed
[  366.956920][T18064] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3342'.
[  367.015838][T18064] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3342'.
[  367.037691][T18067] pimreg: left allmulticast mode
[  367.049996][T18066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3343'.
[  367.090132][T18066] bridge_slave_1: left allmulticast mode
[  367.098341][T18066] bridge_slave_1: left promiscuous mode
[  367.109295][T18066] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.123646][T18066] bridge_slave_0: left allmulticast mode
[  367.138756][T18066] bridge_slave_0: left promiscuous mode
[  367.147402][T18066] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.208985][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3345'.
[  367.428041][T18090] sctp: [Deprecated]: syz.2.3349 (pid 18090) Use of struct sctp_assoc_value in delayed_ack socket option.
[  367.428041][T18090] Use struct sctp_sack_info instead
[  367.457893][T18088] syzkaller0: entered promiscuous mode
[  367.464626][T18088] syzkaller0: entered allmulticast mode
[  367.476307][T18088] tipc: Started in network mode
[  367.481231][T18088] tipc: Node identity , cluster identity 4711
[  367.487940][T18088] tipc: Failed to obtain node identity
[  367.493469][T18088] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  367.534276][T18088] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3348'.
[  367.618587][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'.
[  367.631238][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3350'.
[  367.643631][T18092] netlink: 'syz.2.3350': attribute type 1 has an invalid length.
[  367.651649][T18092] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3350'.
[  367.777835][T18109] batadv_slave_0: entered promiscuous mode
[  367.858225][T18109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3354'.
[  367.883160][T18115] netlink: 'syz.1.3356': attribute type 13 has an invalid length.
[  367.898805][T18115] netlink: 'syz.1.3356': attribute type 17 has an invalid length.
[  367.907999][T18115] netlink: 'syz.1.3356': attribute type 27 has an invalid length.
[  367.919344][T18107] batadv_slave_0: left promiscuous mode
[  367.940248][T18114] netlink: 'syz.1.3356': attribute type 10 has an invalid length.
[  367.959470][T18120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.976501][T18114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3356'.
[  367.988979][ T6075] IPVS: starting estimator thread 0...
[  368.060305][T18114] team0: Port device geneve0 added
[  368.075218][T18123] IPVS: using max 44 ests per chain, 105600 per kthread
[  368.203836][T18137] openvswitch: netlink: Missing key (keys=40, expected=80)
[  368.765111][T18180] lo speed is unknown, defaulting to 1000
[  369.100136][T18193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  369.128479][T18193] dvmrp0: entered allmulticast mode
[  369.138866][T18194] sit0: entered promiscuous mode
[  369.147525][T18194] netlink: 'syz.1.3382': attribute type 1 has an invalid length.
[  369.700062][T18231] syzkaller1: entered promiscuous mode
[  369.711152][T18231] syzkaller1: entered allmulticast mode
[  369.914783][T18247] bridge_slave_0: left allmulticast mode
[  369.928297][T18247] bridge_slave_0: left promiscuous mode
[  369.934165][T18247] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.954319][T18247] bridge_slave_1: left allmulticast mode
[  369.965428][T18247] bridge_slave_1: left promiscuous mode
[  369.971231][T18247] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.988152][T18247] bond0: (slave bond_slave_0): Releasing backup interface
[  370.006952][T18247] bond0: (slave bond_slave_1): Releasing backup interface
[  370.023867][T18247] team0: Failed to send options change via netlink (err -105)
[  370.032351][T18247] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  370.042612][T18247] team0: Port device team_slave_0 removed
[  370.049813][T18247] team0: Failed to send options change via netlink (err -105)
[  370.057776][T18247] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  370.067836][T18247] team0: Port device team_slave_1 removed
[  370.073811][T18247] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.081705][T18247] batman_adv: batadv0: Removing interface: batadv_slave_1
[  370.100032][T18253] team0: Failed to send options change via netlink (err -105)
[  370.112614][T18253] team0: Mode changed to "activebackup"
[  370.133716][T18255] erspan0: entered promiscuous mode
[  370.148127][T18255] erspan0: left promiscuous mode
[  370.255621][T18267] netlink: 'syz.3.3406': attribute type 3 has an invalid length.
[  370.283751][T18267] syz_tun: entered allmulticast mode
[  370.331122][T18270] netlink: 'syz.1.3407': attribute type 13 has an invalid length.
[  370.343226][T18267] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  370.380517][   T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  370.433605][T18280] policy can only be matched on NF_INET_PRE_ROUTING
[  370.433638][T18280] unable to load match
[  370.498282][   T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  370.513403][   T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  370.528498][T18266] syz_tun: left allmulticast mode
[  370.533982][   T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  370.589955][T18286] dummy0: entered promiscuous mode
[  370.602653][T18286] team0: entered promiscuous mode
[  370.609744][T18286] team_slave_0: entered promiscuous mode
[  370.622570][T18286] team_slave_1: entered promiscuous mode
[  370.641026][T18286] geneve0: entered promiscuous mode
[  370.790607][T18293] hsr_slave_1 (unregistering): left promiscuous mode
[  370.926972][T18296] lo speed is unknown, defaulting to 1000
[  371.508084][T18348] syzkaller0: entered promiscuous mode
[  371.513630][T18348] syzkaller0: entered allmulticast mode
[  371.691292][T18358] syzkaller1: entered promiscuous mode
[  371.705129][T18358] syzkaller1: entered allmulticast mode
[  371.743737][T18358] lo speed is unknown, defaulting to 1000
[  371.941377][T18379] macvlan2: entered promiscuous mode
[  371.957618][T18379] bond0: entered promiscuous mode
[  371.970595][T18379] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  372.197020][T18384] lo speed is unknown, defaulting to 1000
[  372.214638][T18394] __nla_validate_parse: 16 callbacks suppressed
[  372.214663][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'.
[  372.236127][T18394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'.
[  372.241154][T18397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3449'.
[  372.256894][T18397] validate_nla: 1 callbacks suppressed
[  372.256917][T18397] netlink: 'syz.4.3449': attribute type 1 has an invalid length.
[  372.272051][T18397] netlink: 'syz.4.3449': attribute type 2 has an invalid length.
[  372.280918][T18397] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3449'.
[  372.402330][T18396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3448'.
[  373.499755][T18442] syzkaller1: entered promiscuous mode
[  373.510983][T18442] syzkaller1: entered allmulticast mode
[  373.550953][T18443] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  373.616556][T18439] lo speed is unknown, defaulting to 1000
[  373.623803][T18446] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.636527][T18437] netlink: 'syz.0.3461': attribute type 1 has an invalid length.
[  373.653386][T18437] nbd: error processing sock list
[  373.674235][T18437] block nbd2: shutting down sockets
[  373.745068][    C1] ==================================================================
[  373.753216][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  373.761177][    C1] Read of size 2 at addr ffff88807d134c2a by task syz.2.3466/18451
[  373.769354][    C1] 
[  373.771795][    C1] CPU: 1 UID: 0 PID: 18451 Comm: syz.2.3466 Not tainted syzkaller #0 PREEMPT(full) 
[  373.771823][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  373.771836][    C1] Call Trace:
[  373.771845][    C1]  <IRQ>
[  373.771861][    C1]  dump_stack_lvl+0x189/0x250
[  373.771889][    C1]  ? rcu_is_watching+0x15/0xb0
[  373.771911][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  373.771933][    C1]  ? rcu_is_watching+0x15/0xb0
[  373.771953][    C1]  ? lock_release+0x4b/0x3e0
[  373.771982][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  373.772008][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  373.772034][    C1]  print_report+0xca/0x240
[  373.772054][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  373.772079][    C1]  kasan_report+0x118/0x150
[  373.772108][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  373.772137][    C1]  rose_timer_expiry+0x471/0x4b0
[  373.772165][    C1]  call_timer_fn+0x17e/0x5f0
[  373.772193][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  373.772219][    C1]  ? call_timer_fn+0xbe/0x5f0
[  373.772245][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  373.772277][    C1]  ? rcu_is_watching+0x15/0xb0
[  373.772296][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  373.772323][    C1]  __run_timer_base+0x61a/0x860
[  373.772348][    C1]  ? ktime_get+0x3e/0x1f0
[  373.772375][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  373.772398][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  373.772427][    C1]  run_timer_softirq+0xb7/0x180
[  373.772452][    C1]  handle_softirqs+0x283/0x870
[  373.772473][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  373.772496][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  373.772518][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  373.772543][    C1]  __irq_exit_rcu+0xca/0x1f0
[  373.772562][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  373.772586][    C1]  irq_exit_rcu+0x9/0x30
[  373.772603][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  373.772630][    C1]  </IRQ>
[  373.772638][    C1]  <TASK>
[  373.772646][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  373.772667][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  373.772696][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 7f 76 eb 09 e8 2a 3e 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  373.772714][    C1] RSP: 0018:ffffc9000fe6f758 EFLAGS: 00000282
[  373.772734][    C1] RAX: 223e80e4231bfc00 RBX: 0000000000000000 RCX: 223e80e4231bfc00
[  373.772749][    C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff81911696
[  373.772764][    C1] RBP: ffffc9000fe6f7b0 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6
[  373.772778][    C1] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff88802e0f9e00
[  373.772793][    C1] R13: dffffc0000000000 R14: ffff888048459e00 R15: ffff8880b873ab58
[  373.772814][    C1]  ? finish_task_switch+0x266/0x950
[  373.772842][    C1]  ? finish_task_switch+0x266/0x950
[  373.772911][    C1]  __schedule+0x17a0/0x4cc0
[  373.772943][    C1]  ? futex_private_hash_get+0x43/0x290
[  373.772963][    C1]  ? plist_check_list+0x30f/0x330
[  373.772993][    C1]  ? __pfx___schedule+0x10/0x10
[  373.773018][    C1]  ? rcu_is_watching+0x15/0xb0
[  373.773038][    C1]  ? schedule+0x91/0x360
[  373.773061][    C1]  ? rcu_is_watching+0x15/0xb0
[  373.773083][    C1]  ? lock_release+0x4b/0x3e0
[  373.773114][    C1]  schedule+0x165/0x360
[  373.773141][    C1]  __futex_wait+0x1c3/0x3e0
[  373.773173][    C1]  ? __pfx___futex_wait+0x10/0x10
[  373.773199][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  373.773227][    C1]  ? __pfx_futex_wake_mark+0x10/0x10
[  373.773257][    C1]  ? lock_release+0x4b/0x3e0
[  373.773290][    C1]  futex_wait+0x104/0x360
[  373.773318][    C1]  ? __pfx_futex_wait+0x10/0x10
[  373.773351][    C1]  ? file_init_path+0x3b/0x590
[  373.773373][    C1]  do_futex+0x333/0x420
[  373.773396][    C1]  ? file_init_path+0x434/0x590
[  373.773417][    C1]  ? __pfx_do_futex+0x10/0x10
[  373.773440][    C1]  ? fd_install+0x97/0x540
[  373.773465][    C1]  ? rcu_is_watching+0x15/0xb0
[  373.773486][    C1]  __se_sys_futex+0x36f/0x400
[  373.773512][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  373.773535][    C1]  ? rcu_is_watching+0x15/0xb0
[  373.773555][    C1]  ? __x64_sys_futex+0x21/0xf0
[  373.773580][    C1]  do_syscall_64+0xfa/0x3b0
[  373.773599][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.773614][    C1]  ? clear_bhb_loop+0x60/0xb0
[  373.773632][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.773646][    C1] RIP: 0033:0x7f9bb618ebe9
[  373.773661][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  373.773675][    C1] RSP: 002b:00007f9bb43ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  373.773696][    C1] RAX: ffffffffffffffda RBX: 00007f9bb63b5fa8 RCX: 00007f9bb618ebe9
[  373.773711][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9bb63b5fa8
[  373.773724][    C1] RBP: 00007f9bb63b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  373.773737][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  373.773749][    C1] R13: 00007f9bb63b6038 R14: 00007ffcc0495b20 R15: 00007ffcc0495c08
[  373.773773][    C1]  </TASK>
[  373.773780][    C1] 
[  374.272701][    C1] Allocated by task 18267:
[  374.277402][    C1]  kasan_save_track+0x3e/0x80
[  374.282103][    C1]  __kasan_kmalloc+0x93/0xb0
[  374.286698][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  374.292269][    C1]  alloc_work_entries+0xc0/0x360
[  374.297210][    C1]  iw_cm_listen+0x42/0x230
[  374.301717][    C1]  rdma_listen+0xa53/0xd30
[  374.306135][    C1]  cma_listen_on_dev+0x3f5/0x720
[  374.311423][    C1]  cma_add_one+0x647/0xa50
[  374.316295][    C1]  add_client_context+0x367/0x790
[  374.321427][    C1]  enable_device_and_get+0x19b/0x3d0
[  374.326826][    C1]  ib_register_device+0x10c3/0x1380
[  374.332128][    C1]  siw_newlink+0x90a/0xd70
[  374.336577][    C1]  nldev_newlink+0x4a5/0x5a0
[  374.341195][    C1]  rdma_nl_rcv+0x6ab/0x980
[  374.345608][    C1]  netlink_unicast+0x82f/0x9e0
[  374.350465][    C1]  netlink_sendmsg+0x805/0xb30
[  374.355421][    C1]  __sock_sendmsg+0x21c/0x270
[  374.360102][    C1]  ____sys_sendmsg+0x505/0x830
[  374.364963][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  374.369736][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  374.374694][    C1]  do_syscall_64+0xfa/0x3b0
[  374.379204][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.385274][    C1] 
[  374.387697][    C1] Freed by task 18267:
[  374.391761][    C1]  kasan_save_track+0x3e/0x80
[  374.396617][    C1]  kasan_save_free_info+0x46/0x50
[  374.402271][    C1]  __kasan_slab_free+0x5b/0x80
[  374.407149][    C1]  kfree+0x18e/0x440
[  374.411073][    C1]  iwcm_deref_id+0x1c7/0x250
[  374.415761][    C1]  _destroy_id+0x7f8/0xff0
[  374.420401][    C1]  cma_process_remove+0x64c/0xbf0
[  374.425707][    C1]  cma_add_one+0x7d6/0xa50
[  374.430150][    C1]  add_client_context+0x367/0x790
[  374.435232][    C1]  enable_device_and_get+0x19b/0x3d0
[  374.440548][    C1]  ib_register_device+0x10c3/0x1380
[  374.445763][    C1]  siw_newlink+0x90a/0xd70
[  374.450180][    C1]  nldev_newlink+0x4a5/0x5a0
[  374.454799][    C1]  rdma_nl_rcv+0x6ab/0x980
[  374.459229][    C1]  netlink_unicast+0x82f/0x9e0
[  374.464018][    C1]  netlink_sendmsg+0x805/0xb30
[  374.469049][    C1]  __sock_sendmsg+0x21c/0x270
[  374.473730][    C1]  ____sys_sendmsg+0x505/0x830
[  374.478581][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  374.483260][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  374.488199][    C1]  do_syscall_64+0xfa/0x3b0
[  374.493568][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.499463][    C1] 
[  374.501790][    C1] The buggy address belongs to the object at ffff88807d134c00
[  374.501790][    C1]  which belongs to the cache kmalloc-512 of size 512
[  374.515951][    C1] The buggy address is located 42 bytes inside of
[  374.515951][    C1]  freed 512-byte region [ffff88807d134c00, ffff88807d134e00)
[  374.529770][    C1] 
[  374.532198][    C1] The buggy address belongs to the physical page:
[  374.538881][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d134
[  374.547951][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  374.556814][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  374.564446][    C1] page_type: f5(slab)
[  374.568443][    C1] raw: 00fff00000000040 ffff88801a441c80 ffffea0001e9df00 dead000000000002
[  374.577506][    C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  374.586291][    C1] head: 00fff00000000040 ffff88801a441c80 ffffea0001e9df00 dead000000000002
[  374.595053][    C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  374.603732][    C1] head: 00fff00000000002 ffffea0001f44d01 00000000ffffffff 00000000ffffffff
[  374.612514][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  374.621439][    C1] page dumped because: kasan: bad access detected
[  374.627843][    C1] page_owner tracks the page as allocated
[  374.633642][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5232, tgid 5232 (udevd), ts 33172539382, free_ts 33159805762
[  374.654484][    C1]  post_alloc_hook+0x240/0x2a0
[  374.659443][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  374.665078][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  374.670894][    C1]  alloc_pages_mpol+0x232/0x4a0
[  374.675756][    C1]  allocate_slab+0x8a/0x370
[  374.680280][    C1]  ___slab_alloc+0xbeb/0x1410
[  374.685154][    C1]  __kmalloc_cache_noprof+0x296/0x3d0
[  374.690530][    C1]  kernfs_fop_open+0x397/0xca0
[  374.695295][    C1]  do_dentry_open+0x950/0x13f0
[  374.700145][    C1]  vfs_open+0x3b/0x340
[  374.704214][    C1]  path_openat+0x2ee5/0x3830
[  374.708813][    C1]  do_filp_open+0x1fa/0x410
[  374.713340][    C1]  do_sys_openat2+0x121/0x1c0
[  374.718110][    C1]  __x64_sys_openat+0x138/0x170
[  374.722957][    C1]  do_syscall_64+0xfa/0x3b0
[  374.727543][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.733440][    C1] page last free pid 5243 tgid 5243 stack trace:
[  374.739777][    C1]  __free_frozen_pages+0xbc4/0xd30
[  374.744998][    C1]  stack_depot_save_flags+0x436/0x860
[  374.750556][    C1]  kasan_save_track+0x4f/0x80
[  374.755258][    C1]  __kasan_slab_alloc+0x6c/0x80
[  374.760132][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  374.765613][    C1]  radix_tree_node_alloc+0x19c/0x3a0
[  374.771032][    C1]  idr_get_free+0x2b3/0xa70
[  374.775825][    C1]  idr_alloc_u32+0x159/0x2d0
[  374.780449][    C1]  idr_alloc_cyclic+0x9b/0x1b0
[  374.785238][    C1]  alloc_pid+0x33a/0xab0
[  374.789500][    C1]  copy_process+0x198e/0x3c00
[  374.794266][    C1]  kernel_clone+0x21e/0x840
[  374.798974][    C1]  __x64_sys_clone+0x18b/0x1e0
[  374.803850][    C1]  do_syscall_64+0xfa/0x3b0
[  374.808468][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.814394][    C1] 
[  374.816806][    C1] Memory state around the buggy address:
[  374.822432][    C1]  ffff88807d134b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  374.830507][    C1]  ffff88807d134b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  374.838764][    C1] >ffff88807d134c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  374.846830][    C1]                                   ^
[  374.852810][    C1]  ffff88807d134c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  374.861047][    C1]  ffff88807d134d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  374.869106][    C1] ==================================================================
[  374.877400][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  374.884619][    C1] CPU: 1 UID: 0 PID: 18451 Comm: syz.2.3466 Not tainted syzkaller #0 PREEMPT(full) 
[  374.894050][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  374.904318][    C1] Call Trace:
[  374.907716][    C1]  <IRQ>
[  374.910691][    C1]  dump_stack_lvl+0x99/0x250
[  374.915696][    C1]  ? __asan_memcpy+0x40/0x70
[  374.920398][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.925717][    C1]  ? __pfx__printk+0x10/0x10
[  374.930337][    C1]  vpanic+0x281/0x750
[  374.934351][    C1]  ? __pfx_vpanic+0x10/0x10
[  374.938885][    C1]  ? rcu_is_watching+0x15/0xb0
[  374.943698][    C1]  panic+0xb9/0xc0
[  374.947462][    C1]  ? __pfx_panic+0x10/0x10
[  374.951946][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  374.957887][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  374.963960][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  374.969301][    C1]  check_panic_on_warn+0x89/0xb0
[  374.974307][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  374.979436][    C1]  end_report+0x78/0x160
[  374.983690][    C1]  kasan_report+0x129/0x150
[  374.988204][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  374.993422][    C1]  rose_timer_expiry+0x471/0x4b0
[  374.998563][    C1]  call_timer_fn+0x17e/0x5f0
[  375.003251][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  375.008717][    C1]  ? call_timer_fn+0xbe/0x5f0
[  375.013400][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  375.018610][    C1]  ? rcu_is_watching+0x15/0xb0
[  375.023390][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  375.029029][    C1]  __run_timer_base+0x61a/0x860
[  375.033892][    C1]  ? ktime_get+0x3e/0x1f0
[  375.038224][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  375.043705][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  375.049982][    C1]  run_timer_softirq+0xb7/0x180
[  375.054943][    C1]  handle_softirqs+0x283/0x870
[  375.060072][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  375.064848][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  375.070228][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  375.075436][    C1]  __irq_exit_rcu+0xca/0x1f0
[  375.080030][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  375.085228][    C1]  irq_exit_rcu+0x9/0x30
[  375.089470][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  375.095187][    C1]  </IRQ>
[  375.098116][    C1]  <TASK>
[  375.101051][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  375.107037][    C1] RIP: 0010:finish_task_switch+0x26b/0x950
[  375.112989][    C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 7f 76 eb 09 e8 2a 3e 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  375.132685][    C1] RSP: 0018:ffffc9000fe6f758 EFLAGS: 00000282
[  375.138794][    C1] RAX: 223e80e4231bfc00 RBX: 0000000000000000 RCX: 223e80e4231bfc00
[  375.146953][    C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff81911696
[  375.155363][    C1] RBP: ffffc9000fe6f7b0 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6
[  375.163424][    C1] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffff88802e0f9e00
[  375.171417][    C1] R13: dffffc0000000000 R14: ffff888048459e00 R15: ffff8880b873ab58
[  375.179408][    C1]  ? finish_task_switch+0x266/0x950
[  375.184707][    C1]  ? finish_task_switch+0x266/0x950
[  375.189941][    C1]  __schedule+0x17a0/0x4cc0
[  375.194452][    C1]  ? futex_private_hash_get+0x43/0x290
[  375.199911][    C1]  ? plist_check_list+0x30f/0x330
[  375.205043][    C1]  ? __pfx___schedule+0x10/0x10
[  375.209908][    C1]  ? rcu_is_watching+0x15/0xb0
[  375.214679][    C1]  ? schedule+0x91/0x360
[  375.219012][    C1]  ? rcu_is_watching+0x15/0xb0
[  375.223863][    C1]  ? lock_release+0x4b/0x3e0
[  375.228546][    C1]  schedule+0x165/0x360
[  375.232800][    C1]  __futex_wait+0x1c3/0x3e0
[  375.237334][    C1]  ? __pfx___futex_wait+0x10/0x10
[  375.242368][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  375.248269][    C1]  ? __pfx_futex_wake_mark+0x10/0x10
[  375.253783][    C1]  ? lock_release+0x4b/0x3e0
[  375.258391][    C1]  futex_wait+0x104/0x360
[  375.262730][    C1]  ? __pfx_futex_wait+0x10/0x10
[  375.267599][    C1]  ? file_init_path+0x3b/0x590
[  375.272558][    C1]  do_futex+0x333/0x420
[  375.276933][    C1]  ? file_init_path+0x434/0x590
[  375.281812][    C1]  ? __pfx_do_futex+0x10/0x10
[  375.286596][    C1]  ? fd_install+0x97/0x540
[  375.291142][    C1]  ? rcu_is_watching+0x15/0xb0
[  375.295937][    C1]  __se_sys_futex+0x36f/0x400
[  375.300727][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  375.306126][    C1]  ? rcu_is_watching+0x15/0xb0
[  375.310906][    C1]  ? __x64_sys_futex+0x21/0xf0
[  375.315684][    C1]  do_syscall_64+0xfa/0x3b0
[  375.320371][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.326438][    C1]  ? clear_bhb_loop+0x60/0xb0
[  375.331117][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.337012][    C1] RIP: 0033:0x7f9bb618ebe9
[  375.341444][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.361067][    C1] RSP: 002b:00007f9bb43ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  375.369609][    C1] RAX: ffffffffffffffda RBX: 00007f9bb63b5fa8 RCX: 00007f9bb618ebe9
[  375.377682][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9bb63b5fa8
[  375.385751][    C1] RBP: 00007f9bb63b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  375.393920][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  375.401898][    C1] R13: 00007f9bb63b6038 R14: 00007ffcc0495b20 R15: 00007ffcc0495c08
[  375.409884][    C1]  </TASK>
[  375.413076][    C1] Kernel Offset: disabled
[  375.417393][    C1] Rebooting in 86400 seconds..