last executing test programs:

5.57636646s ago: executing program 0 (id=1450):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000001000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff0700670200001f000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

5.549387906s ago: executing program 4 (id=1452):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x800, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(r4, r4, 0x0, 0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000010c0)={0x40, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "04720c945bd30bf141315e54b7"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x40}}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4)

5.510360092s ago: executing program 0 (id=1453):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000002c0), 0x4)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4)
sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000100)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x24040090)
connect$netlink(r2, &(0x7f0000000040)=@unspec, 0xc)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000840)=0x6, 0x4)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000140)=0x4082, 0x4)
sendto$inet(r8, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="d800000018008106bc65f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400100004c230000fab94dcf5c04e04bcb726f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdfd809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97010000000000000000", 0xd8}], 0x1}, 0x4004010)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x13}}}}})

5.394219883s ago: executing program 3 (id=1454):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)
close(r0)

5.30205523s ago: executing program 3 (id=1456):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x2, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x3}}, {{0x1}, {0x1, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x3}}], 0x40)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x37, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}]}, 0x28)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/user\x00')
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r6=>0x0}, &(0x7f0000000200)=0xc)
r7 = getpid()
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x198, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x198}, 0x1, 0x0, 0x0, 0x2040050}, 0x4044)
pipe(&(0x7f0000000480)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000004c0)={'team_slave_0\x00', {0x2, 0x4e23, @broadcast}})
close(r9)
write$cgroup_devices(r8, &(0x7f0000000500)={'b', ' *:* ', 'w\x00'}, 0x8)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000540)=<r10=>0x0)
r11 = syz_open_procfs$namespace(r10, &(0x7f0000000580)='ns/pid_for_children\x00')
pwrite64(r11, &(0x7f00000005c0)="5a43edf03cd2265f63343a7ab03ada762abc004502f4f87f98ba74cd3c7bd8bef2c8d9b9d76cecbd5fc8537992aceb7b9974aaeb5e6619449b725b45cd829910263e146cb3c211f9a8ef920c54c39cdc71fc51af95b12a9aeb6c58e3cc90b8809797c3653db03d61fd747b", 0x6b, 0x7f)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'ip6_vti0\x00', <r12=>0x0, 0x2f, 0x3, 0x2, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x7fffffff, 0x80}})
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1d, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x0, 0x8, 0xb, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x1, 0x5, 0x5, 0xfffffffffffffff8, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='GPL\x00', 0x6, 0xd9, &(0x7f0000000780)=""/217, 0x2a4747922881557c, 0x12, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a00)=[r2, r13, r8, r2], &(0x7f0000000a40)=[{0x1, 0x2, 0xc, 0x4}, {0x2, 0x2, 0x0, 0x9}, {0x1, 0x1, 0x0, 0xb}, {0x0, 0x5, 0x7, 0x1}, {0x1, 0x2, 0x9, 0x8}, {0x5, 0x3, 0x1, 0xddce95b7ab950a81}], 0x10, 0xa}, 0x94)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000b80)={0xaa, 0xaa35, 0x8202, 0x3, 0x7, 0x5, 0x633, 0x101, <r14=>0x0}, &(0x7f0000000bc0)=0x20)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000c00)=@assoc_value={<r15=>r14, 0x8}, &(0x7f0000000c40)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000003300)={<r16=>r15, 0x0, 0x0, 0x7, 0x8}, &(0x7f0000003340)=0x18)
sendmmsg$inet_sctp(r8, &(0x7f0000004cc0)=[{&(0x7f0000000c80)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000003240)=[{&(0x7f0000000cc0)="cd64ed7e68b68c17dc3f1ebed3a2f6d015dcb4d0e9372c2bdfdc63e95013cc25bc53626df85d17b0c813d8f46a5ff3ba502608c246c1e03b030c0bb85e1948eabab05da0f1d2befdc0be6e82f84f9b2dddcd16d94cc117f8011da80567d52fa0111bf800a75f245e2cc353f2360a909c1ec57bcbe263a0b4e0268952003d824ee8f0abe3fbce26b1ebecc887307dc5370105fc6351d642f38917144ca388fbaf55c799daf5c50bb36335b939fdf601ba40", 0xb1}, {&(0x7f0000000d80)="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", 0xfd}, {&(0x7f0000000e80)="e2bee3349a53a8bf4383e131340d3136c255d91835c77b8e530706e19582799aede9c111175cf32de8a4c87216395033042716c4cb0ac2aa30bfe90750bbd7301e54254b6150a44967ac1b7812bfcefae6b92e5c5b57b800339bbd9f36e40addc01c592bb73419e8e868b0b6047ab7dbee1e406a49f2f3e2af00ce0a53a91b672001d3c40b4d3f3e9e28d44e5b598a8ecd637d9bbf384fa0f407ea9f814042b081351e2d1a853dbc101ecfcc6a1f1eca18f4c1db244af76f9ddd1093d18861a22e03df8acd0b5a513f", 0xc9}, {&(0x7f0000000f80)="503ce5ce271e928576541c2d7c028084f08d89", 0x13}, {&(0x7f0000000fc0)="ce90db3a405138641dca087c75cc721c66c1cc0c1e535a13105ee1b32b33a2aab114043146a894194d2a454214dd29061d0ff8ed45dfc9d420fff7afd9149a620ab93ebf197bccd655efd140667469139bacfee0e424abaedcc977129da109471b9fdce05666322b6e3fcfea96cdf52a0889801b89a24068665bbd6abc24e8e08fbb9f25b9541ad3a7b12cd25ef5eaa373422b3fe8eab93472bb9e05250a528705c3d4098fc57b847acaf77c1d50a016020875b070fffa5f5b4283b6f273235436ca116acf528d3fddb5c45e5b36864c46376bb64b55e1b1a3cd6a8234e229a5d6f46926bf91", 0xe6}, {&(0x7f00000010c0)="b339f094469b8ec21d85cde7e8e97bdb8052d72181c1dbebc40f31cef2dc740b061d46391b63c0d88086b293fa70376b506a6adedc76710192fb68070594d809e4f099a902e74c9a5a86055db660eb1727a21a0d1cbfe76a9838ba0b54a5", 0x5e}, {&(0x7f0000001140)="c663f9dea62732384131de35afdb2d73c4ace0c4de6a21394858eb5c062cc1781b5ff32f5a1c2ea4e01c9f40144b55b85404b4788cd85ea3dc29dacd25219a9a69eea17f79c2f8c4821ab40c5b21b43c34a66d4bdfabb58b9e1e6dd18f81a789f4ee392a32684cd1cd97b4bf84658bcb85cfac3ba5c561645919fad8ac15d76d0252b1d92c52b19222ca6b02ed4ade149acf3c1b52df77fe6c849e34be9168a747225d23", 0xa4}, {&(0x7f0000001200)="1fe75c086e926871b25c5558b4486f53", 0x10}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="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", 0x1000}], 0xa, &(0x7f0000003380)=[@authinfo={0x18, 0x84, 0x6, {0x6fa}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0xc, 0x0, 0x9, 0x81, 0x5, 0x6363000, 0x0, r15}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0xff, 0x2, 0x0, 0x80000001, 0x3, 0x6, 0x100, r15}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x89c5, 0x0, 0x7, 0xd27, 0x9, 0x1, 0xfff, r15}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x200}}, @sndrcv={0x30, 0x84, 0x1, {0xffff, 0x9, 0xc, 0x4, 0x4, 0x7, 0x2, 0x7427, r16}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x6, 0x2, 0xf67, r15}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x158, 0x20042800}, {&(0x7f0000003500)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0x9}, 0x1c, &(0x7f00000045c0)=[{&(0x7f0000003540)="aa6b1dd9c8afbfd9de88d68a21308644ba79ad", 0x13}, {&(0x7f0000003580)="4aa1b55d32732ee8f06f8019614fdfd8e6acc6054c973fae5a0e3c63d2e17c6b167f1fdba4b560f5e6d98b47270e25f0", 0x30}, {&(0x7f00000035c0)="c7f93e8c5bae1e29b15bccc940b428cb5abf6c9eaf475f5c8abe2b4d6bb1a75eb8ab840a5cc9ea0f9264eaf4569d1c945f6b662088fdfdebfa3bcf08bac9d153d7c3beb354e259df77146cee6449547416e74ead1bc8d511b03539b05ddc6263420aa44edc85a7c8bc594d924d454845bec204f6b0f2a549582687d9bb9bf54678e3657605e09d2976fb25c6b51517e0712539ee5edb9ed54830db81150884f7aeb62fac2b6476fbd59227a44673e0d4bb363a7bb47e27c3a1fb0a8ad3afd8e855480eda4418ad8bf8d98f16d90cb05a5ed856df1d0c094d61d73a44b71916c0836ba662e1ce2d777add3df971d540f094feeff8f0f4accdeef80a783e87c8cd468bde9f407aa4d0958cb3a644595cb5f5469fbf3f53969ede35a2b0f52bcc619e53a3a53608bc363209187a823c799180f5a781a4d8d5ea0634908b5f54c410b7cf3e6ed8b790fd188e099aac35dee7b643df1d8bc52cd8923b8a285204684dab6c57927f5677462e795566d7bac26a80e34be04a921cf5a74b07a747846313a55cdcfdab0f29dc8cae52d526f863a7468eaec58623ac0d926baf74981e6724ba1383e15f191d3a68fbdc484c433f0903e6e135c194a53150055344f8a64afecbd691ce3e2be955661bac9648d54ab553ed59f907f4e1560fd0875272ba5f96393d1b59a7c20d072e8aec9a52992518b9d6f5e489bbd88ab6e8bc6f36a6f1c8df8c64427006f724604c4f94c9629f52b8f48376b753250fee6e5462651d37e58b8067d046830e0f4b5514d2fb97e12a9412818b96a588d69882e8f0612f027fdd173456dbb21538bce7b1fba1de749fb56d2f3355b142d82427b3faf9ef7da6e1f5cf3acbaaeede335f04cbdd7bcfc30d180a07dadeb202045ac6c0187e187b1505eea8a935a1af5991405e456418c37f0b7d64faa8fb23175cb60d9ff74b3a6a044203a8df022422fe5913bdec927e0c08c09eaa342acd6fa2ac3a25afa68213a834bdbb685d628a9e97a18a41eb08c0d0cd42c1e474417bedf567313d1bc298b9635ed9a41d585134973c67899bd0bb732c7a3546985538090b02a3d691d3cfe983214800b6ad1cde8c03e3167aadff190719c098c9981f6ad72243a24af49bc6cfc78e64de1de97e842e6f167795bde16085dc4fd06fe7869accec125864963b756359c31d02b3d67b5ac6a120977dcc10254a887f0431c75fef8369abbb2b940d6fadf982d764d7cef85455a473ec80b40f8e6248cd14d510faf6aadc6e16b1be410f9715e50b1dd449fd92109970bc8692807e1fa8e4ea1d9fb30975d093bd7a561c8ba513b221f662427ede027e4a21cdc8d5b7955fac27ac18263a3eea649b40f4227a5947c40883f5e81927665f887f4fd75e05ad9245de25ee5490659ccd7951eac001f0cdc31b5f94e46250477eea8186b1afc301a82f5bcfae55e43f558b935280005114515845e3df94bab11e44b6ed3107b2702285a92d14458490e84644aaed2fb4cc0120f88d579ee1f4c0d6bb70baeded70d0f6e9cfacb1d3d93b0747e957fefad421ed65112a123b8b1ffe1e324ed4ea7045b100b86aff23e20f802b42ace050805b295122bc64afae0ac4c3d2097046b93a34158c3b2ff35351fb929d71932328a80c92d8d57181973c54e7986eae67f40e3578ff11edb1a512624496b7dc8f95e6be7e27a92a3ec3f0cf075f64c93b651bf051c024bff74d84ed77b7b3eaf564770527e7e94856f56b751fa7247fb30e8521010d632e2c540732b4f187b797eef18a423eb1d39ce301c8214c0ed85da6db6213abcf4f66924a27c984abd3ae1d15661ced4dba5ea4de00c0bd20efa3fd4f7707ec65f33def6ed9ac1350bba54a12adc69436d51651d2a92bb9ec681da933325d1450ef5745529a7ad9c90c2285ad3780849f6825ff53704ddf3e8f0806d6c5c3f6e5fafbbead67ffd5df6ab2777328c87a6669192bfbd019f5dacc4a28a39ecb9c16582b7f759928a1f0f2eecae8aa4a8d22f81154d82d4a630d5819bdf5941eeb3c6bacf6fa9617059a2284e34ed4d798968fbac1ca5deac49ae8a3ef85692829e2d4be4b329ec98a36c9a1095d7046f5341140ac5c134fc084c7c0065f6eaf0455fff914367b0d348d2f9c885782b312a7d3ebb3e788b1d4996ba2b48da494b80f449016391d54c760c0f954091ee1f2ad4d99886013fc811a0a7fd6ca2d8c562c371ff9e5d2223b1768b3ab80445f2013cc52c66ebeb10b19fd4eea29389b1b259b71e4ca2493ebbadc36e0c593c74276a036d62fd4202c898d0ecab408062eda83a77a8be6c3cddf8fa45a5e1ca8a38b9fab1902635530dd92dbd5fc1c56ddc0eafa0172407b06258e984c489b2c223af84deb56310ae38fdd63bfc1d179f63ef5d24c5b1f16a162072c3aab5aa649fd77f6cbf519c865d98592ca944e8d4197ba71ca42f59f97a5ea69fe19d68be58e9283c910f671d2fa7c83dc3d73fc8125286491a7efb1c153a7f06912f1468475d79736681d147be3f423aabecf82c5ff5978fe152b1e69b0290188730bcb3de24d0781e6417db8919b2515455bde06b2a59a1e76d8cbb06c106ef7dbf115769f832d8b6f047a47bbca7639cc8252c24f402059f823b038c2b0ec3f756c774defc17e73acec71a1c418831243d83e9692dd3281fdf959cbff37ab2431d0f654e93828857a4ca4e4bd838df3d166080e97c98e1af3af77a5ec82dced82c3b18cb2d73ccdab9df9676f4238cb7ea6b07c12913ea085d10ad3f0b16210f74156185f63f526bda9fe55306a0d03006f518b43f936a332f4efa8d08cfd06f35dc9f3abb1e66d9b5beb7a63ef130c9de472a23eb911f963389861c5e9476b8687001e7a367c3cbff252be1a6d65e6fd31dc83f021cd92cd8022ae9d67d7727f95681954ba1b435b00f0b851541986f29b35ae12a1993a1fafcbb48233a483858c511317f252f732c6984f772c16cd658bf56b76989864067d3907765752cdbb8094f9963af307e2aaf74aa465647ae3092486927fd7b89100b4d161be6d8c3025caece32b669394f97a73d67f0d7551be27228c08320e589d87bb4c702e0e3730871bdae98ffdd8a4ba90a33a6d05261edfd62724bb07f13f89b444a622fd5f46e9271d48676e75a6fd9360fe7c1718fd70309c06de810d8176dee5d4c46c20a812dc2bee1238078825cc3aac61f922493a8adea6b358ad16621009fb3c5ca8ca07ad9b8ba4672a6d1c273f29a8093cff7e3f144c83d75cd593b4c647a81141a47adafbe7ecc3ab96e6fc342f316cc00cd700d3c5855e39fb9795a3bb52325d7d81c340956ba9309082c631050fe2f7820e763b7c84f9e7e387ecf7689529bfac106a420dce00811bf81cfc9a02109d3d4594530f3808330013a873a6edd786af4606d49a01bdf90eb9456d87d3b3e80f2b7c927e4adc6b5faae7844577e9666634c6a6b993a212d3e44286c2a9fb9089f3d65bfb43882089dd7d408f7ae2719d6bce97a69767f463e04eccc7b866d59edc7b0450ca6468ce72fdcb0b23aee80f525a69c58c58cdb165336172c895d228b6aaa5b90806e87e2d114e179ae4bdd3d5ec611a745ef6a77ed15341c7ba025947193eda2b2a3934410cd9a1399f4b9218dda3097341815a2bc41fd34aa880922fbdd3318b1fb79a3eb689313525c9890083b1b93320ba2476fa85b6c8f017d020bf7d528ecee2c9f148af78709669f8a188adb7b844ec39a1a15a5d4e935b9c30008c109f9c81a4c99684d40c82a606569a4f6f52940924b864fc8d2cdf73bb5d58a86dd5206dc5c23b79120b593f3922436fe4767ca304af22139a13dd755cd1aa5f3e1d9a1f4bda5a9ad990657c25838a114f02263217d381e2a50a5dec9523fe4e6e5f2967a834420c3a54e88ba08bbfa66be35f5ee342487cd981746c1031de639bd3e5f6556db1a49080ffc65944919435b7e1aaa20ed14cbc1cc0039caafd101c22669d805bc277763e2701eb806462a649a0d036c8a20b56b9529dbbc3b5e4818b80c3f7391099e4406b51936f5aace66a92a7dd677962eb2b586e0313de2a6412e1361c357ff6c11371ba1e7dbc4a21bab83cfef030715881ad96e838b5d5318f15197fee67e8026e8f37d5772be778d34b3267a1fec5b640cd8f7d062a5fd4cd8c90a0b95c204fc08a5df47f9eee131706b0ef8bf34088f403dc4daf5dbff4de5d5f2af1a78aa9c4d28985c714b82e3f9fb51767d6f59dea2ea2c2bad6994a58362645c04727d07c900d339cf8984f2c593721eea2cae0ed3cf8b71c1d3ef0484fbf08cac68ef4c2e7dba0d7d898f73de5b8da97f4744e8c1188b92fa08cd8bdd76a87204f61c69f8e5d6f6b41a4a88316c97ecf288930dc13c5dd6785b42c0ab16f423393ae2e04a161f0162c7b71da5831282b9a8261791293083d1414b4ec5210d5eeb590fccfe92c44f075f99ec30988b4ee88c0be7c16ca0238bc96764cf3ed7d0bcad2aaf8cc40aec6dbbf4873106f44440e3b33abee2267934a5c72988be6701e2a30fbdb0a578f01b8e393f487b0069b3f13e83fd75a7eb3fcf17ce1f9cfa2373a6cb11f5efb7dd55d157838ca9700cc4b05d93d1f6fb986532457cac0447fadecaa021f9034f95c0946ecde615adfaabcd454aff04c6b8c44656d6f991efa5c67b4d63a2c751afa8c02b46deb546e2bde61a1d13743ad4b3616b5915c31933532cd04b308360c4341ef8ffeefef3d0902f46b248b24816db9b004d1ebbffec1db62dd1968b4509d0df1988b6995b28bb06c2fa371b293ce79c74e57d0ad9fdad02b0361406bd899d14acb9696f51fa63b72adbdd385d64201911c046089e47666fefee57d024b669b62df171c2ab61f17218bfd96880364ab5d4ac83608a855def27b9efc8191c13f31c6053f684dea81155b54490e6b6e2b1cf6742ba4e5859201265afaf6d73afe1eac351df8bfd2a893ee5eb5463332ab8ea58d524a8668b54d736974f5e6e56dccf8a2fc28e57e73a2ebcfae0e3a23bcdd13786f01143bca0b94de0de4cb097a577d732089a9ee9df0a8d916792578ba80e012cc154516b58725745bbd0bc203645555477499692acfb73256caf0e2dd8b47c52434af8431d271fb31bec0790608dd5d090cada08bbc4f1a111fd06edbfe39e84a725f7819a42f177f11896b667005340fab45934e1fb714eaf99b7925a907a3001e156f0702113c1a42f118e7a91532cddf590c0096da12aa5b69d11bc76c91865f5d49ce46252d5e869e2fdf1c38a2fa5e3443d8406c8e3204bfa6d6f41d19151457037b7ee544818efee068c9dffffce0926d46507e3c25fc2f94d0746aa0239a048aa5538cbb9e630c0ff2f402b5fd978f94a3e8f8628bdc883041e06483886d4610ae6f7df6263e0ff2074fd29b29759d534eb34b6c388b98c8fbf7397742c2c0e45a4e0f06d4944f828e32b8aba9cde2901b8fc445e315435ee65b2f1699c72285142cef47675026fa28c96aa81f03de6c59858261479d4b05df7378767b0369155461f67c8f2c195c708f6b243cb99d3edabb75675a2d5dbf821c026265a2e0786153d2c04bf63ddc69b4a7f6933e27186472269d609bb0aac9eb7b00f2cba0346fdeaf42c6fbf876c2b453d62639eb0eb6fdea97e0f25518f72e7309509a39046fdba1acfa0b9d90f0a28bb40e35bb9275283bb9ca58d0007184cd4089e157f96c4536fb3e7063caf6b08c87cad9ba1cab31502343a1c7b76c3cbd38bea5ec6d871f87f4e41d9dc86208e5a4ebd658c7250ac4c70491ad3a0ffec3", 0x1000}], 0x3, &(0x7f0000004600)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x58, 0x24008080}, {&(0x7f0000004680)=@in6={0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c, &(0x7f0000004880)=[{&(0x7f00000046c0)="aa333fa978ed64904613a7c55c5ce799ff25f10605fd3a0df6b5a5d3dd50a1373a81d053c5002fd12566ef6024d7714ad7fe0c0b471886298a3cd81a68b17acc2b43c359ebd56e585c2114b6b3a649840d9f6b2cf0bef8c1619769d375fb9c9e4986b105b3e6146aa8695ebc88fc6283b4952e882326ef8ba59584c33af8458cd224a4c294876555fbbb70b7aa86b79a20e2ed578f4657e156a7417f92634113e728238863d15eafa9e2d1a7d4a4dfb897f2e9c4adf3adbaf9a3c374bd7f21fbb942d9d3450b4e455503711503effdc0ded27c417fd3b13242", 0xd9}, {&(0x7f00000047c0)="0b514750f1758d3abc04044a275917b9ef13e9bca284c5d97fd6f28515c3fa3b928f628699858ff406a4f622dd65947b32aad76c4f47878e5cc3599d1bdedca2bc95d32a5cc0094c5414040fa14537330696fb4b051c12ece38a4512e668c4d6bb53ee0b12fa8421373760ed7ab13601e4d25a99d00aaf1cde6d37b6f5a726f42a2c1cc58776b5c08de73a88ed7bf4d963e120d958e7", 0x96}], 0x2, &(0x7f00000048c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x8001}}], 0x18, 0x80c0}, {&(0x7f0000004900)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000004c00)=[{&(0x7f0000004940)="6639a32587a966c0175d363f891edc4f1e0433e539684cd236da864d683fa1fffbc8d548ad2f52d0f7589f4f9fa8c59634b4164833303174d54efc81c4199d2503e39ad13087a135cbe986b6cfefa3a65c9b4698d9122aac91396b0d2748ecef1184f5ac4ca8628ef24cf807cbd7a2b38b5c4478344d5cf14db5feca6bfbb38a9fa379f5a7167b4a76dc036909bcaee175c34aeaec442df129829500d8511868414967c5a1f17c3ab3f07cdc", 0xac}, {&(0x7f0000004a00)="e01af0b5b97f2d8b5890ab2133d5b78fee940e3e27ab04cd0fb3270a43fe7dc99d6d825012c51cea797cbabec8f4303d934fd12a05195a5a293a8a8ceffa72d587664cb84ad536c7329f55a8612071775afdda9ff2ae1a1c8e5328dea41481e6066319dfecaa9449d2ed081b2e01ebb6462294ffcf8483eefed7e9c09ab711a8ffbb84c537cc62c581581b7f8fda453e4a5a6eac5cd40654d6376ad661d6c0d50eddad69526c506a8f8d5b2fde972697e425eefe88abc03a4e35f40bcabdd12bbd97e628d565e39a4c53a040a6c1c47a662748dc6674ed9035c493c0", 0xdc}, {&(0x7f0000004b00)="ff259fa39377b686e9f88cf6b0b49c4c4e52778115923bddb9bb2ce686994b00ab2f21305c51824376411333c66f62da43d61cad80174019b31a4c97501855b31c236ac6b81593fa4c549d0feb64e0195ba63f2a18243d22dcf4c5d0cfc2d8957675c7556826511e776c151e15d201e0db9a5d22a0a656e7304b54d78d094f9a22ae5ce1acf98c7e24ccaa3295165a0a290cfa8e46fcb1310bff937bef56b7ef67aa20867520a9dd6ab38a98130e0a4f17d0df940f2400f2f7d310341165cb5c28", 0xc1}], 0x3, &(0x7f0000004c40)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x8001}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x3081, 0x20d, 0x4, 0xd5, 0x23, 0xffff, 0x7fffffff, r14}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}], 0x78, 0x4010}], 0x4, 0x14)
bind$ax25(r2, &(0x7f0000004dc0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r9, 0x84, 0x15, &(0x7f0000004e40)={0x1}, 0x1)
socket(0x11, 0x80000, 0xa67)
socket(0xf, 0x800, 0xd72)
socket$inet6_sctp(0xa, 0x1, 0x84)

5.277485122s ago: executing program 3 (id=1457):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x7b, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x10, 0x4, 0x2, 0x8, 0x6d, 0x66, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xb, 0x76, [@rand_addr=0x64010102, @remote]}, @timestamp={0x44, 0xc, 0x53, 0x0, 0xb, [0x10, 0xb8c]}, @timestamp_prespec={0x44, 0x14, 0x46, 0x3, 0x6, [{@remote, 0x1}, {@broadcast, 0xffffffff}]}]}}, @payload_mcast={{{{{{0x2d, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x2, 0x0, 0x0, 0x1, 0x2, 0x4, 0x1, 0x4, 0x3ff, 0x0, 0x4e21, 0x4e22}, 0x3, 0x3}, 0x4, 0x3}, 0x2}}, [0x0]}}}}}, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x40)
socket$inet6(0xa, 0x2, 0x3a)

5.140101272s ago: executing program 3 (id=1459):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f0000000cc0)=""/4084, 0x12a)
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef", 0x87}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c", 0x21}], 0x2, &(0x7f00000004c0)=[@op={0x18}], 0x18, 0x20000850}], 0x1, 0x4000080)

4.939418027s ago: executing program 2 (id=1462):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000b9b99fce2505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0e1dd416", 0x4}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1000000001000000140100002d880000d6116dd1886d78017aae96622f52f7db47f36c1c2375ca4aae062b7efc34b7a8ce6da81fe74e9ad5d3804418003c3b94c277349f92e74b602df183b7529d5953d7c6cb43e552b1a1e47c5219b143b8bff670327723bd724f401c0ee7e4938eb0d67a7e267a34f6d579b5912f4faaefc08a9a5a97a22a9e44dd6f042c8c0461b4d2c633c352ffda6ac511e85402b47cc7837afa2de5c2d54b598d760816b3490b258c710d5493006169e74d90219327c0d47b83b0ee92c462f8"], 0x20}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="ad421a52da", 0x5}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000001000000130000000cf3689140ad0b4b7560fdca1a0303c41f8eafc1f68ca40d056a090f04611310acf5579f4377dfe87fd57c71929c5e98149aa22e212555050a13ba2903132f3f2b450430a9075b"], 0x10}}], 0x2, 0x4000854)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x5, 0x3, 0xab, 0x4, 0x5, 0xfffffffffffffff9], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000b9b99fce2505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
sendmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0e1dd416", 0x4}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1000000001000000140100002d880000d6116dd1886d78017aae96622f52f7db47f36c1c2375ca4aae062b7efc34b7a8ce6da81fe74e9ad5d3804418003c3b94c277349f92e74b602df183b7529d5953d7c6cb43e552b1a1e47c5219b143b8bff670327723bd724f401c0ee7e4938eb0d67a7e267a34f6d579b5912f4faaefc08a9a5a97a22a9e44dd6f042c8c0461b4d2c633c352ffda6ac511e85402b47cc7837afa2de5c2d54b598d760816b3490b258c710d5493006169e74d90219327c0d47b83b0ee92c462f8"], 0x20}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="ad421a52da", 0x5}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000000000000001000000130000000cf3689140ad0b4b7560fdca1a0303c41f8eafc1f68ca40d056a090f04611310acf5579f4377dfe87fd57c71929c5e98149aa22e212555050a13ba2903132f3f2b450430a9075b"], 0x10}}], 0x2, 0x4000854) (async)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x5, 0x3, 0xab, 0x4, 0x5, 0xfffffffffffffff9], 0x6, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) (async)

4.84008453s ago: executing program 2 (id=1464):
r0 = socket(0x25, 0x0, 0xf46)
accept4$inet6(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x180000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000180)=0x2)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x28}}, 0x8000)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @private2, 0x2}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='signal_deliver\x00', r2, 0x0, 0x44f}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r2, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

4.825362479s ago: executing program 1 (id=1465):
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000020}, 0x40800)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="ac8e000002380022be239bfb44cf74a27dad00556c85132685355f71650bdd9f3ac1e273d209cc2a0376f26b6c63300775fbee0dd070257f37915d834518432c6cac225261fdc79c8161708aa3c2eba1b901eaf865865b46aeddebdcd29d7617f2650439e8efb66424a345413f8e8bd905fa02bfbb99851645b6d538c5357304a8b90aae8e2c9f5cf6fabb6801c3c09fe7228bf8c11f86440f68ff41362e5fe09b9c4dd9b4fc8b0b320dc59e88", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000e8e300fff267ff970616380d94aeff0000007b8af8ff0000002cc8d3666d12e234a041c63e539800bfa200008c0f0000000007020000f8ffffffb703000008000000b70400000100000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
setsockopt$inet6_int(r4, 0x29, 0x1, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000300)="00214717a70700000000030600710a5e31163ceb9d04", 0x16}], 0x1, 0x8, 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x3a, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000000000069078ac1414bbac1414aa440479c14e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r8, &(0x7f0000000380)}, 0x20)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x4001)
r9 = socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff5db1f4d2962308004500001c0000000000889078ac1e0001ac1414aa1100907800000082"], 0x0)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000080)={<r11=>r10, 0x2, 0x8, 0x8})
syz_emit_ethernet(0xed, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaa22ffffffffffff88480000000000000000000000000000000000000000000000000100b2a708b303883e4dcf3d8dd186642246f5bb1ceef6726df0edfb60962c31600b56434a1ac601b68b9404df7b3b896f8a3010a4ee04ac7d891b478ef43a2e99d576fe0c23d1efe05d90b5777431d056d4b95df86c74f619700cd651f52f5deec5b312fa80f429d4ddc75d62bb0e40472182ba014437596ca0e94be0d955d54e0679020140db82e493351c9c31cbc7fdb98c158a7fdf1f72dd862149a41c67aafb44cc40298b8f4e875bf99de5da9f0e0900000000000000d141f103c3fa86966ce3e4e8f2c2"], 0x0)
sendmsg$802154_dgram(r11, &(0x7f0000000340)={&(0x7f00000000c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000140)={&(0x7f0000000200)="52f0bf1414a6a6f393d7179659673f3aad555b7d43a247d5b2e9662a547a37f5dc699ef88dfc4e171c1a6c342bc22a0f32444fa9f4ba6e32c0d84e92f24ecefe910426a4741b1acf5c8afc48590bdea971ee7866456e2487b10339fbcbc24fe03392b27b886b067a25de1eb23f3d1f52fc5be647bc8f755a8c97919129446c11b9c64dad3ed7777632fc8df3d670ad13acfefce248502f894066c2832259d8edd483e979ebcf575da0739a4fc98d8ae47ef67772b7e2366abe8d014a3be9146a91fe1035ecddc243e89ff3dff573424e5abfc31fdd378b7cbf956cfd79fc881d50888efbb6d8674ac8c2", 0xea}, 0x1, 0x0, 0x0, 0x20040000}, 0x1)

1.783388387s ago: executing program 4 (id=1466):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00')
ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="360000000f14010025bd7000fbdbdf2508000100000e0000099045006973736d005dee5704f89ae121aacab122cfd52400"], 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804)
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'sit0\x00'})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0xb}, {0xffff, 0x5}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x25, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
socket$rxrpc(0x21, 0x2, 0xa)

1.782862884s ago: executing program 0 (id=1467):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x306, @random="5cc56363425f"}, 0x28, {0x2, 0x4e23, @broadcast}, 'veth0_to_bond\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000180)=""/30, 0x1202000, 0x1000, 0x85b, 0x3}, 0x20)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000d0a01088bb68b770073797a300000cc0f0000000000007a310000000004000380"], 0x30}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
unshare(0x60600)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x2}, 0x20)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)

1.777367278s ago: executing program 3 (id=1468):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async)
sendmmsg$inet6(r3, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="0f386bb8", 0x4}], 0x1}}], 0x1, 0x4000) (async)
shutdown(r3, 0x1) (async)
ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r3}, 0x8, &(0x7f00000000c0)=[0xcc, 0x9, 0x1, 0x40, 0xff, 0x0, 0x67, 0x6], 0x5, 0x8})
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1880007d59a23b6151905742"], 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x14)

1.69218118s ago: executing program 2 (id=1469):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00001400"], 0x30}}, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x8800)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000004900), 0x0, 0x4048884)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="89c9157afde08ea4387fbe5739d1766791827bb588e5a143fea3b55347c980460b48a9d8a6579c910b46ee7b5e2ecf067a673b4bd1061bfd94c39247445926593da3717f", 0x44}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x800)
sendfile(r0, r2, 0x0, 0xffffffff000)
listen(r0, 0x4)

1.622352508s ago: executing program 1 (id=1470):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0)
socketpair(0x21, 0xa, 0x2, &(0x7f0000002100))

1.58995135s ago: executing program 3 (id=1471):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, 0x0)

1.36002378s ago: executing program 1 (id=1472):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2}, 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
openat$cgroup_ro(r4, &(0x7f00000005c0)='memory.current\x00', 0x7a05, 0x1700)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=<r8=>r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRES8=r8, @ANYRES8=r4, @ANYRESHEX=r3], 0x44}}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x11, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'gre0\x00', <r12=>0x0})
bind$packet(r10, &(0x7f0000000180)={0x11, 0x3, r12}, 0x14)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r10, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540), 0x395}, 0x24048000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x10, 0xfffffff8, 0x6c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x80, 0xcb, 0x5}})
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', r12, @fallback=0x27, r4, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r13, 0x0, 0x3a, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d50000000100000bb500000500242c106558", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r14, 0x84, 0x6e, &(0x7f0000000700)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x9, @empty, 0x206}, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e22, 0x7e76, @mcast1, 0x7}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}], 0xc0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50)

1.358909041s ago: executing program 0 (id=1473):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0153000000000000000001"], 0x34}, 0x1, 0x40030000000000}, 0x0) (async)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0x90, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000800011fb3529540000000040800034000000003240001801400018008009b02e000000108000200e00000010c000280050001000000000004001640000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0}) (async, rerun: 32)
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x114) (async, rerun: 32)
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.251262844s ago: executing program 1 (id=1474):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
r1 = socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000600)) (async)
pipe(&(0x7f0000000500)) (async)
r2 = socket(0x2, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14c, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @random="ebd15a6ff27b", {0x3, 0x6}, @value=@ver_80211n={0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x30, @void}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x2}, @device_a, @from_mac=@device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xd0, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_a, @initial, {0x4, 0x4}, @broadcast, @value={0x5, 0x1, 0x1, 0x1, 0xf9}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0x99, "2be5ce98dd819f05027245b630d972011c59744c34290c11c73d8223a9e071454514bef7f7cf372763318ad0980b6a73c9778194fe73d632d5d3c5c1440d53442887da6167802c013706826a23d92811a48db0f1f79a2fde1ccb1c0ca04980b4554598d93f383cf28d9def99489165b57b85dacc1cb705d4c3396ea8ecf612bcbc950325f2dbe14cab881403e6904da486f830d44c28dc296b"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008890) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r5, r5, 0x2f}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000000)=0x7, 0x4) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (rerun: 64)

1.085281664s ago: executing program 4 (id=1475):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0xfffffffc}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "6e4121a155ad31c35c257eee9ce30a43b5"}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xe4}}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'caif0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x8}, {0x6}}}, 0x24}}, 0x0)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x5f, 0x2e, 0x30, 0x61, 0x61, 0x30, 0x71, 0x61]}}, &(0x7f0000000280)=""/3, 0x22, 0x3, 0x1, 0x5, 0x10000}, 0x28)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x1, 0xd, 0x28e, 0x4286, 0x1, 0x480, '\x00', r9, r10, 0x5, 0x2, 0x4, 0x8}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f0000000180)=0x101, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r12=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10)
bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)

887.242521ms ago: executing program 0 (id=1476):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) (async, rerun: 32)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000700000008000300223877b28015f252781f8ffc8ac7251b083df014c317da409de5fcb63cdc63724e890d18b832d5b5632e92e324dc8df17106cc353e64ce6c0036aa24a9ab811481ef23e5fc98a470fa71f03e476051dc328d1ea6fc7652ae2f7df0c1cd1ad08c56783174986ce6aa09baa4ec42fa1b17286a94da5e165f17277c283733c7e17d0eb79f2c248362ec56d146c6c6ffaa7b305e3d8fc9aadb953e327d2b0f2d574a143de2d6bd12d0bb9034", @ANYRES32=r4, @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0)

724.301935ms ago: executing program 2 (id=1477):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xb1}]}, 0x48}}, 0x0)

591.115673ms ago: executing program 0 (id=1478):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
read$alg(r1, &(0x7f0000000cc0)=""/4084, 0x12a)
sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef", 0x87}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c", 0x21}], 0x2, &(0x7f00000004c0)=[@op={0x18}], 0x18, 0x20000850}], 0x1, 0x4000080)

464.414879ms ago: executing program 4 (id=1479):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f6ff00680900000000000000000000000008006556d6f94a41a519c09179bb79945235783bed3b490395c8c8966112617edb7d819b98b71e787b28d26a41c06f927b8aff2ecc03facf2a83195f58631147508269730e26db5effb0367c0a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="00a001dfa93c3ad1741126daf5b614bfdd2f6aea4bc46d516ed342376dde20bc5e61605a568899be04b8fd8cefc461150e9ec292413e4b5f2bd633f949f0f91cddcf909abb8eac4ff4da6e47", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r6 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000020001811b502a980dcda3900"/35, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000003000000000000000000000d0a00000000000000010000060400000001000000040000000061006cb0f2491e9b7bc8180a13032c0ea7f9f7ebce9351e333792007a35c5f7118a8602c0bcf3734c50a99b9ba55d211fd9a95472537e83a2fb31bae78b1c23fccdd8c496723791e37aa40472099c7926494f8f0dbc604d0c4970a865dcc874b190ac07c4a830c018a8034a9784b225baf37c336b32567d8eb6dfc364936e9ec28269dc6e4dbf827b967587b4bf492027ef77385099acdd6da20cc883902a1ecc91f650b4f6c3117"], &(0x7f0000000f40)=""/4088, 0x3b, 0xff8, 0x8}, 0x28)
getsockopt(r0, 0xc7, 0xfb, &(0x7f0000000040), &(0x7f0000000100))

264.19956ms ago: executing program 2 (id=1480):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x6004}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x84}}, 0x4000)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

263.050903ms ago: executing program 1 (id=1481):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x3, 0x8, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, &(0x7f0000000140)='4', &(0x7f00000001c0)=""/163}, 0x20)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32=r0, @ANYBLOB="01000000000002004c0012800b00010067726574617000003c000280060011004e240000060018001f0100000800070000ffffff06000f000400000008001400390000000800040001000100060010"], 0x6c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x3, 0x8, 0x1}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12"], 0x48) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, &(0x7f0000000140)='4', &(0x7f00000001c0)=""/163}, 0x20) (async)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32=r0, @ANYBLOB="01000000000002004c0012800b00010067726574617000003c000280060011004e240000060018001f0100000800070000ffffff06000f000400000008001400390000000800040001000100060010"], 0x6c}}, 0x0) (async)

258.451233ms ago: executing program 4 (id=1482):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async, rerun: 64)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) (async)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="af", 0x1}], 0x1}}], 0x1, 0x4040005) (async)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) (async, rerun: 64)
listen(r2, 0x1ad72f7) (async, rerun: 64)
accept4(r2, 0x0, 0x0, 0x80000) (async)
r4 = accept4$netrom(r2, 0x0, 0x0, 0x80000)
writev(r4, &(0x7f00000001c0), 0x7) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x4000001)
r5 = socket$inet6(0xa, 0x5, 0x0)
listen(r5, 0x6)
recvmsg(r5, &(0x7f0000001440)={&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/152, 0x98}], 0x1, &(0x7f0000000440)=""/4096, 0x1000}, 0x40000121)
close(0xffffffffffffffff) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="183008000900000000008b00030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x70, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x70}}, 0x20004004)

124.927028ms ago: executing program 2 (id=1483):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000000a09040000000000200000020000000900010073797a3000000000090002007379"], 0x94}}, 0x0) (async, rerun: 64)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r7, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
setsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000380)=0x75858052, 0x4) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0)
r10 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000007000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0xe0, &(0x7f0000000600)=""/224, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x970}, 0x94)

60.75052ms ago: executing program 4 (id=1484):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000145a8a0d6790a6d3aa98de9439be7115d8b06aa5658d7b8b34feb9d71ee6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x7ff, 0x1, 0xd, 0x6}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x0, 0xc4811)
setsockopt$inet_int(r0, 0x0, 0x27, 0x0, 0x0)

0s ago: executing program 1 (id=1485):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x24}}, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
close(r3)
syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff0180c20000030806000108000604", @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYRES8], 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a63cfd7a8c646321325d00292021564c4d472882c5862141c9fab674b0beeb93cfefaac0148117cd8842b16be28a9bd39077bb2701df67a81c5303898453ba5e771391931abf0dff5dc1fa23cfb81b16837904c05c21ab58d0c9f1f1a6f0022ed10146aae009200cce1b991183066f41a8feab", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r9}, 0x18)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r10=>0x0})
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={<r11=>0x0, 0x2, 0x7fff, 0x7abf4523, 0x0, 0x401}, &(0x7f0000000240)=0x14)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000280)={r11, 0xe}, 0x8)
sendto$packet(r4, &(0x7f0000000400)="ab96850806329a16d34feb74032b6687ffffffff0fbff69100ffe4a436a3c2dada51378f20bd0979714bdbb555e77bc046010f9058c0a80af7f28fd22f3a53c27b2a00"/76, 0x4c, 0x48004, &(0x7f0000000200)={0x11, 0x10, r10, 0x1, 0x0, 0x6, @remote}, 0x14)
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)={@val={0x70}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "2915a94a11e4fb7e83969bcb5cdbf104b1e6f70749e196288c4e8cd4f9aafcaf", "d0e077bf945c40399aeb88c150a72ed1", {"3b6de13637349f05f524bbde1d772edc", "6e545f1b3d4836bdea89c2b3c01c59e4"}}}}}}}}, 0x8a)

kernel console output (not intermixed with test programs):

 T5963] bridge0: port 3(dummy0) entered blocking state
[   93.231880][ T5963] bridge0: port 3(dummy0) entered disabled state
[   93.238449][ T5963] dummy0: entered allmulticast mode
[   93.245566][ T5963] bridge0: port 3(dummy0) entered blocking state
[   93.252119][ T5963] bridge0: port 3(dummy0) entered forwarding state
[   93.273181][ T5964] veth1_to_bond: entered allmulticast mode
[   93.293436][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.312467][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.333297][ T5960] veth1_to_bond: left allmulticast mode
[   93.339131][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.351688][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.392533][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.429836][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.534119][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.549871][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.581086][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.592750][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.678946][ T5973] netlink: 820 bytes leftover after parsing attributes in process `syz.1.6'.
[   93.693816][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.717875][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.742243][ T5973] openvswitch: netlink: Flow key attr not present in new flow.
[   93.834216][ T5976] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8'.
[   93.882718][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.891717][ T5976] tipc: Started in network mode
[   93.896697][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.897029][ T5976] tipc: Node identity 466a47a9c1cd, cluster identity 4711
[   93.913194][ T5976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.959932][ T5976] syzkaller0: entered promiscuous mode
[   93.965437][ T5976] syzkaller0: entered allmulticast mode
[   93.999585][ T5976] syzkaller0: left promiscuous mode
[   94.004832][ T5976] syzkaller0: left allmulticast mode
[   94.016901][ T5976] syzkaller0: mtu less than device minimum
[   94.040635][ T5975] tipc: Resetting bearer <eth:syzkaller0>
[   94.085875][ T5975] tipc: Disabling bearer <eth:syzkaller0>
[   94.146104][ T5978] Illegal XDP return value 206568018 on prog  (id 4) dev N/A, expect packet loss!
[   94.209132][ T5978] netlink: 'syz.4.5': attribute type 1 has an invalid length.
[   94.216749][ T5978] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5'.
[   94.306206][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'.
[   94.342763][ T5854] Bluetooth: hci2: command tx timeout
[   94.348782][ T5157] Bluetooth: hci1: command tx timeout
[   94.395010][ T5990] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   94.406240][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'.
[   94.417666][ T5157] Bluetooth: hci0: command tx timeout
[   94.423112][ T5157] Bluetooth: hci4: command tx timeout
[   94.430916][ T5854] Bluetooth: hci3: command tx timeout
[   94.964786][ T6012] netlink: 2 bytes leftover after parsing attributes in process `syz.0.14'.
[   95.016617][ T6012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.105862][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.407262][   T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   95.504942][ T6039] netlink: 248 bytes leftover after parsing attributes in process `syz.0.19'.
[   96.212494][ T6054] netlink: zone id is out of range
[   96.223625][ T6054] netlink: zone id is out of range
[   96.237767][ T6054] netlink: zone id is out of range
[   96.253155][ T6054] netlink: zone id is out of range
[   96.270090][ T6054] netlink: zone id is out of range
[   96.278613][ T6054] netlink: zone id is out of range
[   96.841592][ T6073] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   96.922433][ T6075] netlink: 'syz.1.27': attribute type 9 has an invalid length.
[   96.947191][ T6075] netlink: 'syz.1.27': attribute type 7 has an invalid length.
[   96.980439][ T6075] netlink: 'syz.1.27': attribute type 8 has an invalid length.
[   97.238858][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'.
[   97.621306][ T6113] Bluetooth: MGMT ver 1.23
[   97.741466][ T5917] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[   97.928237][ T6127] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.941683][ T6119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.078034][ T6134] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.521577][ T6119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.603037][ T6156] netlink: 'syz.0.44': attribute type 11 has an invalid length.
[   98.617482][ T6156] netlink: 224 bytes leftover after parsing attributes in process `syz.0.44'.
[   98.659384][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.44'.
[   98.740868][ T6119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.825543][ T6166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   98.832975][ T6166] IPv6: NLM_F_CREATE should be set when creating new route
[   98.840320][ T6166] IPv6: NLM_F_CREATE should be set when creating new route
[   98.847586][ T6166] IPv6: NLM_F_CREATE should be set when creating new route
[   98.925859][ T6166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   98.962136][ T6166] Zero length message leads to an empty skb
[   98.979830][ T6119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.056537][ T6172] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   99.290046][ T1002] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.421599][ T6190] netlink: 844 bytes leftover after parsing attributes in process `syz.3.53'.
[   99.472880][ T1002] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.493758][ T1002] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.588176][ T6190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.53'.
[   99.607461][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.859005][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'.
[   99.882495][ T6210] netlink: 48 bytes leftover after parsing attributes in process `syz.0.59'.
[  100.078377][ T6204] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  100.108940][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'.
[  100.126712][ T6204] net_ratelimit: 16 callbacks suppressed
[  100.126736][ T6204] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  100.865198][ T6226] bridge_slave_1: left allmulticast mode
[  100.906491][ T6226] bridge_slave_1: left promiscuous mode
[  100.928087][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.956810][ T6226] bridge_slave_0: left allmulticast mode
[  100.975634][ T6226] bridge_slave_0: left promiscuous mode
[  100.984654][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.275514][ T6251] netlink: 788 bytes leftover after parsing attributes in process `syz.1.62'.
[  101.337022][ T6255] syzkaller1: entered promiscuous mode
[  101.407445][ T6255] syzkaller1: entered allmulticast mode
[  101.565140][ T6271] netlink: 'syz.3.74': attribute type 3 has an invalid length.
[  101.751499][ T6270] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  102.761686][ T6343] syz_tun: entered allmulticast mode
[  102.818864][ T6343] veth0_vlan: entered allmulticast mode
[  102.958637][ T6348] syz.3.96 (6348) used greatest stack depth: 17864 bytes left
[  103.026447][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'.
[  103.195835][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'.
[  103.202239][ T6357] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  103.232684][ T6357] macsec1: entered promiscuous mode
[  103.238496][ T6357] macsec1: entered allmulticast mode
[  103.244365][ T6357] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  103.503554][ T6379] netlink: 'syz.2.106': attribute type 10 has an invalid length.
[  103.541030][ T6382] netlink: 'syz.2.106': attribute type 10 has an invalid length.
[  103.559511][ T6386] syz_tun: entered allmulticast mode
[  103.584634][ T6386] veth0_vlan: entered allmulticast mode
[  103.686573][ T6379] team0: Port device geneve0 added
[  103.715739][ T6393] syzkaller1: entered promiscuous mode
[  103.736196][ T6393] syzkaller1: entered allmulticast mode
[  103.766065][ T6388] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  104.085173][ T6406] netlink: 'syz.4.114': attribute type 6 has an invalid length.
[  104.116545][ T6410] trusted_key: syz.1.115 sent an empty control message without MSG_MORE.
[  104.309794][ T6417] dvmrp0: entered allmulticast mode
[  104.326367][ T6418] team0: Port device syz_tun added
[  104.353281][ T6421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.395509][ T6421] tipc: Disabling bearer <eth:syzkaller0>
[  104.525339][ T6425] dvmrp1: entered allmulticast mode
[  104.532700][ T6427] dvmrp1: left allmulticast mode
[  104.541749][ T6428] __nla_validate_parse: 2 callbacks suppressed
[  104.541765][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'.
[  104.705382][ T1225] IPVS: starting estimator thread 0...
[  104.817745][ T6431] IPVS: using max 29 ests per chain, 69600 per kthread
[  104.990624][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.001145][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.372434][ T6460] netlink: 'syz.2.129': attribute type 32 has an invalid length.
[  105.824926][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'.
[  105.876186][ T6479] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  105.996624][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'.
[  106.005779][ T6491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.104871][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'.
[  106.156932][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'.
[  106.183468][ T6498] netlink: 2 bytes leftover after parsing attributes in process `syz.3.141'.
[  106.195877][ T6499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.144'.
[  106.256711][ T6491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.857413][ T6513] netlink: 248 bytes leftover after parsing attributes in process `syz.0.146'.
[  107.600443][ T6531] syzkaller0: entered promiscuous mode
[  107.606211][ T6531] syzkaller0: entered allmulticast mode
[  107.677899][ T6525] IPv6: NLM_F_REPLACE set, but no existing node found!
[  107.725832][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'.
[  107.833055][ T6540] netlink: 'syz.0.154': attribute type 2 has an invalid length.
[  107.874480][ T6540] netlink: 224 bytes leftover after parsing attributes in process `syz.0.154'.
[  108.284587][ T6559] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  108.359443][ T6564] netlink: 'syz.1.158': attribute type 4 has an invalid length.
[  108.527912][ T6564] Ã: renamed from bond0 (while UP)
[  108.695531][ T6576] netlink: 'syz.3.161': attribute type 1 has an invalid length.
[  109.743845][ T6608] __nla_validate_parse: 4 callbacks suppressed
[  109.743871][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'.
[  109.796693][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'.
[  109.816572][ T6608] netlink: 'syz.3.171': attribute type 18 has an invalid length.
[  109.942134][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'.
[  109.944226][   T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.976447][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'.
[  110.005751][   T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.040802][ T6608] netlink: 'syz.3.171': attribute type 18 has an invalid length.
[  110.064405][   T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.097567][   T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.488098][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'.
[  110.586334][ T6625] netlink: 'syz.4.179': attribute type 29 has an invalid length.
[  110.652850][ T6625] netlink: 'syz.4.179': attribute type 29 has an invalid length.
[  110.688996][ T6632] netlink: 500 bytes leftover after parsing attributes in process `syz.4.179'.
[  110.713601][ T6629] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.180'.
[  111.055542][ T6646] syz_tun: entered allmulticast mode
[  111.083858][ T6643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.185'.
[  111.093714][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.185'.
[  111.118311][ T6643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.185'.
[  111.761503][ T6670] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  112.012978][ T6690] netlink: 'syz.2.198': attribute type 16 has an invalid length.
[  112.037783][ T6690] netlink: 'syz.2.198': attribute type 1 has an invalid length.
[  112.045477][ T6690] netlink: 'syz.2.198': attribute type 2 has an invalid length.
[  112.261439][ T6698] team_slave_0: entered promiscuous mode
[  112.267285][ T6698] team_slave_1: entered promiscuous mode
[  112.273168][ T6698] syz_tun: entered promiscuous mode
[  112.355667][ T6698] team_slave_0: left promiscuous mode
[  112.379614][ T6698] team_slave_1: left promiscuous mode
[  112.395750][ T6698] syz_tun: left promiscuous mode
[  112.492181][   T30] audit: type=1800 audit(1753967909.504:2): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.197" name="memory.events" dev="tmpfs" ino=209 res=0 errno=0
[  112.799365][ T6698] team0 (unregistering): Port device team_slave_0 removed
[  112.875445][ T6698] team0 (unregistering): Port device team_slave_1 removed
[  113.011685][ T6698] team0 (unregistering): Port device syz_tun removed
[  113.122369][ T6710] syzkaller0: entered promiscuous mode
[  113.138557][ T6710] syzkaller0: entered allmulticast mode
[  113.422921][ T6745] netlink: 'syz.3.208': attribute type 1 has an invalid length.
[  113.482877][ T6754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.910068][ T6764] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  114.214180][ T6743] netlink: 'syz.2.211': attribute type 1 has an invalid length.
[  114.655394][ T6792] netlink: 'syz.2.225': attribute type 1 has an invalid length.
[  114.903018][ T6774] __nla_validate_parse: 13 callbacks suppressed
[  114.903036][ T6774] netlink: 156 bytes leftover after parsing attributes in process `syz.1.220'.
[  114.944901][ T6794] syzkaller1: entered promiscuous mode
[  114.968752][ T6794] syzkaller1: entered allmulticast mode
[  115.103055][ T6807] netlink: 'syz.4.230': attribute type 10 has an invalid length.
[  115.155581][ T6814] netlink: 'syz.4.230': attribute type 12 has an invalid length.
[  115.163725][ T6814] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.230'.
[  115.178256][ T6807] veth0_vlan: left allmulticast mode
[  115.225467][ T6807] veth0_vlan: left promiscuous mode
[  115.249388][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'.
[  115.264394][ T6807] veth0_vlan: entered promiscuous mode
[  115.293157][ T6807] team0: Device veth0_vlan failed to register rx_handler
[  115.333501][ T6811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.232'.
[  115.483430][ T6809] syz_tun (unregistering): left allmulticast mode
[  115.657015][ T6827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.236'.
[  115.727807][ T6829] netlink: 64 bytes leftover after parsing attributes in process `syz.4.237'.
[  115.892706][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'.
[  115.938599][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'.
[  116.193834][ T6850] netlink: 'syz.4.242': attribute type 10 has an invalid length.
[  116.224482][ T6850] netlink: 40 bytes leftover after parsing attributes in process `syz.4.242'.
[  116.283552][ T6857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.242'.
[  116.359036][ T6850] team0: Port device geneve0 added
[  116.554925][ T6857] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  116.602746][ T6864] bridge1: entered promiscuous mode
[  116.611637][ T6864] bridge1: entered allmulticast mode
[  117.076207][ T6875] syzkaller0: entered allmulticast mode
[  117.142716][ T6876] netlink: 'syz.3.246': attribute type 1 has an invalid length.
[  118.405161][ T6886] tipc: Started in network mode
[  118.410375][ T6886] tipc: Node identity 2ecd8d4d06e6, cluster identity 4711
[  118.418952][ T6886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.425988][ T6891] syzkaller0: entered promiscuous mode
[  118.431580][ T6891] syzkaller0: entered allmulticast mode
[  118.461437][ T6914] tipc: Resetting bearer <eth:syzkaller0>
[  118.532466][ T6885] tipc: Resetting bearer <eth:syzkaller0>
[  118.661111][ T6885] tipc: Disabling bearer <eth:syzkaller0>
[  118.756319][ T6938] netlink: 'syz.3.261': attribute type 1 has an invalid length.
[  118.818656][ T6939] netlink: 'syz.1.263': attribute type 13 has an invalid length.
[  118.837180][ T6939] netlink: 'syz.1.263': attribute type 13 has an invalid length.
[  118.843926][   T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.894827][   T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.933418][   T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.985740][   T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.148629][ T6951] netlink: 'syz.4.266': attribute type 1 has an invalid length.
[  119.376571][ T6971] vlan2: entered promiscuous mode
[  119.411962][ T6971] bridge0: entered promiscuous mode
[  119.436353][ T6971] vlan2: entered allmulticast mode
[  119.452466][ T6971] bridge0: entered allmulticast mode
[  119.929192][ T6994] netlink: 'syz.1.274': attribute type 1 has an invalid length.
[  119.990880][ T6996] macvlan1: entered promiscuous mode
[  120.008039][ T6996] ipvlan0: entered promiscuous mode
[  120.033145][ T6996] ipvlan0: left promiscuous mode
[  120.067528][ T6996] macvlan1: left promiscuous mode
[  120.372692][ T7023] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  120.407761][ T7023] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  120.435427][ T7023] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  120.478028][ T7028] FAULT_INJECTION: forcing a failure.
[  120.478028][ T7028] name failslab, interval 1, probability 0, space 0, times 1
[  120.511293][ T7028] CPU: 1 UID: 0 PID: 7028 Comm: syz.4.284 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  120.511323][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  120.511348][ T7028] Call Trace:
[  120.511357][ T7028]  <TASK>
[  120.511371][ T7028]  dump_stack_lvl+0x189/0x250
[  120.511399][ T7028]  ? __pfx____ratelimit+0x10/0x10
[  120.511430][ T7028]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.511453][ T7028]  ? __pfx__printk+0x10/0x10
[  120.511487][ T7028]  ? __pfx___might_resched+0x10/0x10
[  120.511519][ T7028]  ? fs_reclaim_acquire+0x7d/0x100
[  120.511547][ T7028]  should_fail_ex+0x414/0x560
[  120.511587][ T7028]  should_failslab+0xa8/0x100
[  120.511610][ T7028]  __kmalloc_noprof+0xcb/0x4f0
[  120.511639][ T7028]  ? kfree+0x4d/0x440
[  120.511665][ T7028]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  120.511703][ T7028]  tomoyo_realpath_from_path+0xe3/0x5d0
[  120.511738][ T7028]  ? tomoyo_domain+0xd9/0x130
[  120.511776][ T7028]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  120.511804][ T7028]  tomoyo_path_number_perm+0x1e8/0x5a0
[  120.511834][ T7028]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  120.511880][ T7028]  ? __lock_acquire+0xab9/0xd20
[  120.511933][ T7028]  ? __fget_files+0x2a/0x420
[  120.511958][ T7028]  ? __fget_files+0x2a/0x420
[  120.511977][ T7028]  ? __fget_files+0x3a0/0x420
[  120.511996][ T7028]  ? __fget_files+0x2a/0x420
[  120.512021][ T7028]  security_file_ioctl+0xcb/0x2d0
[  120.512048][ T7028]  __se_sys_ioctl+0x47/0x170
[  120.512080][ T7028]  do_syscall_64+0xfa/0x3b0
[  120.512111][ T7028]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.512140][ T7028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.512161][ T7028]  ? clear_bhb_loop+0x60/0xb0
[  120.512188][ T7028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.512215][ T7028] RIP: 0033:0x7f05dfb8e9a9
[  120.512238][ T7028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.512260][ T7028] RSP: 002b:00007f05e0a6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  120.512288][ T7028] RAX: ffffffffffffffda RBX: 00007f05dfdb5fa0 RCX: 00007f05dfb8e9a9
[  120.512303][ T7028] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003
[  120.512317][ T7028] RBP: 00007f05e0a6a090 R08: 0000000000000000 R09: 0000000000000000
[  120.512330][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.512342][ T7028] R13: 0000000000000000 R14: 00007f05dfdb5fa0 R15: 00007fff4600e558
[  120.512376][ T7028]  </TASK>
[  120.513540][ T7028] ERROR: Out of memory at tomoyo_realpath_from_path.
[  120.870742][ T7033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.952752][ T7041] syz_tun: entered allmulticast mode
[  120.970294][ T7041] veth0_vlan: entered allmulticast mode
[  121.095302][   T30] audit: type=1800 audit(1753967918.104:3): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.291" name="memory.events" dev="tmpfs" ino=316 res=0 errno=0
[  121.121344][ T7033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.165058][ T7047] __nla_validate_parse: 8 callbacks suppressed
[  121.165075][ T7047] netlink: 52 bytes leftover after parsing attributes in process `syz.4.291'.
[  121.232157][   T30] audit: type=1804 audit(1753967918.154:4): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.291" name="/newroot/59/memory.events" dev="tmpfs" ino=316 res=1 errno=0
[  121.260867][ T7033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.538004][ T7033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.557255][ T7066] netlink: 'syz.1.295': attribute type 1 has an invalid length.
[  121.607165][ T7053] lo: entered allmulticast mode
[  121.726670][ T7075] bond0 (unregistering): Released all slaves
[  121.814605][ T7086] netlink: 104 bytes leftover after parsing attributes in process `syz.4.296'.
[  122.012653][ T1014] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.119742][ T1014] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.154720][ T7096] FAULT_INJECTION: forcing a failure.
[  122.154720][ T7096] name failslab, interval 1, probability 0, space 0, times 0
[  122.172412][ T7096] CPU: 1 UID: 0 PID: 7096 Comm: syz.1.301 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  122.172437][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  122.172448][ T7096] Call Trace:
[  122.172455][ T7096]  <TASK>
[  122.172463][ T7096]  dump_stack_lvl+0x189/0x250
[  122.172486][ T7096]  ? __pfx____ratelimit+0x10/0x10
[  122.172513][ T7096]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.172532][ T7096]  ? __pfx__printk+0x10/0x10
[  122.172558][ T7096]  ? __pfx___might_resched+0x10/0x10
[  122.172586][ T7096]  ? fs_reclaim_acquire+0x7d/0x100
[  122.172611][ T7096]  should_fail_ex+0x414/0x560
[  122.172664][ T7096]  should_failslab+0xa8/0x100
[  122.172684][ T7096]  __kmalloc_noprof+0xcb/0x4f0
[  122.172712][ T7096]  ? tomoyo_encode+0x28b/0x550
[  122.172745][ T7096]  tomoyo_encode+0x28b/0x550
[  122.172779][ T7096]  tomoyo_realpath_from_path+0x58d/0x5d0
[  122.172810][ T7096]  ? tomoyo_domain+0xd9/0x130
[  122.172845][ T7096]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  122.172870][ T7096]  tomoyo_path_number_perm+0x1e8/0x5a0
[  122.172907][ T7096]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  122.172946][ T7096]  ? __lock_acquire+0xab9/0xd20
[  122.172992][ T7096]  ? __fget_files+0x2a/0x420
[  122.173013][ T7096]  ? __fget_files+0x2a/0x420
[  122.173029][ T7096]  ? __fget_files+0x3a0/0x420
[  122.173045][ T7096]  ? __fget_files+0x2a/0x420
[  122.173067][ T7096]  security_file_ioctl+0xcb/0x2d0
[  122.173091][ T7096]  __se_sys_ioctl+0x47/0x170
[  122.173117][ T7096]  do_syscall_64+0xfa/0x3b0
[  122.173143][ T7096]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.173187][ T7096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.173206][ T7096]  ? clear_bhb_loop+0x60/0xb0
[  122.173230][ T7096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.173249][ T7096] RIP: 0033:0x7f33a258e9a9
[  122.173266][ T7096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.173282][ T7096] RSP: 002b:00007f33a349a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  122.173304][ T7096] RAX: ffffffffffffffda RBX: 00007f33a27b5fa0 RCX: 00007f33a258e9a9
[  122.173317][ T7096] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003
[  122.173329][ T7096] RBP: 00007f33a349a090 R08: 0000000000000000 R09: 0000000000000000
[  122.173341][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.173351][ T7096] R13: 0000000000000000 R14: 00007f33a27b5fa0 R15: 00007ffda0a24d28
[  122.173390][ T7096]  </TASK>
[  122.173439][ T7096] ERROR: Out of memory at tomoyo_realpath_from_path.
[  122.278944][   T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.507513][   T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.642658][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'.
[  122.690631][ T7108] syzkaller0: entered promiscuous mode
[  122.722810][ T7108] syzkaller0: entered allmulticast mode
[  122.729290][ T7114] netlink: 'syz.3.306': attribute type 9 has an invalid length.
[  122.872479][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[  122.877580][ T7119] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  123.338764][ T5962] IPVS: starting estimator thread 0...
[  123.345386][ T7131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.437585][ T7134] IPVS: using max 28 ests per chain, 67200 per kthread
[  123.481574][ T7142] FAULT_INJECTION: forcing a failure.
[  123.481574][ T7142] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  123.498790][ T7142] CPU: 1 UID: 0 PID: 7142 Comm: syz.4.315 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  123.498816][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  123.498828][ T7142] Call Trace:
[  123.498836][ T7142]  <TASK>
[  123.498844][ T7142]  dump_stack_lvl+0x189/0x250
[  123.498869][ T7142]  ? __pfx____ratelimit+0x10/0x10
[  123.498898][ T7142]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.498918][ T7142]  ? __pfx__printk+0x10/0x10
[  123.498954][ T7142]  should_fail_ex+0x414/0x560
[  123.498990][ T7142]  _copy_from_user+0x2d/0xb0
[  123.499018][ T7142]  get_user_ifreq+0x6c/0x180
[  123.499042][ T7142]  sock_ioctl+0x6dd/0x790
[  123.499069][ T7142]  ? __pfx_sock_ioctl+0x10/0x10
[  123.499094][ T7142]  ? __fget_files+0x3a0/0x420
[  123.499113][ T7142]  ? __fget_files+0x2a/0x420
[  123.499135][ T7142]  ? bpf_lsm_file_ioctl+0x9/0x20
[  123.499160][ T7142]  ? __pfx_sock_ioctl+0x10/0x10
[  123.499183][ T7142]  __se_sys_ioctl+0xf9/0x170
[  123.499212][ T7142]  do_syscall_64+0xfa/0x3b0
[  123.499240][ T7142]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.499267][ T7142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.499296][ T7142]  ? clear_bhb_loop+0x60/0xb0
[  123.499321][ T7142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.499339][ T7142] RIP: 0033:0x7f05dfb8e9a9
[  123.499356][ T7142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.499372][ T7142] RSP: 002b:00007f05e0a6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  123.499394][ T7142] RAX: ffffffffffffffda RBX: 00007f05dfdb5fa0 RCX: 00007f05dfb8e9a9
[  123.499407][ T7142] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003
[  123.499420][ T7142] RBP: 00007f05e0a6a090 R08: 0000000000000000 R09: 0000000000000000
[  123.499431][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.499442][ T7142] R13: 0000000000000000 R14: 00007f05dfdb5fa0 R15: 00007fff4600e558
[  123.499473][ T7142]  </TASK>
[  123.841765][ T7154] syz_tun: entered allmulticast mode
[  123.896929][ T7156] tipc: Enabling of bearer <ib:pimreg> rejected, failed to enable media
[  123.966963][ T7154] veth0_vlan: entered allmulticast mode
[  124.146810][ T7164] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.322'.
[  124.157361][ T7158] netlink: 48 bytes leftover after parsing attributes in process `syz.1.318'.
[  124.984038][ T7180] vxcan1: entered allmulticast mode
[  125.006872][ T7182] netlink: 64 bytes leftover after parsing attributes in process `syz.4.328'.
[  125.124682][ T7188] FAULT_INJECTION: forcing a failure.
[  125.124682][ T7188] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.147554][ T7188] CPU: 0 UID: 0 PID: 7188 Comm: syz.3.329 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  125.147580][ T7188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  125.147591][ T7188] Call Trace:
[  125.147598][ T7188]  <TASK>
[  125.147606][ T7188]  dump_stack_lvl+0x189/0x250
[  125.147629][ T7188]  ? __pfx____ratelimit+0x10/0x10
[  125.147656][ T7188]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.147676][ T7188]  ? __pfx__printk+0x10/0x10
[  125.147699][ T7188]  ? __might_fault+0xb0/0x130
[  125.147738][ T7188]  should_fail_ex+0x414/0x560
[  125.147772][ T7188]  _copy_from_user+0x2d/0xb0
[  125.147799][ T7188]  ip6gre_tunnel_siocdevprivate+0x1b2/0x700
[  125.147828][ T7188]  ? rcu_is_watching+0x15/0xb0
[  125.147857][ T7188]  ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10
[  125.147879][ T7188]  ? trace_contention_end+0x39/0x120
[  125.147923][ T7188]  ? netdev_name_node_lookup+0xdf/0x120
[  125.147951][ T7188]  dev_ifsioc+0xb54/0xf00
[  125.148005][ T7188]  dev_ioctl+0x84c/0x1150
[  125.148038][ T7188]  sock_ioctl+0x719/0x790
[  125.148065][ T7188]  ? __pfx_sock_ioctl+0x10/0x10
[  125.148091][ T7188]  ? __fget_files+0x3a0/0x420
[  125.148109][ T7188]  ? __fget_files+0x2a/0x420
[  125.148132][ T7188]  ? bpf_lsm_file_ioctl+0x9/0x20
[  125.148158][ T7188]  ? __pfx_sock_ioctl+0x10/0x10
[  125.148181][ T7188]  __se_sys_ioctl+0xf9/0x170
[  125.148210][ T7188]  do_syscall_64+0xfa/0x3b0
[  125.148238][ T7188]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.148265][ T7188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.148294][ T7188]  ? clear_bhb_loop+0x60/0xb0
[  125.148318][ T7188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.148337][ T7188] RIP: 0033:0x7f7d3878e9a9
[  125.148354][ T7188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.148371][ T7188] RSP: 002b:00007f7d39629038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  125.148392][ T7188] RAX: ffffffffffffffda RBX: 00007f7d389b5fa0 RCX: 00007f7d3878e9a9
[  125.148406][ T7188] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003
[  125.148418][ T7188] RBP: 00007f7d39629090 R08: 0000000000000000 R09: 0000000000000000
[  125.148430][ T7188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.148441][ T7188] R13: 0000000000000000 R14: 00007f7d389b5fa0 R15: 00007ffdc9eda6f8
[  125.148472][ T7188]  </TASK>
[  125.151724][ T7191] ÿÓ—: renamed from bond_slave_0 (while UP)
[  125.240226][ T7189] netlink: 116 bytes leftover after parsing attributes in process `syz.4.331'.
[  125.407576][ T5157] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  125.846249][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[  125.922818][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[  125.958813][ T7216] FAULT_INJECTION: forcing a failure.
[  125.958813][ T7216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.983789][ T7217] bridge2: entered promiscuous mode
[  126.027624][ T7217] macsec1: entered promiscuous mode
[  126.033060][ T7217] macsec1: entered allmulticast mode
[  126.035350][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.0.339 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  126.035382][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  126.035398][ T7216] Call Trace:
[  126.035408][ T7216]  <TASK>
[  126.035418][ T7216]  dump_stack_lvl+0x189/0x250
[  126.035448][ T7216]  ? __pfx____ratelimit+0x10/0x10
[  126.035483][ T7216]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.035509][ T7216]  ? __pfx__printk+0x10/0x10
[  126.035539][ T7216]  ? __might_fault+0xb0/0x130
[  126.035590][ T7216]  should_fail_ex+0x414/0x560
[  126.035633][ T7216]  _copy_from_user+0x2d/0xb0
[  126.035669][ T7216]  do_tcp_setsockopt+0x47d/0x1f10
[  126.035715][ T7216]  ? __pfx_do_tcp_setsockopt+0x10/0x10
[  126.035756][ T7216]  ? __pfx_aa_sk_perm+0x10/0x10
[  126.035787][ T7216]  ? __fget_files+0x2a/0x420
[  126.035811][ T7216]  ? aa_sock_opt_perm+0x74/0x110
[  126.035843][ T7216]  ? sock_common_setsockopt+0x36/0xc0
[  126.035875][ T7216]  ? tcp_setsockopt+0x3d/0xe0
[  126.035910][ T7216]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  126.035947][ T7216]  do_sock_setsockopt+0x17c/0x1b0
[  126.035978][ T7216]  __x64_sys_setsockopt+0x13f/0x1b0
[  126.036010][ T7216]  do_syscall_64+0xfa/0x3b0
[  126.036048][ T7216]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.036082][ T7216]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.036105][ T7216]  ? clear_bhb_loop+0x60/0xb0
[  126.036141][ T7216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.036164][ T7216] RIP: 0033:0x7fca1478e9a9
[  126.036184][ T7216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.036206][ T7216] RSP: 002b:00007fca1553a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  126.036234][ T7216] RAX: ffffffffffffffda RBX: 00007fca149b5fa0 RCX: 00007fca1478e9a9
[  126.036251][ T7216] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003
[  126.036265][ T7216] RBP: 00007fca1553a090 R08: 0000000000000004 R09: 0000000000000000
[  126.036280][ T7216] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  126.036294][ T7216] R13: 0000000000000000 R14: 00007fca149b5fa0 R15: 00007ffdb9fd84f8
[  126.036337][ T7216]  </TASK>
[  126.271824][ T7217] bridge2: entered allmulticast mode
[  126.280800][ T7217] bridge2: port 1(macsec1) entered blocking state
[  126.289292][ T7217] bridge2: port 1(macsec1) entered disabled state
[  126.306228][ T7217] bridge2: left allmulticast mode
[  126.313796][ T7217] bridge2: left promiscuous mode
[  126.341461][ T7224] FAULT_INJECTION: forcing a failure.
[  126.341461][ T7224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  126.353407][ T7228] netlink: 'syz.0.343': attribute type 1 has an invalid length.
[  126.361205][ T7224] CPU: 1 UID: 0 PID: 7224 Comm: syz.1.342 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  126.361237][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  126.361251][ T7224] Call Trace:
[  126.361261][ T7224]  <TASK>
[  126.361271][ T7224]  dump_stack_lvl+0x189/0x250
[  126.361303][ T7224]  ? __pfx____ratelimit+0x10/0x10
[  126.361338][ T7224]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.361363][ T7224]  ? __pfx__printk+0x10/0x10
[  126.361408][ T7224]  should_fail_ex+0x414/0x560
[  126.361453][ T7224]  _copy_to_user+0x31/0xb0
[  126.361491][ T7224]  simple_read_from_buffer+0xe1/0x170
[  126.361534][ T7224]  proc_fail_nth_read+0x1b3/0x220
[  126.361568][ T7224]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  126.361599][ T7224]  ? rw_verify_area+0x258/0x650
[  126.361632][ T7224]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  126.361663][ T7224]  vfs_read+0x1fd/0x980
[  126.361696][ T7224]  ? fdget_pos+0x247/0x320
[  126.361723][ T7224]  ? __pfx___mutex_lock+0x10/0x10
[  126.361761][ T7224]  ? __pfx_vfs_read+0x10/0x10
[  126.361796][ T7224]  ? __fget_files+0x2a/0x420
[  126.361824][ T7224]  ? __fget_files+0x3a0/0x420
[  126.361851][ T7224]  ? __fget_files+0x2a/0x420
[  126.361883][ T7224]  ksys_read+0x145/0x250
[  126.361920][ T7224]  ? __pfx_ksys_read+0x10/0x10
[  126.361950][ T7224]  ? rcu_is_watching+0x15/0xb0
[  126.361994][ T7224]  ? do_syscall_64+0xbe/0x3b0
[  126.362033][ T7224]  do_syscall_64+0xfa/0x3b0
[  126.362066][ T7224]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.362098][ T7224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.362134][ T7224]  ? clear_bhb_loop+0x60/0xb0
[  126.362160][ T7224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.362183][ T7224] RIP: 0033:0x7f33a258d3bc
[  126.362202][ T7224] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  126.362225][ T7224] RSP: 002b:00007f33a349a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  126.362249][ T7224] RAX: ffffffffffffffda RBX: 00007f33a27b5fa0 RCX: 00007f33a258d3bc
[  126.362265][ T7224] RDX: 000000000000000f RSI: 00007f33a349a0a0 RDI: 0000000000000004
[  126.362280][ T7224] RBP: 00007f33a349a090 R08: 0000000000000000 R09: 0000000000000000
[  126.362292][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.362304][ T7224] R13: 0000000000000000 R14: 00007f33a27b5fa0 R15: 00007ffda0a24d28
[  126.362333][ T7224]  </TASK>
[  126.581558][ T7232] IPv6: syztnl1: Disabled Multicast RS
[  127.291878][ T7268] vlan0: entered promiscuous mode
[  127.306378][ T7268] bond0: entered promiscuous mode
[  127.329486][ T7268] bond_slave_0: entered promiscuous mode
[  127.353706][ T7268] bond_slave_1: entered promiscuous mode
[  127.368033][ T7268] vlan0: entered allmulticast mode
[  127.373211][ T7268] bond0: entered allmulticast mode
[  127.378544][ T7268] bond_slave_0: entered allmulticast mode
[  127.384293][ T7268] bond_slave_1: entered allmulticast mode
[  127.428128][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'.
[  127.762964][ T7295] syzkaller0: entered promiscuous mode
[  127.768738][ T7295] syzkaller0: entered allmulticast mode
[  128.530114][ T7309] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  128.550283][ T7308] IPVS: stopping master sync thread 7309 ...
[  128.566153][ T7306] netlink: 'syz.4.365': attribute type 1 has an invalid length.
[  128.571445][ T7311] IPVS: set_ctl: invalid protocol: 44 172.20.20.23:20003
[  128.605443][ T7306] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.365'.
[  128.674442][ T7315] netlink: 'syz.1.368': attribute type 2 has an invalid length.
[  128.712012][ T7321] ieee802154 phy0 wpan0: encryption failed: -22
[  128.739914][ T7325] netlink: 14 bytes leftover after parsing attributes in process `syz.3.369'.
[  128.888916][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'.
[  129.036022][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'.
[  129.083269][ T7325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.118438][ T7325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.140145][ T7325] bond0 (unregistering): Released all slaves
[  129.220768][ T7326] veth1_macvtap: left promiscuous mode
[  129.226309][ T7326] macsec0: entered promiscuous mode
[  129.306018][ T7334] vlan3: entered allmulticast mode
[  129.317534][ T7334] veth1: entered allmulticast mode
[  129.324451][ T7334] batman_adv: batadv0: Adding interface: vlan3
[  129.331100][ T7334] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.379365][ T7334] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  129.461708][ T7339] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  129.693411][ T7348] netlink: 156 bytes leftover after parsing attributes in process `syz.2.373'.
[  129.742448][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.379'.
[  129.768605][ T7353] FAULT_INJECTION: forcing a failure.
[  129.768605][ T7353] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.813685][ T7353] CPU: 0 UID: 0 PID: 7353 Comm: syz.0.377 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  129.813714][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  129.813726][ T7353] Call Trace:
[  129.813734][ T7353]  <TASK>
[  129.813743][ T7353]  dump_stack_lvl+0x189/0x250
[  129.813768][ T7353]  ? __pfx____ratelimit+0x10/0x10
[  129.813798][ T7353]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.813819][ T7353]  ? __pfx__printk+0x10/0x10
[  129.813857][ T7353]  should_fail_ex+0x414/0x560
[  129.813894][ T7353]  _copy_to_user+0x31/0xb0
[  129.813932][ T7353]  simple_read_from_buffer+0xe1/0x170
[  129.813969][ T7353]  proc_fail_nth_read+0x1b3/0x220
[  129.813997][ T7353]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  129.814025][ T7353]  ? rw_verify_area+0x258/0x650
[  129.814052][ T7353]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  129.814077][ T7353]  vfs_read+0x1fd/0x980
[  129.814105][ T7353]  ? fdget_pos+0x247/0x320
[  129.814129][ T7353]  ? __pfx___mutex_lock+0x10/0x10
[  129.814161][ T7353]  ? __pfx_vfs_read+0x10/0x10
[  129.814192][ T7353]  ? __fget_files+0x2a/0x420
[  129.814216][ T7353]  ? __fget_files+0x3a0/0x420
[  129.814235][ T7353]  ? __fget_files+0x2a/0x420
[  129.814265][ T7353]  ksys_read+0x145/0x250
[  129.814298][ T7353]  ? __pfx_ksys_read+0x10/0x10
[  129.814333][ T7353]  ? do_syscall_64+0xbe/0x3b0
[  129.814367][ T7353]  do_syscall_64+0xfa/0x3b0
[  129.814396][ T7353]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.814424][ T7353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.814444][ T7353]  ? clear_bhb_loop+0x60/0xb0
[  129.814470][ T7353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.814489][ T7353] RIP: 0033:0x7fca1478d3bc
[  129.814506][ T7353] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  129.814523][ T7353] RSP: 002b:00007fca1553a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  129.814545][ T7353] RAX: ffffffffffffffda RBX: 00007fca149b5fa0 RCX: 00007fca1478d3bc
[  129.814560][ T7353] RDX: 000000000000000f RSI: 00007fca1553a0a0 RDI: 0000000000000004
[  129.814572][ T7353] RBP: 00007fca1553a090 R08: 0000000000000000 R09: 0000000000000000
[  129.814585][ T7353] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  129.814597][ T7353] R13: 0000000000000000 R14: 00007fca149b5fa0 R15: 00007ffdb9fd84f8
[  129.814629][ T7353]  </TASK>
[  130.122079][ T7356] vlan0: entered promiscuous mode
[  130.188784][ T7359] netlink: 84 bytes leftover after parsing attributes in process `syz.3.378'.
[  130.484394][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.382'.
[  131.259217][ T7420] gretap1: entered promiscuous mode
[  131.489911][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'.
[  131.545489][ T7429] netlink: 'syz.1.393': attribute type 7 has an invalid length.
[  131.564047][ T7429] : entered promiscuous mode
[  132.040688][ T7441] bridge_slave_1: left allmulticast mode
[  132.046788][ T7441] bridge_slave_1: left promiscuous mode
[  132.057099][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.074090][ T7441] bridge_slave_0: left allmulticast mode
[  132.079945][ T7441] bridge_slave_0: left promiscuous mode
[  132.085775][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.262421][ T7439] netlink: 'syz.4.395': attribute type 29 has an invalid length.
[  132.270748][ T7433] netlink: 'syz.4.395': attribute type 29 has an invalid length.
[  132.466133][ T7462] netlink: 'syz.1.403': attribute type 1 has an invalid length.
[  132.569338][ T7462] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.576961][ T7476] __nla_validate_parse: 4 callbacks suppressed
[  132.576975][ T7476] netlink: 32 bytes leftover after parsing attributes in process `syz.1.403'.
[  132.615822][ T7462] ipvlan2: entered allmulticast mode
[  132.627699][ T7462] bond0: entered allmulticast mode
[  132.741398][ T7476] bond0: (slave gretap1): making interface the new active one
[  132.764784][ T7476] gretap1: entered allmulticast mode
[  132.772062][ T7476] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  132.822834][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.831031][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  132.997038][ T7496] netlink: 68 bytes leftover after parsing attributes in process `syz.4.411'.
[  133.041369][ T7499] netlink: 'syz.1.413': attribute type 1 has an invalid length.
[  133.057164][ T7503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.061751][ T7496] tipc: Started in network mode
[  133.079604][ T7496] tipc: Node identity 7aeb329afc7d, cluster identity 4711
[  133.087371][ T7496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.201736][ T7499] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.265081][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'.
[  133.392630][ T7506] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.438102][ T7506] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  133.464408][ T7506] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  133.520245][ T7519] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.545387][ T7535] pim6reg0: tun_chr_ioctl cmd 1074025677
[  133.556590][ T7535] pim6reg0: linktype set to 768
[  133.596505][ T7493] tipc: Disabling bearer <eth:syzkaller0>
[  133.649091][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.417'.
[  133.819092][ T7492] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  133.990074][ T7551] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  134.027122][ T7556] veth1_vlan: mtu greater than device maximum
[  134.068090][ T7557] macvlan1: entered promiscuous mode
[  134.073618][ T7557] macvlan1: entered allmulticast mode
[  134.095973][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'.
[  134.107469][ T7557] veth1_vlan: entered allmulticast mode
[  134.137548][ T7559] netlink: 'syz.0.425': attribute type 2 has an invalid length.
[  134.145237][ T7559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.425'.
[  134.205973][ T7562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.426'.
[  134.229934][ T7565] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[  134.290526][ T7566] tipc: Started in network mode
[  134.317596][ T7566] tipc: Node identity cec94198a99c, cluster identity 4711
[  134.335490][ T7566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.363594][ T7568] veth0_vlan: entered allmulticast mode
[  134.383662][ T7570] syzkaller0: entered promiscuous mode
[  134.396166][ T7570] syzkaller0: entered allmulticast mode
[  134.433320][ T7566] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  134.444997][ T7566] tipc: Resetting bearer <eth:syzkaller0>
[  134.498623][ T7563] tipc: Resetting bearer <eth:syzkaller0>
[  134.635504][ T7563] tipc: Disabling bearer <eth:syzkaller0>
[  134.689943][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.435'.
[  134.867515][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'.
[  134.912431][ T7594] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  134.949232][ T7598] netlink: 'syz.4.438': attribute type 2 has an invalid length.
[  134.963507][ T7598] þ
: entered promiscuous mode
[  134.974692][ T7600] netlink: 'syz.1.439': attribute type 1 has an invalid length.
[  135.202469][ T7603] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  135.272568][ T7600] 8021q: adding VLAN 0 to HW filter on device bond2
[  135.282145][   T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  135.440384][ T7625] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.445'.
[  135.544964][ T7600] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  135.581291][ T7600] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[  135.609577][ T7600] bond2 (unregistering): Released all slaves
[  135.625509][ T7641] netlink: 'syz.4.448': attribute type 10 has an invalid length.
[  136.106257][ T7663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.232600][ T7663] syzkaller1: entered promiscuous mode
[  136.263444][ T7663] syzkaller1: entered allmulticast mode
[  136.300924][ T7663] netlink: 'syz.4.454': attribute type 15 has an invalid length.
[  141.676676][ T7703] __nla_validate_parse: 8 callbacks suppressed
[  141.676693][ T7703] netlink: 9 bytes leftover after parsing attributes in process `syz.1.466'.
[  141.700684][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'.
[  141.763540][ T7703] gretap0: entered promiscuous mode
[  141.898957][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'.
[  142.239808][ T7732] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  142.303432][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'.
[  142.320006][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'.
[  142.338690][ T7738] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.475'.
[  142.741979][ T7724] validate_nla: 1 callbacks suppressed
[  142.741997][ T7724] netlink: 'syz.1.473': attribute type 1 has an invalid length.
[  142.755397][ T7724] netlink: 'syz.1.473': attribute type 4 has an invalid length.
[  142.767485][ T7724] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.473'.
[  142.783498][ T7751] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[  142.786596][ T7724] netlink: 'syz.1.473': attribute type 1 has an invalid length.
[  142.812275][ T7724] netlink: 'syz.1.473': attribute type 4 has an invalid length.
[  142.850635][ T7724] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.473'.
[  143.129028][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'.
[  143.236990][ T7767] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  143.248949][ T7770] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  143.265703][ T7767] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  143.723714][ T7784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.487'.
[  144.333936][   T30] audit: type=1800 audit(1753967941.344:5): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.496" name="blkio.bfq.time_recursive" dev="tmpfs" ino=487 res=0 errno=0
[  144.365938][ T7811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.374675][ T7811] syzkaller0: entered promiscuous mode
[  144.426825][ T7811] syzkaller0: entered allmulticast mode
[  144.577137][ T7811] tipc: Resetting bearer <eth:syzkaller0>
[  144.607976][ T7822] netlink: 'syz.3.497': attribute type 13 has an invalid length.
[  144.672559][ T7809] tipc: Resetting bearer <eth:syzkaller0>
[  145.114262][ T7809] tipc: Disabling bearer <eth:syzkaller0>
[  145.618184][ T7855] netlink: 'syz.4.507': attribute type 12 has an invalid length.
[  145.633984][ T7854] dummy0: entered promiscuous mode
[  145.647488][ T7854] dummy0: entered allmulticast mode
[  145.961965][ T7875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  146.574202][ T7910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.658028][ T7913] syzkaller0: entered promiscuous mode
[  146.687563][ T7913] syzkaller0: entered allmulticast mode
[  146.766973][ T7910] tipc: Resetting bearer <eth:syzkaller0>
[  146.776814][ T7913] __nla_validate_parse: 8 callbacks suppressed
[  146.776833][ T7913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.525'.
[  146.816832][ T7908] tipc: Resetting bearer <eth:syzkaller0>
[  146.828429][ T7922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'.
[  146.864801][ T7908] tipc: Disabling bearer <eth:syzkaller0>
[  146.889772][ T7922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'.
[  147.104111][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'.
[  147.134988][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'.
[  147.193444][ T7935] veth1_macvtap: left promiscuous mode
[  147.778024][ T7957] netlink: 'syz.4.539': attribute type 3 has an invalid length.
[  148.136271][ T7964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.542'.
[  148.218880][ T7967] netlink: 'syz.0.543': attribute type 4 has an invalid length.
[  148.269509][ T7967] netlink: 'syz.0.543': attribute type 4 has an invalid length.
[  148.483894][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'.
[  148.497115][ T7973] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  148.592132][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.545'.
[  148.612071][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'.
[  148.665893][ T7972] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  148.694827][ T7981] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004
[  148.721011][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'.
[  150.138299][    C1] vcan0: j1939_tp_rxtimer: 0xffff888031db6800: rx timeout, send abort
[  150.647364][    C1] vcan0: j1939_tp_rxtimer: 0xffff888031db6800: abort rx timeout. Force session deactivation
[  151.048932][ T8073] infiniband syz1: set active
[  151.071084][ T8073] infiniband syz1: added bond0
[  151.185723][ T8073] RDS/IB: syz1: added
[  151.210020][ T8073] smc: adding ib device syz1 with port count 1
[  151.216343][ T8073] smc:    ib device syz1 port 1 has pnetid 
[  151.226755][ T8097] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[  151.277242][ T8097] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.296428][ T8102] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002
[  151.307781][   T30] audit: type=1107 audit(1753967948.314:6): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Á¢œg¸{Ê‚£ð’¨QèxÉ%­4²õDä@L4Œ‘@9É>xZ—.'
[  151.364108][ T8103] veth7: entered promiscuous mode
[  151.386697][ T8103] bond1: (slave veth7): Enslaving as an active interface with a down link
[  151.425120][ T8106] wg1: entered promiscuous mode
[  151.437460][ T8106] wg1: entered allmulticast mode
[  151.961983][ T8125] netlink: 'syz.1.589': attribute type 39 has an invalid length.
[  152.641544][ T8105] siw: device registration error -23
[  152.864267][ T8143] netlink: 'syz.2.597': attribute type 21 has an invalid length.
[  152.877015][ T8143] __nla_validate_parse: 10 callbacks suppressed
[  152.877029][ T8143] netlink: 36 bytes leftover after parsing attributes in process `syz.2.597'.
[  152.968044][ T8149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.599'.
[  153.044038][ T8151] netlink: 332 bytes leftover after parsing attributes in process `syz.0.600'.
[  153.069828][ T8151] netlink: 104 bytes leftover after parsing attributes in process `syz.0.600'.
[  153.080894][ T8151] netlink: 32 bytes leftover after parsing attributes in process `syz.0.600'.
[  153.564773][   T10] IPVS: starting estimator thread 0...
[  153.657613][ T8174] IPVS: using max 27 ests per chain, 64800 per kthread
[  153.690458][ T8180] netlink: 'syz.1.607': attribute type 6 has an invalid length.
[  153.981240][ T8188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.994958][ T8188] syzkaller0: entered promiscuous mode
[  154.003081][ T8188] syzkaller0: entered allmulticast mode
[  154.030383][ T8188] tipc: Resetting bearer <eth:syzkaller0>
[  154.050797][ T8187] tipc: Resetting bearer <eth:syzkaller0>
[  154.074701][ T8187] tipc: Disabling bearer <eth:syzkaller0>
[  154.391211][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[  154.672974][ T8215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'.
[  154.746535][ T8215] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.797360][ T8215] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.954727][ T8215] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.975917][ T8215] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.142271][ T8215] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.181417][ T8215] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.333825][ T8215] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.377607][ T8215] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.436332][ T8237] netlink: 'syz.3.627': attribute type 1 has an invalid length.
[  155.481504][ T8237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.510754][ T8240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.627'.
[  155.633597][ T1014] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.652307][ T1014] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.674463][ T1014] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.693371][ T1014] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.738543][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.773123][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.812906][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.847640][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.304375][ T8302] netlink: 'syz.3.634': attribute type 13 has an invalid length.
[  157.839761][ T8315] IPv6: sit2: Disabled Multicast RS
[  157.884911][ T8315] sit2: entered allmulticast mode
[  157.974299][ T8314] IPv6: sit2: Disabled Multicast RS
[  157.981505][ T8314] sit2: entered allmulticast mode
[  158.472501][ T8318] netlink: 16 bytes leftover after parsing attributes in process `syz.3.639'.
[  159.167049][ T8348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'.
[  159.220084][ T8350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.651'.
[  159.387981][ T8349] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  159.431457][ T8350] 8021q: adding VLAN 0 to HW filter on device bond2
[  159.443756][   T78] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  159.469027][ T5946] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  159.503072][ T5946] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  159.522621][   T78] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  159.679963][ T8365] syz.3.653: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  159.699005][ T8365] CPU: 0 UID: 0 PID: 8365 Comm: syz.3.653 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  159.699034][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  159.699047][ T8365] Call Trace:
[  159.699055][ T8365]  <TASK>
[  159.699064][ T8365]  dump_stack_lvl+0x189/0x250
[  159.699094][ T8365]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.699114][ T8365]  ? __pfx__printk+0x10/0x10
[  159.699140][ T8365]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  159.699163][ T8365]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  159.699187][ T8365]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  159.699213][ T8365]  warn_alloc+0x214/0x310
[  159.699232][ T8365]  ? stack_depot_save_flags+0x40/0x900
[  159.699256][ T8365]  ? __pfx_warn_alloc+0x10/0x10
[  159.699277][ T8365]  ? kasan_save_track+0x4f/0x80
[  159.699305][ T8365]  ? xskq_create+0x56/0x170
[  159.699329][ T8365]  ? xsk_init_queue+0xb0/0x110
[  159.699351][ T8365]  ? xsk_setsockopt+0x4dc/0x8d0
[  159.699373][ T8365]  ? do_sock_setsockopt+0x17c/0x1b0
[  159.699390][ T8365]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  159.699407][ T8365]  ? do_syscall_64+0xfa/0x3b0
[  159.699435][ T8365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.699462][ T8365]  __vmalloc_node_range_noprof+0x125/0x12f0
[  159.699514][ T8365]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  159.699540][ T8365]  ? __kasan_kmalloc+0x93/0xb0
[  159.699571][ T8365]  vmalloc_user_noprof+0xad/0xf0
[  159.699591][ T8365]  ? xskq_create+0xbf/0x170
[  159.699618][ T8365]  xskq_create+0xbf/0x170
[  159.699648][ T8365]  xsk_init_queue+0xb0/0x110
[  159.699677][ T8365]  xsk_setsockopt+0x4dc/0x8d0
[  159.699704][ T8365]  ? __pfx_xsk_setsockopt+0x10/0x10
[  159.699729][ T8365]  ? __pfx_aa_sk_perm+0x10/0x10
[  159.699759][ T8365]  ? aa_sock_opt_perm+0x74/0x110
[  159.699788][ T8365]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  159.699811][ T8365]  ? __pfx_xsk_setsockopt+0x10/0x10
[  159.699837][ T8365]  do_sock_setsockopt+0x17c/0x1b0
[  159.699869][ T8365]  __x64_sys_setsockopt+0x13f/0x1b0
[  159.699895][ T8365]  do_syscall_64+0xfa/0x3b0
[  159.699922][ T8365]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.699948][ T8365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.699967][ T8365]  ? clear_bhb_loop+0x60/0xb0
[  159.699991][ T8365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.700009][ T8365] RIP: 0033:0x7f7d3878e9a9
[  159.700027][ T8365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.700043][ T8365] RSP: 002b:00007f7d39629038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  159.700063][ T8365] RAX: ffffffffffffffda RBX: 00007f7d389b5fa0 RCX: 00007f7d3878e9a9
[  159.700078][ T8365] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  159.700089][ T8365] RBP: 00007f7d38810d69 R08: 0000000000000004 R09: 0000000000000000
[  159.700101][ T8365] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.700112][ T8365] R13: 0000000000000000 R14: 00007f7d389b5fa0 R15: 00007ffdc9eda6f8
[  159.700143][ T8365]  </TASK>
[  159.700160][ T8365] Mem-Info:
[  160.019354][ T5157] Bluetooth: hci4: command 0x0405 tx timeout
[  160.090308][ T8365] active_anon:6934 inactive_anon:0 isolated_anon:0
[  160.090308][ T8365]  active_file:1530 inactive_file:39885 isolated_file:0
[  160.090308][ T8365]  unevictable:768 dirty:91 writeback:0
[  160.090308][ T8365]  slab_reclaimable:10892 slab_unreclaimable:101416
[  160.090308][ T8365]  mapped:29349 shmem:3912 pagetables:1058
[  160.090308][ T8365]  sec_pagetables:0 bounce:0
[  160.090308][ T8365]  kernel_misc_reclaimable:0
[  160.090308][ T8365]  free:1317079 free_pcp:20051 free_cma:0
[  160.203262][ T8365] Node 0 active_anon:22636kB inactive_anon:0kB active_file:6120kB inactive_file:159336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117396kB dirty:364kB writeback:0kB shmem:8912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11928kB pagetables:4008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  160.288083][ T8365] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  160.372547][ T8365] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  160.459774][ T8365] lowmem_reserve[]: 0 2500 2502 2502 2502
[  160.476746][ T8365] Node 0 DMA32 free:1369028kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17788kB inactive_anon:0kB active_file:6120kB inactive_file:157496kB unevictable:1536kB writepending:364kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:59240kB local_pcp:35188kB free_cma:0kB
[  160.577200][ T8365] lowmem_reserve[]: 0 0 1 1 1
[  160.602652][ T8365] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  160.660805][ T8365] lowmem_reserve[]: 0 0 0 0 0
[  160.672345][ T8365] Node 1 Normal free:3895724kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19908kB local_pcp:10756kB free_cma:0kB
[  160.737063][ T8365] lowmem_reserve[]: 0 0 0 0 0
[  160.753342][ T8365] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  160.783168][ T8365] Node 0 DMA32: 1175*4kB (UM) 309*8kB (UM) 220*16kB (UME) 121*32kB (UM) 65*64kB (M) 29*128kB (M) 22*256kB (UME) 18*512kB (UME) 8*1024kB (UM) 4*2048kB (UME) 321*4096kB (UM) = 1368484kB
[  160.816105][ T8365] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  160.844269][ T8365] Node 1 Normal: 189*4kB (UE) 37*8kB (UME) 43*16kB (UME) 55*32kB (UME) 18*64kB (UME) 9*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3895724kB
[  160.886044][ T8365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  160.902568][ T8365] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.912185][ T8365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  160.926231][ T8365] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.943336][ T8365] 44581 total pagecache pages
[  160.948341][ T8365] 0 pages in swap cache
[  160.952654][ T8365] Free swap  = 124996kB
[  160.956908][ T8365] Total swap = 124996kB
[  160.965837][ T8365] 2097051 pages RAM
[  160.971059][ T8365] 0 pages HighMem/MovableOnly
[  160.976073][ T8365] 424872 pages reserved
[  160.993586][ T8365] 0 pages cma reserved
[  161.181709][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.661'.
[  162.706703][ T8445] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.774966][ T8445] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.889879][ T8451] tipc: Enabled bearer <udp:syz2>, priority 10
[  162.922371][ T6663] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.932607][ T6663] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.953835][ T8284] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.972319][ T8284] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.125420][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'.
[  163.143327][ T8472] macvtap1: entered allmulticast mode
[  163.151056][ T8472] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  163.330807][ T8484] netlink: 788 bytes leftover after parsing attributes in process `syz.4.684'.
[  163.566688][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.688'.
[  163.646017][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'.
[  164.008471][ T5846] tipc: Node number set to 673942861
[  165.275046][ T8535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.696'.
[  165.521863][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.697'.
[  165.995253][ T8554] netlink: 'syz.3.703': attribute type 5 has an invalid length.
[  166.573472][ T8572] pim6reg9: entered allmulticast mode
[  166.772754][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'.
[  166.888239][   T30] audit: type=1800 audit(1753967963.894:7): pid=8586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.714" name="blkio.bfq.time_recursive" dev="tmpfs" ino=869 res=0 errno=0
[  167.537967][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'.
[  167.546992][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'.
[  167.574115][ T8601] dvmrp0: entered allmulticast mode
[  167.604620][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'.
[  167.635926][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'.
[  167.820800][ T8613] vxcan1: tx address claim with dlc 0
[  168.298017][ T8638] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  168.456592][ T8645] netlink: 'syz.0.730': attribute type 13 has an invalid length.
[  168.483452][ T8645] netlink: 'syz.0.730': attribute type 17 has an invalid length.
[  168.548502][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.730'.
[  168.561244][ T8651] vcan0: tx drop: invalid da for name 0x0000000000000002
[  168.796131][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.736'.
[  168.830292][ T8645] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.842669][ T8645] 8021q: adding VLAN 0 to HW filter on device team0
[  168.910532][ T8645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.336581][ T8676] ieee802154 phy0 wpan0: encryption failed: -22
[  169.429425][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.740'.
[  169.811077][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056a14800: rx timeout, send abort
[  169.820204][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a14800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  170.214655][ T8699] sctp: [Deprecated]: syz.1.746 (pid 8699) Use of int in max_burst socket option deprecated.
[  170.214655][ T8699] Use struct sctp_assoc_value instead
[  170.811103][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.752'.
[  172.258736][ T8762] netlink: 'syz.2.762': attribute type 10 has an invalid length.
[  172.267792][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.275592][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.292890][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.300159][ T8762] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.307729][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.314889][ T8762] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.382209][ T8762] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  172.664990][ T8764] netlink: 'syz.4.763': attribute type 7 has an invalid length.
[  172.687089][ T8764] netlink: 'syz.4.763': attribute type 8 has an invalid length.
[  172.701132][ T8764] netlink: 'syz.4.763': attribute type 4 has an invalid length.
[  172.717286][ T8764] netlink: 204 bytes leftover after parsing attributes in process `syz.4.763'.
[  172.940118][ T8769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.988398][ T8770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.036005][ T8770] vlan2: entered allmulticast mode
[  173.067192][ T8770] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  173.285238][ T8783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.770'.
[  173.314026][ T8782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.328716][ T8782] syzkaller0: entered promiscuous mode
[  173.334300][ T8782] syzkaller0: entered allmulticast mode
[  173.342311][ T8783] netlink: 'syz.2.770': attribute type 1 has an invalid length.
[  173.353105][ T8788] netlink: 52 bytes leftover after parsing attributes in process `syz.0.773'.
[  173.407187][ T8782] tipc: Resetting bearer <eth:syzkaller0>
[  173.416559][ T8781] tipc: Resetting bearer <eth:syzkaller0>
[  173.497814][ T8781] tipc: Disabling bearer <eth:syzkaller0>
[  173.545388][ T8787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.770'.
[  173.924732][ T8809] block nbd0: Unsupported socket: shutdown callout must be supported.
[  173.985671][ T8806] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.102231][ T8813] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  174.116116][ T8806] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.202074][ T8806] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.302890][ T8806] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.760392][ T8831] netlink: 52 bytes leftover after parsing attributes in process `syz.1.784'.
[  175.725250][ T8866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.794'.
[  175.807212][ T8866] vlan4: entered allmulticast mode
[  176.417802][ T5854] Bluetooth: hci4: command 0x0405 tx timeout
[  176.675619][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'.
[  176.737041][ T8908] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  176.752766][ T8908] macvtap1: entered promiscuous mode
[  176.806371][ T8913] syzkaller0: entered promiscuous mode
[  176.820401][ T8913] syzkaller0: entered allmulticast mode
[  177.459294][ T8940] netlink: 136 bytes leftover after parsing attributes in process `syz.1.816'.
[  177.797049][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.821'.
[  177.989855][ T8961] netlink: 248 bytes leftover after parsing attributes in process `syz.4.820'.
[  178.400357][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'.
[  178.428269][ T8969] netlink: 52 bytes leftover after parsing attributes in process `syz.2.826'.
[  178.590610][ T8976] netlink: 248 bytes leftover after parsing attributes in process `syz.0.827'.
[  178.891813][ T8988] netlink: 'syz.1.829': attribute type 15 has an invalid length.
[  178.933327][ T8987] 8021q: adding VLAN 0 to HW filter on device bond1
[  178.962170][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'.
[  178.982324][ T8985] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  179.545701][ T9012] netlink: 'syz.1.834': attribute type 7 has an invalid length.
[  179.561067][ T9012] netlink: 'syz.1.834': attribute type 8 has an invalid length.
[  179.876226][ T9028] erspan0: entered promiscuous mode
[  180.925611][ T9047] bridge0: port 3(dummy0) entered disabled state
[  180.932268][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.940141][ T9047] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.102238][ T9047] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.273258][ T9047] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  181.333463][ T9053] syz_tun: entered promiscuous mode
[  181.350506][ T9053] batadv_slave_0: entered promiscuous mode
[  181.370231][ T9053] hsr1: entered allmulticast mode
[  181.375481][ T9053] batadv_slave_0: entered allmulticast mode
[  181.415157][ T1002] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.447601][ T1002] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.461237][ T9077] netlink: 'syz.1.851': attribute type 3 has an invalid length.
[  181.473509][ T1002] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  181.488132][ T1002] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.506759][ T1002] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.527697][ T1002] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  181.623791][ T1002] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.672429][ T1002] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.702413][ T1002] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  181.733631][ T1002] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.749498][ T1002] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.761875][ T1002] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  181.775677][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'.
[  181.958589][ T9085] bond1: entered promiscuous mode
[  181.964766][ T9085] 8021q: adding VLAN 0 to HW filter on device bond1
[  181.985315][ T9080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.852'.
[  182.003941][ T9089] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.011354][ T9089] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  182.024217][ T9089] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  182.093749][ T9080] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.431347][ T9099] syzkaller0: entered promiscuous mode
[  182.443275][ T9099] syzkaller0: entered allmulticast mode
[  182.729183][ T9105] sctp: [Deprecated]: syz.0.858 (pid 9105) Use of int in maxseg socket option.
[  182.729183][ T9105] Use struct sctp_assoc_value instead
[  182.871010][ T9108] netlink: 'syz.2.859': attribute type 11 has an invalid length.
[  183.382447][ T9119] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  183.721229][ T5946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.744487][ T5946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.902243][ T9135] bridge1: entered promiscuous mode
[  184.512829][ T9148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.873'.
[  184.786638][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'.
[  184.885857][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'.
[  185.231297][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'.
[  185.241158][ T9187] 8021q: VLANs not supported on caif0
[  185.367145][ T9198] netlink: 32 bytes leftover after parsing attributes in process `syz.0.891'.
[  185.393399][ T9199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.891'.
[  185.679455][ T9205] tap0: tun_chr_ioctl cmd 1074025680
[  185.713267][ T9205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.725578][ T9204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.893'.
[  185.739517][ T9205] D: renamed from syzkaller0
[  185.764626][ T9205] tipc: Disabling bearer <eth:syzkaller0>
[  185.791083][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'.
[  186.344892][ T9250] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  186.344990][ T9248] IPVS: stopping backup sync thread 9250 ...
[  186.545708][ T9256] gretap2: entered promiscuous mode
[  186.678291][ T9262] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  187.108623][ T9279] __nla_validate_parse: 46 callbacks suppressed
[  187.108642][ T9279] netlink: 2 bytes leftover after parsing attributes in process `syz.0.915'.
[  187.160625][ T9279] batadv_slave_1: entered promiscuous mode
[  187.169249][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.487008][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'.
[  188.367683][ T9342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.375123][ T9342] syzkaller0: entered promiscuous mode
[  188.381994][ T9342] syzkaller0: entered allmulticast mode
[  188.404795][ T9342] tipc: Resetting bearer <eth:syzkaller0>
[  188.413516][ T9341] tipc: Resetting bearer <eth:syzkaller0>
[  188.432002][ T9341] tipc: Disabling bearer <eth:syzkaller0>
[  188.834543][ T9356] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.935'.
[  188.855093][ T9356] netlink: 192 bytes leftover after parsing attributes in process `syz.1.935'.
[  189.170138][ T9375] 8021q: VLANs not supported on ip_vti0
[  189.289425][ T9377] delete_channel: no stack
[  189.422838][ T9386] netlink: 'syz.2.946': attribute type 21 has an invalid length.
[  189.431652][ T9386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.946'.
[  189.699997][ T9394] bridge0: port 3(dummy0) entered disabled state
[  189.710483][ T9394] bridge_slave_0: left allmulticast mode
[  189.716162][ T9394] bridge_slave_0: left promiscuous mode
[  189.738663][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.761713][ T9394] bridge_slave_1: left allmulticast mode
[  189.777528][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'.
[  189.812864][ T9406] netlink: 'syz.2.949': attribute type 29 has an invalid length.
[  189.834401][ T9394] bridge_slave_1: left promiscuous mode
[  189.846053][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.933259][ T9394] Ã: (slave bond_slave_0): Releasing backup interface
[  189.961154][ T9394] Ã: (slave bond_slave_1): Releasing backup interface
[  189.983413][ T9394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.994710][ T9394] batman_adv: batadv0: Removing interface: vlan3
[  190.004446][ T9394] bond0: (slave gretap1): Releasing active interface
[  190.032040][ T9394] gretap1: left allmulticast mode
[  190.048394][ T9394] bond2: (slave geneve2): Releasing backup interface
[  190.122095][ T9414] netlink: 'syz.3.955': attribute type 21 has an invalid length.
[  190.166420][ T9414] netlink: 'syz.3.955': attribute type 6 has an invalid length.
[  190.175753][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'.
[  190.207284][ T9414] netlink: 64 bytes leftover after parsing attributes in process `syz.3.955'.
[  190.253658][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'.
[  190.254826][ T9426] netlink: 'syz.1.957': attribute type 2 has an invalid length.
[  190.290413][ T9426] netlink: 'syz.1.957': attribute type 1 has an invalid length.
[  190.304515][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'.
[  190.444063][ T5157] Bluetooth: hci4: link tx timeout
[  190.451116][ T5157] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  190.460981][ T5157] Bluetooth: hci4: link tx timeout
[  190.466221][ T5157] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  190.476817][ T5157] Bluetooth: hci4: link tx timeout
[  190.482746][ T5157] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  190.491385][ T5157] Bluetooth: hci4: link tx timeout
[  190.496591][ T5157] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  190.508116][ T5157] Bluetooth: hci4: link tx timeout
[  190.513284][ T5157] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  190.521806][ T5157] Bluetooth: hci4: link tx timeout
[  190.526932][ T5157] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  191.186341][ T9457] ip6gre1: entered allmulticast mode
[  191.250811][ T9461] netlink: 'syz.2.965': attribute type 1 has an invalid length.
[  191.322980][ T9468] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  191.795817][ T9495] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  191.983679][ T9505] veth0_vlan: left promiscuous mode
[  192.013794][ T9505] veth0_vlan: entered promiscuous mode
[  192.050938][ T9502] FAULT_INJECTION: forcing a failure.
[  192.050938][ T9502] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  192.095904][ T9502] CPU: 0 UID: 0 PID: 9502 Comm: syz.1.975 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  192.095935][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  192.095947][ T9502] Call Trace:
[  192.095956][ T9502]  <TASK>
[  192.095965][ T9502]  dump_stack_lvl+0x189/0x250
[  192.095994][ T9502]  ? __pfx____ratelimit+0x10/0x10
[  192.096025][ T9502]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.096048][ T9502]  ? __pfx__printk+0x10/0x10
[  192.096089][ T9502]  should_fail_ex+0x414/0x560
[  192.096138][ T9502]  _copy_to_user+0x31/0xb0
[  192.096176][ T9502]  simple_read_from_buffer+0xe1/0x170
[  192.096215][ T9502]  proc_fail_nth_read+0x1b3/0x220
[  192.096245][ T9502]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  192.096274][ T9502]  ? rw_verify_area+0x258/0x650
[  192.096304][ T9502]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  192.096331][ T9502]  vfs_read+0x1fd/0x980
[  192.096361][ T9502]  ? fdget_pos+0x247/0x320
[  192.096400][ T9502]  ? __pfx___mutex_lock+0x10/0x10
[  192.096433][ T9502]  ? __pfx_vfs_read+0x10/0x10
[  192.096483][ T9502]  ? __fget_files+0x2a/0x420
[  192.096506][ T9502]  ? __fget_files+0x3a0/0x420
[  192.096522][ T9502]  ? __fget_files+0x2a/0x420
[  192.096548][ T9502]  ksys_read+0x145/0x250
[  192.096577][ T9502]  ? __pfx_ksys_read+0x10/0x10
[  192.096600][ T9502]  ? rcu_is_watching+0x15/0xb0
[  192.096633][ T9502]  ? do_syscall_64+0xbe/0x3b0
[  192.096665][ T9502]  do_syscall_64+0xfa/0x3b0
[  192.096691][ T9502]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.096716][ T9502]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.096734][ T9502]  ? clear_bhb_loop+0x60/0xb0
[  192.096756][ T9502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.096773][ T9502] RIP: 0033:0x7f33a258d3bc
[  192.096790][ T9502] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  192.096805][ T9502] RSP: 002b:00007f33a349a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  192.096825][ T9502] RAX: ffffffffffffffda RBX: 00007f33a27b5fa0 RCX: 00007f33a258d3bc
[  192.096838][ T9502] RDX: 000000000000000f RSI: 00007f33a349a0a0 RDI: 0000000000000009
[  192.096849][ T9502] RBP: 00007f33a349a090 R08: 0000000000000000 R09: 0000000000000000
[  192.096860][ T9502] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001
[  192.096872][ T9502] R13: 0000000000000000 R14: 00007f33a27b5fa0 R15: 00007ffda0a24d28
[  192.096900][ T9502]  </TASK>
[  192.152096][ T9509] __nla_validate_parse: 4 callbacks suppressed
[  192.152117][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.976'.
[  192.418234][ T9510] netlink: 84 bytes leftover after parsing attributes in process `syz.0.977'.
[  192.427237][ T9510] netem: invalid attributes len -16
[  192.458365][ T9510] netem: change failed
[  192.497894][ T5157] Bluetooth: hci4: command 0x0405 tx timeout
[  192.607293][ T9525] netlink: 192 bytes leftover after parsing attributes in process `syz.1.979'.
[  193.822064][ T9567] FAULT_INJECTION: forcing a failure.
[  193.822064][ T9567] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.841811][ T9569] netlink: 56 bytes leftover after parsing attributes in process `syz.4.991'.
[  193.935734][ T9567] CPU: 1 UID: 0 PID: 9567 Comm: syz.0.990 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  193.935766][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  193.935779][ T9567] Call Trace:
[  193.935787][ T9567]  <TASK>
[  193.935797][ T9567]  dump_stack_lvl+0x189/0x250
[  193.935824][ T9567]  ? __pfx____ratelimit+0x10/0x10
[  193.935854][ T9567]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.935877][ T9567]  ? __pfx__printk+0x10/0x10
[  193.935904][ T9567]  ? __might_fault+0xb0/0x130
[  193.935949][ T9567]  should_fail_ex+0x414/0x560
[  193.935989][ T9567]  _copy_from_iter+0x1db/0x16f0
[  193.936030][ T9567]  ? rcu_is_watching+0x15/0xb0
[  193.936066][ T9567]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  193.936100][ T9567]  ? __pfx__copy_from_iter+0x10/0x10
[  193.936129][ T9567]  ? __build_skb_around+0x257/0x3e0
[  193.936167][ T9567]  ? netlink_sendmsg+0x642/0xb30
[  193.936198][ T9567]  ? skb_put+0x11b/0x210
[  193.936222][ T9567]  netlink_sendmsg+0x6b2/0xb30
[  193.936265][ T9567]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.936302][ T9567]  ? aa_sock_msg_perm+0x94/0x160
[  193.936332][ T9567]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  193.936357][ T9567]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.936405][ T9567]  __sock_sendmsg+0x219/0x270
[  193.936453][ T9567]  ____sys_sendmsg+0x505/0x830
[  193.936478][ T9567]  ? __pfx_____sys_sendmsg+0x10/0x10
[  193.936506][ T9567]  ? import_iovec+0x74/0xa0
[  193.936534][ T9567]  ___sys_sendmsg+0x21f/0x2a0
[  193.936556][ T9567]  ? __pfx____sys_sendmsg+0x10/0x10
[  193.936611][ T9567]  ? __fget_files+0x2a/0x420
[  193.936627][ T9567]  ? __fget_files+0x3a0/0x420
[  193.936655][ T9567]  __x64_sys_sendmsg+0x19b/0x260
[  193.936677][ T9567]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  193.936705][ T9567]  ? __pfx_ksys_write+0x10/0x10
[  193.936729][ T9567]  ? rcu_is_watching+0x15/0xb0
[  193.936762][ T9567]  ? do_syscall_64+0xbe/0x3b0
[  193.936793][ T9567]  do_syscall_64+0xfa/0x3b0
[  193.936819][ T9567]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.936845][ T9567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.936863][ T9567]  ? clear_bhb_loop+0x60/0xb0
[  193.936886][ T9567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.936904][ T9567] RIP: 0033:0x7fca1478e9a9
[  193.936920][ T9567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.936935][ T9567] RSP: 002b:00007fca1553a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.936955][ T9567] RAX: ffffffffffffffda RBX: 00007fca149b5fa0 RCX: 00007fca1478e9a9
[  193.936968][ T9567] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  193.936979][ T9567] RBP: 00007fca1553a090 R08: 0000000000000000 R09: 0000000000000000
[  193.936991][ T9567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.937001][ T9567] R13: 0000000000000000 R14: 00007fca149b5fa0 R15: 00007ffdb9fd84f8
[  193.937035][ T9567]  </TASK>
[  194.278490][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.659793][ T5157] Bluetooth: hci4: command 0x0405 tx timeout
[  195.134918][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'.
[  195.329694][ T9608] bond2: entered promiscuous mode
[  195.574932][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'.
[  195.580640][ T9627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1006'.
[  195.840870][ T9630] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  195.978177][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1008'.
[  196.165073][ T9644] netlink: 'syz.0.1011': attribute type 4 has an invalid length.
[  196.245528][ T9644] team0: No ports can be present during mode change
[  196.309422][ T9644] team0: Port device syz_tun added
[  196.566825][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'.
[  196.906463][ T9694] netlink: 'syz.2.1026': attribute type 8 has an invalid length.
[  197.002151][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1025'.
[  197.310565][ T9708] __nla_validate_parse: 2 callbacks suppressed
[  197.310582][ T9708] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1031'.
[  197.431325][ T9715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1032'.
[  197.444996][ T9065] IPVS: starting estimator thread 0...
[  197.458740][ T9710] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  197.471567][ T9714] vcan0: tx drop: invalid da for name 0x0000000000000001
[  197.489817][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'.
[  197.548637][ T9716] IPVS: using max 31 ests per chain, 74400 per kthread
[  197.612524][ T9718] hsr_slave_1 (unregistering): left promiscuous mode
[  198.094827][ T9731] pim6reg1: entered promiscuous mode
[  198.112707][ T9731] pim6reg1: entered allmulticast mode
[  198.438880][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'.
[  198.561933][ T9748] netlink: 'syz.4.1044': attribute type 1 has an invalid length.
[  198.722036][ T9748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.773408][ T9748] syzkaller0: entered promiscuous mode
[  198.788090][ T9748] syzkaller0: entered allmulticast mode
[  198.843818][ T9748] tipc: Resetting bearer <eth:syzkaller0>
[  198.875115][ T9748] tipc: Disabling bearer <eth:syzkaller0>
[  198.884186][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'.
[  198.904611][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'.
[  199.056075][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1050'.
[  199.549595][ T9803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1061'.
[  199.742492][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1063'.
[  199.794132][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1063'.
[  199.808042][ T9816] 8021q: adding VLAN 0 to HW filter on device bond2
[  199.815620][ T9816] bridge0: port 3(bond2) entered blocking state
[  199.822794][ T9816] bridge0: port 3(bond2) entered disabled state
[  199.830956][ T9816] bond2: entered allmulticast mode
[  199.840642][ T9816] bond2: entered promiscuous mode
[  199.846588][ T9816] bridge0: port 3(bond2) entered blocking state
[  199.853939][ T9816] bridge0: port 3(bond2) entered forwarding state
[  199.879484][ T9828] openvswitch: netlink: Multiple metadata blocks provided
[  199.935907][ T9816] netlink: 'syz.2.1066': attribute type 1 has an invalid length.
[  200.359197][ T6663] bridge0: port 3(bond2) entered disabled state
[  200.446299][ T9849] netlink: 'syz.3.1075': attribute type 1 has an invalid length.
[  201.273119][ T9905] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  201.824872][ T9911] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  201.935690][ T9914] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  201.965623][ T9914] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  202.082774][ T9916] netlink: 'syz.1.1093': attribute type 1 has an invalid length.
[  202.216335][ T9929] netlink: 'syz.4.1097': attribute type 12 has an invalid length.
[  202.462063][ T9936] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  202.485430][ T9935] netlink: 'syz.4.1099': attribute type 4 has an invalid length.
[  202.565588][ T9931] __nla_validate_parse: 10 callbacks suppressed
[  202.565606][ T9931] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1098'.
[  203.010787][ T9954] v: renamed from ip6_vti0 (while UP)
[  203.160680][ T9956] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1096'.
[  203.400019][ T9973] netlink: 'syz.2.1110': attribute type 21 has an invalid length.
[  203.460562][ T9973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1110'.
[  203.511500][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'.
[  203.524392][ T9973] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  203.722804][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'.
[  203.973348][ T9988] ipvlan0: entered promiscuous mode
[  203.979930][ T9988] ipvlan0: entered allmulticast mode
[  203.985689][ T9988] batadv0: entered allmulticast mode
[  203.993897][ T9988] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  204.333942][T10013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'.
[  205.154026][T10058] bridge0: Device is already in use.
[  205.195872][T10058] syzkaller0: entered promiscuous mode
[  205.231611][T10058] syzkaller0: entered allmulticast mode
[  205.521857][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'.
[  205.560218][T10083] ip6erspan0: entered allmulticast mode
[  205.585044][T10081] geneve3: entered promiscuous mode
[  205.591737][T10081] geneve3: entered allmulticast mode
[  205.625223][   T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.675668][ T5946] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.710020][ T5946] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.765806][ T5946] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.790694][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'.
[  205.874600][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'.
[  205.939081][ T5157] Bluetooth: hci4: command 0x0405 tx timeout
[  205.955489][T10098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1138'.
[  205.972556][T10091] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  206.378949][T10120] openvswitch: netlink: IP tunnel dst address not specified
[  206.429187][T10119] hsr_slave_0: left promiscuous mode
[  206.442900][T10119] hsr_slave_1: left promiscuous mode
[  206.577645][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  206.583901][T10127] netlink: 'syz.2.1150': attribute type 1 has an invalid length.
[  206.742574][T10134] netlink: 'syz.0.1153': attribute type 27 has an invalid length.
[  207.003363][T10147] macvtap0: entered promiscuous mode
[  207.009891][T10147] macvtap0: entered allmulticast mode
[  207.207323][T10159] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  207.425986][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805a918400: rx timeout, send abort
[  207.434467][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805a919400: rx timeout, send abort
[  207.444433][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a918400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  207.458842][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a919400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  207.617534][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  207.642336][T10175] __nla_validate_parse: 5 callbacks suppressed
[  207.642354][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'.
[  207.709010][T10179] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1166'.
[  207.719178][T10176] netlink: 'syz.1.1165': attribute type 10 has an invalid length.
[  207.743484][T10176] dummy0: left promiscuous mode
[  207.903001][T10188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.923060][T10188] syzkaller0: entered promiscuous mode
[  207.934657][T10188] syzkaller0: entered allmulticast mode
[  207.947088][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'.
[  207.969981][T10189] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1169'.
[  208.029818][T10188] tipc: Resetting bearer <eth:syzkaller0>
[  208.061913][T10184] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1168'.
[  208.102885][T10182] tipc: Resetting bearer <eth:syzkaller0>
[  208.142070][T10182] tipc: Disabling bearer <eth:syzkaller0>
[  208.167797][T10200] syzkaller1: entered promiscuous mode
[  208.173415][T10200] syzkaller1: entered allmulticast mode
[  208.236906][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  208.311134][T10204] netlink: 'syz.0.1174': attribute type 11 has an invalid length.
[  208.349029][T10206] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  208.386625][T10211] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002
[  208.483267][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'.
[  208.610898][T10218] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  208.657516][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  208.712087][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'.
[  208.769696][T10221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1178'.
[  208.775589][T10223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  208.957021][T10227] netlink: 'syz.1.1181': attribute type 30 has an invalid length.
[  208.981993][T10235] Bluetooth: MGMT ver 1.23
[  209.028653][T10235] geneve2: entered promiscuous mode
[  209.039763][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'.
[  209.068654][T10232] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1181'.
[  209.132261][T10227] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  209.160437][T10227] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  209.174291][ T1002] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.184151][ T1002] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.196938][ T1002] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.419215][   T78] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.707571][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  209.898578][T10268] tipc: Can't bind to reserved service type 0
[  210.013978][T10275] netlink: 'syz.1.1192': attribute type 2 has an invalid length.
[  210.353340][T10283] wg1: left promiscuous mode
[  210.362790][T10283] wg1: left allmulticast mode
[  210.372263][T10283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.390947][T10283] batadv_slave_1: left promiscuous mode
[  210.402946][T10283] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  210.414377][T10283] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  210.424714][T10283] vlan0: left promiscuous mode
[  210.433145][T10283] bond0: left promiscuous mode
[  210.439974][T10283] bond_slave_0: left promiscuous mode
[  210.445748][T10283] bond_slave_1: left promiscuous mode
[  210.463563][T10283] vlan0: left allmulticast mode
[  210.472526][T10283] bond0: left allmulticast mode
[  210.486501][T10283] bond_slave_0: left allmulticast mode
[  210.495786][T10283] bond_slave_1: left allmulticast mode
[  210.504822][T10283] gretap1: left promiscuous mode
[  210.521962][T10283] geneve2: left promiscuous mode
[  210.541465][T10284] erspan1: entered promiscuous mode
[  210.560955][T10279] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  210.580353][T10279] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  210.640400][ T8284] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.671157][ T8284] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.691182][ T8284] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.729960][ T8284] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.762517][T10303] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.836535][T10303] bond0: (slave rose0): Enslaving as an active interface with an up link
[  210.864382][ T8284] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.903927][ T8284] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.948735][ T8284] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.957035][ T8284] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.029424][T10316] netlink: 'syz.4.1203': attribute type 1 has an invalid length.
[  211.091462][T10316] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  211.453820][T10340] netlink: 'syz.1.1207': attribute type 58 has an invalid length.
[  211.700752][ T5851] Bluetooth: hci3: command 0x0406 tx timeout
[  211.706911][ T5851] Bluetooth: hci2: command 0x0406 tx timeout
[  211.713481][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  211.713972][T10348] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.787799][    C0] net_ratelimit: 1 callbacks suppressed
[  211.787817][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  211.836682][T10360] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  211.992447][T10348] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.110145][T10348] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.327248][T10348] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.460406][T10386] lo: entered allmulticast mode
[  212.483016][T10386] tunl0: entered allmulticast mode
[  212.496429][T10386] gre0: entered allmulticast mode
[  212.517226][T10386] gretap0: entered allmulticast mode
[  212.539984][T10386] erspan0: left promiscuous mode
[  212.566761][T10386] erspan0: entered allmulticast mode
[  212.576047][T10386] ip_vti0: entered allmulticast mode
[  212.588591][T10386] ip6_vti0: entered allmulticast mode
[  212.600467][T10391] netlink: 'syz.3.1221': attribute type 39 has an invalid length.
[  212.608598][T10386] sit0: entered allmulticast mode
[  212.634081][T10386] ip6tnl0: entered allmulticast mode
[  212.682702][T10386] ip6gre0: entered allmulticast mode
[  212.704663][T10386] ip6gretap0: entered allmulticast mode
[  212.713942][T10386] bond0: entered allmulticast mode
[  212.720066][T10386] bond_slave_0: entered allmulticast mode
[  212.725891][T10386] bond_slave_1: entered allmulticast mode
[  212.733487][T10386] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.742527][T10386] team0: entered allmulticast mode
[  212.748353][T10386] team_slave_0: entered allmulticast mode
[  212.754160][T10386] team_slave_1: entered allmulticast mode
[  212.761456][T10386] 8021q: adding VLAN 0 to HW filter on device team0
[  212.769553][T10386] dummy0: entered allmulticast mode
[  212.776272][T10386] nlmon0: entered allmulticast mode
[  212.783879][T10386] caif0: entered allmulticast mode
[  212.789682][T10386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  212.817625][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  212.922952][   T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.949953][   T78] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.019187][ T8284] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.072689][   T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.251792][T10417] __nla_validate_parse: 15 callbacks suppressed
[  213.251811][T10417] netlink: 676 bytes leftover after parsing attributes in process `syz.3.1229'.
[  213.287722][T10417] netlink: 676 bytes leftover after parsing attributes in process `syz.3.1229'.
[  213.367050][T10407] syzkaller0: entered promiscuous mode
[  213.402835][T10407] syzkaller0: entered allmulticast mode
[  213.489830][T10407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.510426][T10407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.635975][T10442] netlink: 'syz.2.1235': attribute type 21 has an invalid length.
[  213.645459][T10442] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1235'.
[  213.656633][T10442] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1235'.
[  213.857878][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  214.355989][T10468] netlink: 'syz.2.1241': attribute type 1 has an invalid length.
[  214.369143][T10468] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1241'.
[  214.460904][T10474] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  214.473974][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1243'.
[  214.907539][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  215.410015][T10474] hsr_slave_1 (unregistering): left promiscuous mode
[  215.435402][T10481] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1244'.
[  215.489317][T10483] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1245'.
[  215.528445][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'.
[  215.802106][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1251'.
[  215.937625][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  216.050293][T10506] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  216.061566][T10504] bond0: entered promiscuous mode
[  216.076459][T10504] bond0: left promiscuous mode
[  216.488020][T10523] openvswitch: netlink: Flow key attr not present in new flow.
[  216.977771][    C0] net_ratelimit: 1 callbacks suppressed
[  216.977790][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  217.119371][T10557] tipc: Started in network mode
[  217.124284][T10557] tipc: Node identity d6257c827a86, cluster identity 4711
[  217.151529][T10557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.184664][T10559] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  217.364322][T10557] tipc: Disabling bearer <eth:syzkaller0>
[  217.832820][T10576] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.840191][T10576] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.028011][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  218.120988][T10576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.152908][T10576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.325261][ T3488] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.358639][   T78] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.394411][ T5946] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.424056][ T5946] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.473007][T10593] __nla_validate_parse: 7 callbacks suppressed
[  218.473026][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'.
[  218.521337][T10593] netlink: 'syz.2.1277': attribute type 29 has an invalid length.
[  218.541070][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'.
[  218.646633][T10600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1279'.
[  218.765348][T10604] netlink: 'syz.1.1281': attribute type 16 has an invalid length.
[  218.785852][T10604] netlink: 'syz.1.1281': attribute type 3 has an invalid length.
[  218.816678][T10611] syzkaller0: entered promiscuous mode
[  218.835074][T10604] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1281'.
[  218.846539][T10611] syzkaller0: entered allmulticast mode
[  219.016096][T10618] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1285'.
[  219.032845][T10618] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1285'.
[  219.057610][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  219.159665][T10624] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.202874][T10627] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20002
[  219.213202][T10627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1288'.
[  219.226747][T10627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1288'.
[  220.074857][T10650] bridge0: port 4(erspan0) entered blocking state
[  220.084935][T10650] bridge0: port 4(erspan0) entered disabled state
[  220.097520][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  220.109466][T10650] erspan0: entered allmulticast mode
[  220.164478][T10650] erspan0: entered promiscuous mode
[  220.172316][T10651] erspan0: left allmulticast mode
[  220.181214][T10651] erspan0: left promiscuous mode
[  220.203326][T10651] bridge0: port 4(erspan0) entered disabled state
[  220.250569][T10662] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1297'.
[  220.281554][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'.
[  220.299683][T10667] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  221.137662][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  222.115699][T10749] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  222.189163][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  222.325494][T10758] unsupported nlmsg_type 40
[  223.020684][T10801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.088318][T10801] syzkaller0: entered promiscuous mode
[  223.094025][T10801] syzkaller0: entered allmulticast mode
[  223.217699][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  223.514446][T10823] __nla_validate_parse: 13 callbacks suppressed
[  223.514464][T10823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1350'.
[  223.613123][T10827] veth1_to_team: entered allmulticast mode
[  223.770859][T10800] tipc: Resetting bearer <eth:syzkaller0>
[  223.799309][T10829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.049466][ T5961] tipc: Node number set to 2257990298
[  224.092661][T10855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1357'.
[  224.259739][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  225.124029][T10800] tipc: Disabling bearer <eth:syzkaller0>
[  225.147991][T10854] syz_tun: left allmulticast mode
[  225.176272][T10855] gretap0: left promiscuous mode
[  225.212321][T10855] ip6gretap0: entered promiscuous mode
[  225.239419][T10855] 8021q: adding VLAN 0 to HW filter on device Ã
[  225.252381][T10855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  225.297513][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  225.402596][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1361'.
[  225.463634][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'.
[  225.702464][T10876] sctp: [Deprecated]: syz.2.1365 (pid 10876) Use of int in maxseg socket option.
[  225.702464][T10876] Use struct sctp_assoc_value instead
[  225.835549][T10878] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1365'.
[  225.863175][T10883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1365'.
[  226.000678][T10887] geneve2: entered promiscuous mode
[  226.148452][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'.
[  226.337689][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  226.616829][   T30] audit: type=1800 audit(1753968023.624:8): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1374" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1411 res=0 errno=0
[  226.729244][T10914] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  226.965675][T10914] lo: entered allmulticast mode
[  227.377641][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  227.538088][T10939] IPVS: set_ctl: invalid protocol: 3 100.1.1.1:20000
[  227.944677][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'.
[  228.059942][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'.
[  228.069984][T10953] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1384'.
[  228.111809][T10953] hsr_slave_0: left promiscuous mode
[  228.133916][T10953] hsr_slave_1: left promiscuous mode
[  228.423740][T10956] syzkaller0: entered promiscuous mode
[  228.427587][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  228.455983][T10956] syzkaller0: entered allmulticast mode
[  228.710808][T10975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.724229][T10975] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.747575][T10975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.754980][T10975] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.460934][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  229.520628][T10989] netlink: 'syz.3.1390': attribute type 30 has an invalid length.
[  230.186147][T10989] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  230.195655][T10989] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  230.303058][T10991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.316316][T10991] syzkaller0: entered promiscuous mode
[  230.326871][T10991] syzkaller0: entered allmulticast mode
[  230.409136][T10991] tipc: Resetting bearer <eth:syzkaller0>
[  230.432163][T10990] tipc: Resetting bearer <eth:syzkaller0>
[  230.497598][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  230.548986][T10990] tipc: Disabling bearer <eth:syzkaller0>
[  230.802583][T11011] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1397'.
[  231.129585][T11034] netlink: 'syz.1.1403': attribute type 10 has an invalid length.
[  231.537603][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  231.555890][T11048] sctp: [Deprecated]: syz.2.1406 (pid 11048) Use of int in max_burst socket option.
[  231.555890][T11048] Use struct sctp_assoc_value instead
[  231.682964][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'.
[  231.775361][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1408'.
[  232.005212][T11070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.104090][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'.
[  232.123293][T11070] tipc: Disabling bearer <eth:syzkaller0>
[  232.156331][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'.
[  232.193065][T11075] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1415'.
[  232.291702][T11089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.314539][T11089] syzkaller0: entered promiscuous mode
[  232.330382][T11089] syzkaller0: entered allmulticast mode
[  232.359211][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'.
[  232.405818][T11089] tipc: Resetting bearer <eth:syzkaller0>
[  232.431848][T11088] tipc: Resetting bearer <eth:syzkaller0>
[  232.465880][T11088] tipc: Disabling bearer <eth:syzkaller0>
[  232.577672][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  232.647340][T11109] bridge_slave_0: left allmulticast mode
[  232.655187][T11109] bridge_slave_0: left promiscuous mode
[  232.665000][T11109] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.679521][T11111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1427'.
[  232.705578][T11109] bridge_slave_1: left allmulticast mode
[  232.716912][T11109] bridge_slave_1: left promiscuous mode
[  232.734867][T11109] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.756767][T11122] netlink: 'syz.3.1426': attribute type 10 has an invalid length.
[  232.758772][T11109] team0: Port device team_slave_0 removed
[  232.782845][T11109] team0: Port device team_slave_1 removed
[  232.859324][T11128] netlink: 'syz.1.1430': attribute type 10 has an invalid length.
[  232.890730][T11124] block nbd1: server does not support multiple connections per device.
[  232.906599][T11124] block nbd1: shutting down sockets
[  233.021610][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'.
[  233.598416][T11167] macvlan0: entered allmulticast mode
[  233.604087][T11167] veth1_vlan: entered allmulticast mode
[  233.617981][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  234.465234][T11198] netlink: 'syz.0.1453': attribute type 21 has an invalid length.
[  234.474130][T11198] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1453'.
[  234.657745][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  235.697612][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  236.737560][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  237.777607][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  238.169026][T11242] __nla_validate_parse: 1 callbacks suppressed
[  238.169047][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1467'.
[  238.229641][T11243] syzkaller0: entered promiscuous mode
[  238.235166][T11243] syzkaller0: entered allmulticast mode
[  238.580446][T11259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.613798][T11259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.725847][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'.
[  238.817634][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  238.850085][T11259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.864733][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'.
[  238.874534][T11259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.985513][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'.
[  239.048528][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1476'.
[  239.203071][T11259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.215612][T11259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.243805][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'.
[  239.285419][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'.
[  239.335653][T11259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.346827][T11259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.372334][T11287] bond0: entered promiscuous mode
[  239.382130][T11287] ÿÓ—: entered promiscuous mode
[  239.388801][T11287] bond_slave_1: entered promiscuous mode
[  239.395172][T11287] bridge0: entered promiscuous mode
[  239.403072][T11287] batadv0: entered promiscuous mode
[  239.414440][T11287] debugfs: 'hsr1' already exists in 'hsr'
[  239.421262][T11287] Cannot create hsr debugfs directory
[  239.428703][T11287] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  239.439342][T11287] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  239.451723][T11287] hsr1: entered allmulticast mode
[  239.456839][T11287] bond0: entered allmulticast mode
[  239.462940][T11287] ÿÓ—: entered allmulticast mode
[  239.468885][T11287] bond_slave_1: entered allmulticast mode
[  239.474787][T11287] bridge0: entered allmulticast mode
[  239.480861][T11287] batadv0: entered allmulticast mode
[  239.487002][T11287] 8021q: adding VLAN 0 to HW filter on device hsr1
[  239.495825][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'.
[  239.626047][ T6663] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  239.641719][ T6663] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.665127][ T6663] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  239.674455][ T6663] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.713326][   T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  239.736587][   T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.763984][   T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  239.776888][   T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.798595][T11260] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.812794][T11260] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.867634][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  239.881590][T11310] netlink: 'syz.2.1483': attribute type 2 has an invalid length.
[  239.892266][   T36] ==================================================================
[  239.892810][T11310] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1483'.
[  239.900345][   T36] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1340
[  239.900392][   T36] Read of size 8 at addr ffff888026976eb0 by task kworker/u8:2/36
[  239.900410][   T36] 
[  239.900422][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  239.900447][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  239.900461][   T36] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  239.900496][   T36] Call Trace:
[  239.900505][   T36]  <TASK>
[  239.900515][   T36]  dump_stack_lvl+0x189/0x250
[  239.900537][   T36]  ? __kasan_check_byte+0x12/0x40
[  239.900570][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.900592][   T36]  ? lock_release+0x4b/0x3e0
[  239.900625][   T36]  ? __virt_addr_valid+0x4a5/0x5c0
[  239.900650][   T36]  print_report+0xca/0x240
[  239.900680][   T36]  ? __mutex_lock+0x147/0x1340
[  239.900709][   T36]  kasan_report+0x118/0x150
[  239.900739][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  239.900768][   T36]  ? __mutex_lock+0x147/0x1340
[  239.900803][   T36]  __mutex_lock+0x147/0x1340
[  239.900837][   T36]  ? __mutex_lock+0x5b6/0x1340
[  239.900869][   T36]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  239.900901][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  239.900935][   T36]  ? __lock_acquire+0xab9/0xd20
[  239.900970][   T36]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  239.901004][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  239.901035][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  239.901068][   T36]  process_scheduled_works+0xae1/0x17b0
[  239.901113][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  239.901160][   T36]  worker_thread+0x8a0/0xda0
[  239.901206][   T36]  kthread+0x70e/0x8a0
[  239.901238][   T36]  ? __pfx_worker_thread+0x10/0x10
[  239.901270][   T36]  ? __pfx_kthread+0x10/0x10
[  239.901295][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.901322][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.901350][   T36]  ? __pfx_kthread+0x10/0x10
[  239.901374][   T36]  ret_from_fork+0x3fc/0x770
[  239.901406][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  239.901442][   T36]  ? __switch_to_asm+0x39/0x70
[  239.901468][   T36]  ? __switch_to_asm+0x33/0x70
[  239.901494][   T36]  ? __pfx_kthread+0x10/0x10
[  239.901522][   T36]  ret_from_fork_asm+0x1a/0x30
[  239.901558][   T36]  </TASK>
[  239.901567][   T36] 
[  240.133449][   T36] Allocated by task 11259:
[  240.137863][   T36]  kasan_save_track+0x3e/0x80
[  240.142555][   T36]  __kasan_kmalloc+0x93/0xb0
[  240.147169][   T36]  __kmalloc_noprof+0x27a/0x4f0
[  240.152031][   T36]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  240.158194][   T36]  notifier_call_chain+0x1b3/0x3e0
[  240.163310][   T36]  register_netdevice+0x1608/0x1ae0
[  240.168511][   T36]  nsim_create+0xae8/0xf10
[  240.172932][   T36]  __nsim_dev_port_add+0x6b6/0xb10
[  240.178053][   T36]  nsim_dev_port_add_all+0x37/0xf0
[  240.183166][   T36]  nsim_dev_reload_up+0x451/0x780
[  240.188200][   T36]  devlink_reload+0x4e9/0x8d0
[  240.192898][   T36]  devlink_nl_reload_doit+0xb35/0xd50
[  240.198274][   T36]  genl_family_rcv_msg_doit+0x215/0x300
[  240.203838][   T36]  genl_rcv_msg+0x60e/0x790
[  240.208336][   T36]  netlink_rcv_skb+0x205/0x470
[  240.213101][   T36]  genl_rcv+0x28/0x40
[  240.217079][   T36]  netlink_unicast+0x82c/0x9e0
[  240.221869][   T36]  netlink_sendmsg+0x805/0xb30
[  240.226640][   T36]  __sock_sendmsg+0x219/0x270
[  240.231323][   T36]  ____sys_sendmsg+0x505/0x830
[  240.236088][   T36]  ___sys_sendmsg+0x21f/0x2a0
[  240.240765][   T36]  __x64_sys_sendmsg+0x19b/0x260
[  240.245701][   T36]  do_syscall_64+0xfa/0x3b0
[  240.250213][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.256106][   T36] 
[  240.258430][   T36] Freed by task 11260:
[  240.262494][   T36]  kasan_save_track+0x3e/0x80
[  240.267178][   T36]  kasan_save_free_info+0x46/0x50
[  240.272204][   T36]  __kasan_slab_free+0x62/0x70
[  240.276987][   T36]  kfree+0x18e/0x440
[  240.280881][   T36]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  240.287118][   T36]  notifier_call_chain+0x1b3/0x3e0
[  240.292226][   T36]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  240.298640][   T36]  unregister_netdevice_queue+0x33c/0x380
[  240.304377][   T36]  nsim_destroy+0x1dd/0x670
[  240.308878][   T36]  __nsim_dev_port_del+0x14d/0x1b0
[  240.314004][   T36]  nsim_dev_reload_destroy+0x288/0x490
[  240.319467][   T36]  nsim_dev_reload_down+0x8a/0xc0
[  240.324499][   T36]  devlink_reload+0x1b6/0x8d0
[  240.329173][   T36]  devlink_nl_reload_doit+0xb35/0xd50
[  240.334548][   T36]  genl_family_rcv_msg_doit+0x215/0x300
[  240.340098][   T36]  genl_rcv_msg+0x60e/0x790
[  240.344602][   T36]  netlink_rcv_skb+0x205/0x470
[  240.349369][   T36]  genl_rcv+0x28/0x40
[  240.353342][   T36]  netlink_unicast+0x82c/0x9e0
[  240.358104][   T36]  netlink_sendmsg+0x805/0xb30
[  240.362871][   T36]  __sock_sendmsg+0x219/0x270
[  240.367551][   T36]  ____sys_sendmsg+0x505/0x830
[  240.372322][   T36]  ___sys_sendmsg+0x21f/0x2a0
[  240.376999][   T36]  __x64_sys_sendmsg+0x19b/0x260
[  240.381940][   T36]  do_syscall_64+0xfa/0x3b0
[  240.386481][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.392374][   T36] 
[  240.394699][   T36] Last potentially related work creation:
[  240.400407][   T36]  kasan_save_stack+0x3e/0x60
[  240.405091][   T36]  kasan_record_aux_stack+0xbd/0xd0
[  240.410287][   T36]  insert_work+0x3d/0x330
[  240.414614][   T36]  __queue_work+0xbd9/0xfe0
[  240.419112][   T36]  queue_work_on+0x181/0x270
[  240.423697][   T36]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  240.429347][   T36]  udp_tunnel_push_rx_port+0x180/0x200
[  240.434802][   T36]  geneve_offload_rx_ports+0xd7/0x160
[  240.440197][   T36]  geneve_netdevice_event+0x6a/0x80
[  240.445401][   T36]  notifier_call_chain+0x1b3/0x3e0
[  240.450512][   T36]  call_netdevice_notifiers+0x88/0xc0
[  240.455889][   T36]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  240.462143][   T36]  notifier_call_chain+0x1b3/0x3e0
[  240.467247][   T36]  register_netdevice+0x1608/0x1ae0
[  240.472440][   T36]  nsim_create+0xae8/0xf10
[  240.476856][   T36]  __nsim_dev_port_add+0x6b6/0xb10
[  240.481978][   T36]  nsim_dev_port_add_all+0x37/0xf0
[  240.487095][   T36]  nsim_dev_reload_up+0x451/0x780
[  240.492120][   T36]  devlink_reload+0x4e9/0x8d0
[  240.496798][   T36]  devlink_nl_reload_doit+0xb35/0xd50
[  240.502173][   T36]  genl_family_rcv_msg_doit+0x215/0x300
[  240.507726][   T36]  genl_rcv_msg+0x60e/0x790
[  240.512232][   T36]  netlink_rcv_skb+0x205/0x470
[  240.517017][   T36]  genl_rcv+0x28/0x40
[  240.521002][   T36]  netlink_unicast+0x82c/0x9e0
[  240.525773][   T36]  netlink_sendmsg+0x805/0xb30
[  240.530552][   T36]  __sock_sendmsg+0x219/0x270
[  240.535228][   T36]  ____sys_sendmsg+0x505/0x830
[  240.540010][   T36]  ___sys_sendmsg+0x21f/0x2a0
[  240.544686][   T36]  __x64_sys_sendmsg+0x19b/0x260
[  240.549617][   T36]  do_syscall_64+0xfa/0x3b0
[  240.554135][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.560023][   T36] 
[  240.562340][   T36] Second to last potentially related work creation:
[  240.568914][   T36]  kasan_save_stack+0x3e/0x60
[  240.573604][   T36]  kasan_record_aux_stack+0xbd/0xd0
[  240.578804][   T36]  insert_work+0x3d/0x330
[  240.583132][   T36]  __queue_work+0xcfc/0xfe0
[  240.587622][   T36]  queue_work_on+0x181/0x270
[  240.592213][   T36]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  240.597866][   T36]  udp_tunnel_push_rx_port+0x180/0x200
[  240.603361][   T36]  vxlan_offload_rx_ports+0x139/0x200
[  240.608743][   T36]  vxlan_netdevice_event+0x111/0x470
[  240.614031][   T36]  notifier_call_chain+0x1b3/0x3e0
[  240.619409][   T36]  call_netdevice_notifiers+0x88/0xc0
[  240.624783][   T36]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  240.631031][   T36]  notifier_call_chain+0x1b3/0x3e0
[  240.636142][   T36]  register_netdevice+0x1608/0x1ae0
[  240.641343][   T36]  nsim_create+0xae8/0xf10
[  240.645757][   T36]  __nsim_dev_port_add+0x6b6/0xb10
[  240.650883][   T36]  nsim_dev_port_add_all+0x37/0xf0
[  240.656087][   T36]  nsim_dev_reload_up+0x451/0x780
[  240.661127][   T36]  devlink_reload+0x4e9/0x8d0
[  240.665813][   T36]  devlink_nl_reload_doit+0xb35/0xd50
[  240.671190][   T36]  genl_family_rcv_msg_doit+0x215/0x300
[  240.676753][   T36]  genl_rcv_msg+0x60e/0x790
[  240.681255][   T36]  netlink_rcv_skb+0x205/0x470
[  240.686023][   T36]  genl_rcv+0x28/0x40
[  240.690003][   T36]  netlink_unicast+0x82c/0x9e0
[  240.694777][   T36]  netlink_sendmsg+0x805/0xb30
[  240.699547][   T36]  __sock_sendmsg+0x219/0x270
[  240.704221][   T36]  ____sys_sendmsg+0x505/0x830
[  240.708976][   T36]  ___sys_sendmsg+0x21f/0x2a0
[  240.713659][   T36]  __x64_sys_sendmsg+0x19b/0x260
[  240.718590][   T36]  do_syscall_64+0xfa/0x3b0
[  240.723107][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.729003][   T36] 
[  240.731320][   T36] The buggy address belongs to the object at ffff888026976e00
[  240.731320][   T36]  which belongs to the cache kmalloc-256 of size 256
[  240.745371][   T36] The buggy address is located 176 bytes inside of
[  240.745371][   T36]  freed 256-byte region [ffff888026976e00, ffff888026976f00)
[  240.759165][   T36] 
[  240.761484][   T36] The buggy address belongs to the physical page:
[  240.767885][   T36] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26976
[  240.776657][   T36] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  240.785151][   T36] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  240.792690][   T36] page_type: f5(slab)
[  240.796667][   T36] raw: 00fff00000000040 ffff88801a441b40 ffffea0001d43a00 0000000000000004
[  240.805249][   T36] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  240.813850][   T36] head: 00fff00000000040 ffff88801a441b40 ffffea0001d43a00 0000000000000004
[  240.822515][   T36] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  240.831184][   T36] head: 00fff00000000001 ffffea00009a5d81 00000000ffffffff 00000000ffffffff
[  240.839883][   T36] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  240.848546][   T36] page dumped because: kasan: bad access detected
[  240.854972][   T36] page_owner tracks the page as allocated
[  240.860698][   T36] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5836, tgid 5836 (syz-executor), ts 88285650898, free_ts 35472905333
[  240.882073][   T36]  post_alloc_hook+0x240/0x2a0
[  240.886863][   T36]  get_page_from_freelist+0x21e4/0x22c0
[  240.892411][   T36]  __alloc_frozen_pages_noprof+0x181/0x370
[  240.898210][   T36]  alloc_pages_mpol+0x232/0x4a0
[  240.903072][   T36]  allocate_slab+0x8a/0x3b0
[  240.907598][   T36]  ___slab_alloc+0xbfc/0x1480
[  240.912285][   T36]  __kmalloc_noprof+0x305/0x4f0
[  240.917140][   T36]  __register_sysctl_table+0xba1/0x1340
[  240.922690][   T36]  __addrconf_sysctl_register+0x328/0x4c0
[  240.928411][   T36]  addrconf_sysctl_register+0x168/0x1c0
[  240.933958][   T36]  ipv6_add_dev+0xd46/0x1370
[  240.938547][   T36]  addrconf_notify+0x794/0x1010
[  240.943397][   T36]  notifier_call_chain+0x1b3/0x3e0
[  240.948497][   T36]  register_netdevice+0x1608/0x1ae0
[  240.953688][   T36]  veth_newlink+0x42f/0xa50
[  240.958193][   T36]  rtnl_newlink_create+0x30d/0xb00
[  240.963325][   T36] page last free pid 5221 tgid 5221 stack trace:
[  240.969643][   T36]  __free_frozen_pages+0xc71/0xe70
[  240.974755][   T36]  __put_partials+0x161/0x1c0
[  240.979429][   T36]  put_cpu_partial+0x17c/0x250
[  240.984194][   T36]  __slab_free+0x2f7/0x400
[  240.988621][   T36]  qlist_free_all+0x97/0x140
[  240.993216][   T36]  kasan_quarantine_reduce+0x148/0x160
[  240.998683][   T36]  __kasan_slab_alloc+0x22/0x80
[  241.003556][   T36]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  241.009019][   T36]  getname_flags+0xb8/0x540
[  241.013524][   T36]  do_readlinkat+0xbc/0x500
[  241.018049][   T36]  __x64_sys_readlink+0x7f/0x90
[  241.022900][   T36]  do_syscall_64+0xfa/0x3b0
[  241.027411][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.033311][   T36] 
[  241.035632][   T36] Memory state around the buggy address:
[  241.041260][   T36]  ffff888026976d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  241.049317][   T36]  ffff888026976e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  241.057369][   T36] >ffff888026976e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  241.065424][   T36]                                      ^
[  241.071049][   T36]  ffff888026976f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  241.079100][   T36]  ffff888026976f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  241.087169][   T36] ==================================================================
[  241.096883][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  241.108625][   T36] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  241.115864][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  241.127514][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  241.137574][   T36] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  241.144887][   T36] Call Trace:
[  241.148175][   T36]  <TASK>
[  241.151108][   T36]  dump_stack_lvl+0x99/0x250
[  241.155703][   T36]  ? __asan_memcpy+0x40/0x70
[  241.160315][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.165537][   T36]  ? __pfx__printk+0x10/0x10
[  241.170152][   T36]  panic+0x2db/0x790
[  241.174049][   T36]  ? __pfx_panic+0x10/0x10
[  241.178467][   T36]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  241.184362][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  241.190704][   T36]  ? print_memory_metadata+0x314/0x400
[  241.196174][   T36]  ? __mutex_lock+0x147/0x1340
[  241.200946][   T36]  check_panic_on_warn+0x89/0xb0
[  241.205893][   T36]  ? __mutex_lock+0x147/0x1340
[  241.210672][   T36]  end_report+0x78/0x160
[  241.214921][   T36]  kasan_report+0x129/0x150
[  241.219433][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  241.225355][   T36]  ? __mutex_lock+0x147/0x1340
[  241.230129][   T36]  __mutex_lock+0x147/0x1340
[  241.234741][   T36]  ? __mutex_lock+0x5b6/0x1340
[  241.239659][   T36]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  241.245921][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  241.250958][   T36]  ? __lock_acquire+0xab9/0xd20
[  241.255824][   T36]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  241.261911][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  241.267652][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  241.273393][   T36]  process_scheduled_works+0xae1/0x17b0
[  241.278958][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  241.284954][   T36]  worker_thread+0x8a0/0xda0
[  241.289568][   T36]  kthread+0x70e/0x8a0
[  241.293722][   T36]  ? __pfx_worker_thread+0x10/0x10
[  241.298859][   T36]  ? __pfx_kthread+0x10/0x10
[  241.303473][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.308680][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.313892][   T36]  ? __pfx_kthread+0x10/0x10
[  241.318507][   T36]  ret_from_fork+0x3fc/0x770
[  241.323117][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  241.328236][   T36]  ? __switch_to_asm+0x39/0x70
[  241.332998][   T36]  ? __switch_to_asm+0x33/0x70
[  241.337782][   T36]  ? __pfx_kthread+0x10/0x10
[  241.342382][   T36]  ret_from_fork_asm+0x1a/0x30
[  241.347153][   T36]  </TASK>
[  241.350540][   T36] Kernel Offset: disabled
[  241.354875][   T36] Rebooting in 86400 seconds..