last executing test programs:

4.651545499s ago: executing program 1 (id=1630):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)

4.468654867s ago: executing program 0 (id=1631):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0})
nanosleep(&(0x7f0000000180)={r5, r6+10000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r10, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r10)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r4, @ANYRES32=r7], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

4.377206519s ago: executing program 1 (id=1633):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002"], 0x140}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20100, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=<r2=>r1, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$kcm(0x23, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)

4.01892119s ago: executing program 1 (id=1635):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="a6d4b111dd1e0121f73c19692e90cce3d998ec0d799d6617e7a06fceb76d7a90ecd652784ded32c806a6f9c166875f32d37356ea022a55970ff37c01fc6825966a5be9eca080a5e7ef497741fea0f403dd", 0x51}], 0x1}}], 0x1, 0x715076167876ede7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r2, 0x1)
shutdown(r2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x4010)

3.499359294s ago: executing program 0 (id=1641):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x43}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {0xfff2}, {0xfff1, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_FD, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r8=>0x0})
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0xffffff16, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xeb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x32}, @in=@remote, {0x0, 0x0, 0xfffffffffffeffff, 0x4, 0x4, 0x6}, {0xfffffffffffff461, 0x3, 0x0, 0x10000}, {0x0, 0x2}, 0x70bd2d, 0x0, 0x2, 0x5}, [@algo_crypt={0x48, 0x2, {{'cbc-twofish-3way\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0)

3.253525581s ago: executing program 0 (id=1643):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x18)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
listen(0xffffffffffffffff, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x810)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, 0x0, 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94)

3.232972989s ago: executing program 4 (id=1645):
r0 = socket$kcm(0xa, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x5)
socket$xdp(0x2c, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0x64010101}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0)
sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000001640)={0xe3f0, 0x9, 0x9, 0x3, 0x200, 0x7, 0x8, 0x800}, &(0x7f0000000040)={0x95fc, 0x2, 0x1b4, 0x4, 0x9, 0xf8, 0x1000, 0x381d930a}, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @loopback}, 0x80, 0x0}, 0x20000001)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002200)=""/4094, 0xffe}], 0x1}, 0x40)
connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x2, 0x1, 0x0, 0x1}}, 0x2e)

3.128651641s ago: executing program 2 (id=1646):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0)

2.971937639s ago: executing program 1 (id=1647):
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110d00000000008510000002000000b7000000000000009500c200"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
unshare(0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80300001600010000000100fcffffff0a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080201d000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000ac1414450000000000000000000000000000000000000000010000000000000000000000000000000000000000000000fffffffffffffffff1ffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000feffffffffffffff", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x3c8}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="380000002d000100000000000000000004000080240011802f"], 0x38}], 0x1}, 0x2000c800)
r3 = socket$key(0xf, 0x3, 0x2)
socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r6, 0x6a98047402e98331, 0x70bd29, 0x20000, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xd1}, 0x240048c2)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000500)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}}, 0x0)
sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300000e0000000000000000000000050006006c0000000a00000000000000fc01000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a"], 0x70}}, 0x0)

2.839678527s ago: executing program 2 (id=1649):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c91"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)

2.768988168s ago: executing program 0 (id=1651):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20048000)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}], 0x2}}], 0x1, 0x2040000, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x3, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x9, [{@multicast1, 0xb932}, {@private=0xa010101, 0x4000}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'veth0_vlan\x00', {0x2, 0x4e24, @broadcast}})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38)

2.626129575s ago: executing program 2 (id=1652):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}})
pipe(&(0x7f0000000040))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='cgroup\x00'}, 0x30)
socket$can_raw(0x1d, 0x3, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r6, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0)

2.165159543s ago: executing program 3 (id=1653):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r3, 0x114, 0x2712, &(0x7f0000000440)=""/102400, &(0x7f0000000000)=0x19000)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0}, 0x94)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000050)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@remote, @local, @mcast1, 0x2, 0xff, 0x6, 0x500, 0xff, 0x80400102, r2})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r5, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb", 0x76}, {&(0x7f00000001c0)}, {&(0x7f0000000500)="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", 0x122}, {&(0x7f00000007c0)="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", 0xdc4}, {&(0x7f0000000000)="b6bfe5d12e5894a76921d2adc0f0f58aa1e55520876e89106f675fa786894a977f03a578cd0952", 0x27}, {0x0}, {&(0x7f0000002600)="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", 0xee9}], 0x7}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x4044805)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x10000008ebc, 0x0)
splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000025a5, 0x0)

1.915569558s ago: executing program 1 (id=1654):
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f0000000400), 0xe)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0xc855)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000)
sendmmsg(0xffffffffffffffff, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x40084)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000030000000500000604000000"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28)
socket$nl_rdma(0x10, 0x3, 0x14)

1.711275835s ago: executing program 4 (id=1655):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r7, 0xc, 0x1, 0x2, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0], <r9=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
unshare(0x22020600)
r10 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @mcast2, 0x5}, 0x1c)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, r1, 0x1, 0x0, 0x0, @void, @value=r4, @void, @void, r9}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10)
recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

1.685107479s ago: executing program 2 (id=1656):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x103044, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000003c0)="a21f6702e185a16734191fcd63171acae4749ac4e1c6334f30058af12e0f9f43155ef0e9afd7ac24de55cac00ee8810990433f4f0206282f81eec18500d936d9a9a6d0ff901e5f7d7c0d3de5e1d5a969b8cc725b299ff3a27af8b3b2d412a50d566334bc932924741feeeaf4fbe8714bf4aafed2758505519c3cd75efb7837f72fd3fbac11df288c331e0eb2542d2b079784c7593df98911488371afb5e2de10d2a03aebfafe1af2c54ac33d38fdf861ecd5ba6069891514358f902a106682aae404776795717e1050ef6075d13ad95f7308c919", 0xd4, 0x84, &(0x7f0000000500)={0x2, 0x4e23, @loopback}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f0000000300), 0x0}, 0x20)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, 0x0, &(0x7f0000000140)=0x9700)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1}})
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x1}}, @float={0xa, 0x0, 0x0, 0x10, 0xc}, @datasec={0x9, 0x3, 0x0, 0xf, 0x2, [{0x5, 0xc3, 0xfff}, {0x2, 0x2, 0x73ee}, {0x9, 0x7, 0x3}], "0317"}, @volatile={0x9}, @restrict={0x6, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000280)=""/215, 0x8c, 0xd7, 0x0, 0x6}, 0x28)

1.680994732s ago: executing program 0 (id=1657):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="a6d4b111dd1e0121f73c19692e90cce3d998ec0d799d6617e7a06fceb76d7a90ecd652784ded32c806a6f9c166875f32d37356ea022a55970ff37c01fc6825966a5be9eca080a5e7ef497741fea0f403dd", 0x51}], 0x1}}], 0x1, 0x715076167876ede7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r2, 0x1)
shutdown(r2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0)
sendmsg$nl_generic(r3, 0x0, 0x4010)

1.66143933s ago: executing program 3 (id=1658):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001580)={@cgroup, 0xffffffffffffffff, 0x1a, 0x3}, 0x20)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$bt_rfcomm(r2, &(0x7f000000d400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xad}, 0xfffffffffffffe3f)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0xba01}, 0x810)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
sendmmsg(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec00000000000000d5cecc3958e33b778d0407ccfdc628be37dcb40a633fdc30e73d9789917949572cce605812cd2e4025b09db2e37c0cf2d00d2972f783e4265a37f27a8a75afb6e30a3c28c5ef68a6a76e93aa6d7d51e9f32d6946d474a25430f29322e5e7d49c90f1bca872dccef557440eb7228a2a42d6b93e3f92f7cee78148452c915cf182afe14e5bd9"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
close(r4)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@empty, @in6=@remote}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000140)=0xe8)
r5 = socket$inet(0x2, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
socket$inet6(0xa, 0x5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

1.39770421s ago: executing program 4 (id=1659):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee8000004000000001000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)

1.21379673s ago: executing program 2 (id=1660):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r5)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)

1.192319259s ago: executing program 3 (id=1661):
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$kcm(0x2, 0x1000000000000002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x801, 0x84)
pipe(&(0x7f0000000040))
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711215000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r2], 0x54}}, 0x20000000)

1.183304542s ago: executing program 4 (id=1662):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)

1.080413218s ago: executing program 3 (id=1663):
socket$nl_route(0x10, 0x3, 0x0)
r0 = epoll_create1(0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
unshare(0x28000600)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="002e9d00000000000000000000000000174900000000000000001800"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r3}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x58, &(0x7f0000000380)}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x14})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)

1.026400674s ago: executing program 2 (id=1664):
unshare(0x62040200)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$packet(0x11, 0xa, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x8001)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0)
close(r0)
sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xfdf6}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
gettid()
gettid()
r4 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000002000010000000000000000000200200003000000000000002300110076657468305f6d61637674617000000008000200ac1e0001140003007767300000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1.002998527s ago: executing program 4 (id=1665):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}})
socket$inet6(0xa, 0x2, 0x3a)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$packet(0x11, 0x2, 0x300)
ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000100))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
pipe(&(0x7f0000001180)={<r6=>0xffffffffffffffff})
bind$alg(r6, &(0x7f0000001380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-arm\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x3c, 0x3c, 0x4, [@enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xf, 0xf}, {0x6, 0xfffffff9}, {0x4, 0x3}, {0x4, 0x9}, {0xa, 0x8}, {0xf, 0x4}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000000c0)=""/190, 0x58, 0xbe, 0x1}, 0x28)

897.32215ms ago: executing program 3 (id=1666):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd28, 0x1ff, {{}, {@void, @void, @val={0xc, 0x99, {0xfffffffd, 0x5a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008801}, 0xc000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, 0x0, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r1, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffb, 0x50}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x40)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xce)
ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000400)={@default, @null})
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'bond_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00'})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x46050)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000a80)=@add_del={0x2, &(0x7f0000000a40)='wg2\x00'})
shutdown(r3, 0x1)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000b40)={0x7, &(0x7f0000000b00)=[{0x4, 0x6, 0x8, 0x8}, {0x9e, 0xd2, 0x5, 0x4}, {0x0, 0x0, 0xd5, 0x2}, {0x6, 0xb8}, {0x7ff, 0x9, 0x9, 0xffffffff}, {0xff80, 0xd7, 0xd9, 0x2}, {0x8000, 0x2, 0x4, 0x4}]})
r4 = socket(0x1, 0x0, 0x0)
socket$kcm(0x29, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000011c0)="e2cbda4db5e86ad64d32ab35ddf3a0d5896653ccc5a0f0521dc0a75a", 0x1c)
socket$nl_route(0x10, 0x3, 0x0)

646.575659ms ago: executing program 0 (id=1667):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="010000201000"})
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001})
getpeername$unix(r4, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5, 0x3, "c4"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0)
ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3)
epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180))
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})

416.984214ms ago: executing program 1 (id=1668):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="8400f0da82805f", @ANYRES16=r1, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf250100"], 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r5, 0x8b2c, &(0x7f0000000040))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_SIOCSPGRP(r6, 0x8902, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

263.607345ms ago: executing program 3 (id=1669):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
syz_emit_ethernet(0x14d, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c011311fffc0200"], 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x8a, &(0x7f00000000c0)=0x57fd, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$inet_sctp(r8, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000100)="e72f735b29b71453ab2ccf7bd7b17c70255e9c611f7b01e82f35570999fac7fe960ae4384c66cb91afc039c95f7a224b8af85c09f7caa4b1870439d109718bb372652066899421973c7e37e8f2c6da0bc7e6757fa470633de1d926d271d842dbf03aa0579fdfc9bafef9e5c8c9b1a4ba8471e251652c4795ba76d492730f85ad16fa32f95fb5e5f75a40a68a8bc2273d87d1798bf883e8bb53227d3faa476c41f21abb615eee19763be79ba375b49762dd81a054c27f2c8371ea5a563b930d9d6ce6cfd7432c50f200"/214, 0xd6}, {&(0x7f0000000200)}, {&(0x7f0000000240)="45c3", 0x2}], 0x3}], 0x1, 0x0)
bind$rds(r8, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r10=>0x0})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r9, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="05003500040000000500330009000000"], 0x34}}, 0x4004844)

0s ago: executing program 4 (id=1670):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'ip6tnl0\x00', 0x0})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18)
socket(0x1000000000000010, 0x80802, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x38, r11, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)

kernel console output (not intermixed with test programs):

35.531031][ T5840] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.584595][ T5840] Buffer I/O error on dev nbd4, logical block 1, async page read
[  135.586074][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.105'.
[  135.618899][ T5840] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.664453][ T5840] Buffer I/O error on dev nbd4, logical block 2, async page read
[  135.697236][ T5840] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.729130][ T5840] Buffer I/O error on dev nbd4, logical block 3, async page read
[  135.750383][ T6429] tipc: Started in network mode
[  135.758061][ T5840] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.760844][ T6429] tipc: Node identity 261b51f8f38b, cluster identity 4711
[  135.797995][ T6429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.808081][ T5840] Buffer I/O error on dev nbd4, logical block 0, async page read
[  135.826406][ T6431] syzkaller0: entered promiscuous mode
[  135.836167][ T5840] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.847594][ T6431] syzkaller0: entered allmulticast mode
[  135.860818][ T5840] Buffer I/O error on dev nbd4, logical block 1, async page read
[  135.906470][ T5840] ldm_validate_partition_table(): Disk read failed.
[  135.923169][ T5840] Dev nbd4: unable to read RDB block 0
[  135.945344][ T5840]  nbd4: unable to read partition table
[  135.962580][ T6429] tipc: Resetting bearer <eth:syzkaller0>
[  135.989794][ T6428] tipc: Resetting bearer <eth:syzkaller0>
[  136.009440][ T5840] ldm_validate_partition_table(): Disk read failed.
[  136.040395][ T5840] Dev nbd4: unable to read RDB block 0
[  136.067434][ T6428] tipc: Disabling bearer <eth:syzkaller0>
[  136.075714][ T5840]  nbd4: unable to read partition table
[  136.298316][ T6439] netlink: 'syz.1.108': attribute type 10 has an invalid length.
[  136.417443][ T6439] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  136.861270][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.112'.
[  138.145211][ T6357] syz.3.85 (6357) used greatest stack depth: 19400 bytes left
[  138.306738][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  138.386248][ T6464] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  139.587956][ T3010] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  139.604976][ T6453] mpoa:mpoad_close: (<unknown>) going down
[  140.854631][ T1162] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  141.296130][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'.
[  141.337970][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'.
[  141.494957][ T5911] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  141.503327][  T977] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  141.775411][ T6498] wireguard0: entered promiscuous mode
[  141.785221][ T6498] wireguard0: entered allmulticast mode
[  142.283139][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.131'.
[  142.322408][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.131'.
[  142.371972][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'.
[  142.493884][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'.
[  142.647181][ T6513] bridge0: entered promiscuous mode
[  142.669886][ T6513] erspan0: entered promiscuous mode
[  142.972271][ T6530] tipc: Started in network mode
[  143.000986][ T6530] tipc: Node identity 000000000000000000007e8fdf030001, cluster identity 4711
[  143.029278][ T6530] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  143.062990][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'.
[  143.128887][ T6530] netlink: 'syz.0.137': attribute type 11 has an invalid length.
[  143.170473][ T6530] netlink: 140 bytes leftover after parsing attributes in process `syz.0.137'.
[  143.217367][ T6536] netlink: 'syz.0.137': attribute type 11 has an invalid length.
[  143.254619][ T6536] netlink: 140 bytes leftover after parsing attributes in process `syz.0.137'.
[  143.395574][ T6538] netlink: 'syz.3.140': attribute type 1 has an invalid length.
[  143.677393][ T6538] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.780019][ T6540] bond1: (slave bridge1): making interface the new active one
[  143.802683][ T6540] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  143.870250][ T6541] gretap1: entered promiscuous mode
[  143.894708][ T6541] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  143.922054][ T6544] macvlan2: entered promiscuous mode
[  143.928136][ T6544] macvlan2: entered allmulticast mode
[  143.936785][ T6544] bond1: entered promiscuous mode
[  143.942358][ T6544] bridge1: entered promiscuous mode
[  143.949159][ T6544] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  143.959366][ T6544] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  143.978913][ T6544] bond1: left promiscuous mode
[  143.983867][ T6544] bridge1: left promiscuous mode
[  144.032393][ T6528] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  144.081877][ T6528] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  144.378010][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'.
[  144.763315][ T6549] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  145.036077][ T6564] IPVS: persistence engine module ip_vs_pe_ not found
[  145.049089][ T6566] netlink: 'syz.3.148': attribute type 12 has an invalid length.
[  145.069257][   T24] IPVS: starting estimator thread 0...
[  145.172157][ T6571] IPVS: using max 26 ests per chain, 62400 per kthread
[  145.335479][ T3010] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  146.051742][ T5858] Bluetooth: hci0: command 0x0401 tx timeout
[  146.520259][ T6583] dummy0: entered promiscuous mode
[  146.537159][ T6583] macvtap1: entered promiscuous mode
[  146.549956][ T6583] macvtap1: entered allmulticast mode
[  146.564399][ T6583] dummy0: entered allmulticast mode
[  146.591436][ T6586] dummy0: left allmulticast mode
[  146.606666][ T6586] dummy0: left promiscuous mode
[  146.615123][   T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  146.638037][ T6584] syzkaller1: entered promiscuous mode
[  146.645879][ T6584] syzkaller1: entered allmulticast mode
[  146.663317][ T1151] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.686683][ T1151] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.826394][ T3010] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.848791][ T3010] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.158516][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.166506][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.411852][ T6604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.430614][ T6604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.706001][ T6605] bridge_slave_0: left allmulticast mode
[  147.715074][ T6605] bridge_slave_0: left promiscuous mode
[  147.741721][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.808612][ T6605] bridge_slave_1: left allmulticast mode
[  147.830874][ T6605] bridge_slave_1: left promiscuous mode
[  147.838646][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.880620][ T6605] bond0: (slave bond_slave_0): Releasing backup interface
[  147.898543][ T6621] __nla_validate_parse: 4 callbacks suppressed
[  147.898560][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.164'.
[  147.915760][ T6605] bond0: (slave bond_slave_1): Releasing backup interface
[  147.946623][ T6605] team0: Port device team_slave_0 removed
[  147.979883][ T6605] team0: Port device team_slave_1 removed
[  148.006432][ T6605] bond0: (slave wlan1): Releasing backup interface
[  148.084040][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.096690][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.213066][ T5932] srz1: Port: 1 Link DOWN
[  148.238810][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.247335][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'.
[  148.253212][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.290910][ T5859] Bluetooth: hci4: command 0x0405 tx timeout
[  148.604497][ T6627] bridge0 (unregistering): left promiscuous mode
[  148.636017][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'.
[  148.646381][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'.
[  148.664605][ T6633] netlink: 'syz.0.168': attribute type 1 has an invalid length.
[  148.681632][ T6633] netlink: 10 bytes leftover after parsing attributes in process `syz.0.168'.
[  148.733623][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'.
[  148.931734][ T6637] geneve2: entered promiscuous mode
[  148.937112][ T6637] geneve2: entered allmulticast mode
[  149.013803][   T63] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 41156 - 0
[  149.025868][   T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 41156 - 0
[  149.045548][ T5911] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  149.114136][ T5911] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[  149.135635][ T6649] netlink: 'syz.4.174': attribute type 1 has an invalid length.
[  149.160887][ T5911] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  149.257542][   T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 41156 - 0
[  149.408744][ T6649] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.574548][ T6653] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.589255][ T6652] fido_id[6652]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory
[  149.608073][ T6653] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  149.625245][ T6653] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  149.714347][ T6655] gretap1: entered promiscuous mode
[  149.735035][ T6655] bond1: (slave gretap1): making interface the new active one
[  149.744022][ T6655] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  149.760875][   T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 41156 - 0
[  149.990626][ T6657] macvlan0: entered promiscuous mode
[  149.996719][ T6657] macvlan0: entered allmulticast mode
[  150.025391][ T6657] bond1: entered promiscuous mode
[  150.042743][ T6657] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  150.073997][ T6657] bond1: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  150.114753][ T6657] bond1: left promiscuous mode
[  150.728399][ T6679] warning: `syz.1.181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  151.057890][ T6686] netlink: 'syz.0.183': attribute type 13 has an invalid length.
[  151.077739][ T6686] netlink: 'syz.0.183': attribute type 17 has an invalid length.
[  151.092261][   T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  151.316482][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.334205][ T6686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.355659][ T6688] siw: device registration error -23
[  151.683488][ T6700] xt_policy: neither incoming nor outgoing policy selected
[  152.247236][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.191'.
[  152.373813][ T1151] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  152.389403][ T6710] syz.2.191 (6710) used greatest stack depth: 15960 bytes left
[  152.559660][ T6723] netlink: 'syz.4.194': attribute type 1 has an invalid length.
[  152.569450][ T6723] netlink: 208 bytes leftover after parsing attributes in process `syz.4.194'.
[  153.029064][ T6728] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.080159][ T6728] syzkaller0: entered promiscuous mode
[  153.086426][ T6728] syzkaller0: entered allmulticast mode
[  153.151933][ T6728] tipc: Resetting bearer <eth:syzkaller0>
[  153.174864][ T6727] tipc: Resetting bearer <eth:syzkaller0>
[  153.236829][ T6727] tipc: Disabling bearer <eth:syzkaller0>
[  153.247291][ T6731] netlink: 'syz.3.198': attribute type 1 has an invalid length.
[  153.275126][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'.
[  153.539653][ T6737] xt_hashlimit: size too large, truncated to 1048576
[  153.605264][ T6741] 
: renamed from bridge_slave_0 (while UP)
[  154.068103][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'.
[  154.175382][ T6746] macvtap1: entered promiscuous mode
[  154.208199][ T6746] bond0: entered promiscuous mode
[  154.224262][ T6746] bond_slave_0: entered promiscuous mode
[  154.237268][ T6746] bond_slave_1: entered promiscuous mode
[  154.267049][ T6746] macvtap1: entered allmulticast mode
[  154.287123][ T6746] bond0: entered allmulticast mode
[  154.321647][ T6746] bond_slave_0: entered allmulticast mode
[  154.337878][ T6746] bond_slave_1: entered allmulticast mode
[  154.374813][ T6746] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  154.446817][ T6747] bond0: left allmulticast mode
[  154.465783][ T6747] bond_slave_0: left allmulticast mode
[  154.481170][ T6747] bond_slave_1: left allmulticast mode
[  154.494249][ T6747] bond0: left promiscuous mode
[  154.509926][ T6747] bond_slave_0: left promiscuous mode
[  154.542335][ T6747] bond_slave_1: left promiscuous mode
[  154.604268][ T6758] netlink: 'syz.2.205': attribute type 1 has an invalid length.
[  154.637455][ T6758] netlink: 224 bytes leftover after parsing attributes in process `syz.2.205'.
[  154.762393][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[  154.799648][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'.
[  154.840295][ T6761] netlink: 'syz.1.207': attribute type 1 has an invalid length.
[  154.848410][ T6761] netlink: 10 bytes leftover after parsing attributes in process `syz.1.207'.
[  154.913913][ T5858] block nbd0: Receive control failed (result -107)
[  155.503961][ T6775] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  156.133712][ T6785] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  156.135966][ T3010] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  156.278165][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'.
[  156.310301][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'.
[  156.357591][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'.
[  156.394006][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'.
[  156.744710][ T6785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  157.109879][ T6785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  157.299219][ T6785] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  157.433433][ T6812] netlink: 'syz.2.222': attribute type 4 has an invalid length.
[  157.503172][ T6815] tun0: tun_chr_ioctl cmd 1074025681
[  157.604953][   T34] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 41156 - 0
[  157.719731][ T1162] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 41156 - 0
[  157.821393][ T1151] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 41156 - 0
[  157.870780][   T34] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 41156 - 0
[  157.887954][ T6823] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  158.285585][ T6832] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  158.564183][ T6842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.574348][ T6842] syzkaller0: entered promiscuous mode
[  158.583270][ T6842] syzkaller0: entered allmulticast mode
[  158.616462][ T6842] tipc: Resetting bearer <eth:syzkaller0>
[  158.628243][ T6841] tipc: Resetting bearer <eth:syzkaller0>
[  158.670454][ T6841] tipc: Disabling bearer <eth:syzkaller0>
[  158.729298][ T6845] IPv6: sit1: Disabled Multicast RS
[  159.092847][ T6858] netlink: 'syz.1.237': attribute type 83 has an invalid length.
[  159.355195][ T6871] __nla_validate_parse: 71 callbacks suppressed
[  159.355215][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'.
[  159.818013][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'.
[  160.111156][ T6882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.257510][ T6891] netlink: 'syz.3.246': attribute type 4 has an invalid length.
[  160.278092][ T6891] netlink: 152 bytes leftover after parsing attributes in process `syz.3.246'.
[  160.457456][ T6885] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.504923][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv1
[  160.517946][ T6887] team0: Port device batadv1 added
[  160.529067][ T6891] : renamed from bond0
[  160.683321][ T6885] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.695941][ T6899] Cannot find map_set index 0 as target
[  160.883414][ T6903] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  161.005497][ T6885] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.178901][ T6910] netlink: 'syz.3.250': attribute type 1 has an invalid length.
[  161.360202][ T6885] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.651945][ T3010] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.678033][ T6919] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  161.689080][ T1151] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.725269][ T6919] syz_tun: left allmulticast mode
[  161.730387][ T6919] syz_tun: left promiscuous mode
[  161.736094][ T6919] bridge0: port 3(syz_tun) entered disabled state
[  161.752761][ T6919] bridge_slave_0: left allmulticast mode
[  161.761745][ T6919] bridge_slave_0: left promiscuous mode
[  161.767711][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.798860][ T6920] netlink: 'syz.0.254': attribute type 10 has an invalid length.
[  161.809062][ T6919] bridge_slave_1: left allmulticast mode
[  161.815209][ T6919] bridge_slave_1: left promiscuous mode
[  161.821644][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.837434][ T6919] bond0: (slave bond_slave_0): Releasing backup interface
[  161.862924][ T6919] bond0: (slave bond_slave_1): Releasing backup interface
[  161.877849][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.879227][ T6923] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[  161.943457][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.955395][ T1151] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.976432][ T6920] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  161.986520][ T6920] bond0: (slave wlan1): refused to change device type
[  162.047213][ T6926] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  162.103728][ T6927] team0: left allmulticast mode
[  162.108928][ T6927] team_slave_0: left allmulticast mode
[  162.116077][ T6927] team_slave_1: left allmulticast mode
[  162.123370][ T6927] team0: left promiscuous mode
[  162.128472][ T6927] team_slave_0: left promiscuous mode
[  162.135383][ T6927] team_slave_1: left promiscuous mode
[  162.142073][ T6927] bridge0: port 3(team0) entered disabled state
[  162.166395][ T6927] 
: left allmulticast mode
[  162.171600][ T6927] 
: left promiscuous mode
[  162.176526][ T6927] bridge0: port 1(
) entered disabled state
[  162.195732][ T6927] bridge_slave_1: left allmulticast mode
[  162.203082][ T6927] bridge_slave_1: left promiscuous mode
[  162.209058][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.234479][ T6927] bond0: (slave bond_slave_0): Releasing backup interface
[  162.267293][ T6927] bond0: (slave bond_slave_1): Releasing backup interface
[  162.313901][ T6927] team0: Port device team_slave_0 removed
[  162.331800][ T6927] team0: Port device team_slave_1 removed
[  162.334965][ T6936] netlink: 248 bytes leftover after parsing attributes in process `syz.1.258'.
[  162.349807][ T6927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.387659][ T6927] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.402945][ T6927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.411413][ T6927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.457731][ T6927] bond1: (slave ip6gretap1): Releasing backup interface
[  162.490312][ T6942] netlink: 'syz.4.259': attribute type 1 has an invalid length.
[  162.501982][ T6925] vxcan2: entered promiscuous mode
[  162.517590][ T3010] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.627969][ T6943] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  162.640569][ T6943] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  162.756499][ T6947] macvlan0: entered promiscuous mode
[  162.820777][ T6947] macvlan0: entered allmulticast mode
[  162.856005][ T6947] bond2: entered promiscuous mode
[  162.866266][ T6947] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  162.900566][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'.
[  162.925223][ T6947] bond2: left promiscuous mode
[  163.033480][ T6955] Illegal XDP return value 4294967289 on prog  (id 141) dev N/A, expect packet loss!
[  163.091587][ T6952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.146593][ T6952] syzkaller0: entered promiscuous mode
[  163.181500][ T6958] netlink: 180 bytes leftover after parsing attributes in process `syz.4.264'.
[  163.191520][ T6952] syzkaller0: entered allmulticast mode
[  163.223653][ T6958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.264'.
[  163.242341][ T6958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.264'.
[  163.261515][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'.
[  163.315175][ T6952] tipc: Resetting bearer <eth:syzkaller0>
[  163.423826][ T6950] tipc: Resetting bearer <eth:syzkaller0>
[  163.496426][ T6950] tipc: Disabling bearer <eth:syzkaller0>
[  163.612206][ T6969] netlink: 'syz.0.267': attribute type 10 has an invalid length.
[  163.639181][ T6969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.967006][ T6975] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  164.085321][ T6978] syzkaller0: entered promiscuous mode
[  164.105710][ T6987] netlink: 'syz.1.272': attribute type 1 has an invalid length.
[  164.127506][ T6978] syzkaller0: entered allmulticast mode
[  164.314573][ T6991] bond1: (slave geneve2): making interface the new active one
[  164.338444][ T6991] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  164.345978][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.272'.
[  164.625883][ T6987] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  164.637256][ T1135] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  164.666686][ T1135] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  164.687771][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1
[  165.401597][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'.
[  167.466683][ T6997] syzkaller0: entered promiscuous mode
[  167.473111][ T6997] syzkaller0: entered allmulticast mode
[  167.497714][ T1135] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  167.520257][ T1135] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  167.590408][ T7017] geneve3: entered promiscuous mode
[  167.664215][ T7017] geneve3: entered allmulticast mode
[  167.940199][ T7029] macsec1: entered promiscuous mode
[  167.980353][ T7029] macsec1: entered allmulticast mode
[  169.065837][ T5858] Bluetooth: hci4: link tx timeout
[  169.072674][ T5858] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  169.133971][ T7056] xt_hashlimit: size too large, truncated to 1048576
[  169.313163][ T7052] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  169.555540][ T7052] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  169.770097][ T7052] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  170.106262][ T7052] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  170.377738][ T7071] GUP no longer grows the stack in syz.1.293 (7071): 200000006000-20000000a000 (200000005000)
[  170.393974][ T7074] Bluetooth: MGMT ver 1.23
[  170.405731][ T7071] CPU: 1 UID: 0 PID: 7071 Comm: syz.1.293 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) 
[  170.405762][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  170.405789][ T7071] Call Trace:
[  170.405799][ T7071]  <TASK>
[  170.405809][ T7071]  dump_stack_lvl+0x189/0x250
[  170.405847][ T7071]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.405874][ T7071]  ? __pfx__printk+0x10/0x10
[  170.405900][ T7071]  ? find_vma+0xe7/0x160
[  170.405939][ T7071]  __get_user_pages+0x2a60/0x30b0
[  170.406001][ T7071]  ? __pfx___get_user_pages+0x10/0x10
[  170.406023][ T7071]  ? __gup_longterm_locked+0xbf7/0x15b0
[  170.406045][ T7071]  ? down_read_killable+0x1d1/0x350
[  170.406076][ T7071]  ? try_get_folio+0x633/0x660
[  170.406104][ T7071]  __gup_longterm_locked+0xd66/0x15b0
[  170.406132][ T7071]  ? try_grab_folio_fast+0x1be/0x4f0
[  170.406168][ T7071]  ? gup_fast_fallback+0x1afc/0x2260
[  170.406194][ T7071]  gup_fast_fallback+0x1cd4/0x2260
[  170.406267][ T7071]  ? __pfx_gup_fast_fallback+0x10/0x10
[  170.406287][ T7071]  ? trace_contention_end+0x39/0x120
[  170.406317][ T7071]  ? __mutex_lock+0x330/0xe80
[  170.406351][ T7071]  ? is_valid_gup_args+0x11f/0x200
[  170.406376][ T7071]  ? get_user_pages_fast+0x4d/0xb0
[  170.406401][ T7071]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  170.406435][ T7071]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  170.406463][ T7071]  ? wait_for_space+0x24d/0x2d0
[  170.406492][ T7071]  iov_iter_get_pages2+0x5e/0xa0
[  170.406521][ T7071]  __se_sys_vmsplice+0x548/0x10d0
[  170.406562][ T7071]  ? wake_up_q+0xca/0x110
[  170.406592][ T7071]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  170.406623][ T7071]  ? __pfx_futex_wake+0x10/0x10
[  170.406653][ T7071]  ? __lock_acquire+0xab9/0xd20
[  170.406727][ T7071]  ? rcu_is_watching+0x15/0xb0
[  170.406758][ T7071]  ? do_syscall_64+0xbe/0x3b0
[  170.406791][ T7071]  do_syscall_64+0xfa/0x3b0
[  170.406818][ T7071]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.406845][ T7071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.406865][ T7071]  ? clear_bhb_loop+0x60/0xb0
[  170.406891][ T7071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.406911][ T7071] RIP: 0033:0x7fdea518e929
[  170.406937][ T7071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.406955][ T7071] RSP: 002b:00007fdea5f69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  170.406982][ T7071] RAX: ffffffffffffffda RBX: 00007fdea53b5fa0 RCX: 00007fdea518e929
[  170.406997][ T7071] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  170.407010][ T7071] RBP: 00007fdea5210b39 R08: 0000000000000000 R09: 0000000000000000
[  170.407022][ T7071] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  170.407034][ T7071] R13: 0000000000000000 R14: 00007fdea53b5fa0 R15: 00007ffce7f82ed8
[  170.407068][ T7071]  </TASK>
[  170.479026][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'.
[  170.710522][ T7077] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  171.091028][ T5859] Bluetooth: hci4: command 0x0405 tx timeout
[  171.314269][ T7069] geneve2: left allmulticast mode
[  171.327535][ T7069] wireguard0: left promiscuous mode
[  171.339754][ T7069] wireguard0: left allmulticast mode
[  171.349698][ T7069] macsec1: left promiscuous mode
[  171.356576][ T7069] macsec1: left allmulticast mode
[  171.372635][ T7074] geneve2: entered promiscuous mode
[  171.546613][ T1135] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.589652][ T1135] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.609696][ T1135] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.651578][ T1135] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.733050][ T1135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.746713][ T1135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.759066][ T1135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.803635][ T1135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.835578][ T1135] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 41156 - 0
[  172.052724][ T1135] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 41156 - 0
[  172.094006][ T7101] netlink: del zone limit has 4 unknown bytes
[  172.131415][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 41156 - 0
[  172.194942][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 41156 - 0
[  172.455214][ T7110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.304'.
[  172.788190][ T5966] IPVS: starting estimator thread 0...
[  172.911614][ T7120] IPVS: using max 26 ests per chain, 62400 per kthread
[  174.222361][ T7147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.096261][ T7167] netlink: 288 bytes leftover after parsing attributes in process `syz.4.320'.
[  175.319214][ T7169] pimreg: entered allmulticast mode
[  176.119856][ T7181] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[  176.129897][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.327'.
[  176.182971][ T7179] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  176.746088][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'.
[  176.858383][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.334'.
[  176.870400][ T7204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.334'.
[  176.975096][ T7203] netlink: 44 bytes leftover after parsing attributes in process `syz.2.332'.
[  177.019922][ T7196] netlink: 44 bytes leftover after parsing attributes in process `syz.2.332'.
[  177.053082][ T7207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.077139][ T7202] syzkaller0: entered promiscuous mode
[  177.131926][ T7202] syzkaller0: entered allmulticast mode
[  177.248977][ T7205] tipc: Resetting bearer <eth:syzkaller0>
[  177.282492][  T977] IPVS: starting estimator thread 0...
[  177.318849][ T7201] tipc: Resetting bearer <eth:syzkaller0>
[  177.418440][ T7209] IPVS: using max 26 ests per chain, 62400 per kthread
[  177.425645][ T5859] Bluetooth: hci4: command 0x0405 tx timeout
[  177.448882][ T7201] tipc: Disabling bearer <eth:syzkaller0>
[  177.975103][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.339'.
[  178.082154][ T7221] netlink: del zone limit has 4 unknown bytes
[  178.546434][ T7235] bridge_slave_0: left allmulticast mode
[  178.572180][ T7235] bridge_slave_0: left promiscuous mode
[  178.585922][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.640006][ T7235] bridge_slave_1: left allmulticast mode
[  178.661025][ T7235] bridge_slave_1: left promiscuous mode
[  178.697547][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.863833][ T7235] : (slave bond_slave_0): Releasing backup interface
[  178.927579][ T7235] : (slave bond_slave_1): Releasing backup interface
[  179.055049][ T7235] team0: Port device team_slave_0 removed
[  179.093834][ T7235] team0: Port device team_slave_1 removed
[  179.106555][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.118224][ T7235] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.140314][ T7235] bond1: (slave bridge1): Releasing active interface
[  179.149689][ T7235] bond1: (slave bridge1): the permanent HWaddr of slave - 76:94:b2:da:32:c2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  179.180574][ T7235] bond1: (slave gretap1): making interface the new active one
[  179.231802][ T7235] bond1: (slave gretap1): Releasing active interface
[  180.392477][ T7256] tipc: New replicast peer: 255.255.255.255
[  180.446483][ T7256] tipc: Enabled bearer <udp:syz2>, priority 10
[  180.511045][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'.
[  180.520056][ T7257] tipc: Disabling bearer <udp:syz2>
[  181.534576][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.352'.
[  181.546950][ T7265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.354'.
[  181.810617][ T7269] netlink: del zone limit has 4 unknown bytes
[  182.731105][ T7285] bpq0: entered promiscuous mode
[  182.736164][ T7285] bpq0: entered allmulticast mode
[  183.243632][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'.
[  183.379742][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'.
[  183.602964][ T7301] syzkaller0: entered promiscuous mode
[  183.611718][ T7301] syzkaller0: entered allmulticast mode
[  184.354263][ T7320] netlink: 'syz.2.370': attribute type 1 has an invalid length.
[  184.386540][ T7320] netlink: 784 bytes leftover after parsing attributes in process `syz.2.370'.
[  185.011093][ T5966] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  185.655537][ T5966] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  187.072566][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'.
[  187.459420][ T7342] netlink: 'syz.0.378': attribute type 2 has an invalid length.
[  187.484242][ T7342] netlink: 240 bytes leftover after parsing attributes in process `syz.0.378'.
[  187.495454][ T7341] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  188.071872][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'.
[  188.319989][ T7350] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  189.327582][ T7372] wireguard0: entered promiscuous mode
[  189.414088][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'.
[  189.431410][ T7372] wireguard0: entered allmulticast mode
[  189.521326][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'.
[  189.593173][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'.
[  189.691861][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.389'.
[  189.988042][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'.
[  189.999226][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'.
[  190.038708][ T7393] bridge0: entered promiscuous mode
[  190.046196][ T7393] erspan0: entered promiscuous mode
[  190.061276][ T7393] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  190.069455][ T7393] Cannot create hsr debugfs directory
[  190.077200][ T7393] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  190.088372][ T7393] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network
[  190.473632][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.394'.
[  190.781447][   T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  191.632534][ T7428] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  191.642754][ T7428] CPU: 1 UID: 0 PID: 7428 Comm: syz.1.405 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) 
[  191.642787][ T7428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  191.642800][ T7428] Call Trace:
[  191.642809][ T7428]  <TASK>
[  191.642820][ T7428]  dump_stack_lvl+0x189/0x250
[  191.642856][ T7428]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.642883][ T7428]  ? __pfx__printk+0x10/0x10
[  191.642914][ T7428]  ? kernfs_path_from_node+0x2c/0x260
[  191.642946][ T7428]  ? kernfs_path_from_node+0x2c/0x260
[  191.642991][ T7428]  ? kernfs_path_from_node+0x2c/0x260
[  191.643023][ T7428]  ? kernfs_path_from_node+0x22c/0x260
[  191.643051][ T7428]  ? kernfs_path_from_node+0x2c/0x260
[  191.643085][ T7428]  sysfs_warn_dup+0x8e/0xa0
[  191.643114][ T7428]  sysfs_do_create_link_sd+0xc0/0x110
[  191.643146][ T7428]  device_add_class_symlinks+0x1cf/0x240
[  191.643191][ T7428]  device_add+0x475/0xb50
[  191.643225][ T7428]  wiphy_register+0x1ba6/0x28d0
[  191.643277][ T7428]  ? __pfx_wiphy_register+0x10/0x10
[  191.643305][ T7428]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  191.643336][ T7428]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  191.643376][ T7428]  ieee80211_register_hw+0x33e1/0x4120
[  191.643417][ T7428]  ? ieee80211_register_hw+0x14b1/0x4120
[  191.643451][ T7428]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  191.643479][ T7428]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  191.643514][ T7428]  ? __hrtimer_setup+0x187/0x210
[  191.643537][ T7428]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  191.643574][ T7428]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  191.643641][ T7428]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  191.643670][ T7428]  ? trace_kmalloc+0x1f/0xd0
[  191.643692][ T7428]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  191.643718][ T7428]  ? kstrndup+0xbf/0x160
[  191.643760][ T7428]  hwsim_new_radio_nl+0xea4/0x1b10
[  191.643800][ T7428]  ? __pfx___nla_validate_parse+0x10/0x10
[  191.643841][ T7428]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  191.643876][ T7428]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  191.643912][ T7428]  ? __nla_parse+0x40/0x60
[  191.643938][ T7428]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  191.643971][ T7428]  genl_family_rcv_msg_doit+0x215/0x300
[  191.644002][ T7428]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  191.644041][ T7428]  ? bpf_lsm_capable+0x9/0x20
[  191.644064][ T7428]  ? security_capable+0x7e/0x2e0
[  191.644103][ T7428]  genl_rcv_msg+0x60e/0x790
[  191.644134][ T7428]  ? __pfx_genl_rcv_msg+0x10/0x10
[  191.644155][ T7428]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  191.644211][ T7428]  netlink_rcv_skb+0x205/0x470
[  191.644241][ T7428]  ? __pfx_genl_rcv_msg+0x10/0x10
[  191.644267][ T7428]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  191.644319][ T7428]  ? down_read+0x1ad/0x2e0
[  191.644354][ T7428]  genl_rcv+0x28/0x40
[  191.644372][ T7428]  netlink_unicast+0x75c/0x8e0
[  191.644413][ T7428]  netlink_sendmsg+0x805/0xb30
[  191.644455][ T7428]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.644489][ T7428]  ? aa_sock_msg_perm+0x94/0x160
[  191.644523][ T7428]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  191.644554][ T7428]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.644585][ T7428]  __sock_sendmsg+0x219/0x270
[  191.644615][ T7428]  ____sys_sendmsg+0x505/0x830
[  191.644655][ T7428]  ? __pfx_____sys_sendmsg+0x10/0x10
[  191.644699][ T7428]  ? import_iovec+0x74/0xa0
[  191.644729][ T7428]  ___sys_sendmsg+0x21f/0x2a0
[  191.644753][ T7428]  ? __pfx____sys_sendmsg+0x10/0x10
[  191.644912][ T7428]  ? __fget_files+0x2a/0x420
[  191.644951][ T7428]  ? __fget_files+0x3a0/0x420
[  191.644992][ T7428]  __x64_sys_sendmsg+0x19b/0x260
[  191.645019][ T7428]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  191.645052][ T7428]  ? rcu_is_watching+0x15/0xb0
[  191.645085][ T7428]  ? do_syscall_64+0xbe/0x3b0
[  191.645119][ T7428]  do_syscall_64+0xfa/0x3b0
[  191.645145][ T7428]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.645170][ T7428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.645195][ T7428]  ? clear_bhb_loop+0x60/0xb0
[  191.645228][ T7428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.645251][ T7428] RIP: 0033:0x7fdea518e929
[  191.645272][ T7428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.645287][ T7428] RSP: 002b:00007fdea5f69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.645308][ T7428] RAX: ffffffffffffffda RBX: 00007fdea53b5fa0 RCX: 00007fdea518e929
[  191.645323][ T7428] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  191.645336][ T7428] RBP: 00007fdea5210b39 R08: 0000000000000000 R09: 0000000000000000
[  191.645348][ T7428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.645359][ T7428] R13: 0000000000000000 R14: 00007fdea53b5fa0 R15: 00007ffce7f82ed8
[  191.645391][ T7428]  </TASK>
[  192.434331][ T7438] __nla_validate_parse: 2 callbacks suppressed
[  192.434351][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.406'.
[  192.935049][ T7453] tipc: New replicast peer: 255.255.255.255
[  193.007740][ T7453] tipc: Enabled bearer <udp:syz2>, priority 10
[  193.228890][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'.
[  194.095812][ T5966] tipc: Node number set to 3583005176
[  194.171569][ T7460] netlink: del zone limit has 4 unknown bytes
[  194.399682][ T7470] netlink: 'syz.0.416': attribute type 12 has an invalid length.
[  194.436084][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'.
[  194.467365][ T7470] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.416'.
[  194.795850][ T7482] bond1: (slave gretap1): Releasing active interface
[  194.879538][ T7482] team0: Port device batadv1 removed
[  194.889816][ T7485] netlink: 'syz.2.418': attribute type 1 has an invalid length.
[  194.950503][ T7485] netlink: 784 bytes leftover after parsing attributes in process `syz.2.418'.
[  195.004510][ T7476] syzkaller1: entered promiscuous mode
[  195.029025][ T7476] syzkaller1: entered allmulticast mode
[  196.125130][ T3010] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.154685][ T3010] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  196.411767][ T3010] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.422898][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'.
[  196.436895][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'.
[  196.455096][ T3010] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  197.432219][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'.
[  199.311785][ T3010] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.337597][ T3010] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  199.461025][ T3010] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.469906][ T3010] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  199.594969][ T7535] netlink: 'syz.4.433': attribute type 1 has an invalid length.
[  199.610998][ T7535] netlink: 'syz.4.433': attribute type 2 has an invalid length.
[  199.641200][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'.
[  199.739889][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  199.858603][ T7545] netlink: del zone limit has 4 unknown bytes
[  200.015982][ T7551] xt_policy: neither incoming nor outgoing policy selected
[  200.412320][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'.
[  200.528559][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'.
[  201.487240][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'.
[  201.599048][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'.
[  202.801772][ T7623] netlink: del zone limit has 4 unknown bytes
[  203.302620][ T7641] netlink: 'syz.4.463': attribute type 13 has an invalid length.
[  203.333529][ T7641] netlink: 'syz.4.463': attribute type 17 has an invalid length.
[  203.519608][ T7634] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  203.732712][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.757470][ T7641] 8021q: adding VLAN 0 to HW filter on device team0
[  203.807938][ T7641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.141895][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'.
[  204.224881][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'.
[  204.234713][ T7661] netlink: 'syz.1.472': attribute type 1 has an invalid length.
[  204.273433][ T7661] netlink: 784 bytes leftover after parsing attributes in process `syz.1.472'.
[  204.736322][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'.
[  204.782453][ T7672] netlink: 'syz.2.474': attribute type 1 has an invalid length.
[  204.873187][ T7672] netlink: 784 bytes leftover after parsing attributes in process `syz.2.474'.
[  205.069237][ T7678] netlink: del zone limit has 4 unknown bytes
[  205.312752][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'.
[  205.460600][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'.
[  205.480200][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'.
[  205.517737][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'.
[  205.567889][ T7687] netlink: 'syz.0.480': attribute type 1 has an invalid length.
[  205.602274][ T7687] netlink: 10 bytes leftover after parsing attributes in process `syz.0.480'.
[  205.625291][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'.
[  205.687345][ T7693] netlink: 796 bytes leftover after parsing attributes in process `syz.4.482'.
[  205.721916][ T7687] nbd: socks must be embedded in a SOCK_ITEM attr
[  205.732185][ T7687] block nbd1: shutting down sockets
[  205.840383][ T7695] netlink: 72 bytes leftover after parsing attributes in process `syz.3.483'.
[  206.268491][ T7703] batadv_slave_1: entered promiscuous mode
[  206.388091][ T7700] batadv_slave_1: left promiscuous mode
[  206.544626][ T7716] netlink: 'syz.1.486': attribute type 1 has an invalid length.
[  206.824251][ T7725] netlink: del zone limit has 4 unknown bytes
[  207.396764][ T7735] netlink: del zone limit has 4 unknown bytes
[  208.339351][ T7760] netlink: 'syz.3.504': attribute type 1 has an invalid length.
[  208.501228][ T7763] bond1: (slave geneve2): Releasing active interface
[  208.512049][ T7763] bond1: (slave geneve2): the permanent HWaddr of slave - 06:bc:d4:0e:e9:4b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  208.545847][ T7763] bond1: (slave ip6gretap1): making interface the new active one
[  208.583612][ T7763] bond1: (slave ip6gretap1): Releasing active interface
[  208.677072][ T7764] bond0: (slave geneve3): making interface the new active one
[  208.745994][ T7764] bond0: (slave geneve3): Enslaving as an active interface with an up link
[  208.799731][ T7777] netlink: del zone limit has 4 unknown bytes
[  208.884986][ T7760] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  208.953204][ T7767] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.002769][   T63] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  209.050463][   T63] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  209.111796][   T63] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  209.172597][   T63] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  209.244522][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.289085][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.345226][ T7781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.800412][ T7798] netlink: del zone limit has 4 unknown bytes
[  210.368367][ T7810] __nla_validate_parse: 10 callbacks suppressed
[  210.368390][ T7810] netlink: 784 bytes leftover after parsing attributes in process `syz.0.523'.
[  210.511430][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'.
[  210.621871][ T7817] bridge1: left promiscuous mode
[  210.626899][ T7817] bridge1: left allmulticast mode
[  210.675386][ T7817] macvtap1: left promiscuous mode
[  210.711967][ T7817] macvtap1: left allmulticast mode
[  210.865037][ T7821] xt_hashlimit: size too large, truncated to 1048576
[  211.185700][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'.
[  211.199005][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.529'.
[  211.696016][ T7851] netlink: 44 bytes leftover after parsing attributes in process `syz.4.533'.
[  212.166050][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'.
[  213.062144][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.547'.
[  213.109669][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.547'.
[  213.161768][ T7895] netlink: 'syz.2.545': attribute type 1 has an invalid length.
[  213.273657][ T7895] netlink: 784 bytes leftover after parsing attributes in process `syz.2.545'.
[  213.291959][ T7897] netlink: 784 bytes leftover after parsing attributes in process `syz.3.548'.
[  213.805139][ T7909] netlink: 'syz.0.549': attribute type 1 has an invalid length.
[  213.832161][ T7912] netlink: 'syz.4.552': attribute type 1 has an invalid length.
[  214.318709][ T7927] netlink: del zone limit has 4 unknown bytes
[  215.232757][ T7949] batman_adv: batadv0: Adding interface: dummy0
[  215.274316][ T7947] nbd: couldn't find a device at index 65546
[  215.283982][ T7949] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.400153][ T7949] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  215.454316][ T7956] __nla_validate_parse: 9 callbacks suppressed
[  215.454338][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'.
[  215.617904][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'.
[  215.652628][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'.
[  215.960040][ T7968] netlink: 784 bytes leftover after parsing attributes in process `syz.2.565'.
[  215.960139][ T7963] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  216.004224][ T7965] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  216.296910][ T7972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.566'.
[  217.209984][ T7991] netlink: del zone limit has 4 unknown bytes
[  217.299864][ T7993] netlink: del zone limit has 4 unknown bytes
[  217.496252][ T7997] netlink: 248 bytes leftover after parsing attributes in process `syz.3.575'.
[  217.957187][ T8007] netlink: 784 bytes leftover after parsing attributes in process `syz.2.579'.
[  218.191816][ T8012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.582'.
[  218.774189][ T8027] netlink: del zone limit has 4 unknown bytes
[  218.803165][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'.
[  220.280453][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'.
[  220.696382][ T8059] __nla_validate_parse: 1 callbacks suppressed
[  220.696403][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'.
[  221.388027][ T8069] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  221.937785][ T8088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.602'.
[  222.346951][ T8095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.464777][ T8095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.577537][ T8095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.685784][ T8095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.857689][ T3010] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.872293][ T3010] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.923150][ T1151] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.955501][   T63] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.145450][ T7910] Set syz1 is full, maxelem 65536 reached
[  223.632408][   T30] audit: type=1800 audit(1752502867.348:3): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.610" name="memory.events" dev="tmpfs" ino=585 res=0 errno=0
[  224.314175][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'.
[  224.365925][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'.
[  224.383252][ T8133] macvtap1: entered promiscuous mode
[  224.429491][ T8133] team0: entered promiscuous mode
[  224.470308][ T8133] macvtap1: entered allmulticast mode
[  224.506136][ T8133] team0: entered allmulticast mode
[  224.532278][ T8133] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  224.655102][ T8136] team0: left allmulticast mode
[  224.694764][ T8136] team0: left promiscuous mode
[  225.591209][ T8171] wireguard0: entered promiscuous mode
[  225.635341][ T8171] wireguard0: entered allmulticast mode
[  225.729408][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[  225.770022][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'.
[  225.807565][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'.
[  225.819791][ T1135] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  225.820764][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'.
[  225.856002][ T1135] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  225.898003][ T1135] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  225.920302][ T1135] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.598844][ T8197] syzkaller1: entered promiscuous mode
[  226.608191][ T8197] syzkaller1: entered allmulticast mode
[  226.625209][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'.
[  226.788696][ T8199] netlink: del zone limit has 4 unknown bytes
[  227.421573][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  227.424556][ T5859] Bluetooth: hci1: command 0x0406 tx timeout
[  227.429240][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  228.658350][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'.
[  229.097432][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'.
[  229.255916][ T8250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.649'.
[  229.268245][ T8250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.649'.
[  229.272089][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'.
[  229.438284][ T8252] netlink: del zone limit has 4 unknown bytes
[  229.517637][ T8250] bridge0: entered promiscuous mode
[  229.544325][ T8250] erspan0: entered promiscuous mode
[  229.552815][ T8250] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  229.561917][ T8250] Cannot create hsr debugfs directory
[  229.567862][ T8250] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  229.596552][   T30] audit: type=1800 audit(1752502873.308:4): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.645" name="memory.events" dev="tmpfs" ino=726 res=0 errno=0
[  230.188075][ T8266] netlink: del zone limit has 4 unknown bytes
[  230.287357][ T8267] syzkaller0: entered promiscuous mode
[  230.297616][ T8267] syzkaller0: entered allmulticast mode
[  231.391570][ T8283] __nla_validate_parse: 1 callbacks suppressed
[  231.391591][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'.
[  232.656639][ T8316] netlink: 'syz.0.666': attribute type 1 has an invalid length.
[  232.700821][ T8316] netlink: 784 bytes leftover after parsing attributes in process `syz.0.666'.
[  234.235345][ T8327] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  234.329861][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'.
[  234.381444][ T8328] tipc: Disabling bearer <udp:syz2>
[  236.088357][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'.
[  236.139189][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'.
[  236.152189][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'.
[  236.152220][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'.
[  236.152237][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'.
[  236.152253][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'.
[  236.152269][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'.
[  236.636736][ T8348] syzkaller0: entered promiscuous mode
[  236.841512][ T8348] syzkaller0: entered allmulticast mode
[  236.942561][ T8353] __nla_validate_parse: 72 callbacks suppressed
[  236.943005][ T8353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'.
[  237.345158][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  237.556204][ T8372] netlink: 'syz.4.677': attribute type 1 has an invalid length.
[  237.596328][ T8372] netlink: 784 bytes leftover after parsing attributes in process `syz.4.677'.
[  237.768396][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'.
[  238.379603][ T8383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.685'.
[  238.511781][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'.
[  238.673655][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'.
[  239.043026][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'.
[  239.082631][ T8413] syzkaller0: entered promiscuous mode
[  239.089184][ T8413] syzkaller0: entered allmulticast mode
[  240.379745][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'.
[  240.722970][   T30] audit: type=1800 audit(1752502884.438:5): pid=8424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.698" name="memory.events" dev="tmpfs" ino=799 res=0 errno=0
[  242.598904][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'.
[  242.842946][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'.
[  243.276113][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'.
[  243.649792][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'.
[  243.772140][ T8482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.717'.
[  244.376966][ T8492] netlink: del zone limit has 4 unknown bytes
[  244.676317][ T8498] netlink: 'syz.2.723': attribute type 1 has an invalid length.
[  244.768173][ T8498] netlink: 784 bytes leftover after parsing attributes in process `syz.2.723'.
[  244.804676][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'.
[  245.008840][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'.
[  245.982314][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'.
[  247.094898][ T8527] netlink: del zone limit has 4 unknown bytes
[  247.207151][ T8531] netlink: del zone limit has 4 unknown bytes
[  247.222088][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'.
[  247.603075][ T8544] tipc: New replicast peer: 255.255.255.255
[  247.648631][ T8544] tipc: Enabled bearer <udp:syz2>, priority 10
[  247.741509][ T8547] __nla_validate_parse: 1 callbacks suppressed
[  247.741530][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.736'.
[  247.852159][ T8547] tipc: Disabling bearer <udp:syz2>
[  248.643556][ T8552] netlink: 48 bytes leftover after parsing attributes in process `syz.3.741'.
[  248.677221][ T8552] netlink: 48 bytes leftover after parsing attributes in process `syz.3.741'.
[  249.570919][ T5858] Bluetooth: hci4: command 0x0405 tx timeout
[  250.307034][ T8579] netlink: del zone limit has 4 unknown bytes
[  250.545679][ T8584] netlink: del zone limit has 4 unknown bytes
[  250.807436][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'.
[  251.107887][ T8590] netlink: 'syz.0.752': attribute type 1 has an invalid length.
[  251.246417][ T8590] 8021q: adding VLAN 0 to HW filter on device bond1
[  251.325367][ T8594] 8021q: adding VLAN 0 to HW filter on device bond1
[  251.362755][ T8594] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  251.383049][ T8594] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  251.752869][ T8597] gretap1: entered promiscuous mode
[  251.788004][ T8597] bond1: (slave gretap1): making interface the new active one
[  251.833183][ T8597] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  251.944005][ T8590] macvlan2: entered promiscuous mode
[  252.000309][ T8590] macvlan2: entered allmulticast mode
[  252.019765][ T8590] bond1: entered promiscuous mode
[  252.041921][ T8590] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  252.098784][ T8590] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  252.149932][ T8610] netlink: 'syz.2.757': attribute type 1 has an invalid length.
[  252.177832][ T8590] bond1: left promiscuous mode
[  252.186899][ T8610] netlink: 784 bytes leftover after parsing attributes in process `syz.2.757'.
[  252.696921][ T8621] netlink: del zone limit has 4 unknown bytes
[  252.947528][ T8625] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.050987][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'.
[  253.362719][ T8625] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.425232][ T8630] tipc: New replicast peer: 255.255.255.255
[  253.448360][ T8630] tipc: Enabled bearer <udp:syz2>, priority 10
[  253.492904][ T8625] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.631530][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'.
[  253.712775][ T8632] tipc: Disabling bearer <udp:syz2>
[  253.935977][ T8625] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.333832][   T63] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.394903][ T3010] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.485894][   T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.578356][   T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.854402][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'.
[  254.962427][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'.
[  255.087313][ T8655] netlink: del zone limit has 4 unknown bytes
[  255.152773][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.773'.
[  255.481807][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'.
[  255.787844][ T8670] netlink: 'syz.3.781': attribute type 1 has an invalid length.
[  255.936508][ T8670] 8021q: adding VLAN 0 to HW filter on device bond2
[  256.173287][ T8674] 8021q: adding VLAN 0 to HW filter on device bond2
[  256.221423][ T8674] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  256.271999][ T8674] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  256.314973][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'.
[  256.436520][ T8670] macvlan0: entered promiscuous mode
[  256.446968][ T8670] macvlan0: entered allmulticast mode
[  256.458662][ T8670] bond2: entered promiscuous mode
[  256.467442][ T8670] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  256.483445][ T8670] bond2: left promiscuous mode
[  256.518132][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'.
[  256.683187][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.789'.
[  256.729339][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'.
[  257.415726][ T8718] netlink: del zone limit has 4 unknown bytes
[  257.646404][ T8724] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  257.814512][ T8724] netlink: 'syz.2.800': attribute type 10 has an invalid length.
[  257.829489][ T8724] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  257.919093][ T8724] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  258.054782][ T8737] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  258.378393][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'.
[  258.472028][ T5862] Bluetooth: hci4: link tx timeout
[  258.479160][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  258.495936][ T8747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.808'.
[  258.539067][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  258.557407][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'.
[  258.617617][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  258.697067][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  258.757230][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  258.804602][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  258.819711][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  258.837295][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'.
[  258.997475][ T8763] netlink: del zone limit has 4 unknown bytes
[  259.518419][ T8778] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  259.533345][ T8778] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  259.602658][ T8785] netlink: 'syz.1.821': attribute type 1 has an invalid length.
[  259.621970][ T8786] netlink: 'syz.0.819': attribute type 1 has an invalid length.
[  259.886773][ T8778] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  259.929085][ T8778] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  260.028497][ T8785] 8021q: adding VLAN 0 to HW filter on device bond2
[  260.083542][ T8778] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  260.130864][ T8778] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  260.254389][ T8789] 8021q: adding VLAN 0 to HW filter on device bond2
[  260.270094][ T8796] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  260.297682][ T8789] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  260.317283][ T8789] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  260.417814][ T8791] gretap1: entered promiscuous mode
[  260.447311][ T8791] bond2: (slave gretap1): making interface the new active one
[  260.474244][ T8791] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  260.494975][ T8800] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  260.505497][ T8792] macvlan2: entered promiscuous mode
[  260.512155][ T8792] macvlan2: entered allmulticast mode
[  260.519215][ T8792] bond2: entered promiscuous mode
[  260.527126][ T8792] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  260.537669][ T5862] Bluetooth: hci4: command 0x0405 tx timeout
[  260.550171][ T8792] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  260.595766][ T8792] bond2: left promiscuous mode
[  260.647587][ T8802] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  260.659472][ T8778] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 41156 - 0
[  260.677632][ T8778] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  260.942398][ T8810] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  260.956152][ T8809] netlink: del zone limit has 4 unknown bytes
[  261.115149][ T3010] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  261.122663][ T8818] netlink: del zone limit has 4 unknown bytes
[  261.154661][ T3010] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 41156 - 0
[  261.207969][ T3010] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  261.246957][ T3010] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 41156 - 0
[  261.506511][ T3010] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  261.524451][ T3010] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 41156 - 0
[  261.591633][   T63] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  261.613284][   T63] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 41156 - 0
[  262.079796][ T8846] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  262.326464][ T8853] netlink: del zone limit has 4 unknown bytes
[  262.463772][ T8855] geneve2: entered promiscuous mode
[  262.494122][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.516912][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.580482][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.613553][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.109110][ T8888] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.149650][ T8888] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.349589][ T8888] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.381741][ T8888] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.527953][ T8888] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.548768][ T8888] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.653924][ T8888] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.697761][ T8888] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.725793][ T8912] __nla_validate_parse: 78 callbacks suppressed
[  264.725816][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'.
[  265.053758][ T1135] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  265.068875][ T1135] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.087925][ T1135] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  265.096862][ T8920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'.
[  265.103785][ T1135] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.125778][ T8919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.868'.
[  265.154751][ T1135] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  265.172064][ T1135] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.221198][ T3010] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  265.262693][ T3010] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.305864][ T8924] netlink: del zone limit has 4 unknown bytes
[  266.084515][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'.
[  266.106306][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'.
[  266.213088][ T3010] wlan0: Trigger new scan to find an IBSS to join
[  266.337333][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'.
[  266.577471][ T8970] netlink: del zone limit has 4 unknown bytes
[  266.866042][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.889'.
[  266.995799][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'.
[  267.257694][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'.
[  267.286457][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'.
[  267.307750][ T8991] xt_hashlimit: size too large, truncated to 1048576
[  270.333954][ T9069] __nla_validate_parse: 7 callbacks suppressed
[  270.333978][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'.
[  270.402262][ T9067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.921'.
[  270.786953][ T9082] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  271.049726][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'.
[  271.242078][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'.
[  271.256017][   T63] wlan0: Trigger new scan to find an IBSS to join
[  271.831598][ T9101] IPVS: Scheduler module ip_vs_sip not found
[  271.898668][ T9105] IPVS: length: 8 != 446622349272
[  272.033696][ T9113] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  272.147631][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'.
[  272.342435][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.104353][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[  273.276649][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[  273.495182][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'.
[  273.659249][ T9155] netlink: 'syz.4.943': attribute type 12 has an invalid length.
[  273.710469][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'.
[  273.762857][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'.
[  274.096543][ T9122] smc: removing ib device syz2
[  275.608971][ T9207] __nla_validate_parse: 83 callbacks suppressed
[  275.608993][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'.
[  276.155725][ T9217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.970'.
[  276.192765][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'.
[  278.411999][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'.
[  278.431725][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'.
[  278.452668][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'.
[  278.473273][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'.
[  278.556082][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'.
[  278.591364][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'.
[  278.616203][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'.
[  278.921162][ T9245] geneve4: entered promiscuous mode
[  278.999624][ T1151] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  279.049403][ T1151] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  279.104999][ T1151] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  279.154482][ T1151] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  279.514798][ T9254] netlink: del zone limit has 4 unknown bytes
[  280.633777][ T9289] __nla_validate_parse: 78 callbacks suppressed
[  280.633795][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  280.671375][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  280.687235][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  280.698241][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  280.731091][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  280.744862][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  280.756231][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  280.771887][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  280.785237][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  280.860497][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  281.136824][ T9297] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.251344][ T9297] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.385208][ T9297] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.567488][ T9297] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.066508][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.108997][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.195140][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.259637][ T1151] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.499507][ T9325] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  282.689340][ T9333] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  285.898753][ T9357] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  285.925671][ T9357] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 41156 - 0
[  285.939652][ T9357] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  286.112214][ T9357] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  286.124102][ T9357] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 41156 - 0
[  286.143502][ T9357] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  286.235759][ T9357] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  286.250562][ T9357] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 41156 - 0
[  286.291451][ T9357] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  286.391289][ T9357] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  286.412292][ T9357] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 41156 - 0
[  286.463078][ T9357] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  286.560776][ T9372] __nla_validate_parse: 85 callbacks suppressed
[  286.560798][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'.
[  286.866338][ T1135] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.883588][ T1135] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  286.894445][ T1135] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 41156 - 0
[  287.022520][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'.
[  287.036993][ T1135] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.061532][ T1135] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  287.070041][ T1135] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 41156 - 0
[  287.125333][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'.
[  287.159392][ T1135] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.193182][ T1135] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  287.229477][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'.
[  287.233024][ T1135] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 41156 - 0
[  287.300233][ T1135] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.338973][ T1135] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  287.369565][ T1135] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 41156 - 0
[  288.142861][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1036'.
[  288.594798][ T9424] netlink: 'syz.3.1042': attribute type 1 has an invalid length.
[  288.644870][ T9424] netlink: 784 bytes leftover after parsing attributes in process `syz.3.1042'.
[  289.040142][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'.
[  289.236298][ T9436] bond2: (slave gretap1): Releasing active interface
[  289.636022][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1049'.
[  290.027758][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1056'.
[  290.039647][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'.
[  290.820540][ T9484] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  290.862120][ T9484] bond0: (slave wlan1): Releasing backup interface
[  290.916475][ T9484] netlink: 'syz.2.1063': attribute type 10 has an invalid length.
[  290.962439][ T9484] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  290.987929][ T9484] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  291.487423][ T9496] gretap1: left promiscuous mode
[  291.558058][ T9496] geneve2: left promiscuous mode
[  291.663651][   T63] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.710846][   T63] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.719293][   T63] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.770855][   T63] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.957433][ T9512] __nla_validate_parse: 4 callbacks suppressed
[  291.957456][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'.
[  292.257515][ T9517] netlink: del zone limit has 4 unknown bytes
[  292.565041][ T9519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1073'.
[  293.559206][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'.
[  293.787232][ T9548] batman_adv: batadv0: Removing interface: dummy0
[  293.817340][ T9548] bond1: (slave gretap1): Releasing active interface
[  294.684985][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'.
[  295.005575][ T9542] xt_CT: No such helper "snmp"
[  295.262253][ T9582] netlink: del zone limit has 4 unknown bytes
[  295.681546][ T9587] netlink: 'syz.0.1089': attribute type 1 has an invalid length.
[  295.689340][ T9587] nbd: error processing sock list
[  295.708666][ T9587] block nbd1: shutting down sockets
[  295.753186][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'.
[  295.863968][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'.
[  296.020092][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'.
[  296.469083][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'.
[  296.739833][ T9627] netlink: del zone limit has 4 unknown bytes
[  297.148877][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'.
[  297.287168][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'.
[  297.339853][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'.
[  297.853587][ T9655] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) !
[  299.769171][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'.
[  300.148137][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1119'.
[  300.163690][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'.
[  300.201783][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'.
[  300.367696][ T9698] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) !
[  300.596532][ T9709] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1124'.
[  302.031661][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'.
[  302.181155][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'.
[  302.464447][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'.
[  302.524213][ T9746] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) !
[  304.702269][   T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  305.421422][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'.
[  305.622592][ T9788] netlink: del zone limit has 4 unknown bytes
[  305.868027][ T9792] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) !
[  306.167170][ T9799] netlink: 'syz.3.1152': attribute type 10 has an invalid length.
[  306.347196][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'.
[  306.430413][ T9806] netlink: del zone limit has 4 unknown bytes
[  306.436708][   T30] audit: type=1800 audit(1752502950.158:6): pid=9808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1155" name="memory.events" dev="tmpfs" ino=1131 res=0 errno=0
[  306.703387][ T9785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1147'.
[  306.718597][ T9785] netlink: 'syz.1.1147': attribute type 12 has an invalid length.
[  308.049945][ T9829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1160'.
[  308.363899][ T9835] syz.0.1162: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  308.412398][ T9835] CPU: 1 UID: 0 PID: 9835 Comm: syz.0.1162 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) 
[  308.412432][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  308.412460][ T9835] Call Trace:
[  308.412470][ T9835]  <TASK>
[  308.412480][ T9835]  dump_stack_lvl+0x189/0x250
[  308.412517][ T9835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.412543][ T9835]  ? __pfx__printk+0x10/0x10
[  308.412571][ T9835]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  308.412600][ T9835]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  308.412635][ T9835]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  308.412664][ T9835]  warn_alloc+0x214/0x310
[  308.412701][ T9835]  ? stack_depot_save_flags+0x40/0x900
[  308.412735][ T9835]  ? __pfx_warn_alloc+0x10/0x10
[  308.412765][ T9835]  ? kasan_save_track+0x4f/0x80
[  308.412789][ T9835]  ? xskq_create+0x56/0x170
[  308.412813][ T9835]  ? xsk_init_queue+0xb0/0x110
[  308.412835][ T9835]  ? xsk_setsockopt+0x4dc/0x8d0
[  308.412857][ T9835]  ? do_sock_setsockopt+0x257/0x3e0
[  308.412887][ T9835]  ? __x64_sys_setsockopt+0x18b/0x220
[  308.412916][ T9835]  ? do_syscall_64+0xfa/0x3b0
[  308.412944][ T9835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.412974][ T9835]  __vmalloc_node_range_noprof+0x125/0x12f0
[  308.413055][ T9835]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  308.413092][ T9835]  ? __kasan_kmalloc+0x93/0xb0
[  308.413120][ T9835]  vmalloc_user_noprof+0xad/0xf0
[  308.413148][ T9835]  ? xskq_create+0xbf/0x170
[  308.413176][ T9835]  xskq_create+0xbf/0x170
[  308.413206][ T9835]  xsk_init_queue+0xb0/0x110
[  308.413235][ T9835]  xsk_setsockopt+0x4dc/0x8d0
[  308.413264][ T9835]  ? __pfx_xsk_setsockopt+0x10/0x10
[  308.413288][ T9835]  ? __pfx_aa_sk_perm+0x10/0x10
[  308.413315][ T9835]  ? __lock_acquire+0xab9/0xd20
[  308.413344][ T9835]  ? aa_sock_opt_perm+0x74/0x110
[  308.413377][ T9835]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  308.413408][ T9835]  ? __pfx_xsk_setsockopt+0x10/0x10
[  308.413434][ T9835]  do_sock_setsockopt+0x257/0x3e0
[  308.413470][ T9835]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  308.413507][ T9835]  ? __fget_files+0x2a/0x420
[  308.413542][ T9835]  __x64_sys_setsockopt+0x18b/0x220
[  308.413584][ T9835]  do_syscall_64+0xfa/0x3b0
[  308.413610][ T9835]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.413635][ T9835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.413655][ T9835]  ? clear_bhb_loop+0x60/0xb0
[  308.413686][ T9835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.413706][ T9835] RIP: 0033:0x7f0da3b8e929
[  308.413726][ T9835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.413745][ T9835] RSP: 002b:00007f0da4a83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  308.413768][ T9835] RAX: ffffffffffffffda RBX: 00007f0da3db6080 RCX: 00007f0da3b8e929
[  308.413783][ T9835] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  308.413796][ T9835] RBP: 00007f0da3c10b39 R08: 0000000000000004 R09: 0000000000000000
[  308.413809][ T9835] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.413823][ T9835] R13: 0000000000000000 R14: 00007f0da3db6080 R15: 00007ffe0ac65ee8
[  308.413875][ T9835]  </TASK>
[  308.814494][ T9835] Mem-Info:
[  308.817697][ T9835] active_anon:4841 inactive_anon:0 isolated_anon:0
[  308.817697][ T9835]  active_file:1361 inactive_file:39935 isolated_file:0
[  308.817697][ T9835]  unevictable:768 dirty:468 writeback:0
[  308.817697][ T9835]  slab_reclaimable:11243 slab_unreclaimable:135692
[  308.817697][ T9835]  mapped:29450 shmem:1368 pagetables:1032
[  308.817697][ T9835]  sec_pagetables:0 bounce:0
[  308.817697][ T9835]  kernel_misc_reclaimable:0
[  308.817697][ T9835]  free:1289070 free_pcp:19014 free_cma:0
[  309.067571][ T9835] Node 0 active_anon:19764kB inactive_anon:0kB active_file:5444kB inactive_file:159536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117900kB dirty:1868kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12340kB pagetables:4092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  309.252687][ T9834] Bluetooth: MGMT ver 1.23
[  309.294142][ T9835] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  309.492668][ T9835] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  309.600086][ T9835] lowmem_reserve[]: 0 2498 2499 2499 2499
[  309.650991][ T9835] Node 0 DMA32 free:1237232kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25208kB inactive_anon:0kB active_file:5444kB inactive_file:157956kB unevictable:1536kB writepending:1880kB present:3129332kB managed:2558272kB mlocked:0kB bounce:0kB free_pcp:53080kB local_pcp:22844kB free_cma:0kB
[  309.721769][ T9835] lowmem_reserve[]: 0 0 1 1 1
[  309.737600][ T9835] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  309.818358][ T9835] lowmem_reserve[]: 0 0 0 0 0
[  309.834263][ T9835] Node 1 Normal free:3898408kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18912kB local_pcp:8832kB free_cma:0kB
[  309.876934][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1165'.
[  309.907068][ T9835] lowmem_reserve[]: 0 0 0 0 0
[  309.934496][ T9835] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  309.991670][ T9835] Node 0 DMA32: 1110*4kB (M) 1277*8kB (UME) 791*16kB (UME) 736*32kB (UME) 319*64kB (UM) 145*128kB (UME) 70*256kB (UME) 21*512kB (UM) 13*1024kB (UM) 3*2048kB (UE) 268*4096kB (UM) = 1235696kB
[  310.041476][ T9835] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  310.077672][ T9835] Node 1 Normal: 216*4kB (UME) 65*8kB (UME) 47*16kB (UME) 145*32kB (UME) 44*64kB (UME) 10*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3898488kB
[  310.099152][ T9835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  310.109760][ T9835] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  310.120289][ T9835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  310.130756][ T9835] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  310.140329][ T9835] 45505 total pagecache pages
[  310.195140][ T9835] 0 pages in swap cache
[  310.199473][ T9835] Free swap  = 124996kB
[  310.204688][ T9835] Total swap = 124996kB
[  310.208883][ T9835] 2097051 pages RAM
[  310.216110][ T9835] 0 pages HighMem/MovableOnly
[  310.221742][ T9835] 425441 pages reserved
[  310.226241][ T9835] 0 pages cma reserved
[  310.521930][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'.
[  310.686231][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'.
[  310.695711][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'.
[  310.706022][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'.
[  310.730964][ T9856] veth0_to_team: entered promiscuous mode
[  310.737129][ T9856] veth0_to_team: entered allmulticast mode
[  310.744506][ T9856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1166'.
[  311.017974][ T9862] netlink: del zone limit has 4 unknown bytes
[  311.278505][ T9764] Set syz1 is full, maxelem 65536 reached
[  311.333465][ T9867] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1170'.
[  311.463377][ T9871] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  311.763344][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1173'.
[  311.859752][ T9878] bridge3: port 1(ip6gretap0) entered blocking state
[  311.885709][ T9878] bridge3: port 1(ip6gretap0) entered disabled state
[  311.915993][ T9878] ip6gretap0: entered allmulticast mode
[  311.952877][ T9878] ip6gretap0: entered promiscuous mode
[  312.037574][ T9882] TCP: TCP_TX_DELAY enabled
[  312.063413][ T9877] veth3: entered promiscuous mode
[  312.078766][ T9877] bridge3: port 2(veth3) entered blocking state
[  312.102105][ T9877] bridge3: port 2(veth3) entered disabled state
[  312.119783][ T9877] veth3: entered allmulticast mode
[  312.481158][   T43] tipc: Node number set to 4189581878
[  312.676178][ T9894] tipc: Resetting bearer <ib:ip6gre0>
[  312.707053][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'.
[  312.752917][ T9893] netlink: del zone limit has 4 unknown bytes
[  312.953524][ T9902] ip6gretap0: left allmulticast mode
[  312.969190][ T9902] ip6gretap0: left promiscuous mode
[  312.985627][ T9902] bridge3: port 1(ip6gretap0) entered disabled state
[  313.016140][ T9902] veth3: left allmulticast mode
[  313.031828][ T9902] veth3: left promiscuous mode
[  313.049184][ T9902] bridge3: port 2(veth3) entered disabled state
[  314.823313][ T9941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.860359][ T9941] syzkaller0: entered promiscuous mode
[  314.880120][ T9941] syzkaller0: entered allmulticast mode
[  314.929134][ T9941] tipc: Resetting bearer <eth:syzkaller0>
[  314.957084][ T9940] tipc: Resetting bearer <eth:syzkaller0>
[  315.022142][ T9940] tipc: Disabling bearer <eth:syzkaller0>
[  315.190549][ T9957] __nla_validate_parse: 1 callbacks suppressed
[  315.197536][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'.
[  315.288564][ T9963] netlink: 'syz.2.1198': attribute type 10 has an invalid length.
[  315.736311][ T9978] netlink: 'syz.1.1199': attribute type 16 has an invalid length.
[  315.744789][ T9978] netlink: 'syz.1.1199': attribute type 17 has an invalid length.
[  315.864689][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1203'.
[  315.877266][ T9984] IPv6: NLM_F_REPLACE set, but no existing node found!
[  315.926231][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'.
[  316.079978][ T9986] netlink: del zone limit has 4 unknown bytes
[  316.159895][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'.
[  316.455230][   T30] audit: type=1800 audit(1752502960.168:7): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1210" name="memory.events" dev="tmpfs" ino=1313 res=0 errno=0
[  316.695529][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'.
[  316.942279][T10017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1212'.
[  316.953542][T10017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1212'.
[  317.100505][T10022] netlink: 'syz.0.1214': attribute type 10 has an invalid length.
[  317.431481][T10006] mpoa:mpoad_close: (<unknown>) going down
[  317.724819][T10038] netlink: del zone limit has 4 unknown bytes
[  318.220340][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'.
[  318.255962][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'.
[  318.307602][T10054] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1222'.
[  318.403225][T10051] tap0: tun_chr_ioctl cmd 1074025677
[  318.409187][T10051] tap0: linktype set to 823
[  318.670154][T10069] netlink: 'syz.1.1228': attribute type 282 has an invalid length.
[  319.102549][T10075] netlink: del zone limit has 4 unknown bytes
[  319.618741][   T30] audit: type=1800 audit(1752502963.328:8): pid=10088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1235" name="memory.events" dev="tmpfs" ino=1308 res=0 errno=0
[  319.851534][T10095] netlink: 'syz.0.1237': attribute type 1 has an invalid length.
[  320.225383][T10106] __nla_validate_parse: 9 callbacks suppressed
[  320.225404][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'.
[  320.288163][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'.
[  320.424144][T10110] netlink: del zone limit has 4 unknown bytes
[  320.570707][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'.
[  320.608645][T10116] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  320.667525][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'.
[  320.825464][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'.
[  320.885492][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'.
[  321.059489][T10131] IPv6: syztnl1: Disabled Multicast RS
[  321.115882][T10133] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1250'.
[  321.126103][T10133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1250'.
[  321.928931][T10154] netlink: del zone limit has 4 unknown bytes
[  322.362322][T10169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1261'.
[  322.394994][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'.
[  323.029948][T10184] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.091549][T10186] netlink: del zone limit has 4 unknown bytes
[  325.647535][T10227] netlink: del zone limit has 4 unknown bytes
[  326.204589][T10252] __nla_validate_parse: 5 callbacks suppressed
[  326.204612][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'.
[  326.653187][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1290'.
[  326.668335][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'.
[  326.982221][T10265] x_tables: duplicate underflow at hook 2
[  327.054722][T10265] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1293'.
[  327.119032][T10266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1292'.
[  327.462317][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'.
[  327.537323][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'.
[  327.542276][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1297'.
[  327.573338][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'.
[  327.756222][T10289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1301'.
[  328.592384][T10310] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  328.923797][T10317] bpq0: left promiscuous mode
[  328.931303][T10317] bpq0: left allmulticast mode
[  329.306201][T10330] netlink: 'syz.1.1315': attribute type 1 has an invalid length.
[  329.392620][T10330] nbd: socks must be embedded in a SOCK_ITEM attr
[  329.400006][T10330] block nbd1: shutting down sockets
[  329.815023][T10348] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.846784][T10348] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.941523][T10348] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.952769][T10348] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.011577][T10348] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.023286][T10348] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.097753][T10348] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.108026][T10348] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.202200][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  330.233154][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.252302][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  330.271010][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.312969][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  330.329286][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.352319][   T34] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  330.361804][   T34] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.714686][T10362] vlan2: entered promiscuous mode
[  330.758265][T10362] vlan2: entered allmulticast mode
[  330.773942][T10362] hsr_slave_1: entered allmulticast mode
[  330.935916][T10373] netlink: 'syz.2.1330': attribute type 11 has an invalid length.
[  330.955423][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.978608][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.893028][T10406] netlink: 'syz.4.1339': attribute type 16 has an invalid length.
[  331.920745][T10406] netlink: 'syz.4.1339': attribute type 17 has an invalid length.
[  332.005043][T10408] __nla_validate_parse: 16 callbacks suppressed
[  332.005062][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'.
[  332.041065][T10406] IPv6: NLM_F_REPLACE set, but no existing node found!
[  332.149796][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'.
[  332.942762][T10435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1345'.
[  332.958238][T10435] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1345'.
[  333.362427][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'.
[  333.492260][ T5862] Bluetooth: hci4: command 0x0405 tx timeout
[  333.881474][T10454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1353'.
[  334.182358][T10464] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  334.365121][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'.
[  334.411452][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1361'.
[  334.738821][T10480] wg1 speed is unknown, defaulting to 1000
[  334.762260][T10480] wg1 speed is unknown, defaulting to 1000
[  334.769045][T10480] wg1 speed is unknown, defaulting to 1000
[  334.770290][T10486] x_tables: duplicate underflow at hook 1
[  334.844967][T10480] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  334.901395][T10490] wg1 speed is unknown, defaulting to 1000
[  334.931465][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'.
[  335.020646][T10480] wg1 speed is unknown, defaulting to 1000
[  335.037909][T10496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1367'.
[  335.057179][T10480] wg1 speed is unknown, defaulting to 1000
[  335.072858][T10480] wg1 speed is unknown, defaulting to 1000
[  335.155384][T10480] wg1 speed is unknown, defaulting to 1000
[  335.224636][T10480] wg1 speed is unknown, defaulting to 1000
[  336.392617][T10534] macvtap1: mtu less than device minimum
[  336.423483][T10534] Set syz1 is full, maxelem 0 reached
[  336.691219][   T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  337.120499][T10561] wg1 speed is unknown, defaulting to 1000
[  337.285608][T10565] wg1 speed is unknown, defaulting to 1000
[  338.104704][T10586] __nla_validate_parse: 6 callbacks suppressed
[  338.104729][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'.
[  338.191558][T10586] veth0: entered promiscuous mode
[  338.219668][T10586] veth0: left promiscuous mode
[  338.383433][T10593] bridge0: port 1(erspan0) entered blocking state
[  338.406189][T10593] bridge0: port 1(erspan0) entered disabled state
[  338.442073][T10593] erspan0: entered allmulticast mode
[  338.449635][T10593] erspan0: left allmulticast mode
[  338.738140][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1398'.
[  339.902519][T10629] netlink: 'syz.2.1405': attribute type 3 has an invalid length.
[  339.949003][T10629] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1405'.
[  340.334488][T10639] SET target dimension over the limit!
[  340.624153][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'.
[  340.727506][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'.
[  340.974894][T10654] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.138056][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1413'.
[  341.503716][T10669] netlink: 9896 bytes leftover after parsing attributes in process `syz.4.1418'.
[  341.594983][T10672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1419'.
[  341.697127][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'.
[  341.738375][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'.
[  342.884977][T10724] pimreg: left allmulticast mode
[  342.956977][T10728] rdma_rxe: rxe_newlink: failed to add lo
[  343.096596][T10728] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.116396][T10728] 8021q: adding VLAN 0 to HW filter on device team0
[  343.149210][T10728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  343.238219][T10734] __nla_validate_parse: 13 callbacks suppressed
[  343.238245][T10734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1444'.
[  343.349824][T10736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1445'.
[  343.521849][T10740] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  343.743339][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'.
[  343.920198][T10758] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.1454'.
[  343.939613][T10759] rdma_rxe: rxe_newlink: failed to add lo
[  344.190464][T10763] bridge11: entered allmulticast mode
[  344.258387][T10766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1457'.
[  344.608582][T10786] netlink: 'syz.1.1460': attribute type 4 has an invalid length.
[  344.655345][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'.
[  345.186092][T10798] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.1465'.
[  345.304190][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.318307][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.327613][T10803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.336150][T10803] syzkaller0: entered promiscuous mode
[  345.343941][T10803] syzkaller0: entered allmulticast mode
[  345.411966][T10803] tipc: Resetting bearer <eth:syzkaller0>
[  345.433488][T10800] tipc: Resetting bearer <eth:syzkaller0>
[  345.482988][T10800] tipc: Disabling bearer <eth:syzkaller0>
[  345.485290][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'.
[  345.521873][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'.
[  345.550216][T10799] wg1 speed is unknown, defaulting to 1000
[  345.586152][T10807] netlink: 'syz.3.1469': attribute type 21 has an invalid length.
[  345.596872][T10807] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1469'.
[  345.615366][T10807] netlink: 'syz.3.1469': attribute type 13 has an invalid length.
[  345.641536][T10807] netlink: 'syz.3.1469': attribute type 17 has an invalid length.
[  345.743855][T10810] wg1 speed is unknown, defaulting to 1000
[  345.973706][T10820] wg1 speed is unknown, defaulting to 1000
[  346.931375][    C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96
[  347.455269][T10863] wg1 speed is unknown, defaulting to 1000
[  348.209236][T10878] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  348.545340][T10890] __nla_validate_parse: 7 callbacks suppressed
[  348.545364][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1491'.
[  348.865014][T10901] tap0: tun_chr_ioctl cmd 1074025677
[  348.871927][T10901] tap0: linktype set to 0
[  349.535223][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'.
[  349.775010][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'.
[  349.784987][T10921] wg1 speed is unknown, defaulting to 1000
[  349.845541][T10920] macvtap2: entered promiscuous mode
[  349.853759][T10920] dummy0: entered promiscuous mode
[  349.863893][T10920] macvtap2: entered allmulticast mode
[  349.869504][T10920] dummy0: entered allmulticast mode
[  350.268547][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'.
[  350.820205][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'.
[  350.839172][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1513'.
[  351.000172][T10960] wg1 speed is unknown, defaulting to 1000
[  351.098773][T10970] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  351.983102][T10984] wg1 speed is unknown, defaulting to 1000
[  352.563864][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'.
[  353.041230][T11019] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1530'.
[  353.160790][T11022] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1531'.
[  353.193049][T11022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1531'.
[  353.994326][T11042] netlink: 'syz.3.1538': attribute type 1 has an invalid length.
[  354.045283][T11042] 8021q: adding VLAN 0 to HW filter on device bond3
[  354.146594][T11046] 8021q: adding VLAN 0 to HW filter on device bond3
[  354.192132][T11046] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  354.205762][T11046] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  354.289662][T11059] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1540'.
[  354.399388][T11062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1543'.
[  354.553002][T11068] Bluetooth: MGMT ver 1.23
[  355.929430][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'.
[  356.169290][T11123] tipc: New replicast peer: 255.255.255.255
[  356.189807][T11123] tipc: Enabled bearer <udp:syz2>, priority 10
[  356.239660][T11130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1562'.
[  356.283266][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'.
[  356.657461][T11138] wg1 speed is unknown, defaulting to 1000
[  357.188300][T11158] wg1 speed is unknown, defaulting to 1000
[  357.414385][T11168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1573'.
[  357.448446][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'.
[  358.028835][T11184] wg1 speed is unknown, defaulting to 1000
[  358.216433][T11182] wg1 speed is unknown, defaulting to 1000
[  358.516825][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'.
[  359.428858][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'.
[  359.451501][T11209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1585'.
[  359.452303][T11212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1586'.
[  359.517176][T11212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'.
[  359.695756][T11218] netlink: 'syz.0.1587': attribute type 1 has an invalid length.
[  359.820493][T11218] bond2: entered promiscuous mode
[  359.826674][T11218] 8021q: adding VLAN 0 to HW filter on device bond2
[  359.861621][T11225] netlink: 'syz.4.1590': attribute type 1 has an invalid length.
[  359.915395][T11221] bond2: (slave bridge12): making interface the new active one
[  359.936943][T11221] bridge12: entered promiscuous mode
[  359.958732][T11221] bond2: (slave bridge12): Enslaving as an active interface with an up link
[  360.048606][T11231] netlink: 'syz.2.1589': attribute type 303 has an invalid length.
[  360.099774][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'.
[  360.203494][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'.
[  360.625650][T11240] wg1 speed is unknown, defaulting to 1000
[  360.774816][T11257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1597'.
[  361.121864][T11270] netlink: 'syz.4.1602': attribute type 10 has an invalid length.
[  361.163625][T11270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1602'.
[  361.258028][T11270] bridge0: port 1(dummy0) entered blocking state
[  361.309489][T11270] bridge0: port 1(dummy0) entered disabled state
[  361.364736][T11270] dummy0: entered allmulticast mode
[  361.432711][T11270] dummy0: entered promiscuous mode
[  361.438767][T11270] bridge0: port 1(dummy0) entered blocking state
[  361.445347][T11270] bridge0: port 1(dummy0) entered forwarding state
[  361.613015][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'.
[  362.024637][T11280] wg1 speed is unknown, defaulting to 1000
[  362.343651][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1608'.
[  362.446194][T11297] bond0: (slave wlan1): Releasing backup interface
[  362.477719][T11297] bond0: Destroying bond
[  362.582762][T11312] netlink: 'syz.1.1612': attribute type 39 has an invalid length.
[  362.753962][T11297] bond0 (unregistering): Released all slaves
[  362.956194][T11315] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  363.003276][T11318] xt_policy: too many policy elements
[  363.090400][T11317] veth0: entered promiscuous mode
[  363.126186][T11317] veth0: left promiscuous mode
[  363.195334][T11320] vxcan2: entered promiscuous mode
[  363.255628][T11330] netlink: 'syz.2.1616': attribute type 16 has an invalid length.
[  363.265668][T11330] netlink: 'syz.2.1616': attribute type 17 has an invalid length.
[  363.364490][T11330] 8021q: adding VLAN 0 to HW filter on device team0
[  363.400133][T11330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  364.536631][T11364] __nla_validate_parse: 7 callbacks suppressed
[  364.536655][T11364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1630'.
[  364.565318][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1630'.
[  364.763505][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'.
[  365.050287][   T30] audit: type=1800 audit(1752503008.758:9): pid=11365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1628" name="memory.events" dev="tmpfs" ino=1650 res=0 errno=0
[  365.155618][T11381] vlan2: entered promiscuous mode
[  365.168042][T11381] veth0: entered promiscuous mode
[  365.602231][T11394] xt_CT: You must specify a L4 protocol and not use inversions on it
[  365.638543][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'.
[  365.692969][T11398] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1641'.
[  365.726410][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'.
[  365.736135][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1641'.
[  365.930489][T11405] netlink: 9896 bytes leftover after parsing attributes in process `syz.3.1644'.
[  366.139616][T11409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1646'.
[  366.165921][T11415] xt_hashlimit: size too large, truncated to 1048576
[  366.194256][T11416] netlink: 720 bytes leftover after parsing attributes in process `syz.1.1647'.
[  366.244545][T11416] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[  366.268760][T11416] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  366.335927][T11421] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  366.385110][T11421] CPU: 0 UID: 0 PID: 11421 Comm: syz.1.1647 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) 
[  366.385163][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  366.385181][T11421] Call Trace:
[  366.385190][T11421]  <TASK>
[  366.385200][T11421]  dump_stack_lvl+0x189/0x250
[  366.385237][T11421]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.385264][T11421]  ? __pfx__printk+0x10/0x10
[  366.385294][T11421]  ? kernfs_path_from_node+0x2c/0x260
[  366.385325][T11421]  ? kernfs_path_from_node+0x2c/0x260
[  366.385353][T11421]  ? kernfs_path_from_node+0x2c/0x260
[  366.385384][T11421]  ? kernfs_path_from_node+0x22c/0x260
[  366.385411][T11421]  ? kernfs_path_from_node+0x2c/0x260
[  366.385444][T11421]  sysfs_warn_dup+0x8e/0xa0
[  366.385473][T11421]  sysfs_do_create_link_sd+0xc0/0x110
[  366.385505][T11421]  device_add_class_symlinks+0x1cf/0x240
[  366.385538][T11421]  device_add+0x475/0xb50
[  366.385569][T11421]  wiphy_register+0x1ba6/0x28d0
[  366.385620][T11421]  ? __pfx_wiphy_register+0x10/0x10
[  366.385648][T11421]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  366.385678][T11421]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  366.385718][T11421]  ieee80211_register_hw+0x33e1/0x4120
[  366.385761][T11421]  ? ieee80211_register_hw+0x14b1/0x4120
[  366.385793][T11421]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  366.385820][T11421]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  366.385856][T11421]  ? __hrtimer_setup+0x187/0x210
[  366.385879][T11421]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  366.385924][T11421]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  366.385990][T11421]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  366.386019][T11421]  ? trace_kmalloc+0x1f/0xd0
[  366.386040][T11421]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  366.386065][T11421]  ? kstrndup+0xbf/0x160
[  366.386107][T11421]  hwsim_new_radio_nl+0xea4/0x1b10
[  366.386141][T11421]  ? __pfx___nla_validate_parse+0x10/0x10
[  366.386179][T11421]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  366.386212][T11421]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  366.386248][T11421]  ? __nla_parse+0x40/0x60
[  366.386273][T11421]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  366.386306][T11421]  genl_family_rcv_msg_doit+0x215/0x300
[  366.386338][T11421]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  366.386377][T11421]  ? bpf_lsm_capable+0x9/0x20
[  366.386400][T11421]  ? security_capable+0x7e/0x2e0
[  366.386439][T11421]  genl_rcv_msg+0x60e/0x790
[  366.386468][T11421]  ? __pfx_genl_rcv_msg+0x10/0x10
[  366.386489][T11421]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  366.386536][T11421]  netlink_rcv_skb+0x205/0x470
[  366.386566][T11421]  ? __pfx_genl_rcv_msg+0x10/0x10
[  366.386587][T11421]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  366.386635][T11421]  ? down_read+0x1ad/0x2e0
[  366.386668][T11421]  genl_rcv+0x28/0x40
[  366.386686][T11421]  netlink_unicast+0x75c/0x8e0
[  366.386723][T11421]  netlink_sendmsg+0x805/0xb30
[  366.386758][T11421]  ? __pfx_netlink_sendmsg+0x10/0x10
[  366.386786][T11421]  ? aa_sock_msg_perm+0x94/0x160
[  366.386813][T11421]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  366.386837][T11421]  ? __pfx_netlink_sendmsg+0x10/0x10
[  366.386861][T11421]  __sock_sendmsg+0x219/0x270
[  366.386892][T11421]  ____sys_sendmsg+0x505/0x830
[  366.386925][T11421]  ? __pfx_____sys_sendmsg+0x10/0x10
[  366.386963][T11421]  ? import_iovec+0x74/0xa0
[  366.386986][T11421]  ___sys_sendmsg+0x21f/0x2a0
[  366.387005][T11421]  ? __pfx____sys_sendmsg+0x10/0x10
[  366.387060][T11421]  ? __fget_files+0x2a/0x420
[  366.387084][T11421]  ? __fget_files+0x3a0/0x420
[  366.387119][T11421]  __x64_sys_sendmsg+0x19b/0x260
[  366.387137][T11421]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  366.387165][T11421]  ? do_user_addr_fault+0xc8a/0x1390
[  366.387187][T11421]  ? do_syscall_64+0xbe/0x3b0
[  366.387215][T11421]  do_syscall_64+0xfa/0x3b0
[  366.387238][T11421]  ? lockdep_hardirqs_on+0x9c/0x150
[  366.387260][T11421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.387279][T11421]  ? clear_bhb_loop+0x60/0xb0
[  366.387301][T11421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.387331][T11421] RIP: 0033:0x7fdea518e929
[  366.387350][T11421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.387369][T11421] RSP: 002b:00007fdea5f48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  366.387392][T11421] RAX: ffffffffffffffda RBX: 00007fdea53b6080 RCX: 00007fdea518e929
[  366.387409][T11421] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000006
[  366.387421][T11421] RBP: 00007fdea5210b39 R08: 0000000000000000 R09: 0000000000000000
[  366.387434][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  366.387445][T11421] R13: 0000000000000001 R14: 00007fdea53b6080 R15: 00007ffce7f82ed8
[  366.387476][T11421]  </TASK>
[  366.969142][T11429] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.986732][T11429] bridge0: port 1(bond0) entered blocking state
[  366.995665][T11429] bridge0: port 1(bond0) entered disabled state
[  367.003365][T11429] bond0: entered allmulticast mode
[  367.023901][T11429] bond0: entered promiscuous mode
[  367.042527][T11429] bridge0: port 1(bond0) entered blocking state
[  367.049412][T11429] bridge0: port 1(bond0) entered forwarding state
[  367.106783][T11433] dummy0: entered promiscuous mode
[  367.113961][T11433] team0: entered promiscuous mode
[  367.120217][T11433] hsr2: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  367.133963][T11433] bridge0: port 2(hsr2) entered blocking state
[  367.140367][T11433] bridge0: port 2(hsr2) entered disabled state
[  367.147470][T11433] hsr2: entered allmulticast mode
[  367.152678][T11433] dummy0: entered allmulticast mode
[  367.158059][T11433] team0: entered allmulticast mode
[  367.165508][T11433] hsr2: entered promiscuous mode
[  367.172516][T11433] bridge0: port 2(hsr2) entered blocking state
[  367.179741][T11433] bridge0: port 2(hsr2) entered forwarding state
[  367.220092][   T63] bridge0: port 1(bond0) entered disabled state
[  367.302533][T11440] wg1 speed is unknown, defaulting to 1000
[  367.512180][T11446] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  367.548083][T11446] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  367.570416][T11446] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  368.174166][T11474] wg1 speed is unknown, defaulting to 1000
[  368.461949][T11483] dummy0: left allmulticast mode
[  368.505599][T11483] dummy0: left promiscuous mode
[  368.522778][T11483] bridge0: port 1(dummy0) entered disabled state
[  368.693960][   T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  369.261708][    C0] 
[  369.264110][    C0] ============================================
[  369.270286][    C0] WARNING: possible recursive locking detected
[  369.276474][    C0] 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 Not tainted
[  369.283618][    C0] --------------------------------------------
[  369.289831][    C0] syz.2.1664/11476 is trying to acquire lock:
[  369.296706][    C0] ffff88806d60cf30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220
[  369.305832][    C0] 
[  369.305832][    C0] but task is already holding lock:
[  369.313338][    C0] ffff888023c84f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220
[  369.322994][    C0] 
[  369.322994][    C0] other info that might help us debug this:
[  369.331088][    C0]  Possible unsafe locking scenario:
[  369.331088][    C0] 
[  369.338741][    C0]        CPU0
[  369.342050][    C0]        ----
[  369.345530][    C0]   lock(&hsr->seqnr_lock);
[  369.350078][    C0]   lock(&hsr->seqnr_lock);
[  369.354618][    C0] 
[  369.354618][    C0]  *** DEADLOCK ***
[  369.354618][    C0] 
[  369.362791][    C0]  May be due to missing lock nesting notation
[  369.362791][    C0] 
[  369.371230][    C0] 14 locks held by syz.2.1664/11476:
[  369.376557][    C0]  #0: ffff8880115b6fe0 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x16f/0x380
[  369.386198][    C0]  #1: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: __handle_mm_fault+0x296f/0x5620
[  369.396106][    C0]  #2: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x14b/0x1740
[  369.405920][    C0]  #3: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x2c0
[  369.415653][    C0]  #4: ffff888078893cd8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x13e/0x210
[  369.426366][    C0]  #5: ffffc90000007be0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0
[  369.436001][    C0]  #6: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x20c/0x1440
[  369.445519][    C0]  #7: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0
[  369.455378][    C0]  #8: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  369.466109][    C0]  #9: ffff888023c84f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220
[  369.475638][    C0]  #10: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860
[  369.485264][    C0]  #11: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  369.495302][    C0]  #12: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840
[  369.504652][    C0]  #13: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  369.514690][    C0] 
[  369.514690][    C0] stack backtrace:
[  369.520605][    C0] CPU: 0 UID: 0 PID: 11476 Comm: syz.2.1664 Not tainted 6.16.0-rc5-syzkaller-01402-gb06c4311711c #0 PREEMPT(full) 
[  369.520633][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  369.520653][    C0] Call Trace:
[  369.520663][    C0]  <IRQ>
[  369.520673][    C0]  dump_stack_lvl+0x189/0x250
[  369.520706][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.520731][    C0]  ? __pfx__printk+0x10/0x10
[  369.520762][    C0]  ? print_lock_name+0xde/0x100
[  369.520792][    C0]  print_deadlock_bug+0x28b/0x2a0
[  369.520820][    C0]  validate_chain+0x1a3f/0x2140
[  369.520852][    C0]  ? sock_def_readable+0xbe/0x550
[  369.520879][    C0]  ? sock_def_readable+0x30f/0x550
[  369.520902][    C0]  ? sock_def_readable+0xbe/0x550
[  369.520928][    C0]  __lock_acquire+0xab9/0xd20
[  369.520953][    C0]  ? hsr_dev_xmit+0x19a/0x220
[  369.520974][    C0]  lock_acquire+0x120/0x360
[  369.520994][    C0]  ? hsr_dev_xmit+0x19a/0x220
[  369.521019][    C0]  ? dev_queue_xmit_nit+0xb68/0xcc0
[  369.521051][    C0]  ? hsr_dev_xmit+0x19a/0x220
[  369.521072][    C0]  _raw_spin_lock_bh+0x36/0x50
[  369.521097][    C0]  ? hsr_dev_xmit+0x19a/0x220
[  369.521117][    C0]  hsr_dev_xmit+0x19a/0x220
[  369.521137][    C0]  dev_hard_start_xmit+0x2d7/0x830
[  369.521161][    C0]  __dev_queue_xmit+0x1b8d/0x3b50
[  369.521183][    C0]  ? __dev_queue_xmit+0x27b/0x3b50
[  369.521202][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  369.521222][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.521245][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  369.521264][    C0]  ? do_raw_read_unlock+0x3d/0x80
[  369.521289][    C0]  ? ebt_do_table+0x265b/0x2820
[  369.521321][    C0]  ? __lock_acquire+0xab9/0xd20
[  369.521349][    C0]  br_dev_queue_push_xmit+0x6c5/0x890
[  369.521373][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  369.521394][    C0]  ? NF_HOOK+0x9e/0x3c0
[  369.521413][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  369.521432][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  369.521450][    C0]  NF_HOOK+0x31d/0x3c0
[  369.521470][    C0]  ? NF_HOOK+0x9e/0x3c0
[  369.521488][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  369.521507][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  369.521531][    C0]  br_forward_finish+0xd3/0x130
[  369.521549][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  369.521570][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  369.521589][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  369.521607][    C0]  NF_HOOK+0x31d/0x3c0
[  369.521624][    C0]  ? br_vlan_lookup+0x8f/0x710
[  369.521642][    C0]  ? NF_HOOK+0x9e/0x3c0
[  369.521659][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  369.521676][    C0]  ? br_multicast_count+0xf2/0xdc0
[  369.521698][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  369.521718][    C0]  ? br_switchdev_frame_uses_tx_fwd_offload+0x14/0x70
[  369.521746][    C0]  __br_forward+0x41e/0x600
[  369.521764][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  369.521783][    C0]  ? maybe_deliver+0xc6/0x160
[  369.521804][    C0]  ? __pfx___br_forward+0x10/0x10
[  369.521825][    C0]  ? br_dev_xmit+0x185/0x1840
[  369.521850][    C0]  br_dev_xmit+0x11b3/0x1840
[  369.521874][    C0]  ? sock_def_readable+0x30f/0x550
[  369.521892][    C0]  ? br_dev_xmit+0x185/0x1840
[  369.521919][    C0]  ? __pfx_br_dev_xmit+0x10/0x10
[  369.521945][    C0]  ? dev_queue_xmit_nit+0x2d/0xcc0
[  369.521970][    C0]  ? unregister_netdevice_notifier_dev_net+0x1a1/0x420
[  369.521994][    C0]  ? dev_queue_xmit_nit+0x2d/0xcc0
[  369.522022][    C0]  dev_hard_start_xmit+0x2d7/0x830
[  369.522045][    C0]  __dev_queue_xmit+0x1b8d/0x3b50
[  369.522066][    C0]  ? __dev_queue_xmit+0x27b/0x3b50
[  369.522086][    C0]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  369.522103][    C0]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  369.522124][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  369.522140][    C0]  ? __copy_skb_header+0xa7/0x550
[  369.522156][    C0]  ? __asan_memcpy+0x40/0x70
[  369.522171][    C0]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  369.522188][    C0]  ? __asan_memcpy+0x40/0x70
[  369.522203][    C0]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  369.522221][    C0]  ? hsr_create_tagged_frame+0x449/0xc30
[  369.522242][    C0]  ? __asan_memmove+0x40/0x70
[  369.522257][    C0]  ? hsr_addr_subst_dest+0x307/0xac0
[  369.522278][    C0]  hsr_forward_skb+0x158b/0x2860
[  369.522303][    C0]  ? hsr_forward_skb+0x9e/0x2860
[  369.522336][    C0]  ? __pfx_hsr_forward_skb+0x10/0x10
[  369.522355][    C0]  ? do_raw_spin_lock+0x121/0x290
[  369.522379][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  369.522402][    C0]  ? dev_queue_xmit_nit+0xb68/0xcc0
[  369.522426][    C0]  ? hsr_dev_xmit+0x19a/0x220
[  369.522443][    C0]  hsr_dev_xmit+0x1a5/0x220
[  369.522461][    C0]  dev_hard_start_xmit+0x2d7/0x830
[  369.522484][    C0]  __dev_queue_xmit+0x1b8d/0x3b50
[  369.522504][    C0]  ? __dev_queue_xmit+0x27b/0x3b50
[  369.522525][    C0]  ? neigh_connected_output+0x1ea/0x460
[  369.522548][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  369.522566][    C0]  ? read_seqbegin+0x122/0x250
[  369.522585][    C0]  ? neigh_connected_output+0x1ea/0x460
[  369.522605][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.522626][    C0]  ? read_seqbegin+0x1ac/0x250
[  369.522647][    C0]  ? __pfx_read_seqbegin+0x10/0x10
[  369.522666][    C0]  ? eth_header+0x11b/0x200
[  369.522690][    C0]  ? __asan_memcpy+0x40/0x70
[  369.522705][    C0]  ? eth_header+0x11b/0x200
[  369.522728][    C0]  ? __pfx_eth_header+0x10/0x10
[  369.522752][    C0]  ? neigh_connected_output+0x3b6/0x460
[  369.522781][    C0]  ip6_finish_output2+0x11fb/0x16a0
[  369.522798][    C0]  ? ip6_finish_output2+0x701/0x16a0
[  369.522816][    C0]  ? __pfx_ip6_finish_output2+0x10/0x10
[  369.522843][    C0]  ? ip6_mtu+0x7d/0x3f0
[  369.522868][    C0]  ? ip6_mtu+0x7d/0x3f0
[  369.522891][    C0]  ip6_finish_output+0x234/0x7d0
[  369.522916][    C0]  ndisc_send_skb+0xb54/0x1440
[  369.522936][    C0]  ? ndisc_send_skb+0x20c/0x1440
[  369.522957][    C0]  ? __pfx_ndisc_send_skb+0x10/0x10
[  369.522976][    C0]  ? __pfx_dst_output+0x10/0x10
[  369.523003][    C0]  addrconf_rs_timer+0x369/0x670
[  369.523021][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  369.523040][    C0]  call_timer_fn+0x17e/0x5f0
[  369.523055][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  369.523070][    C0]  ? call_timer_fn+0xbe/0x5f0
[  369.523085][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  369.523104][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  369.523123][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.523143][    C0]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  369.523158][    C0]  __run_timer_base+0x61a/0x860
[  369.523182][    C0]  ? ktime_get+0x3e/0x1f0
[  369.523208][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  369.523231][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  369.523260][    C0]  run_timer_softirq+0xb7/0x180
[  369.523285][    C0]  handle_softirqs+0x286/0x870
[  369.523305][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  369.523331][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  369.523351][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  369.523378][    C0]  __irq_exit_rcu+0xca/0x1f0
[  369.523396][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  369.523418][    C0]  irq_exit_rcu+0x9/0x30
[  369.523434][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  369.523456][    C0]  </IRQ>
[  369.523462][    C0]  <TASK>
[  369.523468][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  369.523486][    C0] RIP: 0010:lock_is_held_type+0x137/0x190
[  369.523510][    C0] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 19 13 30 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  369.523524][    C0] RSP: 0018:ffffc9000f0d74c8 EFLAGS: 00000206
[  369.523540][    C0] RAX: 487a2580722d7d00 RBX: 0000000000000000 RCX: 487a2580722d7d00
[  369.523552][    C0] RDX: ffff88801e751e00 RSI: ffffffff8db8e292 RDI: ffffffff8be29e00
[  369.523565][    C0] RBP: 00000000ffffffff R08: ffffea00010a8837 R09: 1ffffd4000215106
[  369.523577][    C0] R10: dffffc0000000000 R11: fffff94000215107 R12: 0000000000000246
[  369.523589][    C0] R13: ffff88801e751e00 R14: ffff88806d899758 R15: 0000000000000005
[  369.523611][    C0]  xas_next_entry+0x1de/0x3d0
[  369.523635][    C0]  next_uptodate_folio+0x32/0x5d0
[  369.523661][    C0]  ? folio_unlock+0x101/0x160
[  369.523682][    C0]  filemap_map_pages+0x1025/0x1740
[  369.523713][    C0]  ? filemap_map_pages+0x14b/0x1740
[  369.523740][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  369.523768][    C0]  ? __handle_mm_fault+0x296f/0x5620
[  369.523786][    C0]  ? __handle_mm_fault+0x296f/0x5620
[  369.523804][    C0]  __handle_mm_fault+0x368a/0x5620
[  369.523829][    C0]  ? __pfx___handle_mm_fault+0x10/0x10
[  369.523852][    C0]  ? follow_page_pte+0x8d6/0x14b0
[  369.523874][    C0]  handle_mm_fault+0x40a/0x8e0
[  369.523896][    C0]  __get_user_pages+0x1af4/0x30b0
[  369.523917][    C0]  ? mt_find+0x15c/0x5f0
[  369.523946][    C0]  ? __pfx___get_user_pages+0x10/0x10
[  369.523965][    C0]  populate_vma_page_range+0x26b/0x340
[  369.523982][    C0]  ? __pfx_populate_vma_page_range+0x10/0x10
[  369.523998][    C0]  ? userfaultfd_unmap_complete+0x278/0x2d0
[  369.524018][    C0]  ? down_read+0x1ad/0x2e0
[  369.524042][    C0]  __mm_populate+0x24c/0x380
[  369.524059][    C0]  ? __pfx___mm_populate+0x10/0x10
[  369.524075][    C0]  ? up_write+0x1c4/0x420
[  369.524098][    C0]  vm_mmap_pgoff+0x3f0/0x4c0
[  369.524126][    C0]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  369.524153][    C0]  ? rcu_is_watching+0x15/0xb0
[  369.524172][    C0]  ? ksys_mmap_pgoff+0xf4/0x760
[  369.524191][    C0]  ? __x64_sys_mmap+0x7f/0x140
[  369.524211][    C0]  do_syscall_64+0xfa/0x3b0
[  369.524233][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.524254][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.524269][    C0]  ? clear_bhb_loop+0x60/0xb0
[  369.524288][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.524303][    C0] RIP: 0033:0x7fa612f8e929
[  369.524326][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.524340][    C0] RSP: 002b:00007fa613e8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  369.524355][    C0] RAX: ffffffffffffffda RBX: 00007fa6131b6080 RCX: 00007fa612f8e929
[  369.524367][    C0] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000
[  369.524378][    C0] RBP: 00007fa613010b39 R08: ffffffffffffffff R09: 0000000000000000
[  369.524389][    C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  369.524399][    C0] R13: 0000000000000000 R14: 00007fa6131b6080 R15: 00007fff0b19d9a8
[  369.524417][    C0]  </TASK>