last executing test programs:

2m18.838154114s ago: executing program 1 (id=2985):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40)

2m18.495787096s ago: executing program 1 (id=2990):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000800)=ANY=[@ANYRESOCT], 0x8)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10488)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', r3, 0x2f, 0x3, 0x0, 0x7, 0x66, @private1, @empty, 0x7, 0x20, 0xffffffff, 0x101}})
sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}], 0x2, 0x10)

2m17.517173782s ago: executing program 1 (id=2995):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff04}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'gre0\x00', <r2=>0x0, 0x7, 0x10, 0x5, 0x4, {{0x33, 0x4, 0x2, 0x2, 0xcc, 0x66, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@cipso={0x86, 0x42, 0x1, [{0x2, 0xc, "7e782dd937aecceb53e0"}, {0x1, 0xc, "6fec3a87e26ec63c8bcb"}, {0x2, 0xb, "9758f27e1d00d817c5"}, {0x7, 0xc, "4c0f74c92a64a1164ed9"}, {0x1, 0xd, "68380b786f1e53e59b70cb"}]}, @rr={0x7, 0x1b, 0x99, [@multicast1, @empty, @multicast2, @private=0xa010102, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x6, [{@private=0xa010101, 0x3ff}]}, @timestamp={0x44, 0x8, 0x91, 0x0, 0xb, [0x1e2e109e]}, @timestamp={0x44, 0x24, 0xa7, 0x0, 0xa, [0x0, 0x3, 0x3, 0x9, 0x7, 0x8, 0x9, 0x94]}, @noop, @lsrr={0x83, 0x1f, 0x8a, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty]}, @noop]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18ffffffff28444d580095f627cd2cfe9de9ec785b3b8071f6f450cd60c3af3cf2e7e2cb28c6340dbee33a9c96c4504a23d82de1bd10cc05751d865183320f785be4ff132d27dd4795ac00edff0000"], &(0x7f0000000040)='GPL\x00', 0x2d9, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

2m17.340972149s ago: executing program 1 (id=2998):
unshare(0x26020480)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
splice(r1, 0x0, r0, 0x0, 0x9, 0x1200000000000000)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000001040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x12, 0x0, &(0x7f0000001a00)="2000cb3c0000000022385ba988a88dc288a8", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000300)=0x100)
setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, 0x0, 0x0)
socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socket$kcm(0x10, 0x100000000002, 0x4)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0xaa3, 0x8000, 0x6, 0x0, 0x4}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r10 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r10, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4)

2m17.144739216s ago: executing program 1 (id=3000):
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000001010484ff00000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

2m11.051871126s ago: executing program 1 (id=3002):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
unshare(0x600)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7001fbdbdf250100000008000100020000002c00048005000300010000000500030002000000050003000200000005000300000000000500030080ff000008000200"], 0x50}}, 0x0)
bind$xdp(r2, &(0x7f0000000a80)={0x2c, 0x1, r4, 0xa}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94)
writev(0xffffffffffffffff, 0x0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xec, &(0x7f0000000540)=""/236, 0x41000, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000480)=[{0x1, 0x4, 0x2, 0x3}, {0x0, 0x4, 0xf, 0xa}, {0x25, 0x5, 0xf}, {0x3, 0x2, 0x7}], 0x10, 0x125}, 0x94)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40850)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000020000000000000009300000000000000", @ANYBLOB='\n\x00'/15, @ANYRESHEX=r7, @ANYRES32, @ANYBLOB], 0x50)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(0xffffffffffffffff, 0x1)
socket$rds(0x15, 0x5, 0x0)

2m10.715089494s ago: executing program 32 (id=3002):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
unshare(0x600)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7001fbdbdf250100000008000100020000002c00048005000300010000000500030002000000050003000200000005000300000000000500030080ff000008000200"], 0x50}}, 0x0)
bind$xdp(r2, &(0x7f0000000a80)={0x2c, 0x1, r4, 0xa}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94)
writev(0xffffffffffffffff, 0x0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xec, &(0x7f0000000540)=""/236, 0x41000, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000480)=[{0x1, 0x4, 0x2, 0x3}, {0x0, 0x4, 0xf, 0xa}, {0x25, 0x5, 0xf}, {0x3, 0x2, 0x7}], 0x10, 0x125}, 0x94)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40850)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000020000000000000009300000000000000", @ANYBLOB='\n\x00'/15, @ANYRESHEX=r7, @ANYRES32, @ANYBLOB], 0x50)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(0xffffffffffffffff, 0x1)
socket$rds(0x15, 0x5, 0x0)

3.784472493s ago: executing program 5 (id=4351):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)

3.584008911s ago: executing program 5 (id=4353):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x2f, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
connect$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

3.155504695s ago: executing program 3 (id=4362):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000001000085100000010000009500000000000000184400000300000000000000000000008500000012000000950000000000000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xa}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@bcast, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x17, 0x0}}], 0x2, 0x60000800)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)
write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x2, 0x300)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, 0x0, 0x4)

3.078918424s ago: executing program 4 (id=4363):
socket(0x40000000015, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113c000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000)
socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = epoll_create1(0x0)
epoll_wait(r3, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

2.856560307s ago: executing program 5 (id=4366):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r1, &(0x7f00000000c0), 0x10)
recvfrom$l2tp(r1, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0xffffffffffffff48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) (fail_nth: 6)

2.085237356s ago: executing program 3 (id=4372):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x7b00, 0x7ffffffe, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)

1.947043612s ago: executing program 2 (id=4374):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x2f, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

1.932778703s ago: executing program 3 (id=4375):
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x358, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x344, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x140, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8589, 0x200, 0x3, 0x6, 0xe5, 0xb4, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x9}, {0x5, 0x1}, {0x7, 0x9}, {0x2, 0x4}, {0x1}, {0x2}, {0x5, 0x3}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x6}, {0x4, 0x4}, {0x7}, {0x4}, {0x0, 0x6}, {0x2, 0x3}, {}, {0x0, 0x2}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0xa}, {0x3, 0xa}, {0x0, 0xa}, {0x5, 0x5}, {0x3, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x5, 0xc}, {0x4, 0x6}, {0x5, 0x9}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0xa}, {0x0, 0x9}, {0x4, 0x5}, {0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x5}, {0x5, 0x9}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0xa}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x7}, {0x4, 0x2}, {0x4, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x3, 0x9}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x7}, {0x3, 0x8}, {0x7, 0x1}, {0x4, 0xa}, {0x3, 0x8}, {0x6, 0xa}, {0x1, 0x8}, {0x6, 0xa}, {0x1, 0x3}, {0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x6}, {0x7, 0x4}, {0x0, 0x7}, {0x2, 0x4}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0xa}, {0x7, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x2, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x5, 0xa}, {0x3}, {0x2, 0x9}, {0x1, 0x6}, {0x2}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffd, 0x5, 0x2948, 0x8, 0x2, 0x6, 0x7, 0xb]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x754, 0x100, 0x7, 0x0, 0x4, 0xfffa, 0x2009]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x3ff, 0x3fe, 0x8, 0x6, 0x7, 0x97, 0xf6af]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x2, 0xffff, 0x5, 0xe, 0x0, 0xf, 0xd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x2, 0x9, 0x0, 0xd2b, 0x8, 0x401]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x4}, {0x2, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x6, 0x4}, {0x1}, {0x2, 0x9}, {0x3, 0x6}, {0x7, 0x7}, {0x4, 0x1}, {0x4, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x9}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0xa}, {0x4, 0x5}, {0x7, 0x5}, {0x3, 0x5}, {0x3, 0x7}, {0x5, 0x2}, {0x3, 0x6}, {0x4, 0x5}, {0x5, 0x6}, {0x1, 0xa}, {0x7, 0x9}, {0x7, 0x3}, {0x7}, {0x3, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x6, 0x6}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0x6}, {0x5, 0x3}, {0x3, 0x2}, {0x4, 0x6}, {0x6, 0x6}, {0x3, 0x3}, {0x3, 0x5}, {0x2, 0x1}, {0x7}, {0x6}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x6, 0xa}, {0x2, 0x4}, {0x5, 0x5}]}]}, @NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x5}, {0x5, 0x1}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x2}, {0x2, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x9}, {0x2, 0x4}, {0x1, 0x3}, {0x3, 0x3}, {0x2, 0x9}, {0x3, 0x3}, {0x5, 0x4}, {0x6, 0x2}, {0x6}, {0x2, 0xa}, {0x2, 0x6}, {0x3, 0x8}, {0x2, 0x4}, {0x4, 0x3}, {0x2, 0x9}, {0x7, 0x4}, {0x7, 0x5}, {0x6, 0x5}, {0x2, 0x7}, {0x7, 0x4}, {0x2, 0x1}, {0x2, 0x8}, {0x5}, {0x7, 0x9}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x8}, {0x3, 0x4}, {0x6, 0x7}, {0x4, 0x2}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x3}, {0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {0x2, 0x8}, {0x4, 0x1}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x2}, {0x6, 0x5}, {0x2, 0x7}, {0x7, 0x9}, {0x7, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x5, 0x8}, {0x7}, {0x6, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdf6c, 0x5, 0x3, 0x43, 0x5, 0xcd7, 0x103c, 0x6]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0x6}, {0x5, 0x6}, {0x6, 0x1}, {0x1, 0x9}, {0x1, 0xa}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x9}, {0x7, 0x2}, {0x4}, {0x6, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x7, 0x8}, {}, {0x5, 0x8}, {0x4, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x3, 0x9}, {0x5, 0x2}, {0x4, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x6}, {0x6, 0x4}, {0x7, 0x4}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0x8}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x2}, {0x1}, {0x2, 0x6}, {0x3, 0x3}, {0x1, 0x3}, {}, {0x1, 0x4}, {0x2, 0xa}, {0x7}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x4}, {0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x8}, {0x7}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x3}, {0x4, 0x5}, {0x0, 0xa}, {0x6, 0x6}, {0x2, 0x1}, {0x3, 0xa}, {0x2, 0x2}, {0x0, 0x4}, {0x7}, {0x6, 0x9}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0x7}, {0x0, 0xa}, {0x1}, {0x7, 0x9}, {0x4, 0x6}, {0x6, 0x6}, {0x4, 0x1}, {0x4, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x4, 0x4}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x6, 0x9}, {0x0, 0x9}, {0x5, 0x7}, {0x6}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x7}, {0x5, 0x7}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x4, 0x9}, {0x1, 0x8}, {0x3, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x0, 0x322, 0x5, 0x6, 0x9, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x2, 0x5, 0x7, 0x0, 0x2, 0x1, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x6000, 0x9, 0x5, 0xf, 0x0, 0x581]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x8001, 0x3, 0xb7, 0x4, 0xb, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfffb, 0x6, 0x1ff, 0x3ff, 0x2, 0xc000, 0xfff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8f, 0xf, 0x42, 0x818b, 0x722, 0x0, 0xaf63, 0x57]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6c, 0x0, 0x6, 0xd, 0x2, 0x1, 0xfff1]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x6}, {0x2, 0xa}, {0x2, 0x8}, {0x5, 0xa}, {0x2, 0x4}, {0x7, 0x9}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x8}, {0x7, 0x3}, {0x2, 0x4}, {0x6, 0x2}, {0x3, 0x7}, {0x4, 0x9}, {0x5, 0x4}, {0x6, 0x2}, {0x5, 0x7}, {0x3, 0x6}, {0x3}, {0x1}, {0x2, 0x2}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x3, 0xa}, {0x5, 0x8}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0x4}, {0x5, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0xa}, {0x7, 0x3}, {0x0, 0x4}, {0x1}, {0x1}, {0x5, 0x6}, {0x4, 0x8}, {0x7, 0xa}, {0x4, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x4}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x40815}, 0x4000000)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x59, 0xff, 0x4, 0x7, 0x0, 0x8d7651735d51b07})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000020000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)

1.894535383s ago: executing program 5 (id=4376):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x34, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)

1.802732902s ago: executing program 5 (id=4378):
r0 = socket$netlink(0x10, 0x3, 0x13)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000000)=0xfd, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x1, 0x7fff, 0x10000, 0x5}, 0x10)
r2 = socket(0x0, 0x6, 0x5)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080), 0x4)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r3, 0x0, 0x3, &(0x7f0000000100)='/)\x00'}, 0x30)
r4 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r5 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000200)={0x7fff, 0x81, 0x5, 0xdd}, 0x10)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x620, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x81, 0x3}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x5]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4085)
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [{{0x254, 0x1, {{0x3, 0xfff}, 0x8, 0x9, 0x0, 0x0, 0xb, 'syz0\x00', "39a8c30773a86e8e7c7d2a4557dd6031c7a26c9c91a75faac9ba98b76db61bee", "05d40a60d5153a23da9117f928094d25480143d8db57b2687042c29ea9dbf65d", [{0xffff, 0x6, {0x2, 0x9}}, {0x40, 0x8b, {0x3, 0x9}}, {0x8, 0x8000, {0x1, 0x80}}, {0x6, 0x7, {0x1, 0x9}}, {0x6, 0x6, {0x3, 0x6}}, {0x1, 0x5, {0x3, 0x1a5}}, {0x4, 0x940, {0x1, 0x401}}, {0xf, 0x7}, {0x6, 0x85ae, {0x3, 0x81}}, {0x80, 0x2, {0x2, 0x5}}, {0x81, 0x6, {0x3, 0x3}}, {0x6, 0x3, {0xfc563c79d070bd23}}, {0x7, 0xfff8, {0x3, 0x400}}, {0x6, 0x6, {0x0, 0x8}}, {0x1, 0xfffc, {0x1, 0x1}}, {0x5, 0x95b2, {0x2, 0x40}}, {0x52, 0x9, {0x3, 0x2}}, {0x3, 0x7f, {0x0, 0x7fff}}, {0x8, 0x0, {0x0, 0x5}}, {0x91, 0xfffc, {0x7, 0x3}}, {0xd9, 0x8, {0x1}}, {0x5, 0xff, {0x0, 0x5}}, {0x8, 0x1000, {0x1, 0x10}}, {0x6, 0x34, {0x2, 0x8}}, {0x8, 0x5, {0x3, 0xfffffffc}}, {0xa23, 0x9, {0x2, 0x80}}, {0x401, 0x3, {0x1, 0x40}}, {0x0, 0x8, {0x0, 0x5}}, {0x0, 0x1, {0x2, 0x8000}}, {0x0, 0xb985, {0x3, 0x6}}, {0x7, 0x3, {0x1, 0xd9e}}, {0x6, 0x4, {0x0, 0x2}}, {0xffff, 0x0, {0x2, 0x5}}, {0x0, 0xa, {0x2, 0xa}}, {0xf, 0x7, {0x3, 0xfffffffe}}, {0x8, 0xffff, {0x0, 0xfffffffe}}, {0x0, 0xd000, {0x0, 0xc4}}, {0x6af, 0x1000, {0x3, 0x9}}, {0x0, 0x7, {0x1, 0x8001}}, {0x8, 0xe5c6, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0xe, 0x2, 0x1, 0x1, 0x24, 'syz0\x00', "7115e7f68e92002ed35de1a21cab64e9b23b422390cd12c741b21b81603158ac", "572308aaff3f94ed27aee7bfa9b4eaaea219e0d33d5e9cfd7836c2319f852e6c", [{0x1, 0x4, {0x1, 0xe}}, {0x5, 0xfff, {0x2, 0x7a5a}}, {0x9, 0x1000, {0x1, 0x7}}, {0x40, 0x5000, {0x3, 0x5}}, {0x2000, 0x0, {0x3, 0xb}}, {0x4, 0x6, {0x1, 0x5}}, {0x8001, 0x1, {0x2, 0x9}}, {0x1000, 0x6, {0x0, 0x5}}, {0x40, 0x2, {0x3, 0x8}}, {0xcd6b, 0x8000, {0x0, 0x7}}, {0x40, 0x3, {0x2, 0x3}}, {0x3, 0x0, {0x1, 0x1}}, {0x8, 0x9, {0x2, 0x4}}, {0x5, 0xd, {0x0, 0x10}}, {0x4, 0x9796, {0x2, 0x101}}, {0x9, 0x9, {0x0, 0xf}}, {0x57, 0x3, {0x0, 0x5}}, {0x9, 0x19, {0x1, 0x1}}, {0xa1, 0x8, {0x3, 0x1000}}, {0x7fff, 0x3, {0x0, 0x5}}, {0xe3, 0xfffb, {0x0, 0x1ff}}, {0xfffe, 0x5, {0x1, 0x2}}, {0x2f87, 0x101, {0x1, 0x44}}, {0xf7ad, 0xaf1, {0x3, 0x2}}, {0xf, 0x2, {0xfca60c519104ab63, 0x3}}, {0x7, 0xa, {0x1, 0x7}}, {0x81, 0x40, {0x1, 0x1}}, {0xd00, 0x8001, {0x1, 0x5c}}, {0x3, 0x9, {0x2, 0x3}}, {0xfffd, 0x2, {0x1, 0x90}}, {0xc, 0x8, {0x1, 0xfffffffd}}, {0x400, 0x9, {0x0, 0x502}}, {0x1, 0x9e, {0x1, 0x3ff}}, {0xb, 0x9913, {0x0, 0x21d}}, {0x8, 0xab, {0x0, 0x3}}, {0xfe01, 0x0, {0x3, 0x7f}}, {0x80, 0x6, {0x3, 0x8}}, {0x1000, 0x0, {0x0, 0x7ff}}, {0x3ff, 0x1, {0x1, 0x5}}, {0xa, 0x7fff, {0x1, 0x4}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40005}, 0x800)
write$cgroup_devices(r3, &(0x7f00000008c0)={'a', ' *:* ', 'rw\x00'}, 0x9)
getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000900), &(0x7f0000000940)=0x8)
setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000980)=0x10, 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r6)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)
clock_gettime(0x0, &(0x7f0000003e00)={<r7=>0x0, <r8=>0x0})
recvmmsg(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000a00)=@ax25={{}, [@rose, @rose, @rose, @bcast, @rose, @null, @bcast, @null]}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000000a80)=""/80, 0x50}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/255, 0xff}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/64, 0x40}, {&(0x7f0000002c40)=""/144, 0x90}, {&(0x7f0000002d00)=""/7, 0x7}], 0x7, &(0x7f0000002dc0)=""/4096, 0x1000}, 0x101}], 0x1, 0x2, &(0x7f0000003e40)={r7, r8+10000000})
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000005680)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005640)={&(0x7f0000003ec0)={0x175c, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3}, [{{0x254, 0x1, {{0x2, 0x8}, 0x6, 0x6, 0x5, 0x6, 0x1d, 'syz0\x00', "ac1e8735fb87d3505425feb2b05010095363d0db50fa52ab26041b7f3573c3ec", "e06a8c6341b00438afe6c10d63bd5e1c75baf9f029eaa2ba7e0eaff0c5f53891", [{0x80, 0x80, {0x2}}, {0x7, 0x7, {0x0, 0x5}}, {0x9, 0x4, {0x3, 0x8}}, {0x8, 0xfcd, {0x2, 0x3}}, {0x1, 0x92e, {0x1, 0x101}}, {0x2, 0xa4, {0x3, 0x3}}, {0x7d31, 0x65b4, {0x0, 0x4}}, {0x0, 0x0, {0x1, 0x7ff}}, {0x1, 0x7ff, {0x1, 0xd1d1}}, {0xdfb, 0x8, {0x1, 0x8}}, {0x7, 0x6, {0x1, 0xd}}, {0x72b5, 0xffdf, {0x1, 0x400}}, {0x7, 0x3, {0x3, 0x10}}, {0x400, 0x4, {0x1, 0x9}}, {0x352, 0xc7cd, {0x1, 0x6}}, {0x2, 0xfc01, {0x0, 0x7f}}, {0x5, 0x6, {0x2, 0x4}}, {0x3, 0x101, {0x2, 0x4}}, {0xbe0, 0x0, {0x2, 0x7fff}}, {0x8, 0x7fff, {0x0, 0xfffffffc}}, {0xfffc, 0x4000, {0x0, 0x4}}, {0x1, 0xfffc, {0x0, 0x2}}, {0x5, 0xff01, {0x2, 0x4}}, {0x5, 0x7, {0x3, 0x6}}, {0x401, 0x1, {0x0, 0x3}}, {0x7, 0x7, {0x3, 0x2}}, {0x1, 0x38e8, {0x1, 0x1}}, {0x8, 0x0, {0x3, 0x9}}, {0x6, 0x1f2f, {0x2, 0x7}}, {0x9, 0x7, {0x0, 0x2}}, {0x6, 0x5, {0x1, 0x1}}, {0x5, 0xff01, {0x0, 0x7}}, {0x1, 0x1, {0x0, 0x80000000}}, {0x448b, 0x1ff, {0x2, 0xbf}}, {0x7f, 0x2, {0x2, 0x1}}, {0xc, 0x5, {0x3, 0x7}}, {0x3, 0x0, {0x2, 0x5}}, {0x0, 0x600, {0x3, 0x7}}, {0xffff, 0x7, {0x2, 0x9}}, {0x7, 0x9, {0x0, 0x792d}}]}}}, {{0x254, 0x1, {{0x2, 0xffffffff}, 0x0, 0x0, 0x7, 0x6, 0x24, 'syz0\x00', "3a7513a0b27add1ec3a8c1c96671e3bd43039523aa0f498d72a9f4e47a8d435c", "54f44f71b194c5d333feab03b7f253aca43adc33c5ec48ea0682f01fb6aec699", [{0x9, 0x1, {0x3, 0xffffffff}}, {0x5, 0x3, {0x1, 0xfffffff9}}, {0x4, 0x5, {0x0, 0x8}}, {0x10, 0x1ff, {0x0, 0x30}}, {0x1, 0x2}, {0x9, 0xff6a}, {0xffd6, 0x10, {0x2, 0x9}}, {0xff, 0x40, {0x3, 0x3}}, {0xe, 0x8, {0x2, 0x2}}, {0x0, 0x0, {0x3, 0xfffffff8}}, {0xda14, 0x7, {0x3, 0x7fff}}, {0xf, 0x1, {0x3}}, {0xff, 0x1e, {0x0, 0x101}}, {0x1e4a, 0xdd8f, {0x2, 0x4}}, {0xfff1, 0x2, {0x0, 0x400}}, {0x9, 0xfff, {0x1, 0x6}}, {0x5, 0x6, {0x2, 0x6}}, {0x5, 0xcd, {0x1, 0x2400000}}, {0x0, 0x8, {0x0, 0x6}}, {0x3, 0x7, {0x1, 0x7}}, {0xf, 0x0, {0x3, 0x6}}, {0xd233, 0x3, {0x1, 0x6}}, {0x800, 0x5, {0x1, 0xa23d}}, {0x1, 0x0, {0x1, 0x8}}, {0x4, 0x5a, {0x1, 0x81}}, {0x3, 0x5, {0x3, 0x1}}, {0x4, 0xb, {0x1, 0x5}}, {0x98, 0x56, {0x1, 0x5}}, {0x81, 0xe, {0x2, 0x9}}, {0xf, 0x5, {0x1, 0x3}}, {0x9, 0xa, {0x0, 0xdcd1}}, {0x2, 0x6, {0x2, 0x1}}, {0x1, 0x3ff, {0x2, 0x8}}, {0x1, 0x2, {0x0, 0xffffffff}}, {0x9, 0x3, {0x3, 0x6}}, {0xf, 0x0, {0x1, 0x3}}, {0x0, 0x1, {0x3, 0xc}}, {0x2, 0xc, {0x0, 0x8}}, {0x9, 0xfff9, {0x1, 0x6}}, {0x5, 0x6, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x5, 0x5c, 0x1, 0x4, 0xa, 'syz1\x00', "3900273ea1011596c6c038da9701385ab505f3ad31cb38eb8d1eb5023bc8daa9", "bd6c0b9519e20bca5e010729796a29def323e25722f3b25c9960e784117a508a", [{0x7, 0xe, {0x1, 0xf}}, {0x786c, 0x4, {0x0, 0x200}}, {0x1, 0x5, {0x3, 0x9}}, {0x7, 0xec, {0x0, 0x2}}, {0x1, 0x0, {0x0, 0x20000}}, {0x5, 0x2, {0x1, 0x40}}, {0x7, 0x4, {0x3, 0x8}}, {0xc, 0x1000, {0x1, 0xd33d}}, {0x6, 0x0, {0x3, 0x7fff}}, {0x2, 0x2, {0x1, 0x81}}, {0x1000, 0x1, {0x0, 0x9e9}}, {0x7, 0x6, {0x2, 0x33}}, {0x3, 0x6b, {0x3, 0xd}}, {0x2, 0x3, {0x3, 0x6}}, {0x7f, 0xfff, {0x2, 0x7}}, {0x8001, 0x2c, {0x3, 0xa1cb}}, {0xb, 0xbfb, {0x1, 0x8001}}, {0x9, 0x0, {0x0, 0x4c}}, {0x2, 0xfffa, {0x3, 0x862}}, {0x2, 0x7, {0x0, 0x9}}, {0xfc00, 0x1000, {0x1, 0x2}}, {0x1, 0x2, {0x3, 0x8}}, {0x9, 0xffff, {0x1, 0x1}}, {0x9, 0x5, {0x0, 0x6}}, {0xf374, 0xa3c, {0x2, 0x10001}}, {0x3, 0x400}, {0xff77, 0x4, {0x1, 0x2}}, {0x5, 0x9, {0x2, 0x10001}}, {0xe, 0xd3, {0x2, 0x8ae}}, {0xa, 0x2, {0x2, 0x800}}, {0x200, 0x8000, {0x2}}, {0xff, 0x9, {0x3, 0x31}}, {0x0, 0x7fff, {0x3, 0xe0000000}}, {0x9, 0x4, {0x0, 0xb14}}, {0x8001, 0x4, {0x3, 0xfffffffc}}, {0x1000, 0x4, {0x3, 0x1}}, {0x401, 0x3, {0x3, 0x1}}, {0x0, 0x4, {0x2, 0x4}}, {0x8000, 0x5, {0x2, 0xffff0000}}, {0x2, 0x8, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0x4, 0x4, 0x6430, 0x3, 0xe, 'syz0\x00', "f2e767624e4c0201cbb40b48751a707602f91a8115ebec2ea8cd0b0357099d44", "9ec9bb5c559bb1c5e10400a06d9d2ddeda653b188d38b4e1ac41245e86458a9f", [{0x3ff, 0x3, {0x1, 0x6}}, {0x3, 0x7, {0x2, 0x2}}, {0xd, 0x490f, {0x3, 0x442}}, {0x1, 0xf, {0x3, 0x66c}}, {0x7, 0x7fff, {0x3}}, {0x3, 0x5da, {0x0, 0xfffffffc}}, {0x0, 0xc61f, {0x2, 0x2}}, {0x6, 0xe, {0x0, 0x3}}, {0x5, 0x100, {0x3, 0x4}}, {0x0, 0xff8a, {0x2}}, {0x7, 0x4, {0x1, 0x1}}, {0x100, 0x5d, {0x0, 0x5}}, {0xfff, 0x6, {0x2, 0x2}}, {0x2, 0x2, {0x0, 0x4b}}, {0xe, 0xf34f, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xf}}, {0x2, 0xfff4, {0x0, 0x80000001}}, {0x0, 0x6, {0x3, 0x5}}, {0x6, 0xb192, {0x0, 0xfffffff9}}, {0x3, 0x14d, {0x1, 0x8}}, {0xfff8, 0x300, {0x2, 0x541}}, {0xd971, 0x7, {0x3, 0x48}}, {0x7e1, 0xfff1, {0x0, 0x800}}, {0x40, 0x6, {0x1, 0x7f}}, {0x1, 0x8, {0x3, 0x45}}, {0x0, 0x3, {0x2, 0x9}}, {0x1, 0x7fff, {0x0, 0xffffffff}}, {0x0, 0xb, {0x1, 0x69a3}}, {0x100, 0x0, {0x2, 0xfffffff7}}, {0x0, 0xfff, {0x1, 0x3}}, {0x5, 0x5, {0x0, 0x8}}, {0x0, 0x9, {0x0, 0x9}}, {0xca73, 0x6, {0x3, 0x6}}, {0x2, 0x40, {0x2, 0x9}}, {0x2, 0x9, {0x0, 0xd1b}}, {0x4, 0x1ff, {0x0, 0x4}}, {0x200, 0xf, {0x0, 0x2}}, {0x7, 0x11, {0x3, 0x5}}, {0x1, 0x40, {0x0, 0x6}}, {0x1, 0x1, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x7, 0x100}, 0x8, 0xd8, 0x5, 0x7, 0x0, 'syz0\x00', "c1b71ecd83c3c40e09325c1eca9fbbd5bf1a81dfbc38cfe6a92416b567911e66", "f0fc65ad7216723ca66c2591138d4f97f83587f259a995895918e19d1736aa01", [{0x3, 0x4, {0x3, 0x2}}, {0x101, 0xbf9, {0x1, 0x80000001}}, {0x3, 0x2d5e, {0x2, 0x6}}, {0xfff7, 0x5, {0x1, 0xfd40}}, {0x1, 0x9470, {0x0, 0x4}}, {0x6, 0x9, {0x2, 0x5}}, {0xe, 0xb957, {0x1, 0x6}}, {0xe, 0x9, {0x3, 0x5}}, {0x2, 0x0, {0x3, 0x1}}, {0xfff, 0x400, {0x1, 0x80000000}}, {0xf, 0x2, {0x0, 0x6}}, {0x4, 0x5, {0x1, 0x2}}, {0x2, 0x57, {0x2, 0x37}}, {0x2, 0xfff, {0x3, 0x9}}, {0xfab0, 0xfffb, {0x3, 0xffffe1d8}}, {0x2, 0x6, {0x0, 0xc0}}, {0x5, 0xfffd, {0x0, 0x7}}, {0x63, 0x6, {0x3, 0xed0d66f}}, {0x200, 0x0, {0x2, 0x10}}, {0x8, 0x1000, {0x1, 0x4}}, {0x7fff, 0x8, {0x2, 0xfff}}, {0x12, 0xb, {0x2, 0xe}}, {0x8, 0x3, {0x3, 0x8}}, {0x2, 0x340, {0x3, 0x4}}, {0x5f, 0x1, {0x3, 0x80000001}}, {0x0, 0x800, {0x1, 0xc}}, {0x0, 0x1, {0x1, 0x387}}, {0x1ff, 0x0, {0x0, 0x7}}, {0x1, 0x3ff, {0x3, 0xb1c}}, {0x200, 0x0, {0x3, 0x2}}, {0x2, 0x589, {0x0, 0x9}}, {0x3, 0xc31f, {0x2, 0x1}}, {0x98, 0x9, {0x3, 0xfff}}, {0x4000, 0x9, {0x2, 0x4}}, {0x9, 0xa3, {0x0, 0xfffffffc}}, {0x6, 0x1, {0x3, 0x4}}, {0xfff, 0x5, {0x1, 0xfffffc01}}, {0x7, 0x9, {0x2, 0x9}}, {0x40, 0x0, {0x0, 0xf}}, {0x8, 0xdd, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1}, 0xb, 0x2, 0x5, 0x1, 0x3, 'syz0\x00', "c84e6f4a1b46361934047304c49f94efc5e4793e5efe8389894b14035059f84f", "78aa7d1df1614a9eca239db1520d4a2efe487919f72f0256933a411617417b4b", [{0x7, 0x7, {0x1, 0x2}}, {0x5, 0x81, {0x0, 0x3}}, {0x28ed, 0xf, {0x1, 0x6}}, {0x4, 0x1, {0x2, 0x81}}, {0xffff, 0x7, {0x3, 0x3}}, {0x8, 0x1, {0x1, 0xce1}}, {0xda, 0x8, {0x1, 0x9}}, {0x6, 0x6, {0x3, 0x1ff}}, {0x0, 0xdeee, {0x3, 0xfff}}, {0x6, 0x9, {0x1, 0x1}}, {0x401, 0xe573, {0x2, 0x2}}, {0x10, 0x705d, {0x0, 0xfffffffe}}, {0x3, 0xd8f7, {0x3, 0x95}}, {0x37a, 0x2, {0x3, 0x9}}, {0x6, 0x80, {0x1, 0x8}}, {0x7f, 0x9, {0x0, 0x40}}, {0x8, 0x3, {0x1}}, {0xff, 0x800, {0x0, 0x7fffffff}}, {0x4, 0x6, {0x0, 0x9d8}}, {0x9, 0x80, {0x2, 0x401}}, {0x7, 0x3, {0x1, 0x7}}, {0x1, 0x6, {0x1, 0x76}}, {0x5, 0x8, {0x0, 0xfff}}, {0x40, 0x480, {0x3, 0x6}}, {0x1, 0xa82, {0x0, 0x5}}, {0x2, 0x2, {0x2}}, {0x8001, 0xc8, {0x1, 0x6}}, {0xd, 0x4, {0x0, 0x81}}, {0x9, 0xc72, {0x2, 0x3}}, {0x0, 0x5, {0x2, 0x7}}, {0x83e, 0x9, {0x2, 0xd}}, {0x4, 0x5, {0x3, 0xffff1730}}, {0x80, 0x350f, {0x2, 0x9}}, {0x51d, 0xaee, {0x2, 0x80f1}}, {0x6, 0x847f, {0x0, 0x1}}, {0xc99, 0xee7}, {0x0, 0x45b, {0x3, 0xb9}}, {0x1, 0x1}, {0xe, 0x35c, {0x0, 0x800}}, {0x3, 0x3338, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x7ff}, 0xe, 0x4, 0x4, 0x7, 0x1d, 'syz1\x00', "27a7a031097f3f8d36083b0fa744da78980884b3259517c4fb5720d130cd173a", "543cf1efb073849f56cc3829c98d4e933db4260eb05d0567f95ddc6d60106c1b", [{0xfffc, 0x2, {0x2, 0x3}}, {0x1, 0x1000, {0x0, 0xc}}, {0x4, 0x2, {0x2, 0x8}}, {0x8, 0x0, {0x1, 0x254}}, {0xa, 0x57, {0x1, 0x9}}, {0x9, 0x8, {0x3, 0xfffffffd}}, {0x7, 0x1, {0x3, 0x1ff}}, {0x0, 0x7, {0x1, 0xb2}}, {0x1, 0x8, {0x0, 0x2}}, {0x5, 0x58, {0x3}}, {0x8000, 0xafa9, {0x2, 0x2}}, {0xffba, 0xfffa, {0x0, 0x5}}, {0x9, 0x37c, {0x0, 0xfe62}}, {0x7fff, 0x5, {0x3, 0x8000}}, {0x8, 0x0, {0x3, 0x3}}, {0xe, 0x9}, {0x8, 0x4}, {0x0, 0xd, {0x2, 0x100}}, {0x5, 0x20, {0x2, 0xffffffff}}, {0x5, 0x8f, {0x2, 0x3}}, {0x3, 0x3, {0x0, 0x10001}}, {0x8672, 0x6, {0x3, 0x2}}, {0x401, 0x4, {0x2, 0x101}}, {0x40, 0x37c, {0x2}}, {0x4732, 0x1, {0x2, 0x1ff}}, {0xfff7, 0x6, {0x1, 0x1}}, {0x3, 0x4, {0x1, 0x4}}, {0x0, 0x9, {0x1, 0x31a}}, {0x6, 0x28b5, {0x1, 0x8}}, {0xc, 0x10, {0x0, 0x4}}, {0x0, 0x2, {0x0, 0x5}}, {0x6, 0x7, {0x0, 0x9}}, {0x401, 0x7f, {0x1}}, {0x4e7, 0x3, {0x0, 0xad15d7b5}}, {0x740d, 0x3f, {0x3, 0x9}}, {0x10, 0xffff, {0x1, 0x10}}, {0xf, 0x7ff, {0x0, 0x2}}, {0x2ef4, 0x2, {0x3, 0x1000}}, {0xb901, 0x5, {0x0, 0x6c2}}, {0x4, 0xffff, {0x2, 0x30}}]}}}, {{0x254, 0x1, {{0x2, 0x62}, 0x5, 0xbd, 0x4, 0x4555, 0x11, 'syz1\x00', "c01caf0c67bd3fcbbbefefe6f4dfc2afa541f68fbe454642fbcd9dea6e9e14b5", "9ed43144f04e2460677a6ac90b871de1bb03105f13aa2812e3b04fc00f337b90", [{0x7, 0x2, {0x1, 0x9}}, {0xdc44, 0x8, {0x1, 0x6}}, {0x9, 0x8, {0x0, 0x47}}, {0xc1f9, 0x3, {0x2, 0xfa8}}, {0x7fff, 0x401, {0x2, 0x7fff}}, {0x4, 0x3ff, {0x0, 0x4}}, {0x6, 0x0, {0x0, 0x8000}}, {0x0, 0x3, {0x3, 0x65}}, {0x9, 0x1, {0x3, 0xee7}}, {0xbc76, 0x7, {0x0, 0xfffffffc}}, {0x1, 0xebd9, {0x2, 0x8000}}, {0x2, 0xff74, {0x1, 0xa}}, {0x75, 0x7, {0x0, 0x7c85}}, {0x4, 0xffff, {0x1, 0x7}}, {0x59, 0x1, {0x1, 0x30}}, {0x40, 0x6, {0x6b12aadb877885a, 0x2}}, {0x0, 0xfff8, {0x0, 0xc}}, {0x3ff, 0xc3, {0x3, 0x5}}, {0x7, 0x7, {0x2}}, {0x1, 0x9, {0x5, 0x101}}, {0xc, 0x0, {0x1, 0x1ff}}, {0x4, 0xa52, {0x3}}, {0x0, 0x76b5, {0x0, 0x6}}, {0xe10a, 0xcf6, {0x2, 0x3}}, {0x7, 0x9, {0x1, 0x4374}}, {0x80, 0xfff9, {0x1, 0x9}}, {0x4, 0xf19}, {0x7f, 0x8001, {0x1}}, {0x1c, 0xfffe, {0x1, 0xffffffff}}, {0x7, 0x401, {0x2, 0x8}}, {0x2, 0x1, {0x1, 0x4}}, {0x180b, 0x4f, {0x1, 0x3ff}}, {0x7, 0x8, {0x3, 0x4}}, {0x4f95, 0x7, {0x1, 0x1ff}}, {0x80, 0x8, {0x1, 0x1}}, {0xff81, 0x2, {0x8433f22cbe52ceef, 0x3}}, {0x0, 0x7, {0x2, 0x4}}, {0x1, 0x7, {0x0, 0x9}}, {0x7fff, 0x861d, {0x2, 0xbcb}}, {0x780, 0x450, {0x0, 0xec}}]}}}, {{0x254, 0x1, {{0x0, 0x92}, 0xfd, 0x40, 0x6, 0xa8, 0x1, 'syz1\x00', "6907b94eaca5934805cc856a794bb4553912a1a300b542c00887213a5db504c5", "521eb76056b771bd176150120b60ddab5b9412eae721498ffa1d8502c306cff4", [{0x8, 0x0, {0x3, 0x400}}, {0x80, 0x8, {0x1, 0x6}}, {0x8, 0x8, {0x0, 0x8}}, {0x51b, 0xfffe, {0x0, 0x9}}, {0x55, 0x7, {0x0, 0x1ff}}, {0x571, 0x1000, {0x3, 0x9}}, {0xfffe, 0x2, {0x0, 0x4}}, {0xf, 0x6, {0x3, 0x4}}, {0x4, 0x4, {0x2, 0x9}}, {0xfff9, 0x1d2, {0x1, 0x8}}, {0x10, 0x7, {0x2, 0x5}}, {0x5, 0x7fff, {0x0, 0x4}}, {0xfc01, 0x3, {0x1, 0x3}}, {0x6, 0x77b, {0x0, 0x5}}, {0x7fff, 0x2, {0x2, 0x6}}, {0x2, 0xc, {0x1, 0x7}}, {0x6, 0x80, {0x2, 0xffffffff}}, {0x94, 0x3c4, {0x0, 0x3}}, {0xca6f, 0x6, {0x3, 0x1}}, {0x9, 0x6, {0xbf47509cf970ece7, 0x1ff}}, {0x5091, 0x5, {0x0, 0x5e}}, {0xf800, 0x9, {0x3, 0x5}}, {0xd950, 0xa, {0x1, 0x4}}, {0x6, 0x4, {0x0, 0x74a}}, {0x31c3, 0x101, {0x3, 0x66f}}, {0x1b04, 0x7, {0x0, 0x93a}}, {0x2, 0x8, {0xdf9deccc44f33b57, 0x7}}, {0x6, 0xca5, {0x1, 0x1b8c}}, {0x5, 0x132, {0x0, 0xb82}}, {0x7, 0x8, {0x1}}, {0x8000, 0xe06a, {0x3, 0x6}}, {0xff, 0xa1ed, {0x3, 0x7}}, {0x5e, 0x1000, {0x0, 0x50a}}, {0x9, 0x7, {0x2, 0x3}}, {0x68, 0x9, {0x3, 0x9}}, {0x5ade, 0x401, {0x1, 0x4}}, {0x1, 0x2, {0x0, 0x2}}, {0x3, 0x6, {0x3, 0xc0}}, {0x9e74, 0x3, {0x3, 0x1}}, {0x0, 0x3, {0x3, 0x7fff}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x4, 0x7f, 0x1, 0x8, 0x22, 'syz0\x00', "91b6368fc56ab6a0fc76a0c4db16f5c0ba512ee45879eddb3993d39178fbcee1", "17edd36fe8b77f5a640d867dac2776927f5972da593568d590bbcea5669288d0", [{0x4, 0x7, {0x3, 0x78}}, {0x2, 0x3ff, {0x0, 0x7fffffff}}, {0x3, 0x4, {0x3, 0x17}}, {0x5, 0x8, {0x3, 0x1ff}}, {0x6080, 0x6, {0x2, 0x6}}, {0x1, 0x222, {0x2, 0x2}}, {0x401, 0x8001, {0x3, 0x17}}, {0x3, 0x7, {0x2, 0x6}}, {0x8be2, 0xffff, {0x2, 0x9}}, {0xf, 0x6, {0x1, 0x10001}}, {0x4, 0x0, {0x1, 0x5}}, {0x2, 0x8, {0x0, 0x6}}, {0x6, 0x2ce2}, {0x5, 0x8, {0x1, 0x3584a350}}, {0x963c, 0x0, {0x1, 0x800}}, {0x401, 0x412e, {0x0, 0x100}}, {0x81, 0x6, {0x1, 0x2}}, {0x79, 0x2, {0x2, 0x1}}, {0xff, 0x5, {0x0, 0x7fffffff}}, {0x6, 0x5}, {0xfff, 0x8, {0x2, 0x3}}, {0x3, 0x10, {0x0, 0x8}}, {0x5, 0xffff, {0x1, 0x6}}, {0x38, 0x3ff, {0x0, 0x4}}, {0x0, 0x2, {0x0, 0x6}}, {0x7, 0x8, {0x0, 0x5}}, {0x5, 0x9, {0x3, 0x6}}, {0x83b9, 0x7, {0x2, 0x80000001}}, {0x3, 0x5, {0x0, 0x80}}, {0x1000, 0x3, {0x0, 0x81}}, {0x200, 0x8001, {0x1, 0x1}}, {0x4b7, 0x800, {0x1, 0x2}}, {0xe917, 0x7fff, {0x3, 0x1}}, {0xf, 0x5, {0x3, 0x7}}, {0x6, 0x1, {0x3, 0x6}}, {0x1, 0x9795, {0x3, 0x8627}}, {0x0, 0xab, {0x3, 0x4c9d}}, {0x0, 0x6, {0x1, 0x80000000}}, {0x5, 0x8}, {0xf, 0x8, {0x1, 0x3}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x80}, 0x40001)
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000005e80)={&(0x7f00000056c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005e40)={&(0x7f0000005700)={0x710, 0x1, 0x5, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x8}, 0x40, 0x6, 0x0, 0x4, 0xb, 'syz1\x00', "a594cf7204769d216ba9e4e8d675a51d8b57db3b42967d958c1eaeb50626ac3f", "1716461154b604b78d61871ae5a38cfa59f2dac1652938820843e7825722c5e1", [{0x0, 0x3, {0x2, 0x8}}, {0x2, 0x4, {0x2, 0x2}}, {0x6, 0x100, {0x1}}, {0x5, 0x5, {0x1, 0x1}}, {0x6e2, 0x5a20, {0x1, 0xfffffffc}}, {0x6, 0x1, {0x1, 0x80000000}}, {0xbbc, 0xe, {0x0, 0x4}}, {0xee, 0x7, {0x2, 0x3}}, {0xfdb0, 0x2, {0x1, 0x8}}, {0x8, 0x1, {0x2, 0x6}}, {0xce, 0x3, {0x2, 0x3ff}}, {0xd85f, 0x2, {0x2, 0x6}}, {0x8, 0x7, {0x0, 0x7}}, {0xfc, 0x1, {0x0, 0x4}}, {0x5, 0xc, {0x1, 0x9}}, {0x4, 0x4, {0x0, 0x200}}, {0x3ff, 0x5, {0x2, 0x9}}, {0x2, 0x4, {0x1, 0x8}}, {0x4, 0xc, {0x2, 0x8}}, {0x3, 0x51b, {0x1, 0xfffffff8}}, {0xff, 0x1ff, {0x0, 0xbc83}}, {0x1, 0x6, {0x2, 0x200}}, {0x5, 0x46, {0x1, 0x2}}, {0xb, 0xc6e, {0x2, 0xf}}, {0x5, 0xb47, {0x3, 0x8}}, {0x8, 0xcda1, {0x0, 0x8001}}, {0x0, 0x4, {0x1, 0xb}}, {0xfff9, 0x3, {0x3, 0x5}}, {0x8, 0x8, {0x3, 0x1}}, {0x8, 0x0, {0x1, 0x7}}, {0x53e, 0x2, {0x2, 0x3550}}, {0x1dd, 0x4, {0x2, 0xe55}}, {0x1ff, 0x4, {0x0, 0xa5a4}}, {0x56c, 0x39, {0x2}}, {0x8001, 0xfffb, {0x0, 0x4}}, {0x87d, 0x4, {0x3, 0x2669}}, {0x5, 0xa05, {0x0, 0x9}}, {0x89e8, 0x2, {0x2, 0x3e8}}, {0x1, 0x9, {0x0, 0x1}}, {0x6, 0x3, {0x0, 0x8000}}]}}}, {{0x254, 0x1, {{0x1, 0x101}, 0x7, 0x5, 0x1, 0x8, 0x5, 'syz0\x00', "c268ec86a72001661b72b99a9d2f69de4641d31f98299d274b9717310cb0e5ae", "9c1134c3a3a8d82891c263828591312f91f1022a99ec7bbb005ce42e6aebd17c", [{0x0, 0x6, {0x2, 0x1}}, {0x3, 0x2f, {0x3, 0x4}}, {0x2, 0xfff7, {0x1, 0xf}}, {0x6, 0x9, {0x1, 0x5}}, {0x7ff, 0x1, {0x3, 0x6}}, {0x1, 0x4, {0x1}}, {0x7, 0x7, {0x1, 0x6}}, {0x7ff, 0xa, {0x1, 0xffffffe1}}, {0x6, 0x13f, {0x0, 0x6}}, {0xc, 0xab93, {0x0, 0x8}}, {0x2, 0x3, {0x3, 0x8}}, {0x81, 0x101, {0x3, 0x8fb0}}, {0x68, 0xf931, {0x0, 0xe42}}, {0x7, 0x2800, {0x0, 0xfffffff9}}, {0x4, 0x7, {0x3, 0x25b97331}}, {0x4, 0x1, {0x2, 0x8}}, {0x2205, 0x1, {0x2, 0x5}}, {0x3, 0x7ff, {0x2, 0x80}}, {0xf, 0x6, {0x3, 0x9}}, {0xc, 0x9, {0x0, 0xd13}}, {0x0, 0xb350, {0x1, 0xffffe543}}, {0x9, 0x9, {0x1, 0x1ff}}, {0x0, 0x3, {0x0, 0x3}}, {0x3ff, 0xd, {0x1, 0xfffffff9}}, {0x7, 0x2, {0x1}}, {0xfff7, 0x1, {0x0, 0x7}}, {0x4, 0x4, {0x1, 0x1}}, {0x3, 0x9, {0x1, 0x16b1}}, {0x2, 0xa, {0x3, 0x2}}, {0x5, 0xfff9, {0x0, 0xe}}, {0x100, 0x3, {0x1, 0xc}}, {0x800, 0x6, {0x0, 0x4}}, {0x4, 0x4, {0x1}}, {0xfff7, 0x7, {0x0, 0xb}}, {0x2, 0x1ff, {0x0, 0xfffffff9}}, {0x7, 0x6, {0x0, 0x5d}}, {0x8, 0xffc0, {0x0, 0xf04}}, {0x7f, 0x7ff, {0x3, 0x1685}}, {0xe4c0, 0x8, {0x3, 0x2}}, {0x0, 0x40, {0x1, 0xf18}}]}}}, {{0x254, 0x1, {{0x0, 0x40}, 0x1, 0x2, 0x3, 0x4, 0x10, 'syz1\x00', "7de51e5c3f4bfac4e9483884d2da550c29a12ec32892d4bf30e0c86c9d0a81e8", "1372ad35e4b0a201980ff4c446747b2de843a0ba9fbeddd95ecc7a976da5451f", [{0x5, 0x40, {0x0, 0x2}}, {0xa, 0x81, {0x0, 0x44}}, {0x8, 0xfff, {0x1, 0x2}}, {0x100, 0x2, {0x1, 0xf26b}}, {0x4, 0x4, {0x2, 0x4}}, {0x7fff, 0xffff, {0x2, 0x8}}, {0x4, 0x0, {0x1, 0x6}}, {0x13ab, 0x7, {0x3, 0xd325}}, {0x90d, 0x1, {0x1, 0x2b80}}, {0xffff, 0x3, {0x3, 0x2b}}, {0xffff, 0x8, {0x0, 0x1}}, {0xaa, 0x1ff, {0x1, 0xe5b}}, {0x6, 0x7, {0x2, 0x1}}, {0x1996, 0xfff, {0x3}}, {0x3, 0x7, {0x2, 0x80000001}}, {0x3, 0x8, {0x2, 0x7}}, {0x2, 0xfffa, {0x3, 0x7}}, {0x100, 0xe47, {0x1, 0x8}}, {0x6, 0x5, {0x0, 0x200}}, {0x1, 0x9, {0x2, 0x2}}, {0x0, 0x7fff, {0x1, 0x4}}, {0x0, 0xfae7, {0x2, 0xf30d}}, {0x2, 0x4, {0x2, 0x40}}, {0x1, 0x8, {0x1, 0x1}}, {0x1, 0x400, {0x2, 0xa}}, {0x0, 0x6, {0x3}}, {0x101, 0xffc0, {0x3, 0x25}}, {0x3ff, 0xe, {0x0, 0x7fff}}, {0x4, 0x9, {0x3, 0x6038}}, {0x200, 0x1, {0x1, 0x1b}}, {0x2, 0x7ff, {0x3, 0x4}}, {0xfff8, 0x8, {0x0, 0x61a9cccc}}, {0x3, 0xfc, {0x2, 0x8}}, {0x2b, 0x16cf, {0x3, 0x100000}}, {0xfff8, 0x6, {0x5}}, {0x1, 0x6, {0x3, 0xd}}, {0x5, 0x7ff, {0x1, 0x8}}, {0x8, 0x0, {0x2, 0x6}}, {0xb74, 0x81, {0x3}}, {0x8, 0x7, {0x2, 0x4}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x81}, 0x20044041)
close(r0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005f00), r6)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000005f40)={'wpan1\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000005f80)={'wpan4\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000005fc0)={'wpan1\x00', <r12=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000006100)={&(0x7f0000005ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000060c0)={&(0x7f0000006000)={0x90, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004080}, 0x4080)

1.738965138s ago: executing program 2 (id=4379):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4040005)

1.736302695s ago: executing program 0 (id=4380):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000300), 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="b40000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800040000e4000014"], 0xb4}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xffff2652, 0x4)

1.720701418s ago: executing program 3 (id=4381):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000002900)=""/4103, 0x1007}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000000)=""/225, 0xe1}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/212, 0xd4}], 0x6}, 0x80000002}], 0x4, 0x6000, 0x0)

1.559354073s ago: executing program 2 (id=4382):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) (fail_nth: 1)

1.558278673s ago: executing program 3 (id=4383):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x14, r9, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0xfdff)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000)
r10 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r10, 0x6180, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x9000000}]}, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0)

1.279798314s ago: executing program 4 (id=4384):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x48851) (fail_nth: 63)

1.206384354s ago: executing program 4 (id=4385):
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40004)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xffe0}, {}, {0xfff3, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0x3}}}]}, 0x38}}, 0x0)

1.135234494s ago: executing program 2 (id=4386):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0xfffffffffffffffa}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000000e4e200000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100000000000000000000000000000000000000000000000000000000000000d309000000000000ffffffff000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000fdffffffb56b6e000000000000000000112b56b44bf90888415904d2618b751d76bed5d9142f19f9023f21fb8a0efd8acecd101002499fec8b62fc1eaa6a65cc22c848ed66cac1dec201feae4a27be86ee3bca56efd40450"], 0xb8}}, 0x0)
unshare(0x26020480)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)

1.077741449s ago: executing program 2 (id=4387):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x80, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000027c0000000039a0040008000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e0", 0x9}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000140)=0xfffffff0)
setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x5, 0x4, 0x2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

982.691537ms ago: executing program 0 (id=4388):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}}, 0x0)

907.100655ms ago: executing program 4 (id=4389):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x2f, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc010000000a05000000000000000000010000000900010073797a3000000000d30006003407ae8929b5d5805c2cb15c6832bdf04f6f732bf6c75790a071b67033b0bb7e81aac8c9ccb093263d99fcafa58fe6c7126fc1d2ccbc1888abd4a61e1818723b358b147b8836997950921d849981687e7eb599e28bd439758eefcbda6f7906db339e68d3869e4011ddfb254a2dda9b523f928b3626f8faa75357d4f9cb925df5cde675f9e8bb05e4f8cc9a0610fb2945b1b755b94883afb3697a7535ea5f9db3ce21c1f0cc3fb343e830c6a947f512c56b1a706b86e76bc58a075f7cb0322f7fa6fb5df1718361423df5cbd47608ca000900010073797a310000000008000240000000030c000440000000000000000499000600db2b252f3c9b3b419bda841c524cb69270214a733fee6d8e10561ce9d682ad271b8a317d699b2f000178b2aca7c7058e0df489887ebdcf11c4ddf03bc9b1284f5fb568bac9b64b06c9d8c2acf08c892fb2abeb7c72bc9c8fa0c7425b5aa3df8074d8412d67fad836b6cc1c0be2fff19dbd1830e29ae4bc6aaa4f42c244e40238dc8e2a247b1792a177693b55dc155f631634db5af90000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a30"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

888.569464ms ago: executing program 5 (id=4390):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{}, &(0x7f0000000a40), &(0x7f0000000cc0)}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
read$alg(0xffffffffffffffff, &(0x7f0000000040)=""/136, 0x88)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
writev(0xffffffffffffffff, 0x0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000040)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="7728984b77ddff487b6b5a8d2343190ef5ba4e0d85be8ea7e8b60fd877e975f2eb9ef080326744960008b3414f95c1a31eeec58bdd14d949f9a3ab837035130f00da5c56fe0d4b3756f5be8139112b2940f7ee516a1584d0b3b6e7082880af65499b4528ac4a15cf6ef3ca51c2863db317d65999", 0x74}], 0x1, &(0x7f0000000180)=[@ip_retopts={{0xbc, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x17, 0x1, 0x5, [{@rand_addr=0x64010100, 0x6}, {@multicast1, 0x1000}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x40}, {@loopback, 0x1}, {@broadcast, 0x9}, {@rand_addr=0x64010102, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x65, 0x3, 0x1, [{@multicast1, 0x48}, {@broadcast, 0x6}, {@broadcast}, {@local, 0x6}]}, @noop, @end, @ssrr={0x89, 0x7, 0x8d, [@empty]}, @timestamp_prespec={0x44, 0x14, 0xf4, 0x3, 0x6, [{@private=0xa010100, 0xc}, {@multicast2, 0x1c0}]}, @timestamp_addr={0x44, 0x2c, 0x1f, 0x1, 0x8, [{@multicast1, 0x5}, {@broadcast, 0x81}, {@rand_addr=0x64010101, 0x3887}, {@multicast1, 0xf}, {@multicast1, 0x7ff}]}]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x44, 0xd, "bb85fb3318c4fbc32753dc"}, @rr={0x7, 0x1f, 0xc0, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast2]}, @generic={0x94, 0x7, "d83d46e6da"}]}}}], 0x108}}, {{&(0x7f00000002c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="fd4fccdcedb9e6c4881ecb8dbc1d984b8e3649871c4d8bf1e541a86d46b536e9a6ef91f18f2e08055e75dceea8ec14e06bcab7b73fbffd8034f6a2a7a9257ccc72f58fb3c36f1852f28ae2f6882eb9b92bdb57ce763e0194baaa3867f317bfc055956540983e634c01415e5be97073f199686e99dd2fc0ebb46445831f2f2fe0f18a817d8ff69b52db0f3d4ab78d1831115b51a2b38ee789", 0x98}, {&(0x7f00000003c0)="524fdd80485ecce02a6a1149de033d49d5061e9ce7d342f27d", 0x19}], 0x2, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x60000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xba, [@broadcast, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @end]}}}], 0x68}}, {{&(0x7f0000000500)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000640)="ac1be72df5f1fd1c905e8d276a1ca7104b17cc82d69e5072bc2336db0088d77d3a783edbc687a9f00a9456e5f653e99b2990b87b37684ef3e4655ca3b84a31d24c16a6abde5b6bee796d0251d2b1b5f42b03ae193d91e454f71aa6406b8daad7f450a5b1cfa1e565ec3cc950182ad34842c6aba87289354b", 0x78}, {&(0x7f0000000740)="20cc62887693243140d778c5934944501a24730d8c6d8b38997e9949076e20bd7738cfa980e5a64f82a679baf92858aae4adad40af9a51bf607fb006a673640eba315917a63ba63c0c3db7ff9917c6957b95e8ebbd10d00f4f8d612c7e28a483a5d50aed151cda77208ef0789e495ceec9c8431564d837b6631d01c082880c09d5e540f3f0f3bf9d1a583ef02c102459fd00851f065494b310a2141bab4745eaca7c7b", 0xa3}], 0x3, &(0x7f0000000840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@rr={0x7, 0x3, 0x4c}, @generic={0xc5, 0xd, "7f91908c87ced8a1b05cd9"}, @rr={0x7, 0xb, 0xb9, [@local, @multicast2]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x6, 0xc, "6b7c1de9aede479d42f2"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x2, [{@private=0xa010101, 0x7fff}]}, @rr={0x7, 0x1f, 0x4, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3a}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x118}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)="014be59c6ce9e4fb88168211ac288b56a1dcd43468d413eab9f056c8ed45edf75dec96a9d7e7be62a744ae7e855d06ef8be3e864d6bcfbe5768e77a430d78592ea5e805d31710463d6d11e34cbbb379ddd471564408f9c7a24a2", 0x5a}, {0x0}, {&(0x7f0000000a80)="5907d46b5b574cb99a6b5ea965674b8f39efedc076555810aa77341ba848c18dff07b827b153338ff72b0e263de9bbc4804448edaff5fd0e1945a5c0e19445d71fdf162dd9e05ced426a4c4ca1ccbc7c3eb312248a3794533911463f52eb1c72bc2026e4e3fa097eb8f56c6e927b02c2a097ed0398d9c7d29ef724a663de54ac2b793a94329cd9ac7865b360929cbf44c0512265c400f0295c25f7cb5cf6da479a8446e4302d34455a69ab3979ee5ca3bc01c13c9bb9555a052b83f75a0f9a78c6d03f425d1e2b3c977edbe0d3ebacb854d15915fdc59d5d09435d7c5161f04fcfd7210962", 0xe5}, {&(0x7f0000000b80)="fdf989e81591cca94fd467d0b6ca89b9013705df9d77cd3e64b97ce94effacba9490cc2fbed7d874366878b2fbec58257f0ccb8a2e3c981698b16de1338336939a2f8ede0868c1bcf9da", 0x4a}], 0x4, &(0x7f0000000f80)=[@ip_retopts={{0x70, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x62, 0x0, 0x6, [0x4, 0x7, 0x4, 0x1, 0x6, 0x3]}, @generic={0x88, 0x2}, @rr={0x7, 0x17, 0x5e, [@remote, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @lsrr={0x83, 0xb, 0x10, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3a}]}, @rr={0x7, 0xb, 0x5e, [@private=0xa010101, @local]}, @rr={0x7, 0xb, 0xc2, [@local, @remote]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x9f}]}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0xbc, [@dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x17}]}, @noop, @lsrr={0x83, 0x7, 0x5a, [@loopback]}, @cipso={0x86, 0x4a, 0x1, [{0x6, 0x5, "2b7b8b"}, {0x6, 0x3, "87"}, {0x7, 0xc, "95b184501694974e806d"}, {0x0, 0x11, "7c0e929822f661a44e646ed428eddb"}, {0x1, 0xa, "c4033989ab872fd5"}, {0x2, 0x12, "259d69a759fdabb105cb05099551d8e9"}, {0x7, 0x3, "98"}]}, @rr={0x7, 0x3, 0x95}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x188}}], 0x4, 0x0)

853.578773ms ago: executing program 0 (id=4391):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000480)={0x0, 0x79, "552022f2c43bc97a3140d4d1fe789cbb26ddd35815ff093b06be75106c7d213c027cb8b59401fcc1cc63e2cdb5bc4e5bd3f7c3248211104c0dfa956c395f0ab2c7d937b1993b712ba6a5d5bdd2acf65cdfca7fb343d9153062d1b8ead999cce2e885dd40f48727b380a72a3616c6bb7f9afd121f2f72006eba"}, &(0x7f0000000540)=0x81)
mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xb, 0x0, 0x0, 0xe, 0x0, 0xfffffffd, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@private2}}, @sadb_x_nat_t_type={0x1, 0x14, 0xf7}, @sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x80, @private}}]}, 0x70}}, 0x24000000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440))
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0xe5, @empty, 0x4e21, 0x2, 'wrr\x00', 0x2, 0x9, 0x61}, 0x2c)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r10=>0x0}, 0x8)
r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r10, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r11, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r12=>0x0}, 0x8)
r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r12, 0x6)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r13, 0x0, 0x0}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000047409062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f740e9830000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)

726.989953ms ago: executing program 4 (id=4392):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000002c0), 0x10) (async)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000001480)=""/4095, 0xfff}], 0x1) (async)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=<r1=>r0], 0x80}}, 0x0) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) (async, rerun: 32)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r4)
sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001a80)=ANY=[@ANYBLOB="b4020000", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf251300000008000100", @ANYRES32, @ANYBLOB="c4001380", @ANYRES32], 0x2b4}, 0x1, 0x0, 0x0, 0x4000}, 0x8c4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000001850000000000000000000000000000018400000f8ffffff400000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) (async)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x0, 0xaa, 0x38, &(0x7f0000000040)="7d0c50c8a3b719e5af256ee41baef461a3e7a65e266b582c3ea391f608e1cbe4614eb6842adf94373e12e04b5bdef0acd5fd68ffec72eb92035758e5ae6bb8fb11e27af5b6e1d2e825331f9877df9a97e47bed02f91941b303f3c01cda0e0a2ab0ec46abd33251e9e22e33add48f45a8ff18dadfdc172be37966785a60c8e48484a0f29738ca4bc607d0a2f9037dcb4d61642ddd188367631c7bd31c582b91b47a8259b55b7f2671380a", &(0x7f0000000100)=""/56, 0x246af92f, 0x0, 0x6b, 0x38, &(0x7f0000000140)="b781a9560037b0a6e893992eca2e95a0d52d9d8f98bbe1147a15a1867212aab21c2b173afb57f150a8f10314fddd39cd27936e59a4f3d4e4799439e0a7c9c7958c57efb8f2eacdb8fb02b327c061d7e510d95c554d9fadf971454fd0f3e56b6926723c8fcf2e26b864c059", &(0x7f00000001c0)="828028d83d1e4d9bb173f5a9be2978bd78cd59f0837dd50b0c752d5d552b8ab6e9320caf77bacf37f375bad625b25292b71563d17e722168", 0x7, 0x0, 0x6}, 0x50)

664.346316ms ago: executing program 0 (id=4393):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x80ff, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}], 0x2, 0x10)

594.192364ms ago: executing program 3 (id=4394):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000065f40cf273caf534767da51a9500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$caif_stream(0x25, 0x1, 0x1)
recvmmsg(r1, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010140, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x0, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]})
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'ip6gre0\x00'})
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@ipv4_getnetconf={0xffffffffffffffc4, 0x52, 0x400, 0x70bd2f, 0x25dfdbfb}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4041)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="0a000100aaaaaaaaaa160000"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r8=>0xffffffffffffffff})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000003c0))
setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000400)=0x1, 0x4)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000100ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000a0000c02f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000a00000000000000000000000000000000000300000000000000fbffffffffffffff010000000000000000000000000004000000000000004c6200000000000000000000000000000000000100000000000044e528e00dd39c0223669c5e0b9cbf52f464552db915f4286d71ff9d470059f73bc76eba738a12da6c0221775be4adf338612ec526a6cba57bbf80639de46ccb9438d756004c58d23715325b6a2821f16229aed5f616838d1ffffde8c980117d5e72d17aacd0"], 0xb8}}, 0x2c000010)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb8}}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
getpeername$unix(r8, &(0x7f00000002c0), &(0x7f0000000340)=0x6e)

535.115378ms ago: executing program 4 (id=4395):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28)
shutdown(r0, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff004) (fail_nth: 1)

490.865445ms ago: executing program 0 (id=4396):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4810}, 0x10)

410.984167ms ago: executing program 0 (id=4397):
socket(0x40000000015, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113c000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000)
socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = epoll_create1(0x0)
epoll_wait(r3, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

0s ago: executing program 2 (id=4398):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0xfffffffffffffffa}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000000e4e200000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100000000000000000000000000000000000000000000000000000000000000d309000000000000ffffffff000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000fdffffffb56b6e000000000000000000112b56b44bf90888415904d2618b751d76bed5d9142f19f9023f21fb8a0efd8acecd101002499fec8b62fc1eaa6a65cc22c848ed66cac1dec201feae4a27be86ee3bca56efd40450"], 0xb8}}, 0x0)
unshare(0x26020480)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)

kernel console output (not intermixed with test programs):

_after_hwframe+0x77/0x7f
[  508.653797][T17167] RIP: 0033:0x7f6930b8ebe9
[  508.653812][T17167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.653826][T17167] RSP: 002b:00007f6931949038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  508.653843][T17167] RAX: ffffffffffffffda RBX: 00007f6930dc6270 RCX: 00007f6930b8ebe9
[  508.653855][T17167] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  508.653865][T17167] RBP: 00007f6930c11e19 R08: 0000000000000000 R09: 0000000000000000
[  508.653876][T17167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.653886][T17167] R13: 00007f6930dc6308 R14: 00007f6930dc6270 R15: 00007ffc26b328a8
[  508.653913][T17167]  </TASK>
[  509.339026][T17177] netlink: zone id is out of range
[  509.348107][T17177] netlink: zone id is out of range
[  509.355303][T17177] netlink: zone id is out of range
[  509.472892][T17177] netlink: set zone limit has 4 unknown bytes
[  509.580802][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3622'.
[  509.620751][T17191] bridge4: entered allmulticast mode
[  509.640918][T17188] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.717915][T17201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3623'.
[  509.757551][T17188] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.833815][T17205] netlink: 'syz.2.3627': attribute type 6 has an invalid length.
[  509.847455][T17188] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.918207][T17188] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.035076][T17209] lo speed is unknown, defaulting to 1000
[  510.061951][   T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.083606][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3631'.
[  510.107173][T17214] team0: entered promiscuous mode
[  510.113528][T17214] team_slave_0: entered promiscuous mode
[  510.120008][T17214] team_slave_1: entered promiscuous mode
[  510.125930][T17214] batadv1: entered promiscuous mode
[  510.133298][T17214] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  510.146814][T17214] team0: left promiscuous mode
[  510.157154][T17214] team_slave_0: left promiscuous mode
[  510.171416][T17214] team_slave_1: left promiscuous mode
[  510.177385][T17214] batadv1: left promiscuous mode
[  510.220543][   T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.241033][ T7655] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.275458][ T1340] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.559851][T17230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  510.571142][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3633'.
[  510.818729][T17243] FAULT_INJECTION: forcing a failure.
[  510.818729][T17243] name failslab, interval 1, probability 0, space 0, times 0
[  510.832886][T17243] CPU: 0 UID: 0 PID: 17243 Comm: syz.5.3641 Not tainted syzkaller #0 PREEMPT(full) 
[  510.832909][T17243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  510.832921][T17243] Call Trace:
[  510.832928][T17243]  <TASK>
[  510.832937][T17243]  dump_stack_lvl+0x189/0x250
[  510.832963][T17243]  ? __pfx____ratelimit+0x10/0x10
[  510.832983][T17243]  ? __pfx_dump_stack_lvl+0x10/0x10
[  510.833004][T17243]  ? __pfx__printk+0x10/0x10
[  510.833043][T17243]  should_fail_ex+0x414/0x560
[  510.833072][T17243]  should_failslab+0xa8/0x100
[  510.833100][T17243]  kmem_cache_alloc_noprof+0x73/0x3c0
[  510.833124][T17243]  ? skb_clone+0x212/0x3a0
[  510.833150][T17243]  skb_clone+0x212/0x3a0
[  510.833176][T17243]  __netlink_deliver_tap+0x404/0x850
[  510.833207][T17243]  ? netlink_deliver_tap+0x2e/0x1b0
[  510.833228][T17243]  netlink_deliver_tap+0x19c/0x1b0
[  510.833248][T17243]  netlink_sendskb+0x68/0x140
[  510.833277][T17243]  netlink_unicast+0x397/0x9e0
[  510.833313][T17243]  ? __pfx_netlink_unicast+0x10/0x10
[  510.833350][T17243]  rtnl_unicast+0x4e/0x60
[  510.833374][T17243]  inet_rtm_getroute+0x1c46/0x27e0
[  510.833407][T17243]  ? inet_rtm_getroute+0xd5f/0x27e0
[  510.833446][T17243]  ? __pfx_inet_rtm_getroute+0x10/0x10
[  510.833499][T17243]  ? __dev_queue_xmit+0x1d79/0x3b50
[  510.833555][T17243]  ? __pfx_inet_rtm_getroute+0x10/0x10
[  510.833582][T17243]  rtnetlink_rcv_msg+0x7cc/0xb70
[  510.833604][T17243]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  510.833621][T17243]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  510.833636][T17243]  ? ref_tracker_free+0x63a/0x7d0
[  510.833663][T17243]  ? __asan_memcpy+0x40/0x70
[  510.833682][T17243]  ? __pfx_ref_tracker_free+0x10/0x10
[  510.833718][T17243]  netlink_rcv_skb+0x208/0x470
[  510.833743][T17243]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  510.833763][T17243]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  510.833793][T17243]  ? netlink_deliver_tap+0x2e/0x1b0
[  510.833819][T17243]  netlink_unicast+0x82f/0x9e0
[  510.833854][T17243]  ? __pfx_netlink_unicast+0x10/0x10
[  510.833887][T17243]  ? netlink_sendmsg+0x642/0xb30
[  510.833903][T17243]  ? skb_put+0x11b/0x210
[  510.833926][T17243]  netlink_sendmsg+0x805/0xb30
[  510.833954][T17243]  ? __pfx_netlink_sendmsg+0x10/0x10
[  510.833976][T17243]  ? aa_sock_msg_perm+0xf1/0x1d0
[  510.833996][T17243]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  510.834016][T17243]  ? __pfx_netlink_sendmsg+0x10/0x10
[  510.834035][T17243]  __sock_sendmsg+0x21c/0x270
[  510.834064][T17243]  ____sys_sendmsg+0x505/0x830
[  510.834091][T17243]  ? __pfx_____sys_sendmsg+0x10/0x10
[  510.834121][T17243]  ? import_iovec+0x74/0xa0
[  510.834146][T17243]  ___sys_sendmsg+0x21f/0x2a0
[  510.834169][T17243]  ? __pfx____sys_sendmsg+0x10/0x10
[  510.834226][T17243]  ? __fget_files+0x2a/0x420
[  510.834241][T17243]  ? __fget_files+0x3a0/0x420
[  510.834268][T17243]  __x64_sys_sendmsg+0x19b/0x260
[  510.834292][T17243]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  510.834327][T17243]  ? __pfx_ksys_write+0x10/0x10
[  510.834347][T17243]  ? rcu_is_watching+0x15/0xb0
[  510.834391][T17243]  ? do_syscall_64+0xbe/0x3b0
[  510.834419][T17243]  do_syscall_64+0xfa/0x3b0
[  510.834440][T17243]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.834462][T17243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.834483][T17243]  ? clear_bhb_loop+0x60/0xb0
[  510.834508][T17243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.834528][T17243] RIP: 0033:0x7f6930b8ebe9
[  510.834547][T17243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  510.834565][T17243] RSP: 002b:00007f69319ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  510.834586][T17243] RAX: ffffffffffffffda RBX: 00007f6930dc5fa0 RCX: 00007f6930b8ebe9
[  510.834602][T17243] RDX: ea5bc50b6199d77e RSI: 0000200000000000 RDI: 0000000000000003
[  510.834617][T17243] RBP: 00007f69319ac090 R08: 0000000000000000 R09: 0000000000000000
[  510.834630][T17243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  510.834644][T17243] R13: 00007f6930dc6038 R14: 00007f6930dc5fa0 R15: 00007ffc26b328a8
[  510.834679][T17243]  </TASK>
[  511.589350][T17259] bond0: option arp_validate: invalid value (18446744073491447809)
[  511.593551][  T801] bond0: (slave bond_slave_0): interface is now down
[  511.615517][  T801] bond0: (slave bond_slave_1): interface is now down
[  511.624518][T17263] __nla_validate_parse: 1 callbacks suppressed
[  511.624535][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3646'.
[  511.656321][  T801] bond0: now running without any active interface!
[  511.780829][T17263] bridge1: entered allmulticast mode
[  511.825621][T17272] syzkaller1: entered promiscuous mode
[  511.837324][T17272] syzkaller1: entered allmulticast mode
[  511.856216][T17272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3649'.
[  511.954868][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3653'.
[  511.973353][T17277] bridge5: entered allmulticast mode
[  513.018504][T17297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3656'.
[  513.504111][T17308] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3661'.
[  513.531271][T17308] ..0·: renamed from hsr0 (while UP)
[  513.552399][T17308] ..0·: entered allmulticast mode
[  513.575240][T17308] hsr_slave_0: entered allmulticast mode
[  513.601779][T17308] hsr_slave_1: entered allmulticast mode
[  513.646032][T17308] net_ratelimit: 1 callbacks suppressed
[  513.646048][T17308] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check.
[  513.716403][T17310] syzkaller0: entered promiscuous mode
[  513.722494][T17310] syzkaller0: entered allmulticast mode
[  513.876928][T17319] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3665'.
[  513.953704][T17322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3664'.
[  513.989747][T17322] bridge1: entered allmulticast mode
[  514.059653][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3669'.
[  514.116421][T17332] bond0: option arp_validate: invalid value (18446744073491447809)
[  514.397154][T17345] FAULT_INJECTION: forcing a failure.
[  514.397154][T17345] name failslab, interval 1, probability 0, space 0, times 0
[  514.410151][T17345] CPU: 0 UID: 0 PID: 17345 Comm: syz.4.3674 Not tainted syzkaller #0 PREEMPT(full) 
[  514.410174][T17345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  514.410186][T17345] Call Trace:
[  514.410194][T17345]  <TASK>
[  514.410202][T17345]  dump_stack_lvl+0x189/0x250
[  514.410230][T17345]  ? __pfx____ratelimit+0x10/0x10
[  514.410250][T17345]  ? __pfx_dump_stack_lvl+0x10/0x10
[  514.410271][T17345]  ? __pfx__printk+0x10/0x10
[  514.410302][T17345]  ? __pfx___might_resched+0x10/0x10
[  514.410319][T17345]  ? fs_reclaim_acquire+0x7d/0x100
[  514.410342][T17345]  should_fail_ex+0x414/0x560
[  514.410371][T17345]  should_failslab+0xa8/0x100
[  514.410399][T17345]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  514.410425][T17345]  ? __alloc_skb+0x112/0x2d0
[  514.410448][T17345]  __alloc_skb+0x112/0x2d0
[  514.410480][T17345]  netlink_ack+0x146/0xa50
[  514.410497][T17345]  ? __pfx_genl_rcv_msg+0x10/0x10
[  514.410525][T17345]  ? __asan_memcpy+0x40/0x70
[  514.410545][T17345]  ? __pfx_ref_tracker_free+0x10/0x10
[  514.410579][T17345]  netlink_rcv_skb+0x28c/0x470
[  514.410595][T17345]  ? __lock_acquire+0xab9/0xd20
[  514.410622][T17345]  ? __pfx_genl_rcv_msg+0x10/0x10
[  514.410647][T17345]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  514.410685][T17345]  ? down_read+0x1ad/0x2e0
[  514.410709][T17345]  genl_rcv+0x28/0x40
[  514.410730][T17345]  netlink_unicast+0x82f/0x9e0
[  514.410766][T17345]  ? __pfx_netlink_unicast+0x10/0x10
[  514.410796][T17345]  ? netlink_sendmsg+0x642/0xb30
[  514.410813][T17345]  ? skb_put+0x11b/0x210
[  514.410835][T17345]  netlink_sendmsg+0x805/0xb30
[  514.410864][T17345]  ? __pfx_netlink_sendmsg+0x10/0x10
[  514.410887][T17345]  ? aa_sock_msg_perm+0xf1/0x1d0
[  514.410907][T17345]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  514.410927][T17345]  ? __pfx_netlink_sendmsg+0x10/0x10
[  514.410947][T17345]  __sock_sendmsg+0x21c/0x270
[  514.410976][T17345]  __sys_sendto+0x3bd/0x520
[  514.410998][T17345]  ? __pfx___sys_sendto+0x10/0x10
[  514.411028][T17345]  ? count_memcg_event_mm+0x21/0x260
[  514.411064][T17345]  ? exc_page_fault+0x76/0xf0
[  514.411087][T17345]  ? do_user_addr_fault+0xc8a/0x1390
[  514.411120][T17345]  __x64_sys_sendto+0xde/0x100
[  514.411143][T17345]  do_syscall_64+0xfa/0x3b0
[  514.411162][T17345]  ? lockdep_hardirqs_on+0x9c/0x150
[  514.411181][T17345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.411199][T17345]  ? clear_bhb_loop+0x60/0xb0
[  514.411221][T17345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.411238][T17345] RIP: 0033:0x7f7ca0790a7c
[  514.411254][T17345] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  514.411270][T17345] RSP: 002b:00007f7ca1696ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  514.411289][T17345] RAX: ffffffffffffffda RBX: 00007f7ca1696fc0 RCX: 00007f7ca0790a7c
[  514.411302][T17345] RDX: 0000000000000020 RSI: 00007f7ca1697010 RDI: 0000000000000005
[  514.411314][T17345] RBP: 0000000000000000 R08: 00007f7ca1696f14 R09: 000000000000000c
[  514.411325][T17345] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  514.411336][T17345] R13: 00007f7ca1696f68 R14: 00007f7ca1697010 R15: 0000000000000000
[  514.411366][T17345]  </TASK>
[  514.788690][T17348] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  514.981484][T17357] syzkaller0: entered promiscuous mode
[  514.987090][T17357] syzkaller0: entered allmulticast mode
[  515.127974][T17361] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  515.135622][T17361] CPU: 0 UID: 0 PID: 17361 Comm: syz.3.3681 Not tainted syzkaller #0 PREEMPT(full) 
[  515.135644][T17361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  515.135657][T17361] Call Trace:
[  515.135666][T17361]  <TASK>
[  515.135675][T17361]  dump_stack_lvl+0x189/0x250
[  515.135706][T17361]  ? __pfx_dump_stack_lvl+0x10/0x10
[  515.135729][T17361]  ? __pfx__printk+0x10/0x10
[  515.135762][T17361]  ? kernfs_path_from_node+0x2f/0x290
[  515.135783][T17361]  ? kernfs_path_from_node+0x250/0x290
[  515.135802][T17361]  ? kernfs_path_from_node+0x2f/0x290
[  515.135828][T17361]  sysfs_warn_dup+0x8e/0xa0
[  515.135848][T17361]  sysfs_do_create_link_sd+0xc0/0x110
[  515.135872][T17361]  device_add_class_symlinks+0x1cf/0x240
[  515.135897][T17361]  device_add+0x475/0xb50
[  515.135922][T17361]  wiphy_register+0x1ba6/0x28d0
[  515.135961][T17361]  ? __pfx_wiphy_register+0x10/0x10
[  515.135980][T17361]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  515.136013][T17361]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  515.136043][T17361]  ieee80211_register_hw+0x3484/0x4100
[  515.136085][T17361]  ? ieee80211_register_hw+0x14d1/0x4100
[  515.136121][T17361]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  515.136151][T17361]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  515.136188][T17361]  ? __hrtimer_setup+0x187/0x210
[  515.136206][T17361]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  515.136238][T17361]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  515.136295][T17361]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  515.136320][T17361]  ? trace_kmalloc+0x1f/0xd0
[  515.136341][T17361]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  515.136366][T17361]  ? kstrndup+0xbf/0x160
[  515.136397][T17361]  hwsim_new_radio_nl+0xea4/0x1b10
[  515.136432][T17361]  ? __pfx___nla_validate_parse+0x10/0x10
[  515.136478][T17361]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  515.136517][T17361]  ? __nla_parse+0x40/0x60
[  515.136538][T17361]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  515.136573][T17361]  genl_family_rcv_msg_doit+0x212/0x300
[  515.136606][T17361]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  515.136646][T17361]  ? bpf_lsm_capable+0x9/0x20
[  515.136671][T17361]  ? security_capable+0x7e/0x2e0
[  515.136705][T17361]  genl_rcv_msg+0x60e/0x790
[  515.136737][T17361]  ? __pfx_genl_rcv_msg+0x10/0x10
[  515.136761][T17361]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  515.136790][T17361]  ? irqentry_exit+0x74/0x90
[  515.136818][T17361]  netlink_rcv_skb+0x208/0x470
[  515.136835][T17361]  ? __lock_acquire+0xab9/0xd20
[  515.136864][T17361]  ? __pfx_genl_rcv_msg+0x10/0x10
[  515.136890][T17361]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  515.136929][T17361]  ? down_read+0x1ad/0x2e0
[  515.136954][T17361]  genl_rcv+0x28/0x40
[  515.136975][T17361]  netlink_unicast+0x82f/0x9e0
[  515.137012][T17361]  ? __pfx_netlink_unicast+0x10/0x10
[  515.137043][T17361]  ? netlink_sendmsg+0x642/0xb30
[  515.137061][T17361]  ? skb_put+0x11b/0x210
[  515.137086][T17361]  netlink_sendmsg+0x805/0xb30
[  515.137115][T17361]  ? __pfx_netlink_sendmsg+0x10/0x10
[  515.137139][T17361]  ? aa_sock_msg_perm+0xf1/0x1d0
[  515.137160][T17361]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  515.137179][T17361]  ? __pfx_netlink_sendmsg+0x10/0x10
[  515.137200][T17361]  __sock_sendmsg+0x21c/0x270
[  515.137235][T17361]  ____sys_sendmsg+0x505/0x830
[  515.137263][T17361]  ? __pfx_____sys_sendmsg+0x10/0x10
[  515.137295][T17361]  ? import_iovec+0x74/0xa0
[  515.137322][T17361]  ___sys_sendmsg+0x21f/0x2a0
[  515.137347][T17361]  ? __pfx____sys_sendmsg+0x10/0x10
[  515.137415][T17361]  ? __fget_files+0x2a/0x420
[  515.137432][T17361]  ? __fget_files+0x3a0/0x420
[  515.137460][T17361]  __x64_sys_sendmsg+0x19b/0x260
[  515.137486][T17361]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  515.137519][T17361]  ? rcu_is_watching+0x15/0xb0
[  515.137544][T17361]  ? do_syscall_64+0xbe/0x3b0
[  515.137568][T17361]  do_syscall_64+0xfa/0x3b0
[  515.137587][T17361]  ? lockdep_hardirqs_on+0x9c/0x150
[  515.137606][T17361]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.137624][T17361]  ? clear_bhb_loop+0x60/0xb0
[  515.137648][T17361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.137667][T17361] RIP: 0033:0x7f380ed8ebe9
[  515.137684][T17361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  515.137699][T17361] RSP: 002b:00007f380fc7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  515.137719][T17361] RAX: ffffffffffffffda RBX: 00007f380efc5fa0 RCX: 00007f380ed8ebe9
[  515.137733][T17361] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  515.137745][T17361] RBP: 00007f380ee11e19 R08: 0000000000000000 R09: 0000000000000000
[  515.137756][T17361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  515.137768][T17361] R13: 00007f380efc6038 R14: 00007f380efc5fa0 R15: 00007fffab998fd8
[  515.137800][T17361]  </TASK>
[  515.702308][T17364] netlink: zone id is out of range
[  515.709884][T17364] netlink: zone id is out of range
[  515.754181][T17364] netlink: zone id is out of range
[  515.962901][T17377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3685'.
[  515.982932][T17367] netlink: del zone limit has 4 unknown bytes
[  516.020480][T17364] netlink: set zone limit has 4 unknown bytes
[  516.085345][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3686'.
[  516.160895][T17384] bridge2: entered allmulticast mode
[  516.267157][T17393] lo speed is unknown, defaulting to 1000
[  516.926173][T17414] __nla_validate_parse: 1 callbacks suppressed
[  516.926209][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3693'.
[  517.037792][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3693'.
[  517.088525][T17416] FAULT_INJECTION: forcing a failure.
[  517.088525][T17416] name failslab, interval 1, probability 0, space 0, times 0
[  517.109336][T17419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3693'.
[  517.135086][T17416] CPU: 1 UID: 0 PID: 17416 Comm: syz.0.3695 Not tainted syzkaller #0 PREEMPT(full) 
[  517.135114][T17416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  517.135127][T17416] Call Trace:
[  517.135137][T17416]  <TASK>
[  517.135147][T17416]  dump_stack_lvl+0x189/0x250
[  517.135175][T17416]  ? __pfx____ratelimit+0x10/0x10
[  517.135198][T17416]  ? __pfx_dump_stack_lvl+0x10/0x10
[  517.135221][T17416]  ? __pfx__printk+0x10/0x10
[  517.135254][T17416]  ? __pfx___might_resched+0x10/0x10
[  517.135278][T17416]  ? fs_reclaim_acquire+0x7d/0x100
[  517.135301][T17416]  should_fail_ex+0x414/0x560
[  517.135332][T17416]  should_failslab+0xa8/0x100
[  517.135361][T17416]  __kmalloc_node_track_caller_noprof+0xcc/0x4e0
[  517.135388][T17416]  ? kasprintf+0xd4/0x120
[  517.135418][T17416]  kvasprintf+0xdc/0x190
[  517.135446][T17416]  ? __pfx_kvasprintf+0x10/0x10
[  517.135467][T17416]  ? do_raw_spin_lock+0x121/0x290
[  517.135518][T17416]  kasprintf+0xd4/0x120
[  517.135541][T17416]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  517.135573][T17416]  ? __pfx_kasprintf+0x10/0x10
[  517.135603][T17416]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  517.135645][T17416]  ieee80211_alloc_led_names+0xa4/0x2b0
[  517.135672][T17416]  ieee80211_alloc_hw_nm+0x18ca/0x1f20
[  517.135724][T17416]  mac80211_hwsim_new_radio+0x1ee/0x5340
[  517.135782][T17416]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  517.135805][T17416]  ? trace_kmalloc+0x1f/0xd0
[  517.135826][T17416]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  517.135850][T17416]  ? kstrndup+0xbf/0x160
[  517.135881][T17416]  hwsim_new_radio_nl+0xea4/0x1b10
[  517.135909][T17416]  ? __pfx___nla_validate_parse+0x10/0x10
[  517.135952][T17416]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.135989][T17416]  ? __nla_parse+0x40/0x60
[  517.136010][T17416]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  517.136045][T17416]  genl_family_rcv_msg_doit+0x212/0x300
[  517.136077][T17416]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  517.136116][T17416]  ? bpf_lsm_capable+0x9/0x20
[  517.136140][T17416]  ? security_capable+0x7e/0x2e0
[  517.136173][T17416]  genl_rcv_msg+0x60e/0x790
[  517.136205][T17416]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.136228][T17416]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.136269][T17416]  netlink_rcv_skb+0x208/0x470
[  517.136295][T17416]  ? __lock_acquire+0xab9/0xd20
[  517.136322][T17416]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.136347][T17416]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  517.136385][T17416]  ? down_read+0x1ad/0x2e0
[  517.136409][T17416]  genl_rcv+0x28/0x40
[  517.136431][T17416]  netlink_unicast+0x82f/0x9e0
[  517.136477][T17416]  ? __pfx_netlink_unicast+0x10/0x10
[  517.136505][T17416]  ? netlink_sendmsg+0x642/0xb30
[  517.136521][T17416]  ? skb_put+0x11b/0x210
[  517.136544][T17416]  netlink_sendmsg+0x805/0xb30
[  517.136571][T17416]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.136593][T17416]  ? aa_sock_msg_perm+0xf1/0x1d0
[  517.136611][T17416]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  517.136630][T17416]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.136651][T17416]  __sock_sendmsg+0x21c/0x270
[  517.136680][T17416]  ____sys_sendmsg+0x505/0x830
[  517.136707][T17416]  ? __pfx_____sys_sendmsg+0x10/0x10
[  517.136738][T17416]  ? import_iovec+0x74/0xa0
[  517.136764][T17416]  ___sys_sendmsg+0x21f/0x2a0
[  517.136788][T17416]  ? __pfx____sys_sendmsg+0x10/0x10
[  517.136846][T17416]  ? __fget_files+0x2a/0x420
[  517.136862][T17416]  ? __fget_files+0x3a0/0x420
[  517.136888][T17416]  __x64_sys_sendmsg+0x19b/0x260
[  517.136913][T17416]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  517.136945][T17416]  ? __pfx_ksys_write+0x10/0x10
[  517.136967][T17416]  ? rcu_is_watching+0x15/0xb0
[  517.136990][T17416]  ? do_syscall_64+0xbe/0x3b0
[  517.137015][T17416]  do_syscall_64+0xfa/0x3b0
[  517.137033][T17416]  ? lockdep_hardirqs_on+0x9c/0x150
[  517.137051][T17416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.137070][T17416]  ? clear_bhb_loop+0x60/0xb0
[  517.137091][T17416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.137109][T17416] RIP: 0033:0x7f5d26d8ebe9
[  517.137125][T17416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.137141][T17416] RSP: 002b:00007f5d27c7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  517.137160][T17416] RAX: ffffffffffffffda RBX: 00007f5d26fc5fa0 RCX: 00007f5d26d8ebe9
[  517.137174][T17416] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  517.137185][T17416] RBP: 00007f5d27c7e090 R08: 0000000000000000 R09: 0000000000000000
[  517.137196][T17416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  517.137207][T17416] R13: 00007f5d26fc6038 R14: 00007f5d26fc5fa0 R15: 00007fff36d2f098
[  517.137236][T17416]  </TASK>
[  517.609720][T17416] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  517.627856][T17416] CPU: 0 UID: 0 PID: 17416 Comm: syz.0.3695 Not tainted syzkaller #0 PREEMPT(full) 
[  517.627879][T17416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  517.627891][T17416] Call Trace:
[  517.627898][T17416]  <TASK>
[  517.627906][T17416]  dump_stack_lvl+0x189/0x250
[  517.627937][T17416]  ? __pfx_dump_stack_lvl+0x10/0x10
[  517.627959][T17416]  ? __pfx__printk+0x10/0x10
[  517.627990][T17416]  ? kernfs_path_from_node+0x2f/0x290
[  517.628011][T17416]  ? kernfs_path_from_node+0x250/0x290
[  517.628029][T17416]  ? kernfs_path_from_node+0x2f/0x290
[  517.628054][T17416]  sysfs_warn_dup+0x8e/0xa0
[  517.628074][T17416]  sysfs_do_create_link_sd+0xc0/0x110
[  517.628096][T17416]  device_add_class_symlinks+0x1cf/0x240
[  517.628121][T17416]  device_add+0x475/0xb50
[  517.628144][T17416]  wiphy_register+0x1ba6/0x28d0
[  517.628179][T17416]  ? __pfx_wiphy_register+0x10/0x10
[  517.628197][T17416]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  517.628231][T17416]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  517.628263][T17416]  ieee80211_register_hw+0x3484/0x4100
[  517.628303][T17416]  ? ieee80211_register_hw+0x14d1/0x4100
[  517.628338][T17416]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  517.628367][T17416]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  517.628404][T17416]  ? __hrtimer_setup+0x187/0x210
[  517.628421][T17416]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  517.628453][T17416]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  517.628518][T17416]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  517.628542][T17416]  ? trace_kmalloc+0x1f/0xd0
[  517.628564][T17416]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  517.628589][T17416]  ? kstrndup+0xbf/0x160
[  517.628619][T17416]  hwsim_new_radio_nl+0xea4/0x1b10
[  517.628647][T17416]  ? __pfx___nla_validate_parse+0x10/0x10
[  517.628711][T17416]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.628752][T17416]  ? __nla_parse+0x40/0x60
[  517.628775][T17416]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  517.628816][T17416]  genl_family_rcv_msg_doit+0x212/0x300
[  517.628850][T17416]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  517.628891][T17416]  ? bpf_lsm_capable+0x9/0x20
[  517.628916][T17416]  ? security_capable+0x7e/0x2e0
[  517.628953][T17416]  genl_rcv_msg+0x60e/0x790
[  517.628986][T17416]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.629010][T17416]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  517.629053][T17416]  netlink_rcv_skb+0x208/0x470
[  517.629071][T17416]  ? __lock_acquire+0xab9/0xd20
[  517.629100][T17416]  ? __pfx_genl_rcv_msg+0x10/0x10
[  517.629127][T17416]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  517.629168][T17416]  ? down_read+0x1ad/0x2e0
[  517.629194][T17416]  genl_rcv+0x28/0x40
[  517.629217][T17416]  netlink_unicast+0x82f/0x9e0
[  517.629256][T17416]  ? __pfx_netlink_unicast+0x10/0x10
[  517.629287][T17416]  ? netlink_sendmsg+0x642/0xb30
[  517.629305][T17416]  ? skb_put+0x11b/0x210
[  517.629331][T17416]  netlink_sendmsg+0x805/0xb30
[  517.629372][T17416]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.629395][T17416]  ? aa_sock_msg_perm+0xf1/0x1d0
[  517.629414][T17416]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  517.629434][T17416]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.629455][T17416]  __sock_sendmsg+0x21c/0x270
[  517.629490][T17416]  ____sys_sendmsg+0x505/0x830
[  517.629518][T17416]  ? __pfx_____sys_sendmsg+0x10/0x10
[  517.629551][T17416]  ? import_iovec+0x74/0xa0
[  517.629576][T17416]  ___sys_sendmsg+0x21f/0x2a0
[  517.629601][T17416]  ? __pfx____sys_sendmsg+0x10/0x10
[  517.629682][T17416]  ? __fget_files+0x2a/0x420
[  517.629698][T17416]  ? __fget_files+0x3a0/0x420
[  517.629728][T17416]  __x64_sys_sendmsg+0x19b/0x260
[  517.629755][T17416]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  517.629789][T17416]  ? __pfx_ksys_write+0x10/0x10
[  517.629813][T17416]  ? rcu_is_watching+0x15/0xb0
[  517.629838][T17416]  ? do_syscall_64+0xbe/0x3b0
[  517.629865][T17416]  do_syscall_64+0xfa/0x3b0
[  517.629884][T17416]  ? lockdep_hardirqs_on+0x9c/0x150
[  517.629904][T17416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.629923][T17416]  ? clear_bhb_loop+0x60/0xb0
[  517.629947][T17416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.629983][T17416] RIP: 0033:0x7f5d26d8ebe9
[  517.630002][T17416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.630019][T17416] RSP: 002b:00007f5d27c7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  517.630041][T17416] RAX: ffffffffffffffda RBX: 00007f5d26fc5fa0 RCX: 00007f5d26d8ebe9
[  517.630056][T17416] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  517.630070][T17416] RBP: 00007f5d27c7e090 R08: 0000000000000000 R09: 0000000000000000
[  517.630083][T17416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  517.630094][T17416] R13: 00007f5d26fc6038 R14: 00007f5d26fc5fa0 R15: 00007fff36d2f098
[  517.630130][T17416]  </TASK>
[  518.562719][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3704'.
[  518.611412][T17440] lo speed is unknown, defaulting to 1000
[  518.805651][T17454] FAULT_INJECTION: forcing a failure.
[  518.805651][T17454] name failslab, interval 1, probability 0, space 0, times 0
[  518.857893][T17454] CPU: 1 UID: 0 PID: 17454 Comm: syz.0.3707 Not tainted syzkaller #0 PREEMPT(full) 
[  518.857917][T17454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  518.857929][T17454] Call Trace:
[  518.857937][T17454]  <TASK>
[  518.857945][T17454]  dump_stack_lvl+0x189/0x250
[  518.857970][T17454]  ? __pfx____ratelimit+0x10/0x10
[  518.857991][T17454]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.858012][T17454]  ? __pfx__printk+0x10/0x10
[  518.858040][T17454]  ? __pfx___might_resched+0x10/0x10
[  518.858057][T17454]  ? fs_reclaim_acquire+0x7d/0x100
[  518.858079][T17454]  should_fail_ex+0x414/0x560
[  518.858108][T17454]  should_failslab+0xa8/0x100
[  518.858144][T17454]  __kmalloc_noprof+0xcb/0x4f0
[  518.858168][T17454]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  518.858199][T17454]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  518.858232][T17454]  genl_family_rcv_msg_doit+0xb8/0x300
[  518.858263][T17454]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  518.858295][T17454]  ? apparmor_capable+0x137/0x1b0
[  518.858319][T17454]  ? bpf_lsm_capable+0x9/0x20
[  518.858343][T17454]  ? security_capable+0x7e/0x2e0
[  518.858376][T17454]  genl_rcv_msg+0x60e/0x790
[  518.858406][T17454]  ? __pfx_genl_rcv_msg+0x10/0x10
[  518.858428][T17454]  ? __pfx_mptcp_pm_nl_set_flags_doit+0x10/0x10
[  518.858456][T17454]  ? __asan_memcpy+0x40/0x70
[  518.858476][T17454]  ? __pfx_ref_tracker_free+0x10/0x10
[  518.858510][T17454]  netlink_rcv_skb+0x208/0x470
[  518.858525][T17454]  ? __lock_acquire+0xab9/0xd20
[  518.858552][T17454]  ? __pfx_genl_rcv_msg+0x10/0x10
[  518.858577][T17454]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  518.858615][T17454]  ? down_read+0x1ad/0x2e0
[  518.858639][T17454]  genl_rcv+0x28/0x40
[  518.858660][T17454]  netlink_unicast+0x82f/0x9e0
[  518.858696][T17454]  ? __pfx_netlink_unicast+0x10/0x10
[  518.858725][T17454]  ? netlink_sendmsg+0x642/0xb30
[  518.858742][T17454]  ? skb_put+0x11b/0x210
[  518.858765][T17454]  netlink_sendmsg+0x805/0xb30
[  518.858794][T17454]  ? __pfx_netlink_sendmsg+0x10/0x10
[  518.858817][T17454]  ? aa_sock_msg_perm+0xf1/0x1d0
[  518.858836][T17454]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  518.858856][T17454]  ? __pfx_netlink_sendmsg+0x10/0x10
[  518.858876][T17454]  __sock_sendmsg+0x21c/0x270
[  518.858906][T17454]  ____sys_sendmsg+0x505/0x830
[  518.858933][T17454]  ? __pfx_____sys_sendmsg+0x10/0x10
[  518.858972][T17454]  ? import_iovec+0x74/0xa0
[  518.858997][T17454]  ___sys_sendmsg+0x21f/0x2a0
[  518.859021][T17454]  ? __pfx____sys_sendmsg+0x10/0x10
[  518.859081][T17454]  ? __fget_files+0x2a/0x420
[  518.859096][T17454]  ? __fget_files+0x3a0/0x420
[  518.859123][T17454]  __x64_sys_sendmsg+0x19b/0x260
[  518.859153][T17454]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  518.859185][T17454]  ? __pfx_ksys_write+0x10/0x10
[  518.859207][T17454]  ? rcu_is_watching+0x15/0xb0
[  518.859230][T17454]  ? do_syscall_64+0xbe/0x3b0
[  518.859255][T17454]  do_syscall_64+0xfa/0x3b0
[  518.859273][T17454]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.859292][T17454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.859310][T17454]  ? clear_bhb_loop+0x60/0xb0
[  518.859332][T17454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.859349][T17454] RIP: 0033:0x7f5d26d8ebe9
[  518.859365][T17454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  518.859382][T17454] RSP: 002b:00007f5d27c7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  518.859401][T17454] RAX: ffffffffffffffda RBX: 00007f5d26fc5fa0 RCX: 00007f5d26d8ebe9
[  518.859414][T17454] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000007
[  518.859426][T17454] RBP: 00007f5d27c7e090 R08: 0000000000000000 R09: 0000000000000000
[  518.859438][T17454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  518.859449][T17454] R13: 00007f5d26fc6038 R14: 00007f5d26fc5fa0 R15: 00007fff36d2f098
[  518.859479][T17454]  </TASK>
[  519.906956][T17475] lo speed is unknown, defaulting to 1000
[  520.000332][T17491] FAULT_INJECTION: forcing a failure.
[  520.000332][T17491] name failslab, interval 1, probability 0, space 0, times 0
[  520.038724][T17491] CPU: 0 UID: 0 PID: 17491 Comm: syz.4.3720 Not tainted syzkaller #0 PREEMPT(full) 
[  520.038749][T17491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  520.038761][T17491] Call Trace:
[  520.038770][T17491]  <TASK>
[  520.038779][T17491]  dump_stack_lvl+0x189/0x250
[  520.038805][T17491]  ? __pfx____ratelimit+0x10/0x10
[  520.038826][T17491]  ? __pfx_dump_stack_lvl+0x10/0x10
[  520.038849][T17491]  ? __pfx__printk+0x10/0x10
[  520.038873][T17491]  ? genl_rcv+0x28/0x40
[  520.038897][T17491]  ? __sys_sendto+0x3bd/0x520
[  520.038916][T17491]  ? do_syscall_64+0xfa/0x3b0
[  520.038949][T17491]  should_fail_ex+0x414/0x560
[  520.038981][T17491]  should_failslab+0xa8/0x100
[  520.039012][T17491]  kmem_cache_alloc_noprof+0x73/0x3c0
[  520.039036][T17491]  ? skb_clone+0x212/0x3a0
[  520.039064][T17491]  skb_clone+0x212/0x3a0
[  520.039092][T17491]  __netlink_deliver_tap+0x404/0x850
[  520.039125][T17491]  ? netlink_deliver_tap+0x2e/0x1b0
[  520.039147][T17491]  netlink_deliver_tap+0x19c/0x1b0
[  520.039168][T17491]  netlink_sendskb+0x68/0x140
[  520.039199][T17491]  netlink_unicast+0x397/0x9e0
[  520.039224][T17491]  ? __asan_memcpy+0x40/0x70
[  520.039255][T17491]  ? __pfx_netlink_unicast+0x10/0x10
[  520.039311][T17491]  netlink_rcv_skb+0x28c/0x470
[  520.039328][T17491]  ? __lock_acquire+0xab9/0xd20
[  520.039355][T17491]  ? __pfx_genl_rcv_msg+0x10/0x10
[  520.039380][T17491]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  520.039416][T17491]  ? down_read+0x1ad/0x2e0
[  520.039439][T17491]  genl_rcv+0x28/0x40
[  520.039459][T17491]  netlink_unicast+0x82f/0x9e0
[  520.039492][T17491]  ? __pfx_netlink_unicast+0x10/0x10
[  520.039518][T17491]  ? netlink_sendmsg+0x642/0xb30
[  520.039534][T17491]  ? skb_put+0x11b/0x210
[  520.039556][T17491]  netlink_sendmsg+0x805/0xb30
[  520.039583][T17491]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.039606][T17491]  ? aa_sock_msg_perm+0xf1/0x1d0
[  520.039625][T17491]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  520.039644][T17491]  ? __pfx_netlink_sendmsg+0x10/0x10
[  520.039662][T17491]  __sock_sendmsg+0x21c/0x270
[  520.039689][T17491]  __sys_sendto+0x3bd/0x520
[  520.039709][T17491]  ? __pfx___sys_sendto+0x10/0x10
[  520.039737][T17491]  ? count_memcg_event_mm+0x21/0x260
[  520.039771][T17491]  ? exc_page_fault+0x76/0xf0
[  520.039794][T17491]  ? do_user_addr_fault+0xc8a/0x1390
[  520.039826][T17491]  __x64_sys_sendto+0xde/0x100
[  520.039849][T17491]  do_syscall_64+0xfa/0x3b0
[  520.039868][T17491]  ? lockdep_hardirqs_on+0x9c/0x150
[  520.039886][T17491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.039904][T17491]  ? clear_bhb_loop+0x60/0xb0
[  520.039926][T17491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.039943][T17491] RIP: 0033:0x7f7ca0790a7c
[  520.039959][T17491] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  520.039975][T17491] RSP: 002b:00007f7ca1696ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  520.039994][T17491] RAX: ffffffffffffffda RBX: 00007f7ca1696fc0 RCX: 00007f7ca0790a7c
[  520.040008][T17491] RDX: 0000000000000020 RSI: 00007f7ca1697010 RDI: 0000000000000005
[  520.040019][T17491] RBP: 0000000000000000 R08: 00007f7ca1696f14 R09: 000000000000000c
[  520.040030][T17491] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  520.040041][T17491] R13: 00007f7ca1696f68 R14: 00007f7ca1697010 R15: 0000000000000000
[  520.040070][T17491]  </TASK>
[  520.190769][T17479] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3713'.
[  520.393674][T17479] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3713'.
[  520.668972][T17509] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3724'.
[  520.755524][T17512] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3727'.
[  520.826969][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3728'.
[  521.121466][T17530] vlan3: entered promiscuous mode
[  521.141108][T17530] macvtap0: entered promiscuous mode
[  521.153915][T17535] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3733'.
[  521.527105][T17546] bond0: option arp_validate: invalid value (18446744073491447809)
[  521.983810][T17564] syzkaller0: entered promiscuous mode
[  521.991807][T17564] syzkaller0: entered allmulticast mode
[  522.013638][T17566] netlink: 'syz.4.3743': attribute type 3 has an invalid length.
[  522.366444][T17580] vlan2: entered promiscuous mode
[  522.383172][T17580] macvtap0: entered promiscuous mode
[  522.445343][T17585] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3753'.
[  522.598248][T17587] lo speed is unknown, defaulting to 1000
[  522.854265][T17600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  522.976021][T17600] tipc: Disabling bearer <eth:syzkaller0>
[  523.046127][T17609] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  523.066929][T17609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3763'.
[  523.331399][T17587] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3756'.
[  523.387622][T17587] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3756'.
[  523.846598][T17654] netlink: 'syz.2.3776': attribute type 9 has an invalid length.
[  523.866592][T17653] vlan2: entered promiscuous mode
[  523.901315][T17656] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3775'.
[  524.209118][T17663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  524.252910][T17662] tipc: Resetting bearer <eth:syzkaller0>
[  524.286632][T17664] syzkaller0: entered promiscuous mode
[  524.292567][T17664] syzkaller0: entered allmulticast mode
[  524.309855][T17661] tipc: Resetting bearer <eth:syzkaller0>
[  524.336964][T17661] tipc: Disabling bearer <eth:syzkaller0>
[  524.505581][T17674] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  524.518088][T17674] CPU: 1 UID: 0 PID: 17674 Comm: syz.0.3784 Not tainted syzkaller #0 PREEMPT(full) 
[  524.518112][T17674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  524.518125][T17674] Call Trace:
[  524.518132][T17674]  <TASK>
[  524.518141][T17674]  dump_stack_lvl+0x189/0x250
[  524.518174][T17674]  ? __pfx_dump_stack_lvl+0x10/0x10
[  524.518198][T17674]  ? __pfx__printk+0x10/0x10
[  524.518230][T17674]  ? kernfs_path_from_node+0x2f/0x290
[  524.518251][T17674]  ? kernfs_path_from_node+0x250/0x290
[  524.518270][T17674]  ? kernfs_path_from_node+0x2f/0x290
[  524.518295][T17674]  sysfs_warn_dup+0x8e/0xa0
[  524.518315][T17674]  sysfs_do_create_link_sd+0xc0/0x110
[  524.518339][T17674]  device_add_class_symlinks+0x1cf/0x240
[  524.518364][T17674]  device_add+0x475/0xb50
[  524.518389][T17674]  wiphy_register+0x1ba6/0x28d0
[  524.518427][T17674]  ? __pfx_wiphy_register+0x10/0x10
[  524.518445][T17674]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  524.518483][T17674]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  524.518512][T17674]  ieee80211_register_hw+0x3484/0x4100
[  524.518553][T17674]  ? ieee80211_register_hw+0x14d1/0x4100
[  524.518588][T17674]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  524.518619][T17674]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  524.518656][T17674]  ? __hrtimer_setup+0x187/0x210
[  524.518673][T17674]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  524.518706][T17674]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  524.518763][T17674]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  524.518788][T17674]  ? trace_kmalloc+0x1f/0xd0
[  524.518811][T17674]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  524.518836][T17674]  ? kstrndup+0xbf/0x160
[  524.518866][T17674]  hwsim_new_radio_nl+0xea4/0x1b10
[  524.518895][T17674]  ? __pfx___nla_validate_parse+0x10/0x10
[  524.518938][T17674]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  524.518985][T17674]  ? __nla_parse+0x40/0x60
[  524.519006][T17674]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  524.519042][T17674]  genl_family_rcv_msg_doit+0x212/0x300
[  524.519075][T17674]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  524.519114][T17674]  ? bpf_lsm_capable+0x9/0x20
[  524.519138][T17674]  ? security_capable+0x7e/0x2e0
[  524.519174][T17674]  genl_rcv_msg+0x60e/0x790
[  524.519205][T17674]  ? __pfx_genl_rcv_msg+0x10/0x10
[  524.519230][T17674]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  524.519271][T17674]  netlink_rcv_skb+0x208/0x470
[  524.519288][T17674]  ? __lock_acquire+0xab9/0xd20
[  524.519316][T17674]  ? __pfx_genl_rcv_msg+0x10/0x10
[  524.519342][T17674]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  524.519382][T17674]  ? down_read+0x1ad/0x2e0
[  524.519407][T17674]  genl_rcv+0x28/0x40
[  524.519429][T17674]  netlink_unicast+0x82f/0x9e0
[  524.519467][T17674]  ? __pfx_netlink_unicast+0x10/0x10
[  524.519496][T17674]  ? netlink_sendmsg+0x642/0xb30
[  524.519514][T17674]  ? skb_put+0x11b/0x210
[  524.519539][T17674]  netlink_sendmsg+0x805/0xb30
[  524.519569][T17674]  ? __pfx_netlink_sendmsg+0x10/0x10
[  524.519593][T17674]  ? aa_sock_msg_perm+0xf1/0x1d0
[  524.519613][T17674]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  524.519633][T17674]  ? __pfx_netlink_sendmsg+0x10/0x10
[  524.519654][T17674]  __sock_sendmsg+0x21c/0x270
[  524.519685][T17674]  ____sys_sendmsg+0x505/0x830
[  524.519712][T17674]  ? __pfx_____sys_sendmsg+0x10/0x10
[  524.519744][T17674]  ? import_iovec+0x74/0xa0
[  524.519772][T17674]  ___sys_sendmsg+0x21f/0x2a0
[  524.519796][T17674]  ? __pfx____sys_sendmsg+0x10/0x10
[  524.519854][T17674]  ? __fget_files+0x2a/0x420
[  524.519870][T17674]  ? __fget_files+0x3a0/0x420
[  524.519897][T17674]  __x64_sys_sendmsg+0x19b/0x260
[  524.519923][T17674]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  524.519965][T17674]  ? rcu_is_watching+0x15/0xb0
[  524.519991][T17674]  ? do_syscall_64+0xbe/0x3b0
[  524.520016][T17674]  do_syscall_64+0xfa/0x3b0
[  524.520035][T17674]  ? lockdep_hardirqs_on+0x9c/0x150
[  524.520054][T17674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.520073][T17674]  ? clear_bhb_loop+0x60/0xb0
[  524.520096][T17674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.520114][T17674] RIP: 0033:0x7f5d26d8ebe9
[  524.520131][T17674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  524.520146][T17674] RSP: 002b:00007f5d27c7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  524.520166][T17674] RAX: ffffffffffffffda RBX: 00007f5d26fc5fa0 RCX: 00007f5d26d8ebe9
[  524.520180][T17674] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  524.520192][T17674] RBP: 00007f5d26e11e19 R08: 0000000000000000 R09: 0000000000000000
[  524.520204][T17674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  524.520215][T17674] R13: 00007f5d26fc6038 R14: 00007f5d26fc5fa0 R15: 00007fff36d2f098
[  524.520247][T17674]  </TASK>
[  524.995438][T17676] netlink: 'syz.2.3785': attribute type 4 has an invalid length.
[  525.012742][T17676] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3785'.
[  525.022147][T17676] block nbd0: not configured, cannot reconfigure
[  525.070328][T17680] FAULT_INJECTION: forcing a failure.
[  525.070328][T17680] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  525.139300][T17680] CPU: 0 UID: 0 PID: 17680 Comm: syz.3.3786 Not tainted syzkaller #0 PREEMPT(full) 
[  525.139324][T17680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  525.139336][T17680] Call Trace:
[  525.139344][T17680]  <TASK>
[  525.139352][T17680]  dump_stack_lvl+0x189/0x250
[  525.139378][T17680]  ? __pfx____ratelimit+0x10/0x10
[  525.139398][T17680]  ? __pfx_dump_stack_lvl+0x10/0x10
[  525.139420][T17680]  ? __pfx__printk+0x10/0x10
[  525.139445][T17680]  ? __might_fault+0xb0/0x130
[  525.139480][T17680]  should_fail_ex+0x414/0x560
[  525.139510][T17680]  _copy_to_iter+0x1de/0x1790
[  525.139532][T17680]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  525.139562][T17680]  ? lockdep_hardirqs_on+0x9c/0x150
[  525.139584][T17680]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  525.139613][T17680]  ? __pfx__copy_to_iter+0x10/0x10
[  525.139630][T17680]  ? __skb_try_recv_from_queue+0x2b2/0x730
[  525.139659][T17680]  ? __skb_try_recv_datagram+0x3da/0x4e0
[  525.139688][T17680]  __skb_datagram_iter+0xf8/0x990
[  525.139713][T17680]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  525.139745][T17680]  skb_copy_datagram_iter+0xc5/0x230
[  525.139773][T17680]  netlink_recvmsg+0x2ab/0xa30
[  525.139802][T17680]  ? __pfx_netlink_recvmsg+0x10/0x10
[  525.139827][T17680]  ? aa_sock_msg_perm+0xf1/0x1d0
[  525.139847][T17680]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  525.139866][T17680]  ? security_socket_recvmsg+0x7e/0x2e0
[  525.139893][T17680]  ? __pfx_netlink_recvmsg+0x10/0x10
[  525.139913][T17680]  sock_recvmsg+0x22c/0x270
[  525.139943][T17680]  __sys_recvfrom+0x1f6/0x340
[  525.139966][T17680]  ? __pfx___sys_recvfrom+0x10/0x10
[  525.139997][T17680]  ? count_memcg_event_mm+0x21/0x260
[  525.140031][T17680]  ? exc_page_fault+0x76/0xf0
[  525.140053][T17680]  ? do_user_addr_fault+0xc8a/0x1390
[  525.140085][T17680]  __x64_sys_recvfrom+0xde/0x100
[  525.140109][T17680]  do_syscall_64+0xfa/0x3b0
[  525.140128][T17680]  ? lockdep_hardirqs_on+0x9c/0x150
[  525.140146][T17680]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.140164][T17680]  ? clear_bhb_loop+0x60/0xb0
[  525.140186][T17680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.140204][T17680] RIP: 0033:0x7f380ed909b4
[  525.140220][T17680] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04
[  525.140235][T17680] RSP: 002b:00007f380fc79ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  525.140254][T17680] RAX: ffffffffffffffda RBX: 00007f380fc79fc0 RCX: 00007f380ed909b4
[  525.140268][T17680] RDX: 0000000000001000 RSI: 00007f380fc7a010 RDI: 0000000000000005
[  525.140279][T17680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  525.140290][T17680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  525.140300][T17680] R13: 00007f380fc79f68 R14: 00007f380fc7a010 R15: 0000000000000000
[  525.140332][T17680]  </TASK>
[  525.216189][T17676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3785'.
[  525.746302][T17709] Bluetooth: hci4: Opcode 0x0401 failed: -22
[  525.804636][T17711] netlink: 'syz.5.3795': attribute type 29 has an invalid length.
[  525.819021][T17709] netlink: 'syz.5.3795': attribute type 29 has an invalid length.
[  525.841699][T17711] netlink: 'syz.5.3795': attribute type 29 has an invalid length.
[  525.876265][T17719] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3797'.
[  525.990750][T12379] IPVS: starting estimator thread 0...
[  526.077954][T17729] IPVS: using max 31 ests per chain, 74400 per kthread
[  526.213385][T17740] netlink: 'syz.0.3803': attribute type 1 has an invalid length.
[  526.354883][T17748] netlink: del zone limit has 4 unknown bytes
[  526.532316][T17758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3804'.
[  526.629051][T17755] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3809'.
[  526.917748][T17764] netlink: 'syz.2.3811': attribute type 1 has an invalid length.
[  526.927335][T17764] netlink: 'syz.2.3811': attribute type 1 has an invalid length.
[  527.166922][T17773] syzkaller0: entered promiscuous mode
[  527.185521][T17773] syzkaller0: entered allmulticast mode
[  527.211474][T17773] FAULT_INJECTION: forcing a failure.
[  527.211474][T17773] name failslab, interval 1, probability 0, space 0, times 0
[  527.235977][T17773] CPU: 0 UID: 0 PID: 17773 Comm: syz.2.3816 Not tainted syzkaller #0 PREEMPT(full) 
[  527.236002][T17773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  527.236014][T17773] Call Trace:
[  527.236023][T17773]  <TASK>
[  527.236031][T17773]  dump_stack_lvl+0x189/0x250
[  527.236057][T17773]  ? __pfx____ratelimit+0x10/0x10
[  527.236078][T17773]  ? __pfx_dump_stack_lvl+0x10/0x10
[  527.236100][T17773]  ? __pfx__printk+0x10/0x10
[  527.236128][T17773]  ? __pfx___might_resched+0x10/0x10
[  527.236146][T17773]  ? fs_reclaim_acquire+0x7d/0x100
[  527.236169][T17773]  should_fail_ex+0x414/0x560
[  527.236199][T17773]  should_failslab+0xa8/0x100
[  527.236227][T17773]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  527.236252][T17773]  ? __alloc_skb+0x112/0x2d0
[  527.236275][T17773]  __alloc_skb+0x112/0x2d0
[  527.236297][T17773]  alloc_skb_with_frags+0xca/0x890
[  527.236332][T17773]  sock_alloc_send_pskb+0x857/0x990
[  527.236375][T17773]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  527.236410][T17773]  ? iov_iter_advance+0x8b/0x1c0
[  527.236432][T17773]  tun_get_user+0xa43/0x3e20
[  527.236471][T17773]  ? aa_file_perm+0x44d/0x1550
[  527.236498][T17773]  ? __pfx_tun_get_user+0x10/0x10
[  527.236516][T17773]  ? _parse_integer_limit+0x1ae/0x1f0
[  527.236552][T17773]  ? __lock_acquire+0xab9/0xd20
[  527.236584][T17773]  ? ref_tracker_alloc+0x318/0x460
[  527.236608][T17773]  ? __lock_acquire+0xab9/0xd20
[  527.236635][T17773]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  527.236667][T17773]  ? tun_get+0x1c/0x2f0
[  527.236691][T17773]  ? tun_get+0x1c/0x2f0
[  527.236710][T17773]  ? tun_get+0x1c/0x2f0
[  527.236732][T17773]  tun_chr_write_iter+0x113/0x200
[  527.236754][T17773]  vfs_write+0x5c9/0xb30
[  527.236782][T17773]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  527.236802][T17773]  ? __pfx_vfs_write+0x10/0x10
[  527.236837][T17773]  ? __fget_files+0x2a/0x420
[  527.236862][T17773]  ksys_write+0x145/0x250
[  527.236889][T17773]  ? __pfx_ksys_write+0x10/0x10
[  527.236910][T17773]  ? rcu_is_watching+0x15/0xb0
[  527.236933][T17773]  ? do_syscall_64+0xbe/0x3b0
[  527.236962][T17773]  do_syscall_64+0xfa/0x3b0
[  527.236981][T17773]  ? lockdep_hardirqs_on+0x9c/0x150
[  527.236999][T17773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.237017][T17773]  ? clear_bhb_loop+0x60/0xb0
[  527.237039][T17773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.237056][T17773] RIP: 0033:0x7fccc6b8ebe9
[  527.237072][T17773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  527.237087][T17773] RSP: 002b:00007fccc7a14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  527.237106][T17773] RAX: ffffffffffffffda RBX: 00007fccc6dc5fa0 RCX: 00007fccc6b8ebe9
[  527.237119][T17773] RDX: 000000000000ffdd RSI: 0000200000000200 RDI: 0000000000000003
[  527.237131][T17773] RBP: 00007fccc7a14090 R08: 0000000000000000 R09: 0000000000000000
[  527.237143][T17773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  527.237154][T17773] R13: 00007fccc6dc6038 R14: 00007fccc6dc5fa0 R15: 00007ffcb7662048
[  527.237183][T17773]  </TASK>
[  527.680766][T17781] __nla_validate_parse: 5 callbacks suppressed
[  527.680784][T17781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3818'.
[  527.788383][ T5880] Bluetooth: hci4: command tx timeout
[  527.849757][T17781] netlink: 'syz.0.3818': attribute type 10 has an invalid length.
[  527.887478][T17781] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  527.924597][T17781] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  527.993676][T17795] netlink: 'syz.4.3824': attribute type 1 has an invalid length.
[  528.203979][T17795] 8021q: adding VLAN 0 to HW filter on device bond2
[  528.211608][T17800] bond0: option arp_validate: invalid value (18446744073491447809)
[  528.251429][T17798] bond2: (slave wlan0): Opening slave failed
[  529.148950][T17830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3829'.
[  529.174976][T17835] wg1: entered promiscuous mode
[  529.192873][T17835] wg1: entered allmulticast mode
[  529.361969][T17840] FAULT_INJECTION: forcing a failure.
[  529.361969][T17840] name failslab, interval 1, probability 0, space 0, times 0
[  529.509861][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3837'.
[  529.564046][T17840] CPU: 0 UID: 0 PID: 17840 Comm: syz.0.3836 Not tainted syzkaller #0 PREEMPT(full) 
[  529.564073][T17840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  529.564084][T17840] Call Trace:
[  529.564091][T17840]  <TASK>
[  529.564100][T17840]  dump_stack_lvl+0x189/0x250
[  529.564126][T17840]  ? __pfx____ratelimit+0x10/0x10
[  529.564146][T17840]  ? __pfx_dump_stack_lvl+0x10/0x10
[  529.564167][T17840]  ? __pfx__printk+0x10/0x10
[  529.564205][T17840]  should_fail_ex+0x414/0x560
[  529.564234][T17840]  should_failslab+0xa8/0x100
[  529.564262][T17840]  __kmalloc_cache_noprof+0x70/0x3d0
[  529.564286][T17840]  ? nfc_genl_rcv_nl_event+0xa8/0x2b0
[  529.564311][T17840]  ? blocking_notifier_call_chain+0x54/0x90
[  529.564335][T17840]  nfc_genl_rcv_nl_event+0xa8/0x2b0
[  529.564383][T17840]  notifier_call_chain+0x1b3/0x3e0
[  529.564415][T17840]  blocking_notifier_call_chain+0x6a/0x90
[  529.564442][T17840]  netlink_release+0x1280/0x1b40
[  529.564474][T17840]  ? netlink_release+0x108/0x1b40
[  529.564499][T17840]  ? __pfx_netlink_release+0x10/0x10
[  529.564521][T17840]  ? down_write+0x162/0x1f0
[  529.564547][T17840]  ? __pfx_down_write+0x10/0x10
[  529.564573][T17840]  ? locks_remove_posix+0x381/0x650
[  529.564619][T17840]  sock_close+0xc0/0x240
[  529.564649][T17840]  ? __pfx_sock_close+0x10/0x10
[  529.564678][T17840]  __fput+0x44c/0xa70
[  529.564715][T17840]  fput_close_sync+0x119/0x200
[  529.564743][T17840]  ? __pfx_fput_close_sync+0x10/0x10
[  529.564782][T17840]  __x64_sys_close+0x7f/0x110
[  529.564807][T17840]  do_syscall_64+0xfa/0x3b0
[  529.564830][T17840]  ? lockdep_hardirqs_on+0x9c/0x150
[  529.564851][T17840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.564871][T17840]  ? clear_bhb_loop+0x60/0xb0
[  529.564896][T17840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.564916][T17840] RIP: 0033:0x7f5d26d8d84a
[  529.564935][T17840] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24
[  529.564953][T17840] RSP: 002b:00007f5d27c7cf90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  529.564975][T17840] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00007f5d26d8d84a
[  529.564991][T17840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  529.565004][T17840] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
[  529.565017][T17840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  529.565030][T17840] R13: 00007f5d26fc6038 R14: 00007f5d26fc5fa0 R15: 00007fff36d2f098
[  529.565066][T17840]  </TASK>
[  529.842136][T17852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3841'.
[  529.859191][T17852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3841'.
[  530.002390][T17859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3844'.
[  530.424010][   T43] IPVS: starting estimator thread 0...
[  530.459260][T17877] nbd0: detected capacity change from 0 to 127
[  530.517496][T17878] IPVS: using max 33 ests per chain, 79200 per kthread
[  530.981681][T17882] netlink: 'syz.5.3850': attribute type 13 has an invalid length.
[  530.991234][T17882] netlink: 'syz.5.3850': attribute type 17 has an invalid length.
[  531.040708][ T5880] block nbd0: Receive control failed (result -32)
[  531.846309][T17871] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3848'.
[  531.886725][T17882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  532.239743][T17901] FAULT_INJECTION: forcing a failure.
[  532.239743][T17901] name failslab, interval 1, probability 0, space 0, times 0
[  532.245848][T17898] lo speed is unknown, defaulting to 1000
[  532.294573][T17901] CPU: 0 UID: 0 PID: 17901 Comm: syz.5.3857 Not tainted syzkaller #0 PREEMPT(full) 
[  532.294602][T17901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  532.294616][T17901] Call Trace:
[  532.294625][T17901]  <TASK>
[  532.294636][T17901]  dump_stack_lvl+0x189/0x250
[  532.294666][T17901]  ? __pfx____ratelimit+0x10/0x10
[  532.294691][T17901]  ? __pfx_dump_stack_lvl+0x10/0x10
[  532.294717][T17901]  ? __pfx__printk+0x10/0x10
[  532.294764][T17901]  should_fail_ex+0x414/0x560
[  532.294799][T17901]  should_failslab+0xa8/0x100
[  532.294832][T17901]  __kmalloc_cache_noprof+0x70/0x3d0
[  532.294861][T17901]  ? sctp_add_bind_addr+0x8c/0x370
[  532.294888][T17901]  sctp_add_bind_addr+0x8c/0x370
[  532.294914][T17901]  sctp_copy_local_addr_list+0x30b/0x4e0
[  532.294952][T17901]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  532.294987][T17901]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  532.295026][T17901]  ? sctp_v4_is_any+0x35/0x60
[  532.295047][T17901]  ? sctp_copy_one_addr+0x93/0x360
[  532.295073][T17901]  sctp_bind_addr_copy+0xb3/0x3c0
[  532.295095][T17901]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  532.295138][T17901]  sctp_connect_new_asoc+0x2e0/0x690
[  532.295169][T17901]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  532.295194][T17901]  ? __local_bh_enable_ip+0x12d/0x1c0
[  532.295224][T17901]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  532.295250][T17901]  ? security_sctp_bind_connect+0x7e/0x2e0
[  532.295283][T17901]  sctp_sendmsg+0x155c/0x2810
[  532.295322][T17901]  ? __pfx_sctp_sendmsg+0x10/0x10
[  532.295352][T17901]  ? aa_sk_perm+0x81e/0x950
[  532.295391][T17901]  ? __pfx_aa_sk_perm+0x10/0x10
[  532.295427][T17901]  ? sock_rps_record_flow+0x19/0x410
[  532.295461][T17901]  ? inet_sendmsg+0x2f4/0x370
[  532.295495][T17901]  __sock_sendmsg+0x19c/0x270
[  532.295542][T17901]  ____sys_sendmsg+0x52d/0x830
[  532.295573][T17901]  ? __pfx_____sys_sendmsg+0x10/0x10
[  532.295613][T17901]  ? import_iovec+0x74/0xa0
[  532.295643][T17901]  ___sys_sendmsg+0x21f/0x2a0
[  532.295681][T17901]  ? __pfx____sys_sendmsg+0x10/0x10
[  532.295742][T17901]  ? __fget_files+0x2a/0x420
[  532.295760][T17901]  ? __fget_files+0x3a0/0x420
[  532.295789][T17901]  __sys_sendmmsg+0x227/0x430
[  532.295818][T17901]  ? __pfx___sys_sendmmsg+0x10/0x10
[  532.295839][T17901]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  532.295891][T17901]  ? ksys_write+0x22a/0x250
[  532.295919][T17901]  ? __pfx_ksys_write+0x10/0x10
[  532.295941][T17901]  ? rcu_is_watching+0x15/0xb0
[  532.295969][T17901]  __x64_sys_sendmmsg+0xa0/0xc0
[  532.295994][T17901]  do_syscall_64+0xfa/0x3b0
[  532.296015][T17901]  ? lockdep_hardirqs_on+0x9c/0x150
[  532.296034][T17901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.296054][T17901]  ? clear_bhb_loop+0x60/0xb0
[  532.296078][T17901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.296096][T17901] RIP: 0033:0x7f6930b8ebe9
[  532.296119][T17901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  532.296136][T17901] RSP: 002b:00007f69319ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  532.296156][T17901] RAX: ffffffffffffffda RBX: 00007f6930dc5fa0 RCX: 00007f6930b8ebe9
[  532.296171][T17901] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000003
[  532.296183][T17901] RBP: 00007f69319ac090 R08: 0000000000000000 R09: 0000000000000000
[  532.296194][T17901] R10: 0000000000048851 R11: 0000000000000246 R12: 0000000000000002
[  532.296206][T17901] R13: 00007f6930dc6038 R14: 00007f6930dc5fa0 R15: 00007ffc26b328a8
[  532.296237][T17901]  </TASK>
[  532.714398][T17903] lo speed is unknown, defaulting to 1000
[  533.080937][T17903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3858'.
[  533.091841][T17903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3858'.
[  533.175871][T17905] geneve2: entered promiscuous mode
[  533.219784][T17916] netlink: del zone limit has 4 unknown bytes
[  533.338657][T17920] netlink: 'syz.0.3861': attribute type 10 has an invalid length.
[  533.371433][T17920] bond0: (slave wlan1): Opening slave failed
[  533.600987][T17939] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3870'.
[  533.688890][T17934] nbd1: detected capacity change from 0 to 127
[  533.698576][ T5880] block nbd1: Receive control failed (result -32)
[  533.700497][T17940] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.735591][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'.
[  533.811351][T17944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3869'.
[  533.821269][T17940] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.865853][T17948] IPVS: length: 141 != 8
[  533.883701][T17943] lo speed is unknown, defaulting to 1000
[  533.900229][T17940] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.933987][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3873'.
[  533.947985][T17950] netlink: 'syz.2.3873': attribute type 2 has an invalid length.
[  534.005832][T17940] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.124244][T17958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3875'.
[  534.153671][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'.
[  534.245845][T17958] netlink: 'syz.4.3875': attribute type 9 has an invalid length.
[  534.263104][ T7652] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  534.298043][T17958] netlink: 'syz.4.3875': attribute type 7 has an invalid length.
[  534.305935][ T7652] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  534.319489][T17958] netlink: 'syz.4.3875': attribute type 8 has an invalid length.
[  534.342605][ T7652] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  534.362066][ T7652] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  534.536106][T17968] netlink: 'syz.3.3879': attribute type 1 has an invalid length.
[  534.600967][T17968] 8021q: adding VLAN 0 to HW filter on device bond1
[  534.619891][T17973] bond1: (slave wlan0): Opening slave failed
[  534.737778][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3884'.
[  534.769395][T17981] openvswitch: netlink: Flow actions attr not present in new flow.
[  534.903492][T17987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3882'.
[  534.973969][T17986] wg1: entered promiscuous mode
[  535.021414][T17986] wg1: entered allmulticast mode
[  535.084290][T17990] netlink: 'syz.4.3886': attribute type 1 has an invalid length.
[  535.449330][T18002] bridge3: entered allmulticast mode
[  535.480617][T18004] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode
[  535.557201][T18004] bridge_slave_0: left allmulticast mode
[  535.583352][T18004] bridge_slave_0: left promiscuous mode
[  535.621099][T18004] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.676517][T18004] bridge_slave_1: left allmulticast mode
[  535.706250][T18004] bridge_slave_1: left promiscuous mode
[  535.757868][T18004] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.874913][T18004] bond0: (slave bond_slave_0): Releasing backup interface
[  535.886355][T18018] netlink: 'syz.3.3892': attribute type 10 has an invalid length.
[  535.922675][T18004] bond0: (slave bond_slave_1): Releasing backup interface
[  535.992901][T18004] team0: Port device team_slave_0 removed
[  536.040907][T18004] team0: Port device team_slave_1 removed
[  536.063499][T18004] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  536.080149][T18004] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.099433][T18004] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.107100][T18004] batman_adv: batadv0: Removing interface: batadv_slave_1
[  536.131180][T18004] veth3: left allmulticast mode
[  536.136182][T18004] bridge0: port 3(veth3) entered disabled state
[  536.173894][T18037] netlink: 'syz.5.3898': attribute type 10 has an invalid length.
[  536.174578][T18018] mac80211_hwsim hwsim51 wlan1: left allmulticast mode
[  536.193288][T18018] bond0: (slave wlan1): Opening slave failed
[  536.222423][T18037] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.230076][T18037] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.253541][T18037] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.260843][T18037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.268452][T18037] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.275628][T18037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.300529][T18023] netlink: 'syz.0.3896': attribute type 16 has an invalid length.
[  536.322598][T18037] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  536.332362][  T801] bond0: (slave bridge0): interface is now down
[  536.358400][   T36] bond0: (slave bridge0): interface is now down
[  536.377090][   T36] bond0: now running without any active interface!
[  536.384357][T18034] bridge_slave_1: left allmulticast mode
[  536.390552][T18034] bridge_slave_1: left promiscuous mode
[  536.396514][T18034] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.405939][T18034] bridge_slave_0: left allmulticast mode
[  536.412555][T18034] bridge_slave_0: left promiscuous mode
[  536.420050][T18034] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.451393][T18034] bond0: (slave bridge0): Releasing backup interface
[  536.559168][T18013] syz.3.3892 (18013) used greatest stack depth: 17864 bytes left
[  536.928224][T18057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  537.033684][T18057] lo speed is unknown, defaulting to 1000
[  537.143829][T18063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.235711][T18106] __nla_validate_parse: 7 callbacks suppressed
[  538.235729][T18106] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3920'.
[  538.687072][T18123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3924'.
[  538.699772][T18123] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3924'.
[  538.709772][T18123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  538.991131][T18134] validate_nla: 3 callbacks suppressed
[  538.991147][T18134] netlink: 'syz.2.3932': attribute type 4 has an invalid length.
[  539.065638][T18141] netlink: 'syz.2.3932': attribute type 4 has an invalid length.
[  539.486290][T18146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3934'.
[  539.506042][  T801] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  539.515493][  T801] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  539.527527][T12379] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  539.697554][T12379] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  539.771636][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3939'.
[  539.875724][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3941'.
[  539.987649][ T5864] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  540.055780][T18171] lo speed is unknown, defaulting to 1000
[  540.490072][T18198] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  540.534887][T18198] CPU: 0 UID: 0 PID: 18198 Comm: syz.0.3954 Not tainted syzkaller #0 PREEMPT(full) 
[  540.534919][T18198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  540.534934][T18198] Call Trace:
[  540.534943][T18198]  <TASK>
[  540.534954][T18198]  dump_stack_lvl+0x189/0x250
[  540.534990][T18198]  ? __pfx_dump_stack_lvl+0x10/0x10
[  540.535017][T18198]  ? __pfx__printk+0x10/0x10
[  540.535055][T18198]  ? kernfs_path_from_node+0x2f/0x290
[  540.535079][T18198]  ? kernfs_path_from_node+0x250/0x290
[  540.535102][T18198]  ? kernfs_path_from_node+0x2f/0x290
[  540.535131][T18198]  sysfs_warn_dup+0x8e/0xa0
[  540.535155][T18198]  sysfs_do_create_link_sd+0xc0/0x110
[  540.535183][T18198]  device_add_class_symlinks+0x1cf/0x240
[  540.535213][T18198]  device_add+0x475/0xb50
[  540.535242][T18198]  wiphy_register+0x1ba6/0x28d0
[  540.535287][T18198]  ? __pfx_wiphy_register+0x10/0x10
[  540.535310][T18198]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  540.535348][T18198]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  540.535383][T18198]  ieee80211_register_hw+0x3484/0x4100
[  540.535432][T18198]  ? ieee80211_register_hw+0x14d1/0x4100
[  540.535474][T18198]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  540.535510][T18198]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  540.535554][T18198]  ? __hrtimer_setup+0x187/0x210
[  540.535574][T18198]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  540.535618][T18198]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  540.535675][T18198]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  540.535700][T18198]  ? trace_kmalloc+0x1f/0xd0
[  540.535721][T18198]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  540.535752][T18198]  ? kstrndup+0xbf/0x160
[  540.535783][T18198]  hwsim_new_radio_nl+0xea4/0x1b10
[  540.535812][T18198]  ? __pfx___nla_validate_parse+0x10/0x10
[  540.535856][T18198]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  540.535895][T18198]  ? __nla_parse+0x40/0x60
[  540.535917][T18198]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  540.535952][T18198]  genl_family_rcv_msg_doit+0x212/0x300
[  540.535985][T18198]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  540.536025][T18198]  ? bpf_lsm_capable+0x9/0x20
[  540.536048][T18198]  ? security_capable+0x7e/0x2e0
[  540.536083][T18198]  genl_rcv_msg+0x60e/0x790
[  540.536114][T18198]  ? __pfx_genl_rcv_msg+0x10/0x10
[  540.536138][T18198]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  540.536179][T18198]  netlink_rcv_skb+0x208/0x470
[  540.536195][T18198]  ? __lock_acquire+0xab9/0xd20
[  540.536223][T18198]  ? __pfx_genl_rcv_msg+0x10/0x10
[  540.536249][T18198]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  540.536290][T18198]  ? down_read+0x1ad/0x2e0
[  540.536314][T18198]  genl_rcv+0x28/0x40
[  540.536336][T18198]  netlink_unicast+0x82f/0x9e0
[  540.536375][T18198]  ? __pfx_netlink_unicast+0x10/0x10
[  540.536405][T18198]  ? netlink_sendmsg+0x642/0xb30
[  540.536422][T18198]  ? skb_put+0x11b/0x210
[  540.536446][T18198]  netlink_sendmsg+0x805/0xb30
[  540.536476][T18198]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.536500][T18198]  ? aa_sock_msg_perm+0xf1/0x1d0
[  540.536520][T18198]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  540.536540][T18198]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.536560][T18198]  __sock_sendmsg+0x21c/0x270
[  540.536590][T18198]  ____sys_sendmsg+0x505/0x830
[  540.536619][T18198]  ? __pfx_____sys_sendmsg+0x10/0x10
[  540.536652][T18198]  ? import_iovec+0x74/0xa0
[  540.536678][T18198]  ___sys_sendmsg+0x21f/0x2a0
[  540.536703][T18198]  ? __pfx____sys_sendmsg+0x10/0x10
[  540.536771][T18198]  ? __fget_files+0x2a/0x420
[  540.536787][T18198]  ? __fget_files+0x3a0/0x420
[  540.536815][T18198]  __x64_sys_sendmsg+0x19b/0x260
[  540.536841][T18198]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  540.536876][T18198]  ? rcu_is_watching+0x15/0xb0
[  540.536900][T18198]  ? do_syscall_64+0xbe/0x3b0
[  540.536926][T18198]  do_syscall_64+0xfa/0x3b0
[  540.536945][T18198]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.536964][T18198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.536983][T18198]  ? clear_bhb_loop+0x60/0xb0
[  540.537006][T18198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.537023][T18198] RIP: 0033:0x7f5d26d8ebe9
[  540.537040][T18198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  540.537056][T18198] RSP: 002b:00007f5d27c7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  540.537076][T18198] RAX: ffffffffffffffda RBX: 00007f5d26fc5fa0 RCX: 00007f5d26d8ebe9
[  540.537090][T18198] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  540.537102][T18198] RBP: 00007f5d26e11e19 R08: 0000000000000000 R09: 0000000000000000
[  540.537113][T18198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  540.537124][T18198] R13: 00007f5d26fc6038 R14: 00007f5d26fc5fa0 R15: 00007fff36d2f098
[  540.537156][T18198]  </TASK>
[  540.715851][T18206] netlink: del zone limit has 4 unknown bytes
[  541.156721][T18211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3958'.
[  541.308235][T18219] bond0: (slave gretap0): Error: Device type is different from other slaves
[  541.327432][T18220] bond0: (slave gretap0): Error: Device type is different from other slaves
[  541.402241][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3963'.
[  541.431748][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3963'.
[  541.459481][T18227] netlink: 'syz.5.3963': attribute type 11 has an invalid length.
[  541.487750][T18227] netlink: 'syz.5.3963': attribute type 14 has an invalid length.
[  541.647006][T18240] FAULT_INJECTION: forcing a failure.
[  541.647006][T18240] name failslab, interval 1, probability 0, space 0, times 0
[  541.688835][T18240] CPU: 1 UID: 0 PID: 18240 Comm: syz.5.3969 Not tainted syzkaller #0 PREEMPT(full) 
[  541.688860][T18240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  541.688872][T18240] Call Trace:
[  541.688880][T18240]  <TASK>
[  541.688889][T18240]  dump_stack_lvl+0x189/0x250
[  541.688916][T18240]  ? __pfx____ratelimit+0x10/0x10
[  541.688936][T18240]  ? __pfx_dump_stack_lvl+0x10/0x10
[  541.688958][T18240]  ? __pfx__printk+0x10/0x10
[  541.688997][T18240]  should_fail_ex+0x414/0x560
[  541.689027][T18240]  should_failslab+0xa8/0x100
[  541.689056][T18240]  __kmalloc_cache_noprof+0x70/0x3d0
[  541.689080][T18240]  ? sctp_add_bind_addr+0x8c/0x370
[  541.689102][T18240]  sctp_add_bind_addr+0x8c/0x370
[  541.689124][T18240]  sctp_copy_local_addr_list+0x30b/0x4e0
[  541.689157][T18240]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  541.689186][T18240]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  541.689219][T18240]  ? sctp_v4_is_any+0x35/0x60
[  541.689236][T18240]  ? sctp_copy_one_addr+0x93/0x360
[  541.689258][T18240]  sctp_bind_addr_copy+0xb3/0x3c0
[  541.689277][T18240]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  541.689306][T18240]  sctp_connect_new_asoc+0x2e0/0x690
[  541.689332][T18240]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  541.689352][T18240]  ? __local_bh_enable_ip+0x12d/0x1c0
[  541.689379][T18240]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  541.689408][T18240]  ? security_sctp_bind_connect+0x7e/0x2e0
[  541.689435][T18240]  sctp_sendmsg+0x155c/0x2810
[  541.689470][T18240]  ? __pfx_sctp_sendmsg+0x10/0x10
[  541.689495][T18240]  ? aa_sk_perm+0x81e/0x950
[  541.689528][T18240]  ? __pfx_aa_sk_perm+0x10/0x10
[  541.689557][T18240]  ? sock_rps_record_flow+0x19/0x410
[  541.689587][T18240]  ? inet_sendmsg+0x2f4/0x370
[  541.689617][T18240]  __sock_sendmsg+0x19c/0x270
[  541.689647][T18240]  ____sys_sendmsg+0x52d/0x830
[  541.689675][T18240]  ? __pfx_____sys_sendmsg+0x10/0x10
[  541.689705][T18240]  ? import_iovec+0x74/0xa0
[  541.689731][T18240]  ___sys_sendmsg+0x21f/0x2a0
[  541.689755][T18240]  ? __pfx____sys_sendmsg+0x10/0x10
[  541.689813][T18240]  ? __fget_files+0x2a/0x420
[  541.689828][T18240]  ? __fget_files+0x3a0/0x420
[  541.689855][T18240]  __sys_sendmmsg+0x227/0x430
[  541.689883][T18240]  ? __pfx___sys_sendmmsg+0x10/0x10
[  541.689902][T18240]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  541.689950][T18240]  ? ksys_write+0x22a/0x250
[  541.689976][T18240]  ? __pfx_ksys_write+0x10/0x10
[  541.689997][T18240]  ? rcu_is_watching+0x15/0xb0
[  541.690022][T18240]  __x64_sys_sendmmsg+0xa0/0xc0
[  541.690045][T18240]  do_syscall_64+0xfa/0x3b0
[  541.690064][T18240]  ? lockdep_hardirqs_on+0x9c/0x150
[  541.690082][T18240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.690100][T18240]  ? clear_bhb_loop+0x60/0xb0
[  541.690122][T18240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.690139][T18240] RIP: 0033:0x7f6930b8ebe9
[  541.690155][T18240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  541.690170][T18240] RSP: 002b:00007f69319ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  541.690190][T18240] RAX: ffffffffffffffda RBX: 00007f6930dc5fa0 RCX: 00007f6930b8ebe9
[  541.690203][T18240] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000003
[  541.690214][T18240] RBP: 00007f69319ac090 R08: 0000000000000000 R09: 0000000000000000
[  541.690225][T18240] R10: 0000000000048851 R11: 0000000000000246 R12: 0000000000000002
[  541.690236][T18240] R13: 00007f6930dc6038 R14: 00007f6930dc5fa0 R15: 00007ffc26b328a8
[  541.690266][T18240]  </TASK>
[  542.130964][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3973'.
[  542.741026][T18274] netlink: 'syz.5.3985': attribute type 1 has an invalid length.
[  542.842881][T18274] 8021q: adding VLAN 0 to HW filter on device bond1
[  542.874610][T18282] bond1: (slave wlan0): Opening slave failed
[  543.252649][T18297] __nla_validate_parse: 1 callbacks suppressed
[  543.252666][T18297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3991'.
[  543.307455][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  543.463655][T18306] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3996'.
[  543.509118][T18306] openvswitch: netlink: Flow actions attr not present in new flow.
[  543.605803][T18313] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3999'.
[  543.769544][T18322] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  543.782900][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4004'.
[  543.805408][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4003'.
[  543.911636][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4007'.
[  544.291280][T18327] infiniband syz0: set active
[  544.302052][T18327] infiniband syz0: added veth0_vlan
[  544.312387][T18327] syz0: rxe_create_cq: returned err = -12
[  544.322948][T18327] infiniband syz0: Couldn't create ib_mad CQ
[  544.333990][T18327] infiniband syz0: Couldn't open port 1
[  544.385310][T18327] RDS/IB: syz0: added
[  544.394007][T18327] smc: adding ib device syz0 with port count 1
[  544.406442][T18327] smc:    ib device syz0 port 1 has no pnetid
[  544.455109][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4019'.
[  544.726665][T18370] lo speed is unknown, defaulting to 1000
[  545.364188][T18395] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4030'.
[  545.566449][T18408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4034'.
[  545.574319][T18373] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4021'.
[  545.696528][T18410] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  546.335046][T18431] FAULT_INJECTION: forcing a failure.
[  546.335046][T18431] name failslab, interval 1, probability 0, space 0, times 0
[  546.349248][T18431] CPU: 1 UID: 0 PID: 18431 Comm: syz.3.4044 Not tainted syzkaller #0 PREEMPT(full) 
[  546.349272][T18431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  546.349284][T18431] Call Trace:
[  546.349292][T18431]  <TASK>
[  546.349300][T18431]  dump_stack_lvl+0x189/0x250
[  546.349326][T18431]  ? __pfx____ratelimit+0x10/0x10
[  546.349345][T18431]  ? __pfx_dump_stack_lvl+0x10/0x10
[  546.349367][T18431]  ? __pfx__printk+0x10/0x10
[  546.349397][T18431]  ? __pfx___might_resched+0x10/0x10
[  546.349419][T18431]  should_fail_ex+0x414/0x560
[  546.349448][T18431]  should_failslab+0xa8/0x100
[  546.349476][T18431]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  546.349501][T18431]  ? __alloc_skb+0x112/0x2d0
[  546.349525][T18431]  __alloc_skb+0x112/0x2d0
[  546.349547][T18431]  inet_rtm_getroute+0x74c/0x27e0
[  546.349579][T18431]  ? kasan_quarantine_put+0xdd/0x220
[  546.349609][T18431]  ? nlmon_xmit+0xb0/0x100
[  546.349627][T18431]  ? kmem_cache_free+0x18f/0x400
[  546.349652][T18431]  ? __pfx_inet_rtm_getroute+0x10/0x10
[  546.349706][T18431]  ? __dev_queue_xmit+0x1d79/0x3b50
[  546.349762][T18431]  ? __pfx_inet_rtm_getroute+0x10/0x10
[  546.349787][T18431]  rtnetlink_rcv_msg+0x7cc/0xb70
[  546.349810][T18431]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  546.349827][T18431]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  546.349842][T18431]  ? ref_tracker_free+0x63a/0x7d0
[  546.349868][T18431]  ? __asan_memcpy+0x40/0x70
[  546.349887][T18431]  ? __pfx_ref_tracker_free+0x10/0x10
[  546.349923][T18431]  netlink_rcv_skb+0x208/0x470
[  546.349942][T18431]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  546.349962][T18431]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  546.349991][T18431]  ? netlink_deliver_tap+0x2e/0x1b0
[  546.350023][T18431]  netlink_unicast+0x82f/0x9e0
[  546.350064][T18431]  ? __pfx_netlink_unicast+0x10/0x10
[  546.350093][T18431]  ? netlink_sendmsg+0x642/0xb30
[  546.350109][T18431]  ? skb_put+0x11b/0x210
[  546.350132][T18431]  netlink_sendmsg+0x805/0xb30
[  546.350160][T18431]  ? __pfx_netlink_sendmsg+0x10/0x10
[  546.350183][T18431]  ? aa_sock_msg_perm+0xf1/0x1d0
[  546.350202][T18431]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  546.350222][T18431]  ? __pfx_netlink_sendmsg+0x10/0x10
[  546.350242][T18431]  __sock_sendmsg+0x21c/0x270
[  546.350271][T18431]  ____sys_sendmsg+0x505/0x830
[  546.350298][T18431]  ? __pfx_____sys_sendmsg+0x10/0x10
[  546.350329][T18431]  ? import_iovec+0x74/0xa0
[  546.350354][T18431]  ___sys_sendmsg+0x21f/0x2a0
[  546.350377][T18431]  ? __pfx____sys_sendmsg+0x10/0x10
[  546.350433][T18431]  ? __fget_files+0x2a/0x420
[  546.350448][T18431]  ? __fget_files+0x3a0/0x420
[  546.350474][T18431]  __x64_sys_sendmsg+0x19b/0x260
[  546.350499][T18431]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  546.350530][T18431]  ? __pfx_ksys_write+0x10/0x10
[  546.350553][T18431]  ? rcu_is_watching+0x15/0xb0
[  546.350576][T18431]  ? do_syscall_64+0xbe/0x3b0
[  546.350600][T18431]  do_syscall_64+0xfa/0x3b0
[  546.350619][T18431]  ? lockdep_hardirqs_on+0x9c/0x150
[  546.350637][T18431]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.350655][T18431]  ? clear_bhb_loop+0x60/0xb0
[  546.350677][T18431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.350694][T18431] RIP: 0033:0x7f380ed8ebe9
[  546.350711][T18431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  546.350726][T18431] RSP: 002b:00007f380fc7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  546.350745][T18431] RAX: ffffffffffffffda RBX: 00007f380efc5fa0 RCX: 00007f380ed8ebe9
[  546.350758][T18431] RDX: ea5bc50b6199d77e RSI: 0000200000000000 RDI: 0000000000000003
[  546.350770][T18431] RBP: 00007f380fc7b090 R08: 0000000000000000 R09: 0000000000000000
[  546.350781][T18431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  546.350792][T18431] R13: 00007f380efc6038 R14: 00007f380efc5fa0 R15: 00007fffab998fd8
[  546.350821][T18431]  </TASK>
[  547.134288][T18440] openvswitch: netlink: Flow key attr not present in new flow.
[  547.499506][T18461] netlink: 'syz.5.4056': attribute type 3 has an invalid length.
[  547.582533][T18465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  547.667198][T18465] tipc: Disabling bearer <eth:syzkaller0>
[  547.908138][T18481] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  548.062028][T18488] bridge2: entered allmulticast mode
[  548.443462][T18501] syzkaller0: entered promiscuous mode
[  548.449150][T18501] syzkaller0: entered allmulticast mode
[  548.523262][T18504] bond0: entered promiscuous mode
[  548.538280][T18504] bond0: entered allmulticast mode
[  548.835993][T18518] __nla_validate_parse: 11 callbacks suppressed
[  548.836014][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4074'.
[  549.242533][T18534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4077'.
[  549.374753][T18538] netlink: del zone limit has 4 unknown bytes
[  549.541162][T18542] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  549.895871][T18548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4085'.
[  549.970485][T18549] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  550.113669][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4084'.
[  550.180239][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4086'.
[  550.219989][T18554] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4086'.
[  550.259230][T18554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  550.670254][ T7652] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  550.697989][ T7652] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  550.734009][ T7652] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  550.774343][ T7652] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  550.996487][T18565] netlink: 'syz.2.4091': attribute type 1 has an invalid length.
[  551.044132][T18565] 8021q: adding VLAN 0 to HW filter on device bond2
[  551.058272][T18565] bond1: (slave wlan0): Releasing active interface
[  551.093347][T18565] bond2: (slave wlan0): Opening slave failed
[  551.115035][T18566] !
: renamed from dummy0 (while UP)
[  551.145453][T18565] vlan2: entered allmulticast mode
[  551.147487][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  551.199164][T18565] bond2: (slave vlan2): Opening slave failed
[  552.473677][T18600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  552.499352][T18600] syzkaller0: entered promiscuous mode
[  552.504861][T18600] syzkaller0: entered allmulticast mode
[  552.579204][T18599] tipc: Resetting bearer <eth:syzkaller0>
[  552.627056][T18599] tipc: Disabling bearer <eth:syzkaller0>
[  555.745678][T18576] lo speed is unknown, defaulting to 1000
[  555.751698][T18487] siw: device registration error -23
[  555.863081][T18604] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4100'.
[  556.028939][T18604] bond0: entered promiscuous mode
[  556.035755][T18604] bond_slave_0: entered promiscuous mode
[  556.044040][T18604] bond_slave_1: entered promiscuous mode
[  556.051163][T18604] bond0: entered allmulticast mode
[  556.053708][T18615] netlink: 'syz.0.4103': attribute type 1 has an invalid length.
[  556.056420][T18604] bond_slave_0: entered allmulticast mode
[  556.064956][T18615] netlink: 'syz.0.4103': attribute type 1 has an invalid length.
[  556.080192][T18604] bond_slave_1: entered allmulticast mode
[  556.081987][T18615] netlink: 'syz.0.4103': attribute type 1 has an invalid length.
[  556.094245][T18615] netlink: 'syz.0.4103': attribute type 2 has an invalid length.
[  556.105366][T18615] netlink: 'syz.0.4103': attribute type 2 has an invalid length.
[  556.122268][T18615] netlink: 'syz.0.4103': attribute type 1 has an invalid length.
[  556.295205][T18625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4105'.
[  556.965798][T18639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4110'.
[  557.297085][T18650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4114'.
[  557.307696][T18648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4112'.
[  557.316660][T18648] netlink: 'syz.4.4112': attribute type 1 has an invalid length.
[  557.375788][T18650] bridge4: entered allmulticast mode
[  557.384922][T18652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4112'.
[  557.644603][T18661] netlink: 'syz.2.4117': attribute type 4 has an invalid length.
[  557.670020][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4118'.
[  557.681727][T18664] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  557.697709][T18661] netlink: 'syz.2.4117': attribute type 4 has an invalid length.
[  557.714090][T18664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  557.890778][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4121'.
[  557.909991][T18677] netlink: 'syz.5.4121': attribute type 1 has an invalid length.
[  558.049925][T18687] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4121'.
[  558.606752][T18707] bond3: entered promiscuous mode
[  558.613454][T18707] bond3: entered allmulticast mode
[  558.619644][T18707] 8021q: adding VLAN 0 to HW filter on device bond3
[  558.659983][T18707] 8021q: adding VLAN 0 to HW filter on device bond4
[  558.670883][T18707] bond4: entered promiscuous mode
[  558.676202][T18707] bond4: entered allmulticast mode
[  558.682703][T18707] bond3: (slave bond4): Enslaving as a backup interface with a down link
[  558.922842][T18722] netlink: del zone limit has 4 unknown bytes
[  559.261303][T18715] tap0: tun_chr_ioctl cmd 1074025677
[  559.274918][T18715] tap0: linktype set to 825
[  559.478913][T18730] lo speed is unknown, defaulting to 1000
[  559.575803][T18736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4142'.
[  559.809048][T18746] erspan0: entered promiscuous mode
[  559.821469][T18746] macsec1: entered promiscuous mode
[  559.845953][T18746] erspan0: left promiscuous mode
[  560.082607][T18754] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  560.323043][T18764] ipvlan0: entered promiscuous mode
[  560.447167][T18758] bridge0: entered promiscuous mode
[  560.490401][T18758] bridge0: entered allmulticast mode
[  560.511675][T18758] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  560.757038][T18761] bond0: (slave bridge0): Releasing backup interface
[  560.789890][T18761] bridge0 (unregistering): left promiscuous mode
[  560.814833][T18761] bridge0 (unregistering): left allmulticast mode
[  561.215481][T18779] lo speed is unknown, defaulting to 1000
[  561.317117][T18786] __nla_validate_parse: 2 callbacks suppressed
[  561.317135][T18786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4155'.
[  561.791981][T18792] lo speed is unknown, defaulting to 1000
[  562.490270][T18795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4158'.
[  562.500640][T18795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4158'.
[  562.553278][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4163'.
[  562.568343][T18817] netlink: del zone limit has 4 unknown bytes
[  562.582448][T18818] validate_nla: 4 callbacks suppressed
[  562.582463][T18818] netlink: 'syz.4.4163': attribute type 1 has an invalid length.
[  562.730217][T18820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4163'.
[  562.927177][T18824] netlink: 'syz.0.4166': attribute type 10 has an invalid length.
[  562.976542][T18824] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.983943][T18824] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.984580][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4166'.
[  563.012504][T18824] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.019809][T18824] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.027361][T18824] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.034613][T18824] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.059597][T18824] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  563.070930][T18827] bridge_slave_1: left allmulticast mode
[  563.078531][ T1340] bond0: (slave bridge0): interface is now down
[  563.089695][T18827] bridge_slave_1: left promiscuous mode
[  563.095700][T18827] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.103327][  T801] bond0: (slave bridge0): interface is now down
[  563.112821][T18827] bridge_slave_0: left allmulticast mode
[  563.119134][T18827] bridge_slave_0: left promiscuous mode
[  563.125166][T18827] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.132462][ T7652] bond0: (slave bridge0): interface is now down
[  563.167753][ T7652] bond0: (slave bridge0): interface is now down
[  563.183898][T18827] bond0: (slave bridge0): Releasing backup interface
[  563.588385][T18839] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  563.666018][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4172'.
[  563.675341][T18844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  563.724488][T18846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4170'.
[  564.051151][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4179'.
[  564.136871][T18864] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4181'.
[  564.234593][T18869] netlink: 'syz.3.4180': attribute type 10 has an invalid length.
[  564.580907][T18890] netlink: 'syz.2.4187': attribute type 1 has an invalid length.
[  564.743433][T18894] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  564.760090][T18894] CPU: 1 UID: 0 PID: 18894 Comm: syz.5.4189 Not tainted syzkaller #0 PREEMPT(full) 
[  564.760117][T18894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  564.760130][T18894] Call Trace:
[  564.760137][T18894]  <TASK>
[  564.760147][T18894]  dump_stack_lvl+0x189/0x250
[  564.760180][T18894]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.760205][T18894]  ? __pfx__printk+0x10/0x10
[  564.760237][T18894]  ? kernfs_path_from_node+0x2f/0x290
[  564.760259][T18894]  ? kernfs_path_from_node+0x250/0x290
[  564.760278][T18894]  ? kernfs_path_from_node+0x2f/0x290
[  564.760303][T18894]  sysfs_warn_dup+0x8e/0xa0
[  564.760323][T18894]  sysfs_do_create_link_sd+0xc0/0x110
[  564.760346][T18894]  device_add_class_symlinks+0x1cf/0x240
[  564.760371][T18894]  device_add+0x475/0xb50
[  564.760396][T18894]  wiphy_register+0x1ba6/0x28d0
[  564.760434][T18894]  ? __pfx_wiphy_register+0x10/0x10
[  564.760453][T18894]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  564.760487][T18894]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  564.760516][T18894]  ieee80211_register_hw+0x3484/0x4100
[  564.760557][T18894]  ? ieee80211_register_hw+0x14d1/0x4100
[  564.760592][T18894]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  564.760622][T18894]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  564.760667][T18894]  ? __hrtimer_setup+0x187/0x210
[  564.760684][T18894]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  564.760715][T18894]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  564.760773][T18894]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  564.760797][T18894]  ? trace_kmalloc+0x1f/0xd0
[  564.760818][T18894]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  564.760843][T18894]  ? kstrndup+0xbf/0x160
[  564.760874][T18894]  hwsim_new_radio_nl+0xea4/0x1b10
[  564.760902][T18894]  ? __pfx___nla_validate_parse+0x10/0x10
[  564.760946][T18894]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  564.760985][T18894]  ? __nla_parse+0x40/0x60
[  564.761005][T18894]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  564.761041][T18894]  genl_family_rcv_msg_doit+0x212/0x300
[  564.761074][T18894]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  564.761116][T18894]  ? bpf_lsm_capable+0x9/0x20
[  564.761140][T18894]  ? security_capable+0x7e/0x2e0
[  564.761174][T18894]  genl_rcv_msg+0x60e/0x790
[  564.761206][T18894]  ? __pfx_genl_rcv_msg+0x10/0x10
[  564.761229][T18894]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  564.761270][T18894]  netlink_rcv_skb+0x208/0x470
[  564.761287][T18894]  ? __lock_acquire+0xab9/0xd20
[  564.761316][T18894]  ? __pfx_genl_rcv_msg+0x10/0x10
[  564.761343][T18894]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  564.761383][T18894]  ? down_read+0x1ad/0x2e0
[  564.761408][T18894]  genl_rcv+0x28/0x40
[  564.761429][T18894]  netlink_unicast+0x82f/0x9e0
[  564.761468][T18894]  ? __pfx_netlink_unicast+0x10/0x10
[  564.761499][T18894]  ? netlink_sendmsg+0x642/0xb30
[  564.761516][T18894]  ? skb_put+0x11b/0x210
[  564.761540][T18894]  netlink_sendmsg+0x805/0xb30
[  564.761569][T18894]  ? __pfx_netlink_sendmsg+0x10/0x10
[  564.761593][T18894]  ? aa_sock_msg_perm+0xf1/0x1d0
[  564.761613][T18894]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  564.761641][T18894]  ? __pfx_netlink_sendmsg+0x10/0x10
[  564.761663][T18894]  __sock_sendmsg+0x21c/0x270
[  564.761693][T18894]  ____sys_sendmsg+0x505/0x830
[  564.761723][T18894]  ? __pfx_____sys_sendmsg+0x10/0x10
[  564.761757][T18894]  ? import_iovec+0x74/0xa0
[  564.761784][T18894]  ___sys_sendmsg+0x21f/0x2a0
[  564.761810][T18894]  ? __pfx____sys_sendmsg+0x10/0x10
[  564.761873][T18894]  ? __fget_files+0x2a/0x420
[  564.761889][T18894]  ? __fget_files+0x3a0/0x420
[  564.761918][T18894]  __x64_sys_sendmsg+0x19b/0x260
[  564.761944][T18894]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  564.761978][T18894]  ? rcu_is_watching+0x15/0xb0
[  564.762003][T18894]  ? do_syscall_64+0xbe/0x3b0
[  564.762029][T18894]  do_syscall_64+0xfa/0x3b0
[  564.762048][T18894]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.762067][T18894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.762085][T18894]  ? clear_bhb_loop+0x60/0xb0
[  564.762108][T18894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.762126][T18894] RIP: 0033:0x7f6930b8ebe9
[  564.762143][T18894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  564.762159][T18894] RSP: 002b:00007f69319ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  564.762179][T18894] RAX: ffffffffffffffda RBX: 00007f6930dc5fa0 RCX: 00007f6930b8ebe9
[  564.762193][T18894] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  564.762206][T18894] RBP: 00007f6930c11e19 R08: 0000000000000000 R09: 0000000000000000
[  564.762218][T18894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  564.762229][T18894] R13: 00007f6930dc6038 R14: 00007f6930dc5fa0 R15: 00007ffc26b328a8
[  564.762260][T18894]  </TASK>
[  565.850648][T18932] netlink: 'syz.2.4199': attribute type 10 has an invalid length.
[  565.931770][T18932] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  565.950249][T18925] batadv2: left allmulticast mode
[  565.955447][T18925] batadv2: left promiscuous mode
[  565.970349][T18925] bridge0: port 3(batadv2) entered disabled state
[  566.005769][T18925] bridge_slave_1: left allmulticast mode
[  566.012096][T18925] bridge_slave_1: left promiscuous mode
[  566.028302][T18925] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.055707][T18925] bridge_slave_0: left allmulticast mode
[  566.060147][T18945] siw: device registration error -23
[  566.066233][T18925] bridge_slave_0: left promiscuous mode
[  566.074236][T18925] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.105846][T18925] bond0: (slave bridge0): Releasing backup interface
[  566.332395][T18954] __nla_validate_parse: 7 callbacks suppressed
[  566.332414][T18954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4208'.
[  566.352059][T18953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  566.373963][T18954] bridge0: entered allmulticast mode
[  566.458425][T18953] syzkaller0: entered promiscuous mode
[  566.464034][T18953] syzkaller0: entered allmulticast mode
[  566.470643][T18953] tipc: Resetting bearer <eth:syzkaller0>
[  566.507415][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  566.533762][T18952] tipc: Resetting bearer <eth:syzkaller0>
[  567.417528][   T43] tipc: Node number set to 513908229
[  568.118683][T18952] tipc: Disabling bearer <eth:syzkaller0>
[  568.159307][T18968] netlink: 'syz.5.4213': attribute type 4 has an invalid length.
[  568.190979][T18979] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4216'.
[  568.204011][T18965] lo speed is unknown, defaulting to 1000
[  568.425403][T18991] netlink: 'syz.0.4221': attribute type 1 has an invalid length.
[  568.514510][T18991] 8021q: adding VLAN 0 to HW filter on device bond1
[  568.561017][T19002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4219'.
[  568.589854][T18997] bond1: (slave wlan0): Opening slave failed
[  568.895934][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4229'.
[  568.919726][T19018] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4229'.
[  568.937865][T19018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  569.320811][T19026] netlink: 'syz.2.4231': attribute type 2 has an invalid length.
[  569.723849][T19041] lo speed is unknown, defaulting to 1000
[  569.734635][T19043] netlink: 'syz.3.4238': attribute type 2 has an invalid length.
[  569.801491][T19046] netlink: 292 bytes leftover after parsing attributes in process `syz.5.4239'.
[  569.979753][T19058] sctp: [Deprecated]: syz.2.4237 (pid 19058) Use of int in maxseg socket option.
[  569.979753][T19058] Use struct sctp_assoc_value instead
[  570.012726][T19059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4243'.
[  570.053020][T19059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4243'.
[  570.108610][T19059] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4243'.
[  570.147553][T19059] bond0: invalid ARP target 0.0.0.0 specified for addition
[  570.164459][T19059] bond0: option arp_ip_target: invalid value (0)
[  570.189819][T19059] bond0: Removing last arp target with arp_interval on
[  570.215902][T19067] 8021q: VLANs not supported on wg1
[  570.254739][T19071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4240'.
[  570.604030][T19079] bond0: option arp_validate: invalid value (18446744073491447809)
[  571.372340][T19101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4256'.
[  571.409337][T19103] netlink: del zone limit has 4 unknown bytes
[  571.615242][T19106] netlink: del zone limit has 4 unknown bytes
[  571.752795][T19116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4262'.
[  571.886494][T19121] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4264'.
[  572.162185][T19134] geneve2: entered promiscuous mode
[  572.170152][T19134] geneve2: entered allmulticast mode
[  572.335162][T19146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4272'.
[  572.343555][T19147] netlink: 'syz.2.4275': attribute type 2 has an invalid length.
[  572.371864][T19146] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4272'.
[  572.391612][T19146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  572.420429][T19145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4274'.
[  572.435691][T19143] lo speed is unknown, defaulting to 1000
[  572.441673][T19145] netlink: 'syz.0.4274': attribute type 1 has an invalid length.
[  572.516161][T19148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4274'.
[  572.894736][T19151] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4276'.
[  573.155651][T19160] bond0: default FDB implementation only supports local addresses
[  573.541093][T19177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4288'.
[  573.559307][T19175] netlink: 400 bytes leftover after parsing attributes in process `syz.0.4287'.
[  573.728355][T19179] netlink: 'syz.3.4289': attribute type 10 has an invalid length.
[  573.970956][T19198] netlink: 'syz.4.4294': attribute type 83 has an invalid length.
[  574.192819][T19206] FAULT_INJECTION: forcing a failure.
[  574.192819][T19206] name failslab, interval 1, probability 0, space 0, times 0
[  574.264096][T19206] CPU: 0 UID: 0 PID: 19206 Comm: syz.5.4295 Not tainted syzkaller #0 PREEMPT(full) 
[  574.264126][T19206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  574.264138][T19206] Call Trace:
[  574.264146][T19206]  <TASK>
[  574.264154][T19206]  dump_stack_lvl+0x189/0x250
[  574.264189][T19206]  ? __pfx____ratelimit+0x10/0x10
[  574.264209][T19206]  ? __pfx_dump_stack_lvl+0x10/0x10
[  574.264232][T19206]  ? __pfx__printk+0x10/0x10
[  574.264259][T19206]  ? __lock_acquire+0xab9/0xd20
[  574.264295][T19206]  should_fail_ex+0x414/0x560
[  574.264325][T19206]  should_failslab+0xa8/0x100
[  574.264355][T19206]  kmem_cache_alloc_noprof+0x73/0x3c0
[  574.264378][T19206]  ? skb_clone+0x212/0x3a0
[  574.264426][T19206]  skb_clone+0x212/0x3a0
[  574.264457][T19206]  __netlink_deliver_tap+0x404/0x850
[  574.264495][T19206]  ? netlink_deliver_tap+0x2e/0x1b0
[  574.264519][T19206]  netlink_deliver_tap+0x19c/0x1b0
[  574.264544][T19206]  netlink_unicast+0x7fa/0x9e0
[  574.264587][T19206]  ? __pfx_netlink_unicast+0x10/0x10
[  574.264619][T19206]  ? netlink_sendmsg+0x642/0xb30
[  574.264639][T19206]  ? skb_put+0x11b/0x210
[  574.264665][T19206]  netlink_sendmsg+0x805/0xb30
[  574.264699][T19206]  ? __pfx_netlink_sendmsg+0x10/0x10
[  574.264725][T19206]  ? aa_sock_msg_perm+0xf1/0x1d0
[  574.264748][T19206]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  574.264770][T19206]  ? __pfx_netlink_sendmsg+0x10/0x10
[  574.264794][T19206]  __sock_sendmsg+0x21c/0x270
[  574.264827][T19206]  ____sys_sendmsg+0x505/0x830
[  574.264860][T19206]  ? __pfx_____sys_sendmsg+0x10/0x10
[  574.264897][T19206]  ? import_iovec+0x74/0xa0
[  574.264926][T19206]  ___sys_sendmsg+0x21f/0x2a0
[  574.264955][T19206]  ? __pfx____sys_sendmsg+0x10/0x10
[  574.265023][T19206]  ? __fget_files+0x2a/0x420
[  574.265041][T19206]  ? __fget_files+0x3a0/0x420
[  574.265072][T19206]  __x64_sys_sendmsg+0x19b/0x260
[  574.265101][T19206]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  574.265138][T19206]  ? __pfx_ksys_write+0x10/0x10
[  574.265164][T19206]  ? rcu_is_watching+0x15/0xb0
[  574.265201][T19206]  ? do_syscall_64+0xbe/0x3b0
[  574.265230][T19206]  do_syscall_64+0xfa/0x3b0
[  574.265252][T19206]  ? lockdep_hardirqs_on+0x9c/0x150
[  574.265274][T19206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.265295][T19206]  ? clear_bhb_loop+0x60/0xb0
[  574.265321][T19206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.265342][T19206] RIP: 0033:0x7f6930b8ebe9
[  574.265362][T19206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  574.265380][T19206] RSP: 002b:00007f693198b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  574.265403][T19206] RAX: ffffffffffffffda RBX: 00007f6930dc6090 RCX: 00007f6930b8ebe9
[  574.265418][T19206] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  574.265432][T19206] RBP: 00007f693198b090 R08: 0000000000000000 R09: 0000000000000000
[  574.265446][T19206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  574.265459][T19206] R13: 00007f6930dc6128 R14: 00007f6930dc6090 R15: 00007ffc26b328a8
[  574.265495][T19206]  </TASK>
[  574.798372][T19215] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  574.805963][T19215] CPU: 0 UID: 0 PID: 19215 Comm: syz.4.4300 Not tainted syzkaller #0 PREEMPT(full) 
[  574.805987][T19215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  574.806000][T19215] Call Trace:
[  574.806009][T19215]  <TASK>
[  574.806018][T19215]  dump_stack_lvl+0x189/0x250
[  574.806049][T19215]  ? __pfx_dump_stack_lvl+0x10/0x10
[  574.806073][T19215]  ? __pfx__printk+0x10/0x10
[  574.806104][T19215]  ? kernfs_path_from_node+0x2f/0x290
[  574.806125][T19215]  ? kernfs_path_from_node+0x250/0x290
[  574.806151][T19215]  ? kernfs_path_from_node+0x2f/0x290
[  574.806176][T19215]  sysfs_warn_dup+0x8e/0xa0
[  574.806197][T19215]  sysfs_do_create_link_sd+0xc0/0x110
[  574.806220][T19215]  device_add_class_symlinks+0x1cf/0x240
[  574.806245][T19215]  device_add+0x475/0xb50
[  574.806270][T19215]  wiphy_register+0x1ba6/0x28d0
[  574.806307][T19215]  ? __pfx_wiphy_register+0x10/0x10
[  574.806326][T19215]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  574.806360][T19215]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  574.806389][T19215]  ieee80211_register_hw+0x3484/0x4100
[  574.806431][T19215]  ? ieee80211_register_hw+0x14d1/0x4100
[  574.806467][T19215]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  574.806497][T19215]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  574.806534][T19215]  ? __hrtimer_setup+0x187/0x210
[  574.806551][T19215]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  574.806583][T19215]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  574.806641][T19215]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  574.806665][T19215]  ? trace_kmalloc+0x1f/0xd0
[  574.806687][T19215]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  574.806713][T19215]  ? kstrndup+0xbf/0x160
[  574.806743][T19215]  hwsim_new_radio_nl+0xea4/0x1b10
[  574.806772][T19215]  ? __pfx___nla_validate_parse+0x10/0x10
[  574.806815][T19215]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  574.806854][T19215]  ? __nla_parse+0x40/0x60
[  574.806883][T19215]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  574.806919][T19215]  genl_family_rcv_msg_doit+0x212/0x300
[  574.806952][T19215]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  574.806992][T19215]  ? bpf_lsm_capable+0x9/0x20
[  574.807015][T19215]  ? security_capable+0x7e/0x2e0
[  574.807049][T19215]  genl_rcv_msg+0x60e/0x790
[  574.807081][T19215]  ? __pfx_genl_rcv_msg+0x10/0x10
[  574.807104][T19215]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  574.807146][T19215]  netlink_rcv_skb+0x208/0x470
[  574.807162][T19215]  ? __lock_acquire+0xab9/0xd20
[  574.807190][T19215]  ? __pfx_genl_rcv_msg+0x10/0x10
[  574.807216][T19215]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  574.807260][T19215]  ? down_read+0x1ad/0x2e0
[  574.807285][T19215]  genl_rcv+0x28/0x40
[  574.807308][T19215]  netlink_unicast+0x82f/0x9e0
[  574.807346][T19215]  ? __pfx_netlink_unicast+0x10/0x10
[  574.807376][T19215]  ? netlink_sendmsg+0x642/0xb30
[  574.807393][T19215]  ? skb_put+0x11b/0x210
[  574.807417][T19215]  netlink_sendmsg+0x805/0xb30
[  574.807447][T19215]  ? __pfx_netlink_sendmsg+0x10/0x10
[  574.807470][T19215]  ? aa_sock_msg_perm+0xf1/0x1d0
[  574.807491][T19215]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  574.807511][T19215]  ? __pfx_netlink_sendmsg+0x10/0x10
[  574.807532][T19215]  __sock_sendmsg+0x21c/0x270
[  574.807561][T19215]  ____sys_sendmsg+0x505/0x830
[  574.807590][T19215]  ? __pfx_____sys_sendmsg+0x10/0x10
[  574.807621][T19215]  ? import_iovec+0x74/0xa0
[  574.807648][T19215]  ___sys_sendmsg+0x21f/0x2a0
[  574.807689][T19215]  ? __pfx____sys_sendmsg+0x10/0x10
[  574.807755][T19215]  ? __fget_files+0x2a/0x420
[  574.807771][T19215]  ? __fget_files+0x3a0/0x420
[  574.807802][T19215]  __x64_sys_sendmsg+0x19b/0x260
[  574.807828][T19215]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  574.807865][T19215]  ? rcu_is_watching+0x15/0xb0
[  574.807898][T19215]  ? do_syscall_64+0xbe/0x3b0
[  574.807944][T19215]  do_syscall_64+0xfa/0x3b0
[  574.807966][T19215]  ? lockdep_hardirqs_on+0x9c/0x150
[  574.807988][T19215]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.808008][T19215]  ? clear_bhb_loop+0x60/0xb0
[  574.808035][T19215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.808055][T19215] RIP: 0033:0x7f7ca078ebe9
[  574.808074][T19215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  574.808093][T19215] RSP: 002b:00007f7ca1698038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  574.808114][T19215] RAX: ffffffffffffffda RBX: 00007f7ca09c5fa0 RCX: 00007f7ca078ebe9
[  574.808131][T19215] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  574.808144][T19215] RBP: 00007f7ca0811e19 R08: 0000000000000000 R09: 0000000000000000
[  574.808157][T19215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  574.808182][T19215] R13: 00007f7ca09c6038 R14: 00007f7ca09c5fa0 R15: 00007ffe872ed518
[  574.808215][T19215]  </TASK>
[  575.515077][T19230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  575.548138][T19232] netlink: 'syz.2.4307': attribute type 10 has an invalid length.
[  575.651879][T19238] netlink: 'syz.3.4311': attribute type 1 has an invalid length.
[  575.707170][T19236] netlink: 'syz.5.4308': attribute type 1 has an invalid length.
[  576.138220][T19253] netlink: 'syz.3.4313': attribute type 5 has an invalid length.
[  576.526493][T19274] __nla_validate_parse: 16 callbacks suppressed
[  576.526512][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4323'.
[  576.659386][T19284] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4326'.
[  576.826978][T19286] netlink: 'syz.0.4327': attribute type 10 has an invalid length.
[  576.854447][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4327'.
[  576.878282][T19293] netlink: del zone limit has 4 unknown bytes
[  577.020791][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4332'.
[  577.096931][T19302] bridge0: entered allmulticast mode
[  577.130732][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4336'.
[  577.307874][T19316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4341'.
[  577.317071][T19316] bond0: Removing last arp target with arp_interval on
[  577.414375][T19322] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4343'.
[  577.534089][T19326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4345'.
[  577.567578][T19326] netlink: 'syz.4.4345': attribute type 1 has an invalid length.
[  577.641057][T19328] netlink: 'syz.0.4346': attribute type 10 has an invalid length.
[  577.675182][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4346'.
[  577.912341][T19342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4350'.
[  578.013311][T19347] netlink: 'syz.5.4353': attribute type 1 has an invalid length.
[  578.225816][T19354] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  578.241984][T19354] batman_adv: batadv0: Adding interface: gretap1
[  578.248990][T19354] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  578.311341][T19354] batman_adv: batadv0: Interface activated: gretap1
[  578.880907][T19389] FAULT_INJECTION: forcing a failure.
[  578.880907][T19389] name failslab, interval 1, probability 0, space 0, times 0
[  578.905303][T19389] CPU: 1 UID: 0 PID: 19389 Comm: syz.5.4366 Not tainted syzkaller #0 PREEMPT(full) 
[  578.905331][T19389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  578.905345][T19389] Call Trace:
[  578.905354][T19389]  <TASK>
[  578.905364][T19389]  dump_stack_lvl+0x189/0x250
[  578.905395][T19389]  ? __pfx____ratelimit+0x10/0x10
[  578.905418][T19389]  ? __pfx_dump_stack_lvl+0x10/0x10
[  578.905443][T19389]  ? __pfx__printk+0x10/0x10
[  578.905479][T19389]  ? __pfx___might_resched+0x10/0x10
[  578.905499][T19389]  ? fs_reclaim_acquire+0x7d/0x100
[  578.905526][T19389]  should_fail_ex+0x414/0x560
[  578.905571][T19389]  should_failslab+0xa8/0x100
[  578.905604][T19389]  __kmalloc_cache_noprof+0x70/0x3d0
[  578.905632][T19389]  ? ip_set_create+0x348/0x1940
[  578.905672][T19389]  ip_set_create+0x348/0x1940
[  578.905706][T19389]  ? __mutex_lock+0x335/0x1350
[  578.905729][T19389]  ? __pfx_ip_set_create+0x10/0x10
[  578.905788][T19389]  nfnetlink_rcv_msg+0xb4a/0x1130
[  578.905822][T19389]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  578.905866][T19389]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  578.905891][T19389]  ? kasan_save_free_info+0x46/0x50
[  578.905957][T19389]  netlink_rcv_skb+0x208/0x470
[  578.905977][T19389]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  578.906004][T19389]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  578.906034][T19389]  ? bpf_lsm_capable+0x9/0x20
[  578.906057][T19389]  ? security_capable+0x7e/0x2e0
[  578.906091][T19389]  nfnetlink_rcv+0x26a/0x2520
[  578.906120][T19389]  ? __dev_queue_xmit+0x1d79/0x3b50
[  578.906154][T19389]  ? __dev_queue_xmit+0x27b/0x3b50
[  578.906189][T19389]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  578.906215][T19389]  ? __pfx___dev_queue_xmit+0x10/0x10
[  578.906252][T19389]  ? ref_tracker_free+0x63a/0x7d0
[  578.906278][T19389]  ? __asan_memcpy+0x40/0x70
[  578.906298][T19389]  ? __pfx_ref_tracker_free+0x10/0x10
[  578.906339][T19389]  ? skb_clone+0x246/0x3a0
[  578.906364][T19389]  ? __netlink_deliver_tap+0x807/0x850
[  578.906382][T19389]  ? netlink_deliver_tap+0x2e/0x1b0
[  578.906407][T19389]  ? netlink_deliver_tap+0x2e/0x1b0
[  578.906433][T19389]  netlink_unicast+0x82f/0x9e0
[  578.906469][T19389]  ? __pfx_netlink_unicast+0x10/0x10
[  578.906497][T19389]  ? netlink_sendmsg+0x642/0xb30
[  578.906513][T19389]  ? skb_put+0x11b/0x210
[  578.906536][T19389]  netlink_sendmsg+0x805/0xb30
[  578.906563][T19389]  ? __pfx_netlink_sendmsg+0x10/0x10
[  578.906586][T19389]  ? aa_sock_msg_perm+0xf1/0x1d0
[  578.906605][T19389]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  578.906624][T19389]  ? __pfx_netlink_sendmsg+0x10/0x10
[  578.906644][T19389]  __sock_sendmsg+0x21c/0x270
[  578.906673][T19389]  ____sys_sendmsg+0x505/0x830
[  578.906700][T19389]  ? __pfx_____sys_sendmsg+0x10/0x10
[  578.906731][T19389]  ? import_iovec+0x74/0xa0
[  578.906756][T19389]  ___sys_sendmsg+0x21f/0x2a0
[  578.906779][T19389]  ? __pfx____sys_sendmsg+0x10/0x10
[  578.906841][T19389]  ? __fget_files+0x2a/0x420
[  578.906856][T19389]  ? __fget_files+0x3a0/0x420
[  578.906883][T19389]  __x64_sys_sendmsg+0x19b/0x260
[  578.906907][T19389]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  578.906939][T19389]  ? __pfx_ksys_write+0x10/0x10
[  578.906960][T19389]  ? rcu_is_watching+0x15/0xb0
[  578.906984][T19389]  ? do_syscall_64+0xbe/0x3b0
[  578.907007][T19389]  do_syscall_64+0xfa/0x3b0
[  578.907026][T19389]  ? lockdep_hardirqs_on+0x9c/0x150
[  578.907044][T19389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.907062][T19389]  ? clear_bhb_loop+0x60/0xb0
[  578.907083][T19389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.907100][T19389] RIP: 0033:0x7f6930b8ebe9
[  578.907116][T19389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  578.907132][T19389] RSP: 002b:00007f693198b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  578.907150][T19389] RAX: ffffffffffffffda RBX: 00007f6930dc6090 RCX: 00007f6930b8ebe9
[  578.907163][T19389] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  578.907174][T19389] RBP: 00007f693198b090 R08: 0000000000000000 R09: 0000000000000000
[  578.907185][T19389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  578.907195][T19389] R13: 00007f6930dc6128 R14: 00007f6930dc6090 R15: 00007ffc26b328a8
[  578.907229][T19389]  </TASK>
[  579.722161][T19411] validate_nla: 2 callbacks suppressed
[  579.722180][T19411] netlink: 'syz.2.4374': attribute type 1 has an invalid length.
[  580.025646][T19431] FAULT_INJECTION: forcing a failure.
[  580.025646][T19431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  580.042734][T19431] CPU: 1 UID: 0 PID: 19431 Comm: syz.2.4382 Not tainted syzkaller #0 PREEMPT(full) 
[  580.042756][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  580.042774][T19431] Call Trace:
[  580.042783][T19431]  <TASK>
[  580.042791][T19431]  dump_stack_lvl+0x189/0x250
[  580.042817][T19431]  ? __pfx____ratelimit+0x10/0x10
[  580.042837][T19431]  ? __pfx_dump_stack_lvl+0x10/0x10
[  580.042858][T19431]  ? __pfx__printk+0x10/0x10
[  580.042883][T19431]  ? __might_fault+0xb0/0x130
[  580.042918][T19431]  should_fail_ex+0x414/0x560
[  580.042953][T19431]  _copy_from_user+0x2d/0xb0
[  580.042976][T19431]  ___sys_sendmsg+0x158/0x2a0
[  580.043001][T19431]  ? __pfx____sys_sendmsg+0x10/0x10
[  580.043056][T19431]  ? __fget_files+0x2a/0x420
[  580.043072][T19431]  ? __fget_files+0x3a0/0x420
[  580.043098][T19431]  __x64_sys_sendmsg+0x19b/0x260
[  580.043122][T19431]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  580.043152][T19431]  ? __pfx_ksys_write+0x10/0x10
[  580.043173][T19431]  ? rcu_is_watching+0x15/0xb0
[  580.043197][T19431]  ? do_syscall_64+0xbe/0x3b0
[  580.043221][T19431]  do_syscall_64+0xfa/0x3b0
[  580.043243][T19431]  ? lockdep_hardirqs_on+0x9c/0x150
[  580.043262][T19431]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.043280][T19431]  ? clear_bhb_loop+0x60/0xb0
[  580.043301][T19431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.043318][T19431] RIP: 0033:0x7fccc6b8ebe9
[  580.043335][T19431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  580.043351][T19431] RSP: 002b:00007fccc7a14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  580.043370][T19431] RAX: ffffffffffffffda RBX: 00007fccc6dc5fa0 RCX: 00007fccc6b8ebe9
[  580.043384][T19431] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004
[  580.043396][T19431] RBP: 00007fccc7a14090 R08: 0000000000000000 R09: 0000000000000000
[  580.043407][T19431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  580.043418][T19431] R13: 00007fccc6dc6038 R14: 00007fccc6dc5fa0 R15: 00007ffcb7662048
[  580.043446][T19431]  </TASK>
[  580.334380][T19428] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.465975][T19428] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.574873][T19428] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.630207][T19443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  580.676675][T19428] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.726278][T19446] netlink: 'syz.4.4389': attribute type 1 has an invalid length.
[  580.809952][T19451] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  580.816770][ T7655] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.858449][ T1340] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.882086][ T7655] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.920563][ T7655] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  581.139881][T19465] FAULT_INJECTION: forcing a failure.
[  581.139881][T19465] name failslab, interval 1, probability 0, space 0, times 0
[  581.155249][T19464] vlan2: entered promiscuous mode
[  581.256236][T19465] CPU: 0 UID: 0 PID: 19465 Comm: syz.4.4395 Not tainted syzkaller #0 PREEMPT(full) 
[  581.256263][T19465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  581.256276][T19465] Call Trace:
[  581.256284][T19465]  <TASK>
[  581.256292][T19465]  dump_stack_lvl+0x189/0x250
[  581.256320][T19465]  ? __pfx____ratelimit+0x10/0x10
[  581.256344][T19465]  ? __pfx_dump_stack_lvl+0x10/0x10
[  581.256366][T19465]  ? __pfx__printk+0x10/0x10
[  581.256393][T19465]  ? __pfx___might_resched+0x10/0x10
[  581.256412][T19465]  ? fs_reclaim_acquire+0x7d/0x100
[  581.256434][T19465]  should_fail_ex+0x414/0x560
[  581.256463][T19465]  should_failslab+0xa8/0x100
[  581.256491][T19465]  __kmalloc_cache_noprof+0x70/0x3d0
[  581.256516][T19465]  ? alloc_pipe_info+0xe9/0x4d0
[  581.256546][T19465]  alloc_pipe_info+0xe9/0x4d0
[  581.256574][T19465]  splice_direct_to_actor+0xa5d/0xcc0
[  581.256602][T19465]  ? __lock_acquire+0xab9/0xd20
[  581.256648][T19465]  ? __pfx_aa_file_perm+0x10/0x10
[  581.256667][T19465]  ? __lock_acquire+0xab9/0xd20
[  581.256693][T19465]  ? __pfx_direct_splice_actor+0x10/0x10
[  581.256718][T19465]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  581.256755][T19465]  do_splice_direct+0x181/0x270
[  581.256784][T19465]  ? __pfx_do_splice_direct+0x10/0x10
[  581.256808][T19465]  ? common_file_perm+0x1b5/0x230
[  581.256825][T19465]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  581.256855][T19465]  ? bpf_lsm_file_permission+0x9/0x20
[  581.256876][T19465]  ? security_file_permission+0x75/0x290
[  581.256902][T19465]  ? rw_verify_area+0x255/0x4d0
[  581.256928][T19465]  do_sendfile+0x4da/0x7e0
[  581.256946][T19465]  ? __pfx_vfs_write+0x10/0x10
[  581.256975][T19465]  ? __pfx_do_sendfile+0x10/0x10
[  581.256994][T19465]  ? __fget_files+0x3a0/0x420
[  581.257020][T19465]  __se_sys_sendfile64+0x13e/0x190
[  581.257041][T19465]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  581.257067][T19465]  ? rcu_is_watching+0x15/0xb0
[  581.257090][T19465]  ? do_syscall_64+0xbe/0x3b0
[  581.257114][T19465]  do_syscall_64+0xfa/0x3b0
[  581.257133][T19465]  ? lockdep_hardirqs_on+0x9c/0x150
[  581.257151][T19465]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.257169][T19465]  ? clear_bhb_loop+0x60/0xb0
[  581.257191][T19465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.257208][T19465] RIP: 0033:0x7f7ca078ebe9
[  581.257225][T19465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  581.257241][T19465] RSP: 002b:00007f7ca1677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  581.257260][T19465] RAX: ffffffffffffffda RBX: 00007f7ca09c6090 RCX: 00007f7ca078ebe9
[  581.257274][T19465] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  581.257284][T19465] RBP: 00007f7ca1677090 R08: 0000000000000000 R09: 0000000000000000
[  581.257295][T19465] R10: 00000ffffffff004 R11: 0000000000000246 R12: 0000000000000001
[  581.257307][T19465] R13: 00007f7ca09c6128 R14: 00007f7ca09c6090 R15: 00007ffe872ed518
[  581.257336][T19465]  </TASK>
[  581.598112][   T59] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  581.607774][   T59] ref_tracker: netdev@ffff888058fc0610 has 1/1 users at
[  581.607774][   T59]      batadv_hard_if_event+0xf0f/0x1730
[  581.607774][   T59]      notifier_call_chain+0x1b3/0x3e0
[  581.607774][   T59]      register_netdevice+0x1608/0x1ae0
[  581.607774][   T59]      veth_newlink+0x5cc/0xa50
[  581.607774][   T59]      rtnl_newlink_create+0x30d/0xb00
[  581.607774][   T59]      rtnl_newlink+0x16d6/0x1c70
[  581.607774][   T59]      rtnetlink_rcv_msg+0x7cc/0xb70
[  581.607774][   T59]      netlink_rcv_skb+0x208/0x470
[  581.607774][   T59]      netlink_unicast+0x82f/0x9e0
[  581.607774][   T59]      netlink_sendmsg+0x805/0xb30
[  581.607774][   T59]      __sock_sendmsg+0x21c/0x270
[  581.607774][   T59]      __sys_sendto+0x3bd/0x520
[  581.607774][   T59]      __x64_sys_sendto+0xde/0x100
[  581.607774][   T59]      do_syscall_64+0xfa/0x3b0
[  581.607774][   T59]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.607774][   T59] 
[  581.736090][T19470] __nla_validate_parse: 18 callbacks suppressed
[  581.736107][T19470] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4398'.
[  582.078543][T19474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4397'.