last executing test programs:

3.007492558s ago: executing program 3 (id=1681):
r0 = socket(0x1d, 0x2, 0x6)
bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10)
recvmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/141, 0x8d}, {&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000240)=""/40, 0x28}], 0x3, &(0x7f0000000340)}, 0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet(0x2, 0x2, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000007c0)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x2000c058)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x3, 0x8000000c, 0x10000, 0xffffffffffffffff, 0x6, '\x00', r4, 0xffffffffffffffff, 0x0, 0xffffffff, 0xfffffffd, 0x0, @void, @value, @value=r1}, 0x50)
socket(0x1d, 0x2, 0x6) (async)
bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) (async)
recvmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/141, 0x8d}, {&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000240)=""/40, 0x28}], 0x3, &(0x7f0000000340)}, 0x40000000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet(0x2, 0x2, 0x1) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000007c0)) (async)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x2000c058) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x3, 0x8000000c, 0x10000, 0xffffffffffffffff, 0x6, '\x00', r4, 0xffffffffffffffff, 0x0, 0xffffffff, 0xfffffffd, 0x0, @void, @value, @value=r1}, 0x50) (async)

2.658659027s ago: executing program 3 (id=1683):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='signal_generate\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x8e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x601, 0x70bd25, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
writev(r3, &(0x7f0000002180)=[{&(0x7f0000000b80)="2eec711f70abb5a31ead08c7571d8dbe3513461cdae3e277bb4a0c321145a64f7d3038a9", 0x24}], 0x1)
write$cgroup_devices(r3, 0x0, 0xffdd)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xa, 0x1, 0x0, r6}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000040601d16a00000000000000070000050500010007000000050001000700000005000100070000000900020073797a32002000000900020073797a3100000000302ccc75ee03eeef7d89d5a5b81dd5"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r8, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1, @mcast2, 0x5907}], 0x1c)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x640c1}, 0x8000)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000003e19c14c9b7a1aaec4fefffffffcff3495197c000004004380"], 0x18}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2400e000)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x8000, 0x81, 0x100000001, 0x3, 0xffffffffffffffff, 0x1, 0x1}, &(0x7f0000000280)={0xfffffffffffffffa, 0x4, 0x8000, 0x10001, 0x8943, 0x9000, 0xfffffffffffffffe, 0x2}, &(0x7f00000003c0)={0xd23, 0x9, 0x1, 0x7fffffffffffffff, 0x76, 0x3, 0x7, 0x6}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0x4]}, 0x8})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

2.658395367s ago: executing program 4 (id=1684):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b1d38fa7525dfa4df9300000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fcdbdf25010000000800010001000000080001000000000008000200020000000800020002000000080001000000000008000200020000000800010001000000080002000200000008000200020000000800020002000000b14cb26a98e6a86c04"], 0x64}, 0x1, 0x0, 0x0, 0x4000020}, 0x80)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x1000009, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="050003"], 0x28}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r8, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000200))
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

2.339120709s ago: executing program 4 (id=1688):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0xc4f, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f22eff627046967d79898f213b700771"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a9d2eefd8d02c63d8d4607492c86100cc47f2e1e3c73f03fa389dd65e05cbb79"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ad35e6f2992e4401"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc567}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)={0x2, 0x3, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x200}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x28)
r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x6e)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000300))
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={<r7=>0x0}, &(0x7f0000000400)=0xc)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000640)=<r8=>0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, <r10=>0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000780)=0xe8)
r11 = getgid()
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$netlink(r6, &(0x7f0000000840)={&(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)=[{&(0x7f0000000440)={0x194, 0x41, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@generic="7bf71742b83e20aab388bedfce401607b5a3", @generic="2f5aaf6bf98835143fe71ac6228cecd4221e7c23c8e1a5126066d421aff047d42161ba789ef711c73e200ba1428d41023b4f88159a988dfa6f567a87c772a4cd5993f5d83ad4f1359522ec1630f9eb25cfaa69770a66818e77513c65646aea5ea0403b0cc747f0c13bf538f77208a62708b452d3cf508228276f3531fca469b3558a6c77830777757f637a983bf59eabe137bd8632ecb0734f943d5be5c11587004fc162dd134531a17641b17e5f310cb15d2d4866f796967846bae6264bac6676351162ecc58d957e324dce3069205c548aba5a25c2f637dbd4f44057994d9b303d23e4625484", @nested={0x8, 0x68, 0x0, 0x1, [@nested={0x4, 0x62}]}, @generic="7103e018510ce0a988e3968227adb3305c32b5d7be9653402c48a72a70a8888ce34cc0b2380c8c1c9acff6b209e602236db65e85afff0f6a4056aef9076450ecd89227ccde8edad1b3f6745adbb4a6958675a810a79127c4224f86768f699e59398ab37a6df22a15b668f594f2d907732e3899ca0d2d4f82", @typed={0x8, 0x9c, 0x0, 0x0, @pid=r7}]}, 0x194}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @rights={{0x38, 0x1, 0x1, [r5, r12, r0, r4, r4, r4, r5, r1, r5, r13]}}], 0x58, 0x4}, 0x4040880)
r14 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r14, &(0x7f0000000880)={0xa, 0x4e21, 0x6, @remote, 0x32}, 0x1c)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={0xffffffffffffffff, r9, 0x25, 0x18, @void}, 0x10)
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x81}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004a000}, 0x8000)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000e40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a80)={0x380, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x14, 0x44}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xf7}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xd}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x91}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x60, 0x30, 0x6, 0x5, 0x3, 0x9, 0x9, 0x12, 0x60, 0x48, 0x63, 0x2, 0x1, 0x60, 0x4, 0x1a, 0x2, 0x24, 0x6, 0x1, 0x13, 0x1b]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0xff, 0x5, 0x0, 0x2, 0xa9, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7f, 0x1000, 0x8, 0xffff, 0x9, 0xe000, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc, 0x5, 0x4, 0x0, 0xd, 0x6, 0xca6f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x1, 0x5, 0x800, 0x1, 0x3, 0xa]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x1, 0x2, 0x60, 0x6, 0x48, 0x4, 0x34, 0x1b, 0x16, 0x24, 0x1b, 0xc, 0x6c, 0xc]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfe01, 0xaa2, 0x7fff, 0x8, 0x1, 0x4, 0x401, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x0, 0x2, 0x80, 0x38, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x5}, {0x2}, {0x4, 0x3}, {0x7, 0x5}, {0x1, 0x1}, {0x7, 0x3}, {0x7, 0xa}, {0x5, 0x9}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x3}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0x9}, {0x3, 0x9}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x5}, {0x3, 0x5}, {0x6, 0x5}, {0x3, 0x1}]}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x6, 0x3, 0x967db085d24708d7, 0x18]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfffb, 0x9, 0x6b, 0x3, 0x7, 0x5, 0x7f]}}]}]}, @NL80211_ATTR_TX_RATES={0x1cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x81, 0x4, 0x5, 0x9, 0x5, 0x2d, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x6, 0x100, 0xc, 0x0, 0x4, 0x14, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbb, 0xed, 0xff, 0xff00, 0xc, 0x7, 0x1, 0x4]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1000, 0x6, 0x4, 0x8, 0x7, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x79, 0x9, 0x2, 0x1ff, 0x100, 0x2, 0x1]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x3a37, 0x113, 0xffdd, 0xec, 0x7fff, 0x5, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x10, 0x1ad2, 0x8, 0x3ff, 0x5, 0x2]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x1}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x2, 0x9}, {0x3, 0x9}, {0x4, 0x1}, {0x2, 0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x2, 0x1}, {0x6, 0x2}, {0x5, 0x1}, {0x7, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x7, 0xa}, {0x4, 0x6}, {0x6, 0x2}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x1, 0x1ff, 0xdbd9, 0x8, 0xf0, 0xcf9c]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xb2c4, 0x4, 0x7, 0x9, 0x100, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x3}, {0x4, 0x1}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0x7}, {0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x6, 0x5}, {0x7, 0x3}, {0x1, 0x2}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x1}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x4, 0x2}, {0x6, 0x3}, {0x2, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0xa}, {0x4, 0x7}, {0x7, 0x9}, {0x5, 0x2}, {0x3, 0x6}, {0x4, 0x4}, {0x6, 0x8}, {0x2, 0xa}, {0x5, 0x5}, {0x7, 0x1}, {0x6, 0x2}, {0x6, 0x9}, {0x3, 0x8}, {0x3, 0xa}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x1}, 0x804)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r15, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x18c, r2, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x40}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x125, 0x2a, [@preq={0x82, 0x41, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x3e, 0x10001, @broadcast, 0x7fff, @value=@broadcast, 0x1a33, 0x5, 0x3, [{{0x1}, @device_b, 0x9}, {{0x1}, @broadcast, 0x4}, {{0x1}, @device_b, 0x3bac0000}]}}, @gcr_ga={0xbd, 0x6, @device_b}, @random_vendor={0xdd, 0xba, "79710187416ad6737338ff1232c357e00cbaf500d4cc805ce0894e8a7e9310094b2d290e82a0c3a651c40ce4cd89b7d7a610f729028f55b1f3f1e22695f918ff3a31b9c62efd9ca62cd6cd9ce96d1cb5bc6b1a1fe05f4bc4390fcc835defe35c328f7bc7b4099132a14fe70ddfb7802b0de2989da8206102d131d95ff8b16808405ea9aa1c5bd3fb14b3de7ff9f982c47daa11a7b7f49c9a6853b2d79db07f7de87b29473ccdb8f46066a483b5c056503102e610d2fc05a27dd5"}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5aa}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1811}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}]}, 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x44000080)
r16 = socket$inet(0x2, 0x2, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r16, 0x84, 0x6e, &(0x7f0000001100)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x8001, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @loopback}], 0x9c)
r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r15)
sendmsg$NL80211_CMD_NEW_KEY(r15, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, r17, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000)

2.081937618s ago: executing program 0 (id=1690):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Su\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e2ffffffffffffff00fdff0000884208120a62df78380d34d4ae8c00"/42], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'pimreg1\x00'})
ioctl(r0, 0x8b22, &(0x7f0000000100))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
unshare(0x20040400)
pselect6(0x40, &(0x7f0000000080)={0xe, 0x19, 0x8, 0x10000000, 0x2, 0x8, 0xc2db, 0xb}, 0x0, 0x0, &(0x7f0000000180), 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$inet(0x2, 0x5, 0x1000008)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x4000000, &(0x7f0000e68000)={0x2, 0x4e21, @empty}, 0x10)
sendmmsg$inet(r2, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="68ddaa732d69a6f7eb258957fccb89134faf578e9ff0cc38595e4c9c1f2a32ceb6799c682d87e991cd718f04a1487a5d99bef5a95019bdd837d20274d2e98cfbde31b70e45fcc74efe1c42ba121fe280bf8af2c22489537e57dee1cc54c41bd8f9086f9498bc3bcc4f0501f1defec42e4faac1dd0b0b67b797182b6c4ce3ff3da7d4d4a1069cada5b152bbd64335f0254ecbfe43c5d7cd5b8403e53ae4f712b05945b98eb3420bb04c7ecf528693bb9693ada19e3a8f9522ab692a2d78aefa8af8f0e6b3b3af268e535bc4a610f7341e7da01249d929b75acf7c99bd21b2b5e3f210e2798f5636bed013dae7ff0d009ca52fffbd88a3964a60786f8f025e4b8fac68f910cdd4a991a6020fcd5a92bc7747acef6f62d087646d32fc37f6d1cabd609e6f392350ebcc02c341a3ce598522d3963374f5eb522919d029136288fd1c08cadfd7f43a3a6618d6dd5ae6baf5b2f321588e9dfc879e213badc550eb9982777b09d808ca8e5540695200193c820ad6ce1e924cdf342a1ff9feeab68af907798fbc0fa570ef885369090c35b0959baf6e29b86833a14cf3532cd537891f27caa37b10cda2cf6e75ddc11cb13c558cc210be334af3813630bb2c16145cf91ce50099452e0b10e4ce9beb32ab1a8692d2b3cff0e370f87e2219172b7bbcce5d8daca20ce4e047510920000e3a56747839920f72318843b6161fd643c2c56ca396b4c2283f9afef62412c04c934bc1ad4e54eac1acd4447ae3e2f9abf6cb9a5dcbba25aaf4254dc8a081b4eb4b98a11e71ea52be944225f6", 0x238}], 0x1}}], 0x1, 0x4)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f00000002c0)=0x7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r4 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r4, 0x1, 0x49, 0x0, &(0x7f0000000140))
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYRESOCT=r3], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x20, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0xfffffffd, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket(0x10, 0x80002, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41100, 0x11, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.072664383s ago: executing program 1 (id=1691):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/141, 0x46, 0x8d, 0x1, 0x7}, 0x28)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8801)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
socket$nl_route(0x10, 0x3, 0x0)
write$tun(r1, &(0x7f0000000100)=ANY=[], 0x72)
r7 = accept4(r0, 0x0, 0x0, 0x0)
sendto$packet(r7, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r8, 0x0, 0xf, 0x20000044, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x103}, 0x1c)
shutdown(r8, 0x1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$unix(0x1, 0x5, 0x0)

1.83430421s ago: executing program 4 (id=1693):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a300000000009000300"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f", 0xf0}], 0x1}}], 0x1, 0x40)
sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)

1.694715996s ago: executing program 2 (id=1694):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x4f)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x80)
setsockopt$inet_buf(r1, 0x0, 0x4, 0x0, 0x0)

1.693026203s ago: executing program 3 (id=1695):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe2, 0xe2, 0x3, [@enum64={0xb, 0x1, 0x0, 0x13, 0x1, 0x2, [{0xf, 0x1, 0x2}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x9, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x1ff}}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @var={0xb, 0x0, 0x0, 0xe, 0x2, 0x1}, @datasec={0x5, 0x6, 0x0, 0xf, 0x2, [{0x4, 0x8ea4, 0x6}, {0x4, 0x35d3f750, 0x7}, {0x2, 0x3, 0xea}, {0x0, 0x10, 0xd40}, {0x2, 0x9, 0x6b}, {0x4, 0xdba, 0xb}], "a2f3"}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}, @enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x0, [{0x3, 0x6, 0x80000000}, {0x7, 0x10, 0xdf}]}]}, {0x0, [0x5f]}}, &(0x7f0000000000)=""/35, 0xff, 0x23, 0x0, 0x7, 0x10000}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x20008000)
sendmsg$WG_CMD_SET_DEVICE(r1, 0x0, 0x20008040)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socket$key(0xf, 0x3, 0x2)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r4, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="20002dbd7000fcdbdf253700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900030000005000000008005700050000000800270002000000050019010900000008009f0003000000050019010b00000008009f0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000017c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x80, 0x80, 0x0, 0x9, 0x7}}, {0x4}}]}]}, 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002e2020c31af8ff21000000bfa10000000000000701000000feffffb702b9821a0bddbb0000631bfc05000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.596345064s ago: executing program 2 (id=1696):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="38e0a720100001008000000000000000ffff0300", @ANYRES32=r1, @ANYBLOB="00060000000000001800168014000180100002000200000083080000470a0000"], 0x38}, 0x1, 0x2, 0x0, 0x80}, 0x150)

1.486572845s ago: executing program 2 (id=1697):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000a00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x2c, 0x2, 0xfff)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xa, 0xfff1}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x5, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x4, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48)

1.364309612s ago: executing program 0 (id=1698):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b1d38fa7525dfa4df9300000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fcdbdf25010000000800010001000000080001000000000008000200020000000800020002000000080001000000000008000200020000000800010001000000080002000200000008000200020000000800020002000000b14cb26a98e6a86c04"], 0x64}, 0x1, 0x0, 0x0, 0x4000020}, 0x80)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x1000009, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="050003"], 0x28}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r8, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000200))
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

1.339206997s ago: executing program 3 (id=1699):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x800, 0x4)

1.020091998s ago: executing program 0 (id=1700):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000fe66f69b12d7a69261c6975bd6fa4b51d400dc76f43ab4a575bf5bd85e0a7c7669761b29ab697d1b62fb", @ANYRES16=r1, @ANYBLOB="000428bd7000ffdbdf255e0000000800a100350b47140800a0000700000008009f0003000000"], 0x8d}, 0x1, 0x0, 0x0, 0x8010}, 0x2000c004)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', <r2=>0x0})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write(r3, &(0x7f0000000080)="b6", 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x12, r3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r8)
r9 = socket$unix(0x1, 0x2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x118, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7, 0x3be, 0xffffffff, 0x2, 0x4, 0xff, 0x2}}, {0x8, 0x2, [0x8000, 0x8001]}}, {{0x1c, 0x1, {0x4, 0x9, 0x2, 0xc, 0x0, 0x3, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x6, 0x2, 0x3, 0x0, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x42, 0x0, 0x8, 0x1ff, 0x0, 0x2, 0x200, 0x8}}, {0x14, 0x2, [0xf, 0x5, 0x3, 0x400, 0x1, 0xd1e, 0x1, 0x7fff]}}, {{0x1c, 0x1, {0x9, 0x1, 0x3, 0x0, 0x2, 0x7, 0x350, 0x8}}, {0x14, 0x2, [0xfffc, 0x29c, 0x9, 0x7f, 0x6, 0x7, 0x9, 0x2]}}, {{0x1c, 0x1, {0x7, 0xe, 0x8, 0x3, 0x2, 0x3, 0x6, 0x3}}, {0xa, 0x2, [0xfff0, 0x1, 0x7]}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x2000c031}, 0x8010)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000002000000810000000300000005100000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500000000000011a8000400000007000000000000000000001200000000"], 0x50)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r12, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={<r13=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f00000000c0)={r13, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000180)={r13, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c)

992.385513ms ago: executing program 1 (id=1701):
r0 = socket(0x10, 0x80002, 0x0)
listen(r0, 0x3)
r1 = socket$unix(0x1, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[], 0x48}}, 0x4048000)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

896.027695ms ago: executing program 4 (id=1702):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000100)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty}, {0x4e23, 0x0, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}, "59cbddf893e2"}}}}}}}, 0x3c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0xd}, {{0x1}, {0x4, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014)
r9 = socket(0x400000000010, 0x2, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x9}, {}, {0x7, 0xffe0}}}, 0x24}}, 0x24044094)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x51, &(0x7f0000000000)={&(0x7f0000000700)={0x60, r4, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r5}, {0x8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}]}}, {{0x0, 0x1, r5}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x8}}}]}}, {{}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x2}}}, {0x0, 0x1, @activeport={{}, {}, {0x0, 0x4, r3}}}, {0x0, 0x1, @lb_port_stats={{{}, {}, {0x0, 0x4, 0x800}}, {0x0, 0x6, r3}}}, {0x0, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x1}}}, {0x0, 0x1, @lb_tx_hash_to_port_mapping={{{}, {}, {0x0, 0x4, r3}}}}, {0x0, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c305a06715e637c, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x4}}}]}}, {{0x0, 0x1, r3}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x5}}}, {0x0, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash\x00'}}}, {0x0, 0x1, @queue_id={{{}, {}, {0x0, 0x4, 0x80000001}}, {0x0, 0x6, r5}}}, {0x0, 0x1, @priority={{{}, {}, {0x0, 0x4, 0xf01}}, {0x0, 0x6, r3}}}]}}, {{0x0, 0x1, r3}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x8}}}]}}, {{0x0, 0x1, r8}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @priority={{{}, {}, {0x0, 0x4, 0xa7ca92e0}}, {0x0, 0x6, r5}}}, {0x0, 0x1, @user_linkup_enabled={{}, {0x0, 0x6, r3}}}, {0x0, 0x1, @lb_hash_stats}, {0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x3}}}, {0x0, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x6c}}, {0x0, 0x6, r11}}}, {0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x100}}}]}}, {{}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @lb_tx_hash_to_port_mapping={{{}, {}, {0x0, 0x4, r3}}}}, {0x0, 0x1, @priority={{{}, {}, {0x0, 0x4, 0xb2b5}}, {0x0, 0x6, r5}}}, {0x0, 0x1, @activeport={{}, {}, {0x0, 0x4, r5}}}]}}, {{0x0, 0x1, r5}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @mcast_rejoin_count={{}, {}, {0x0, 0x4, 0x2}}}, {0x0, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x9}}}, {0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x3361}}}, {0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x3e9f}}}, {0x0, 0x1, @lb_tx_hash_to_port_mapping={{{}, {}, {0x0, 0x4, r11}}}}, {0x0, 0x1, @lb_port_stats={{{}, {}, {0x0, 0x4, 0x100}}, {0x0, 0x6, r11}}}, {0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x7ff}}}, {0x0, 0x1, @user_linkup={{}, {0x0, 0x6, r3}}}, {0x0, 0x1, @user_linkup={{}, {0x0, 0x6, r11}}}, {0x0, 0x1, @name={{}, {}, {0x0, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x48040)

895.686796ms ago: executing program 3 (id=1703):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20)
unshare(0x6020400)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001840)=@filter={'filter\x00', 0xe, 0x5, 0x90, [0x0, 0x200000000300, 0x2000000004f4, 0x200000000dfa], 0x0, 0x0, &(0x7f0000000300)=[{0x70, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x108)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r6 = accept4(r1, &(0x7f0000000500)=@qipcrtr, &(0x7f0000000580)=0x80, 0x800)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f00000007c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, r7, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x71}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9f7a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x79}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fe9010edf61b"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e6a6e207698d"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd9b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x12, 0x34, @random="93f5421685517cd22a12dc694882"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
close(r5)
socket$kcm(0x2, 0x200000000000001, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000001121c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0x3}, 0x6)

822.734658ms ago: executing program 2 (id=1704):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000019c0)="95318c", 0x3}], 0x1, 0x0, 0x0, 0x40008c0}, 0x20042041)
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback, 0x8000005}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x8, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={<r4=>0x0, @initdev}, &(0x7f0000000100)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', r4, 0x4, 0x9, 0xc7, 0x40, 0x2, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000, 0x7800, 0x7f, 0x3}})
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@setlink={0x30, 0x13, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60061, 0x34070}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x81, 0xfe, 0x0, 0xfffff034}, {0x6, 0x0, 0x3}, {0x6, 0x10, 0x6, 0x7f}, {0x9, 0x1, 0x7, 0xffff}]}, 0x10)

753.394255ms ago: executing program 1 (id=1705):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0)
r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@private0, <r2=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

713.830329ms ago: executing program 0 (id=1706):
syz_emit_ethernet(0x8e, 0x0, 0x0)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)={0xec, 0x10, 0x509, 0x3, 0x0, "", [@typed={0x8, 0xd2, 0x0, 0x0, @u32=0x1}, @typed={0xa5, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce287128282829289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336"}, @nested={0x2c, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xec}], 0x1, 0x0, 0x0, 0x1}, 0x40040)

457.697725ms ago: executing program 4 (id=1707):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2004c890}, 0x0) (async)
r1 = socket$inet(0xa, 0x801, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x24, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800b0001007470726f7879000034000280080001400000000a08000140000000ff0f000000000000100800014000000001080003400000001908000140000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x20004880}, 0x8000)
socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64)
r3 = socket$netlink(0x10, 0x3, 0xf) (async, rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0xf) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r6}, 0x18) (async, rerun: 32)
write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) (async, rerun: 32)
bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="160000000108010100000000000040a33cda00"], 0x14}}, 0x0) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071112b00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[], 0x38}}, 0x0) (async, rerun: 64)
socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 64)

437.738123ms ago: executing program 0 (id=1708):
r0 = socket$nl_route(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) (async, rerun: 64)
syz_emit_ethernet(0xf86, &(0x7f0000000980)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0xf50, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, [{0x18, 0xa, "21125ef61d153277b8e16396521752b9adbee5aeae013164e249ea90143563744ab5a8c881554b739ae98935e8a7f4792f99c59851a9a959f40d7066709c3d92ae9e171f65c9080c60744ce3c5e11510b149"}, {0x1, 0x3, "41d744ea371d3b2fc03dfafa7aad188985958a016a056c5117c8"}, {0x18, 0x6, "a6c471be3be48418bde0019a790511b1e0fd42262d975733226081a88984ca8e8c93d7824af40d148d2d8f8e63fb5a0985"}, {0xe, 0x3, "04983a676fbfb2659e5a20860a09bce68dcc0dcef6b456be9a4b42c1"}, {0x1, 0x1cf, "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"}]}}}}}}, 0x0) (rerun: 64)

435.796817ms ago: executing program 3 (id=1709):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000002000018200000", @ANYRES32=r1, @ANYBLOB="00000047cef47ddeae480cff0000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20}, 0x94)
r2 = socket$rds(0x15, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x5865, @void}}}}}}}}, 0x32)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r5, 0x84, 0x80, 0x0, &(0x7f0000001040))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0xfffffffffffffd10}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0)

399.81332ms ago: executing program 1 (id=1710):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b1d38fa7525dfa4df9300000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fcdbdf25010000000800010001000000080001000000000008000200020000000800020002000000080001000000000008000200020000000800010001000000080002000200000008000200020000000800020002000000b14cb26a98e6a86c04"], 0x64}, 0x1, 0x0, 0x0, 0x4000020}, 0x80)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x1000009, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="050003"], 0x28}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r8, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

350.535331ms ago: executing program 2 (id=1711):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x7e)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x200480c1)
write$tun(r2, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0x4, 0xe6, 0x0, 0x7}]}}, "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"}}, 0xfce) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

299.75362ms ago: executing program 4 (id=1712):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a300000000009000300"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f", 0xf0}], 0x1}}], 0x1, 0x40)
sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)

189.460319ms ago: executing program 0 (id=1713):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
close(r0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r1, 0x2)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @private=0xa010101}, 0x10)
listen(0xffffffffffffffff, 0xa)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380))
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x40000000, 0x2}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3}, 0x10)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500004000002020207b1af8ff00001e00bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x2080004, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x20000c, 0x5, 0x20000}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800800000000000850a602200000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000020001000000000000feff000000000000000000d4f842450b8bb43b92692f7d5a23118c8c026055cf5ca386c461761232226dfa3ffeb58008609453bb58dbf0dc32da3bbefeee762d6b2bbd457d4fbb873f0d4c3933450dd91d397618ae3224779dae73ea23d49edf6f562bf8aa5bfd7ca14d7766c18d12885829cdb23de3dd6b7b17380c54e859b4f725b58b4207296e68e2e23182b3684d5b047d"], 0x50)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000100)={0x0, 'syzkaller1\x00', {0x2}, 0xb4f})
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001", @ANYRES64=r8], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0102000000000000000002000003300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269576765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000)

113.224431ms ago: executing program 1 (id=1714):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x50, 0x14, 0x10, 0x70bd28, 0x25dfdbfe, {0x2, 0x18, 0x54, 0xff, r2}, [@IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000a5}, 0x4008000)
r3 = accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10, 0x80000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000300)={'tunl0\x00', r2, 0x0, 0x8, 0x2, 0x5, {{0x1e, 0x4, 0x1, 0x1, 0x78, 0x68, 0x0, 0x1, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, {[@cipso={0x86, 0x12, 0xffffffffffffffff, [{0x2, 0x9, "2d4453760463f9"}, {0x1, 0x3, "a0"}]}, @timestamp_addr={0x44, 0x1c, 0x52, 0x1, 0x4, [{@rand_addr=0x64010101, 0x8}, {@multicast2, 0x8}, {@remote, 0x7c}]}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x5, 0x7, "976c313322"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x88, [@rand_addr=0x64010100, @private=0xa010102, @loopback, @empty]}, @rr={0x7, 0xf, 0x29, [@loopback, @remote, @multicast2]}]}}}}})
recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/7, 0x7}, {&(0x7f00000006c0)=""/215, 0xd7}], 0x2}, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
accept4(r0, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x50, 0x14, 0x10, 0x70bd28, 0x25dfdbfe, {0x2, 0x18, 0x54, 0xff, r2}, [@IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000a5}, 0x4008000) (async)
accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10, 0x80000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000300)={'tunl0\x00', r2, 0x0, 0x8, 0x2, 0x5, {{0x1e, 0x4, 0x1, 0x1, 0x78, 0x68, 0x0, 0x1, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, {[@cipso={0x86, 0x12, 0xffffffffffffffff, [{0x2, 0x9, "2d4453760463f9"}, {0x1, 0x3, "a0"}]}, @timestamp_addr={0x44, 0x1c, 0x52, 0x1, 0x4, [{@rand_addr=0x64010101, 0x8}, {@multicast2, 0x8}, {@remote, 0x7c}]}, @cipso={0x86, 0xd, 0xffffffffffffffff, [{0x5, 0x7, "976c313322"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x88, [@rand_addr=0x64010100, @private=0xa010102, @loopback, @empty]}, @rr={0x7, 0xf, 0x29, [@loopback, @remote, @multicast2]}]}}}}}) (async)
recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/7, 0x7}, {&(0x7f00000006c0)=""/215, 0xd7}], 0x2}, 0x0) (async)

42.728496ms ago: executing program 2 (id=1715):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000028c0)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507"], 0x30}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfff}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40081}, 0xc0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0)

0s ago: executing program 1 (id=1716):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r5, 0x713, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r7, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
connect$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xc}}, 0x10) (async)
connect$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xc}}, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="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", 0x109}], 0x1}, 0x0) (async)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200001f2ebf31adb02c5e15799b61afe8168b783db56fe01fafc29e5cea7ab9fa6e40be1439e983239ae90eb13abf5a4db7d0a3624fec88483f083759c48be4e0ec5ae0e86a909debba75e4da2bd374fc00cb187982b878870e8a1883631505b08ca4916aa9f1734840dbc07ba87b3d228ec1e9a30652c91769c6ba702caeaa1e52d7dcedbce24be3622ba041f6847dda6d47edfd0fa59bc84fc4e8ebf2645521612cce3e067c616b7792e3b12234a7606e1a01c6bdc89a7348ca63bbf9eb01e1d9812dea3fcb9b0059871b44e935ab092679234133a26a42879b890b291062897a3570a72f17339f59d44b887c", 0x109}], 0x1}, 0x0)
socket$pppoe(0x18, 0x1, 0x0) (async)
r10 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) (async)
connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r10, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r12, 0x21eae}}, 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

z.4.328'.
[  117.206658][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'.
[  117.236773][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'.
[  117.722744][ T7398] ieee802154 phy0 wpan0: encryption failed: -22
[  117.755194][ T7398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.340'.
[  117.826168][ T7398] netlink: 'syz.0.340': attribute type 2 has an invalid length.
[  117.872382][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.344'.
[  117.885640][ T7415] ieee802154 phy0 wpan0: encryption failed: -22
[  117.907136][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'.
[  118.008365][ T7398] : entered promiscuous mode
[  118.146379][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'.
[  119.527507][ T7474] syzkaller0: entered promiscuous mode
[  119.533140][ T7474] syzkaller0: entered allmulticast mode
[  119.570053][ T7476] __nla_validate_parse: 3 callbacks suppressed
[  119.570069][ T7476] netlink: 64 bytes leftover after parsing attributes in process `syz.2.360'.
[  119.661391][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'.
[  119.829757][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'.
[  119.839362][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'.
[  120.232619][ T7504] Can't find ip_set type hash:ip$mec
[  120.572142][ T7521] netlink: 'syz.1.372': attribute type 10 has an invalid length.
[  120.595538][ T7521] 8021q: adding VLAN 0 to HW filter on device team0
[  120.638414][ T7521] bond0: (slave team0): Enslaving as an active interface with an up link
[  121.264142][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'.
[  121.285664][ T7544] syzkaller1: entered promiscuous mode
[  121.291161][ T7544] syzkaller1: entered allmulticast mode
[  121.366205][ T7549] IPVS: Error connecting to the multicast addr
[  122.002477][ T7571] wg1 speed is unknown, defaulting to 1000
[  122.055691][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'.
[  122.100687][ T7580] netlink: 'syz.4.387': attribute type 21 has an invalid length.
[  122.203375][   T30] audit: type=1107 audit(1764661219.841:3): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¤Ën²cg¤ˆ_‘(Ôûît@¹Ä¶*¼¨üÎHîuÛZ.„ÓgçB&¿šrÕDÝéKÒFÕ2ÑB®R�)Ò±_±gT¸hᘟåtFµAÒ¼ãšÂC&ø+FŠ›�Ê‹š1]ÔÅJC‡Ü¢P'
[  122.208755][ T7590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.271405][ T7589] dvmrp1: entered allmulticast mode
[  122.287190][ T7591] dvmrp1: left allmulticast mode
[  122.566400][ T7610] netlink: 'syz.0.395': attribute type 1 has an invalid length.
[  122.574222][ T7610] netlink: 'syz.0.395': attribute type 3 has an invalid length.
[  122.581865][ T7610] netlink: 'syz.0.395': attribute type 2 has an invalid length.
[  122.602436][ T7610] netlink: 'syz.0.395': attribute type 3 has an invalid length.
[  122.616215][ T7610] netlink: 184 bytes leftover after parsing attributes in process `syz.0.395'.
[  122.785495][ T7626] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  122.819566][ T7631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.825117][ T7626] bridge_slave_0: left allmulticast mode
[  122.826995][ T7631] IPv6: NLM_F_CREATE should be set when creating new route
[  122.832760][ T7626] bridge_slave_0: left promiscuous mode
[  122.839918][ T7631] IPv6: NLM_F_CREATE should be set when creating new route
[  122.859418][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.876665][ T7626] bridge_slave_1: left allmulticast mode
[  122.882425][ T7626] bridge_slave_1: left promiscuous mode
[  122.888907][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.901857][ T7626] bond0: (slave bond_slave_0): Releasing backup interface
[  122.917131][ T7626] bond0: (slave bond_slave_1): Releasing backup interface
[  122.932929][ T7635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.401'.
[  122.950494][ T7626] team0: Port device team_slave_0 removed
[  122.966720][ T7626] team0: Port device team_slave_1 removed
[  122.974370][ T7626] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.981878][ T7626] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.988690][ T7637] netlink: 'syz.3.400': attribute type 10 has an invalid length.
[  122.998921][ T7626] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.006809][ T7626] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.017499][ T7626] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  123.035018][ T7628] tipc: Started in network mode
[  123.047835][ T7628] tipc: Node identity 82de9712993c, cluster identity 4711
[  123.055640][ T7628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.109624][ T7637] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  123.138305][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.147869][ T7637] bond0: (slave wlan1): Opening slave failed
[  123.162223][ T7628] tipc: Resetting bearer <eth:syzkaller0>
[  123.227884][ T7641] syzkaller1: entered promiscuous mode
[  123.233965][ T7641] syzkaller1: entered allmulticast mode
[  123.441608][ T7658] netlink: 108 bytes leftover after parsing attributes in process `syz.4.407'.
[  123.446690][ T7657] batadv1: entered promiscuous mode
[  123.662328][ T7657] wg1 speed is unknown, defaulting to 1000
[  123.819239][ T7679] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  123.901475][ T7679] netlink: 'syz.3.412': attribute type 3 has an invalid length.
[  123.909964][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'.
[  124.218295][ T5826] tipc: Node number set to 467834642
[  124.594413][ T7722] xt_hashlimit: max too large, truncated to 1048576
[  124.601627][ T7722] xt_bpf: check failed: parse error
[  124.638243][ T7726] netlink: 'syz.2.422': attribute type 7 has an invalid length.
[  124.701753][ T7728] syzkaller0: entered promiscuous mode
[  124.707525][ T7728] syzkaller0: entered allmulticast mode
[  124.724430][ T7728] __nla_validate_parse: 1 callbacks suppressed
[  124.724449][ T7728] netlink: 48 bytes leftover after parsing attributes in process `syz.2.422'.
[  125.036728][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'.
[  125.218996][ T7744] wg1 speed is unknown, defaulting to 1000
[  125.261986][ T7747] netlink: 32 bytes leftover after parsing attributes in process `syz.4.428'.
[  125.359216][ T7745] wg1 speed is unknown, defaulting to 1000
[  127.250260][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'.
[  127.277393][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'.
[  127.278280][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'.
[  127.294132][ T7796] bridge_slave_1: left allmulticast mode
[  127.305374][ T7796] bridge_slave_1: left promiscuous mode
[  127.311248][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.322660][ T7796] bridge_slave_0: left allmulticast mode
[  127.334830][ T7796] bridge_slave_0: left promiscuous mode
[  127.340826][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.369711][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'.
[  127.457044][ T7805] bridge_slave_1: left allmulticast mode
[  127.462727][ T7805] bridge_slave_1: left promiscuous mode
[  127.474077][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.486837][ T7805] bridge_slave_0: left allmulticast mode
[  127.492499][ T7805] bridge_slave_0: left promiscuous mode
[  127.506279][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.590739][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'.
[  127.669521][ T7811] bond2: option broadcast_neighbor: invalid value (5)
[  127.685277][ T7811] bond2 (unregistering): Released all slaves
[  128.080605][ T7836] netlink: 'syz.0.452': attribute type 2 has an invalid length.
[  128.744776][ T7865] wg1 speed is unknown, defaulting to 1000
[  129.141623][ T7880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.465'.
[  129.364029][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.466'.
[  129.820329][ T7906] netlink: 'syz.4.472': attribute type 1 has an invalid length.
[  129.862176][ T7906] 8021q: adding VLAN 0 to HW filter on device bond2
[  129.903934][ T7906] netlink: 'syz.4.472': attribute type 96 has an invalid length.
[  129.986209][ T7912] netlink: 'syz.0.474': attribute type 1 has an invalid length.
[  129.993076][ T7906] bond2: (slave ip6gretap1): making interface the new active one
[  130.009259][ T7906] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  130.055186][ T7911] veth3: entered promiscuous mode
[  130.065288][ T7911] bond2: (slave veth3): Enslaving as an active interface with a down link
[  130.110482][ T7906] erspan0: entered allmulticast mode
[  130.137030][ T7906] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  130.196719][ T7915] bond2: entered promiscuous mode
[  130.214151][ T7915] bond2: entered allmulticast mode
[  130.221026][ T7915] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.263920][ T7911] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  130.439834][ T7917] 8021q: adding VLAN 0 to HW filter on device bond3
[  130.460272][ T7917] bond3: entered promiscuous mode
[  130.473571][ T7917] bond3: entered allmulticast mode
[  130.480677][ T7917] bond2: (slave bond3): Enslaving as a backup interface with a down link
[  130.554294][ T7930] __nla_validate_parse: 1 callbacks suppressed
[  130.554312][ T7930] netlink: 52 bytes leftover after parsing attributes in process `syz.4.478'.
[  130.708755][ T7936] netlink: 'syz.0.480': attribute type 1 has an invalid length.
[  130.754619][ T7936] netlink: 52 bytes leftover after parsing attributes in process `syz.0.480'.
[  130.814818][ T7944] IPVS: set_ctl: invalid protocol: 137 172.30.0.5:20003
[  130.988139][ T7920] lec:lec_atm_close: lec0: Shut down!
[  131.062507][ T7954] wg1 speed is unknown, defaulting to 1000
[  131.682314][ T7974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.487'.
[  131.740955][ T7973] ip6gre1: entered promiscuous mode
[  131.782341][ T7973] ip6gre1: entered allmulticast mode
[  131.796485][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'.
[  131.843775][ T7975] veth0: entered promiscuous mode
[  131.961319][ T7981] wg1 speed is unknown, defaulting to 1000
[  132.025524][ T7975] wg1 speed is unknown, defaulting to 1000
[  132.169079][ T7969] veth0: left promiscuous mode
[  132.324341][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'.
[  132.333626][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.494'.
[  132.342963][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.494'.
[  132.555279][ T8014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.583704][ T8011] TCP: TCP_TX_DELAY enabled
[  132.718226][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  132.742117][ T8013] wg1 speed is unknown, defaulting to 1000
[  132.779968][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'.
[  133.098714][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'.
[  133.104487][ T8034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.499'.
[  133.236178][ T8036] ip6gre0: entered promiscuous mode
[  133.259926][ T8036] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  133.638698][ T8065] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  133.866342][ T8079] geneve3: entered promiscuous mode
[  133.871600][ T8079] geneve3: entered allmulticast mode
[  133.901433][ T8085] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  133.914663][ T8085] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  133.970773][   T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  133.993209][   T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  134.019666][   T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  134.040518][   T36] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  134.061836][ T8082] Bluetooth: MGMT ver 1.23
[  134.858150][ T8141] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.335539][ T8156] wg1 speed is unknown, defaulting to 1000
[  135.641305][ T8182] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.761363][ T8182] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.818878][ T8190] wg1 speed is unknown, defaulting to 1000
[  135.892900][ T8182] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.231939][ T8208] __nla_validate_parse: 13 callbacks suppressed
[  136.231959][ T8208] netlink: 128 bytes leftover after parsing attributes in process `syz.2.543'.
[  136.349306][ T8182] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.596529][   T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.695180][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'.
[  136.705092][ T8237] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  136.739633][   T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.767879][ T1114] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.789622][   T50] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.819973][ T8243] openvswitch: netlink: Multiple metadata blocks provided
[  136.892902][ T8246] netlink: 32 bytes leftover after parsing attributes in process `syz.0.552'.
[  136.979566][ T8253] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.161197][ T8254] netlink: 108 bytes leftover after parsing attributes in process `syz.3.553'.
[  137.227350][ T8254] netlink: 108 bytes leftover after parsing attributes in process `syz.3.553'.
[  137.245423][ T8254] netlink: 84 bytes leftover after parsing attributes in process `syz.3.553'.
[  137.330086][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'.
[  137.998581][ T8295] geneve4: entered promiscuous mode
[  138.045783][   T50] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20002 - 0
[  138.064753][   T50] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20002 - 0
[  138.106195][   T50] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20002 - 0
[  138.140443][   T50] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20002 - 0
[  138.321107][ T8309] syzkaller1: entered promiscuous mode
[  138.341407][ T8309] syzkaller1: entered allmulticast mode
[  138.378760][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.567'.
[  138.416003][ T8314] netlink: 60 bytes leftover after parsing attributes in process `syz.2.568'.
[  138.502769][ T8317] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  138.650049][ T8320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  138.716969][ T8320] syzkaller0: entered promiscuous mode
[  138.799197][ T8320] syzkaller0: entered allmulticast mode
[  139.029299][ T8330] ip6gre0: left promiscuous mode
[  139.111175][ T8330] geneve2: left promiscuous mode
[  139.140191][ T8330] geneve3: left promiscuous mode
[  139.151977][ T8330] geneve3: left allmulticast mode
[  139.181341][ T8330] geneve4: left promiscuous mode
[  139.268290][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  139.293905][ T8345] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  139.297744][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  139.340586][   T12] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20002 - 0
[  139.378024][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  139.405812][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  139.449095][   T12] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20002 - 0
[  139.475463][ T8351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'.
[  139.486766][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  139.505827][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  139.535672][   T12] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20002 - 0
[  139.560351][ T8339] wg1 speed is unknown, defaulting to 1000
[  139.560348][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  139.560376][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  139.580813][ T8365] netlink: 'syz.2.575': attribute type 1 has an invalid length.
[  139.605098][   T12] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20002 - 0
[  139.661419][ T8368] netlink: 'syz.3.579': attribute type 1 has an invalid length.
[  139.687511][ T8368] netlink: 'syz.3.579': attribute type 3 has an invalid length.
[  140.582211][ T8419] IPVS: length: 47 != 24
[  140.598785][ T8418] xt_connbytes: Forcing CT accounting to be enabled
[  140.618605][ T8418] xt_CT: You must specify a L4 protocol and not use inversions on it
[  140.978731][ T8442] netlink: 'syz.4.596': attribute type 23 has an invalid length.
[  141.061962][ T8443] netlink: 'syz.4.596': attribute type 23 has an invalid length.
[  141.210378][ T8451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.255114][ T8451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  141.300001][ T8464] veth0: entered promiscuous mode
[  141.381621][ T8451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.418661][ T8451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  141.480211][ T8476] netlink: 'syz.4.605': attribute type 1 has an invalid length.
[  141.486071][ T8464] veth0: left promiscuous mode
[  141.599144][ T8488] __nla_validate_parse: 9 callbacks suppressed
[  141.599162][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.604'.
[  141.679378][ T8451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.708722][ T8451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  141.742063][ T8489] bond3: entered promiscuous mode
[  141.749437][ T8489] bond3: entered allmulticast mode
[  141.757702][ T8489] 8021q: adding VLAN 0 to HW filter on device bond3
[  141.817757][ T8476] 8021q: adding VLAN 0 to HW filter on device bond4
[  141.826392][ T8476] bond4: entered promiscuous mode
[  141.831696][ T8476] bond4: entered allmulticast mode
[  141.839766][ T8476] bond3: (slave bond4): Enslaving as a backup interface with a down link
[  141.890084][ T8503] netlink: 36 bytes leftover after parsing attributes in process `syz.3.608'.
[  141.910373][ T8451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.922680][ T8451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[  142.088184][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.113578][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20002 - 0
[  142.175174][ T3509] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.202513][ T3509] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  142.227837][ T8521] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.610'.
[  142.240456][ T8521] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  142.265636][ T3509] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.284080][ T3509] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  142.312714][ T3509] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.331994][ T3509] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  142.386950][ T8527] ip6tnl1: entered allmulticast mode
[  142.418763][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'.
[  142.431862][ T8533] netlink: 3 bytes leftover after parsing attributes in process `syz.0.613'.
[  142.461437][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.614'.
[  142.543220][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'.
[  142.851560][ T8562] vxcan1: tx address claim with dlc 0
[  143.629266][ T8590] syzkaller0: entered promiscuous mode
[  143.649964][ T8590] syzkaller0: entered allmulticast mode
[  143.990092][ T8614] syzkaller0: entered promiscuous mode
[  143.995883][ T8614] syzkaller0: entered allmulticast mode
[  144.702091][ T8625] openvswitch: netlink: Multiple metadata blocks provided
[  146.127715][ T8649] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.654:8649
[  146.149205][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'.
[  146.222556][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'.
[  147.562178][ T8672] vlan2: entered promiscuous mode
[  147.568216][ T8672] batadv0: entered promiscuous mode
[  147.589851][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.660'.
[  147.614729][ T8678] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.036173][ T8696] netlink: 124 bytes leftover after parsing attributes in process `syz.4.665'.
[  148.095211][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'.
[  148.128391][ T8696] nbd: must specify an index to disconnect
[  148.487657][ T8715] Ï: option downdelay: invalid value (18446744073709547007)
[  148.499943][ T8715] Ï: option downdelay: allowed values 0 - 2147483647
[  148.536861][ T8715] Ï (unregistering): Released all slaves
[  148.657000][ T8724] netlink: 72 bytes leftover after parsing attributes in process `syz.3.673'.
[  148.668197][ T8724] erspan0: mtu less than device minimum
[  148.800175][ T8732] netlink: 'syz.0.676': attribute type 12 has an invalid length.
[  148.927173][ T8743] x_tables: duplicate underflow at hook 1
[  149.295381][ T8761] netlink: 48 bytes leftover after parsing attributes in process `syz.0.685'.
[  149.325407][ T8771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.494136][ T5825] Bluetooth: hci4: link tx timeout
[  149.502695][ T5825] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.711406][ T8788] batman_adv: batadv0: Adding interface: dummy0
[  149.724011][ T8788] batman_adv: batadv0: Interface activated: dummy0
[  150.154852][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'.
[  150.238001][ T8810] syzkaller1: entered promiscuous mode
[  150.244333][ T8810] syzkaller1: entered allmulticast mode
[  150.380331][ T8816] macvlan3: entered allmulticast mode
[  150.387850][ T8816] veth1_vlan: entered allmulticast mode
[  150.400605][ T8816] bond0: (slave macvlan3): Enslaving as an active interface with an up link
[  150.486292][ T8818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.703'.
[  150.508368][ T8818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.703'.
[  150.616752][ T8826] batman_adv: batadv0: Adding interface: vlan2
[  150.624535][ T8826] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.659576][ T8826] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  150.782790][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.705'.
[  150.852203][ T8837] wg1 speed is unknown, defaulting to 1000
[  150.867247][ T8840] netlink: 44 bytes leftover after parsing attributes in process `syz.3.709'.
[  151.332371][ T8842] wg1 speed is unknown, defaulting to 1000
[  151.390763][ T8850] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  151.435478][ T8850] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  151.454331][ T8850] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  151.513845][ T5825] Bluetooth: hci4: command 0x0405 tx timeout
[  151.692037][ T8856] netlink: 'syz.2.715': attribute type 1 has an invalid length.
[  152.534724][ T8881] 0ªX¹¦À: renamed from caif0
[  152.542920][ T8881] 0ªX¹¦À: entered allmulticast mode
[  152.549045][ T8881] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  152.637460][ T8884] __nla_validate_parse: 3 callbacks suppressed
[  152.637476][ T8884] netlink: 68 bytes leftover after parsing attributes in process `syz.0.721'.
[  152.777249][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'.
[  152.802375][ T8881] hsr_slave_0: left promiscuous mode
[  152.835254][ T8881] hsr_slave_1: left promiscuous mode
[  152.941365][ T8895] syzkaller0: entered promiscuous mode
[  152.977596][ T8895] syzkaller0: entered allmulticast mode
[  154.265876][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.740'.
[  155.066438][ T8975] netlink: 'syz.2.746': attribute type 6 has an invalid length.
[  155.260727][ T8980] netlink: 104 bytes leftover after parsing attributes in process `syz.2.746'.
[  156.146225][   T67] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  156.223425][ T8986] netlink: 'syz.3.747': attribute type 6 has an invalid length.
[  156.239471][   T67] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  156.248229][   T67] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  156.274410][   T67] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  156.282917][ T8988] netlink: 'syz.3.747': attribute type 6 has an invalid length.
[  156.805340][ T9003] wg1 speed is unknown, defaulting to 1000
[  157.049542][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'.
[  157.120879][ T9015] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.756'.
[  157.169986][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.0.757'.
[  157.191541][ T9013] dummy0: left allmulticast mode
[  157.200269][ T9013] bridge0: port 3(dummy0) entered disabled state
[  157.218503][ T9013] bridge_slave_1: left allmulticast mode
[  157.236637][ T9013] bridge_slave_1: left promiscuous mode
[  157.259107][ T9013] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.307846][ T9013] bridge_slave_0: left allmulticast mode
[  157.317889][ T9013] bridge_slave_0: left promiscuous mode
[  157.331314][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'.
[  157.352460][ T9013] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.420738][ T9016] 8021q: VLANs not supported on wg0
[  157.700843][ T9016] batadv_slave_0: entered promiscuous mode
[  157.819097][ T9014] batadv_slave_0: left promiscuous mode
[  157.912458][ T9046] wg1 speed is unknown, defaulting to 1000
[  158.292094][ T9062] netlink: 7 bytes leftover after parsing attributes in process `syz.1.772'.
[  158.307069][ T9062] netlink: 'syz.1.772': attribute type 1 has an invalid length.
[  158.334453][ T9062] netlink: 224 bytes leftover after parsing attributes in process `syz.1.772'.
[  158.467156][ T9069] netlink: 56 bytes leftover after parsing attributes in process `syz.1.772'.
[  158.548907][ T9069] bond2 (unregistering): Released all slaves
[  158.624679][ T9067] netlink: 52 bytes leftover after parsing attributes in process `syz.4.771'.
[  158.701692][ T9078] netlink: 'syz.2.774': attribute type 13 has an invalid length.
[  158.710688][ T9078] netlink: 'syz.2.774': attribute type 17 has an invalid length.
[  158.930426][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'.
[  158.940159][ T9092] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  158.953921][ T9078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.992294][ T9092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.344796][ T9116] syzkaller0: entered promiscuous mode
[  159.362617][ T9116] syzkaller0: entered allmulticast mode
[  159.535879][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'.
[  159.622641][ T9133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.634900][ T9133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.709152][ T9133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.725817][ T9133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.822120][ T9133] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.834858][ T9133] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.856968][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'.
[  159.925688][ T9133] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.941496][ T9133] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.077977][ T9154] syzkaller0: entered promiscuous mode
[  160.084940][ T9154] syzkaller0: entered allmulticast mode
[  160.201803][   T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.212318][   T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.270618][ T3509] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.303992][ T3509] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.352447][   T67] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.393022][   T67] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.439523][   T67] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.469351][   T67] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.950459][ T9211] netlink: 'syz.2.816': attribute type 1 has an invalid length.
[  161.015931][ T9212] syzkaller0: entered promiscuous mode
[  161.021506][ T9212] syzkaller0: entered allmulticast mode
[  161.040107][ T9194] mac80211_hwsim hwsim7 ªªªªª;: renamed from wlan0
[  161.158386][ T9217] netlink: 'syz.4.818': attribute type 10 has an invalid length.
[  161.168888][ T9217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.818'.
[  161.225398][ T9217] batadv0: entered promiscuous mode
[  161.230725][ T9217] batadv0: entered allmulticast mode
[  161.238654][ T9217] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  161.326923][ T9217] netlink: 'syz.4.818': attribute type 1 has an invalid length.
[  161.777554][ T9246] dvmrp0: entered allmulticast mode
[  161.786757][ T9250] netlink: 'syz.1.830': attribute type 1 has an invalid length.
[  161.839230][ T9250] 8021q: adding VLAN 0 to HW filter on device bond2
[  161.865788][ T9253] 8021q: adding VLAN 0 to HW filter on device batadv1
[  161.878921][ T9253] bond2: (slave batadv1): making interface the new active one
[  161.888870][ T9253] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  161.922450][ T9250] syzkaller0: entered promiscuous mode
[  161.928212][ T9250] syzkaller0: entered allmulticast mode
[  161.957684][ T9256] netlink: 'syz.0.821': attribute type 3 has an invalid length.
[  161.970882][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'.
[  162.005148][ T9259] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  162.019130][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'.
[  162.040913][ T9259] batman_adv: batadv0: Interface deactivated: dummy0
[  162.055451][ T9259] batman_adv: batadv0: Removing interface: dummy0
[  162.067674][ T9259] bridge_slave_0: left allmulticast mode
[  162.074928][ T9259] bridge_slave_0: left promiscuous mode
[  162.080808][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.091659][ T9265] netlink: 'syz.2.832': attribute type 10 has an invalid length.
[  162.092490][ T9259] bridge_slave_1: left allmulticast mode
[  162.107802][ T9259] bridge_slave_1: left promiscuous mode
[  162.113901][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.127574][ T9259] bond0: (slave 
3
0
): Releasing backup interface
[  162.137540][ T9259] bond0: (slave bond_slave_1): Releasing backup interface
[  162.150118][ T9259] team0: Port device team_slave_0 removed
[  162.161115][ T9259] team0: Port device team_slave_1 removed
[  162.168654][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.176661][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.185952][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.194325][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.204716][ T9259] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  162.306129][ T9250] bond2 (unregistering): (slave batadv1): Releasing active interface
[  162.316512][ T9250] bond2 (unregistering): Released all slaves
[  162.332531][ T9265] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  162.355734][ T9265] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.377417][ T9265] bond0: (slave wlan1): Opening slave failed
[  162.486074][ T9271] openvswitch: netlink: Flow actions attr not present in new flow.
[  162.536308][ T9273] wg1 speed is unknown, defaulting to 1000
[  162.599165][ T9276] batadv0: entered promiscuous mode
[  162.607707][ T9276] macvtap1: entered promiscuous mode
[  162.616548][ T9276] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  162.689237][ T9276] batadv0: left promiscuous mode
[  162.818225][ T9287] syzkaller0: Caught tx_queue_len zero misconfig
[  162.896467][ T9299] syzkaller0: entered promiscuous mode
[  162.902427][ T9299] syzkaller0: entered allmulticast mode
[  162.995144][ T9287] wg1 speed is unknown, defaulting to 1000
[  163.461255][ T9325] netlink: 4308 bytes leftover after parsing attributes in process `syz.2.853'.
[  163.537314][ T9335] syzkaller0: entered promiscuous mode
[  163.542899][ T9335] syzkaller0: entered allmulticast mode
[  163.598488][ T9339] FAULT_INJECTION: forcing a failure.
[  163.598488][ T9339] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  163.624254][ T9339] CPU: 0 UID: 0 PID: 9339 Comm: syz.2.858 Not tainted syzkaller #0 PREEMPT(full) 
[  163.624279][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  163.624289][ T9339] Call Trace:
[  163.624297][ T9339]  <TASK>
[  163.624305][ T9339]  dump_stack_lvl+0x189/0x250
[  163.624332][ T9339]  ? __pfx____ratelimit+0x10/0x10
[  163.624352][ T9339]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.624372][ T9339]  ? __pfx__printk+0x10/0x10
[  163.624390][ T9339]  ? __might_fault+0xb0/0x130
[  163.624423][ T9339]  should_fail_ex+0x414/0x560
[  163.624452][ T9339]  _copy_from_user+0x2d/0xb0
[  163.624474][ T9339]  smc_setsockopt+0x3b8/0xab0
[  163.624497][ T9339]  ? __pfx_smc_setsockopt+0x10/0x10
[  163.624513][ T9339]  ? aa_sock_opt_perm+0xff/0x1b0
[  163.624539][ T9339]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  163.624556][ T9339]  ? __pfx_smc_setsockopt+0x10/0x10
[  163.624575][ T9339]  do_sock_setsockopt+0x17c/0x1b0
[  163.624599][ T9339]  __x64_sys_setsockopt+0x13f/0x1b0
[  163.624622][ T9339]  do_syscall_64+0xfa/0xfa0
[  163.624643][ T9339]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.624661][ T9339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.624677][ T9339]  ? clear_bhb_loop+0x60/0xb0
[  163.624696][ T9339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.624710][ T9339] RIP: 0033:0x7feb95b8f749
[  163.624726][ T9339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.624740][ T9339] RSP: 002b:00007feb96a29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  163.624756][ T9339] RAX: ffffffffffffffda RBX: 00007feb95de5fa0 RCX: 00007feb95b8f749
[  163.624767][ T9339] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  163.624777][ T9339] RBP: 00007feb96a29090 R08: 000000000000029c R09: 0000000000000000
[  163.624787][ T9339] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001
[  163.624797][ T9339] R13: 00007feb95de6038 R14: 00007feb95de5fa0 R15: 00007ffe5c40ebb8
[  163.624829][ T9339]  </TASK>
[  163.887023][ T9337] wg1 speed is unknown, defaulting to 1000
[  164.130436][ T9354] FAULT_INJECTION: forcing a failure.
[  164.130436][ T9354] name failslab, interval 1, probability 0, space 0, times 1
[  164.216063][ T9354] CPU: 1 UID: 0 PID: 9354 Comm: syz.2.862 Not tainted syzkaller #0 PREEMPT(full) 
[  164.216090][ T9354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  164.216099][ T9354] Call Trace:
[  164.216106][ T9354]  <TASK>
[  164.216114][ T9354]  dump_stack_lvl+0x189/0x250
[  164.216142][ T9354]  ? __pfx____ratelimit+0x10/0x10
[  164.216162][ T9354]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.216183][ T9354]  ? __pfx__printk+0x10/0x10
[  164.216207][ T9354]  ? __pfx___might_resched+0x10/0x10
[  164.216224][ T9354]  ? fs_reclaim_acquire+0x7d/0x100
[  164.216246][ T9354]  should_fail_ex+0x414/0x560
[  164.216280][ T9354]  should_failslab+0xa8/0x100
[  164.216299][ T9354]  __kmalloc_noprof+0xcb/0x7f0
[  164.216320][ T9354]  ? tomoyo_encode+0x28b/0x550
[  164.216350][ T9354]  tomoyo_encode+0x28b/0x550
[  164.216380][ T9354]  tomoyo_realpath_from_path+0x58d/0x5d0
[  164.216406][ T9354]  ? tomoyo_domain+0xd9/0x130
[  164.216429][ T9354]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  164.216449][ T9354]  tomoyo_path_number_perm+0x1e8/0x5a0
[  164.216474][ T9354]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  164.216549][ T9354]  ? __fget_files+0x2a/0x420
[  164.216571][ T9354]  ? __fget_files+0x3a0/0x420
[  164.216586][ T9354]  ? __fget_files+0x2a/0x420
[  164.216607][ T9354]  security_file_ioctl+0xcb/0x2d0
[  164.216630][ T9354]  __se_sys_ioctl+0x47/0x170
[  164.216654][ T9354]  do_syscall_64+0xfa/0xfa0
[  164.216672][ T9354]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.216693][ T9354]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.216709][ T9354]  ? clear_bhb_loop+0x60/0xb0
[  164.216729][ T9354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.216745][ T9354] RIP: 0033:0x7feb95b8f749
[  164.216761][ T9354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.216775][ T9354] RSP: 002b:00007feb96a29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  164.216794][ T9354] RAX: ffffffffffffffda RBX: 00007feb95de5fa0 RCX: 00007feb95b8f749
[  164.216807][ T9354] RDX: 0000200000000100 RSI: 0000000000008905 RDI: 0000000000000003
[  164.216818][ T9354] RBP: 00007feb96a29090 R08: 0000000000000000 R09: 0000000000000000
[  164.216828][ T9354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.216838][ T9354] R13: 00007feb95de6038 R14: 00007feb95de5fa0 R15: 00007ffe5c40ebb8
[  164.216870][ T9354]  </TASK>
[  164.218074][ T9354] ERROR: Out of memory at tomoyo_realpath_from_path.
[  164.539554][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.866'.
[  164.656294][ T9375] xt_bpf: check failed: parse error
[  164.836479][ T9379] IPVS: Error connecting to the multicast addr
[  165.226598][ T9408] wg1 speed is unknown, defaulting to 1000
[  165.557247][ T9433] netlink: 'syz.2.879': attribute type 10 has an invalid length.
[  165.565256][ T9433] netlink: 40 bytes leftover after parsing attributes in process `syz.2.879'.
[  165.640835][ T9433] team0: Port device geneve0 added
[  165.662182][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.883'.
[  165.840934][ T9440] netlink: 'syz.4.883': attribute type 1 has an invalid length.
[  165.957778][ T9444] netlink: 'syz.4.883': attribute type 12 has an invalid length.
[  166.222699][ T9463] wg1 speed is unknown, defaulting to 1000
[  166.572289][ T9480] wg1 speed is unknown, defaulting to 1000
[  167.058159][ T9506] syzkaller0: entered promiscuous mode
[  167.076379][ T9506] syzkaller0: entered allmulticast mode
[  167.376125][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.386549][ T9509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.408793][ T9505] tipc: Resetting bearer <eth:syzkaller0>
[  167.451214][ T9505] tipc: Disabling bearer <eth:syzkaller0>
[  167.682249][ T9524] netlink: 'syz.0.905': attribute type 1 has an invalid length.
[  167.741435][ T9524] netlink: 228 bytes leftover after parsing attributes in process `syz.0.905'.
[  167.759375][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'.
[  168.035635][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'.
[  168.165683][ T9541] netlink: 148 bytes leftover after parsing attributes in process `syz.3.909'.
[  168.939901][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'.
[  169.195912][ T9592] netlink: 'syz.0.925': attribute type 33 has an invalid length.
[  169.225300][ T9592] netlink: 152 bytes leftover after parsing attributes in process `syz.0.925'.
[  169.241033][ T9592] `: renamed from team0
[  169.317309][ T9600] wg1 speed is unknown, defaulting to 1000
[  169.369000][ T9600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.927'.
[  169.885995][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.925'.
[  170.076951][ T9612] vlan2: entered promiscuous mode
[  170.082033][ T9612] bond0: entered promiscuous mode
[  170.100460][ T9612] bond_slave_0: entered promiscuous mode
[  170.113619][ T9612] bond_slave_1: entered promiscuous mode
[  170.119657][ T9612] macvlan3: entered promiscuous mode
[  170.231204][ T9625] netlink: 32 bytes leftover after parsing attributes in process `syz.1.933'.
[  170.273713][ T9620] netlink: 'syz.1.933': attribute type 12 has an invalid length.
[  170.515141][ T9649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.522488][ T9649] IPv6: NLM_F_CREATE should be set when creating new route
[  170.529821][ T9649] IPv6: NLM_F_CREATE should be set when creating new route
[  170.925036][ T9657] netlink: 144 bytes leftover after parsing attributes in process `syz.1.942'.
[  171.004683][ T9660] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.119550][ T9657] wg1 speed is unknown, defaulting to 1000
[  171.618618][ T9694] tipc: Started in network mode
[  171.639003][ T9694] tipc: Node identity e0000001, cluster identity 4711
[  171.663045][ T9694] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  171.796433][ T9706] batadv_slave_1: entered promiscuous mode
[  171.805975][ T9705] batadv_slave_1: left promiscuous mode
[  171.844199][ T9700] x_tables: ip6_tables: mh match: only valid for protocol 135
[  171.857344][ T9710] netlink: 'syz.0.957': attribute type 1 has an invalid length.
[  171.866950][ T9710] netlink: 244 bytes leftover after parsing attributes in process `syz.0.957'.
[  172.089448][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'.
[  172.117780][ T9721] netlink: 'syz.0.960': attribute type 1 has an invalid length.
[  172.126082][ T9721] netlink: 224 bytes leftover after parsing attributes in process `syz.0.960'.
[  172.188434][ T9724] netlink: 56 bytes leftover after parsing attributes in process `syz.0.960'.
[  172.214879][ T9724] bond4 (unregistering): Released all slaves
[  172.265769][ T9727] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  172.949985][ T9760] xt_CT: No such helper "netbios-ns"
[  173.028748][ T9760] Bluetooth: MGMT ver 1.23
[  173.103091][ T9736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.292390][ T9780] wg1 speed is unknown, defaulting to 1000
[  173.324400][ T9786] netlink: 'syz.3.975': attribute type 8 has an invalid length.
[  173.480876][ T9789] wg1 speed is unknown, defaulting to 1000
[  173.862078][ T9813] wg1 speed is unknown, defaulting to 1000
[  173.933734][ T9807] wg1 speed is unknown, defaulting to 1000
[  174.285126][ T9825] wg1 speed is unknown, defaulting to 1000
[  174.454063][ T9844] openvswitch: netlink: nsh attr 60 is out of range max 3
[  174.491724][ T9844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.594881][ T9850] __nla_validate_parse: 1 callbacks suppressed
[  174.594899][ T9850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.993'.
[  174.639294][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'.
[  174.775108][ T9858] macvlan2: entered promiscuous mode
[  174.780440][ T9858] bond0: entered promiscuous mode
[  174.797532][ T9858] bond_slave_0: entered promiscuous mode
[  174.814763][ T9858] bond_slave_1: entered promiscuous mode
[  174.826085][ T9858] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  175.022842][ T9883] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  175.060322][ T9889] wg1 speed is unknown, defaulting to 1000
[  175.115038][   T52] Bluetooth: hci0: command tx timeout
[  175.145216][ T9890] wg1 speed is unknown, defaulting to 1000
[  175.358790][ T9904] xfrm1: entered allmulticast mode
[  176.132087][   T30] audit: type=1800 audit(1764661273.761:4): pid=9924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1009" name="memory.events" dev="tmpfs" ino=1190 res=0 errno=0
[  176.184895][ T9935] netlink: 'syz.0.1013': attribute type 10 has an invalid length.
[  176.193114][ T9935] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1013'.
[  176.441048][ T9944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1016'.
[  176.461563][ T9945] FAULT_INJECTION: forcing a failure.
[  176.461563][ T9945] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  176.491443][ T9945] CPU: 1 UID: 0 PID: 9945 Comm: syz.3.1017 Not tainted syzkaller #0 PREEMPT(full) 
[  176.491469][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  176.491480][ T9945] Call Trace:
[  176.491486][ T9945]  <TASK>
[  176.491494][ T9945]  dump_stack_lvl+0x189/0x250
[  176.491522][ T9945]  ? __pfx____ratelimit+0x10/0x10
[  176.491540][ T9945]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.491561][ T9945]  ? __pfx__printk+0x10/0x10
[  176.491580][ T9945]  ? __might_fault+0xb0/0x130
[  176.491613][ T9945]  should_fail_ex+0x414/0x560
[  176.491643][ T9945]  _copy_from_user+0x2d/0xb0
[  176.491666][ T9945]  smc_setsockopt+0x3b8/0xab0
[  176.491693][ T9945]  ? __pfx_smc_setsockopt+0x10/0x10
[  176.491711][ T9945]  ? aa_sock_opt_perm+0xff/0x1b0
[  176.491739][ T9945]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  176.491756][ T9945]  ? __pfx_smc_setsockopt+0x10/0x10
[  176.491783][ T9945]  do_sock_setsockopt+0x17c/0x1b0
[  176.491810][ T9945]  __x64_sys_setsockopt+0x13f/0x1b0
[  176.491835][ T9945]  do_syscall_64+0xfa/0xfa0
[  176.491853][ T9945]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.491873][ T9945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.491889][ T9945]  ? clear_bhb_loop+0x60/0xb0
[  176.491909][ T9945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.491925][ T9945] RIP: 0033:0x7f8721d8f749
[  176.491940][ T9945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.491952][ T9945] RSP: 002b:00007f8722c1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  176.491971][ T9945] RAX: ffffffffffffffda RBX: 00007f8721fe5fa0 RCX: 00007f8721d8f749
[  176.491982][ T9945] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  176.491991][ T9945] RBP: 00007f8722c1d090 R08: 000000000000029c R09: 0000000000000000
[  176.492002][ T9945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.492011][ T9945] R13: 00007f8721fe6038 R14: 00007f8721fe5fa0 R15: 00007ffd95cd9e98
[  176.492040][ T9945]  </TASK>
[  176.521222][ T9950] xt_connbytes: Forcing CT accounting to be enabled
[  176.712170][ T9955] syzkaller0: left promiscuous mode
[  176.718348][ T9955] syzkaller0: left allmulticast mode
[  176.837921][ T9954] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1020'.
[  177.307455][ T9987] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1031'.
[  177.439658][ T9961] infiniband syz1: set down
[  177.453489][ T9961] infiniband syz1: added bond0
[  177.559569][ T9961] RDS/IB: syz1: added
[  177.567970][ T9961] smc: adding ib device syz1 with port count 1
[  177.577120][ T9999] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1035'.
[  177.615927][ T9961] smc:    ib device syz1 port 1 has no pnetid
[  177.717802][T10011] lo: entered promiscuous mode
[  177.726104][T10011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.765176][T10012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.893155][T10017] bridge0: entered promiscuous mode
[  177.911827][T10017] macsec2: entered promiscuous mode
[  177.925152][T10017] bridge0: port 1(macsec2) entered blocking state
[  177.932869][T10017] bridge0: port 1(macsec2) entered disabled state
[  177.950460][T10017] macsec2: entered allmulticast mode
[  177.966215][T10017] bridge0: entered allmulticast mode
[  177.985636][T10017] macsec2: left allmulticast mode
[  178.000953][T10017] bridge0: left allmulticast mode
[  178.012499][T10017] bridge0: left promiscuous mode
[  178.181431][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'.
[  178.209846][T10027] 8021q: VLANs not supported on ip_vti0
[  178.246668][T10028] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1041'.
[  178.544357][T10033] wg1 speed is unknown, defaulting to 1000
[  178.615569][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'.
[  178.980705][T10066] ip6_vti0: mtu greater than device maximum
[  179.607285][T10085] batadv0: left promiscuous mode
[  179.769860][T10085] xfrm1: left allmulticast mode
[  179.782903][  T144] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.800826][  T144] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.835293][  T144] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.851748][  T144] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.958834][T10095] __nla_validate_parse: 2 callbacks suppressed
[  179.958852][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'.
[  180.049987][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'.
[  180.081242][T10101] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1060'.
[  180.111433][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'.
[  180.147232][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'.
[  180.280183][T10104] syzkaller1: entered promiscuous mode
[  180.311450][T10104] syzkaller1: entered allmulticast mode
[  180.442862][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'.
[  180.489394][T10109] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.1063'.
[  180.516815][T10109] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  180.855028][T10123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1068'.
[  180.942144][T10128] wg1 speed is unknown, defaulting to 1000
[  181.003465][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1072'.
[  181.122928][T10142] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1073'.
[  181.629683][T10161] netlink: 'syz.1.1081': attribute type 10 has an invalid length.
[  181.872929][T10174] netlink: 'syz.3.1085': attribute type 1 has an invalid length.
[  182.030094][T10174] bond3: entered promiscuous mode
[  182.045990][T10174] bond3: entered allmulticast mode
[  182.436525][T10197] wg1 speed is unknown, defaulting to 1000
[  182.554575][T10196] wg1 speed is unknown, defaulting to 1000
[  183.055282][ T5938] hid-generic 0005:0002:5508.0001: item fetching failed at offset 3/4
[  183.064827][ T5938] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22
[  183.250793][T10235] wg1 speed is unknown, defaulting to 1000
[  183.626719][T10248] netlink: 'syz.2.1102': attribute type 10 has an invalid length.
[  183.662841][T10248] veth0_vlan: left promiscuous mode
[  183.698395][T10248] veth0_vlan: entered promiscuous mode
[  183.708968][T10248] team0: Device veth0_vlan failed to register rx_handler
[  183.730240][T10250] netlink: 'syz.4.1101': attribute type 1 has an invalid length.
[  183.749021][T10255] netlink: 'syz.0.1103': attribute type 27 has an invalid length.
[  183.782242][T10257] xt_hashlimit: overflow, try lower: 2341871806232657920/9
[  183.802419][T10250] 8021q: adding VLAN 0 to HW filter on device bond5
[  184.225037][T10262] bond5 (unregistering): Released all slaves
[  184.582296][T10275] wg1 speed is unknown, defaulting to 1000
[  184.979009][T10289] netlink: 'syz.4.1110': attribute type 1 has an invalid length.
[  185.073699][T10298] netlink: 'syz.4.1114': attribute type 1 has an invalid length.
[  185.146277][T10298] __nla_validate_parse: 10 callbacks suppressed
[  185.146297][T10298] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1114'.
[  185.428130][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'.
[  185.625002][T10319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1115'.
[  185.637994][T10320] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1116'.
[  185.648867][T10319] nbd: must specify at least one socket
[  186.965592][T10310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1112'.
[  187.055157][T10324] wg1 speed is unknown, defaulting to 1000
[  187.147875][T10331] netlink: 'syz.1.1118': attribute type 1 has an invalid length.
[  187.180267][T10331] netlink: 'syz.1.1118': attribute type 1 has an invalid length.
[  187.232052][T10335] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  187.319591][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'.
[  187.357277][ T3509] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.366046][ T3509] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.448444][T10342] batman_adv: batadv0: Removing interface: vlan2
[  187.468978][T10342] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.638154][ T3509] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.666643][ T3509] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.691160][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'.
[  187.702129][T10348] netlink: 'syz.1.1124': attribute type 1 has an invalid length.
[  187.802882][T10348] 8021q: adding VLAN 0 to HW filter on device bond2
[  187.851315][T10349] bond2: (slave geneve5): making interface the new active one
[  187.876053][T10349] bond2: (slave geneve5): Enslaving as an active interface with an up link
[  187.897807][   T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.908798][   T67] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.936697][   T67] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.950393][   T67] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.022914][T10361] FAULT_INJECTION: forcing a failure.
[  188.022914][T10361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.062319][T10361] CPU: 0 UID: 0 PID: 10361 Comm: syz.1.1128 Not tainted syzkaller #0 PREEMPT(full) 
[  188.062366][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  188.062388][T10361] Call Trace:
[  188.062402][T10361]  <TASK>
[  188.062418][T10361]  dump_stack_lvl+0x189/0x250
[  188.062459][T10361]  ? __pfx____ratelimit+0x10/0x10
[  188.062480][T10361]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.062501][T10361]  ? __pfx__printk+0x10/0x10
[  188.062525][T10361]  ? __might_fault+0xb0/0x130
[  188.062560][T10361]  should_fail_ex+0x414/0x560
[  188.062590][T10361]  _copy_from_user+0x2d/0xb0
[  188.062613][T10361]  ___sys_sendmsg+0x158/0x2a0
[  188.062638][T10361]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.062696][T10361]  ? __fget_files+0x2a/0x420
[  188.062712][T10361]  ? __fget_files+0x3a0/0x420
[  188.062740][T10361]  __x64_sys_sendmsg+0x19b/0x260
[  188.062763][T10361]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.062793][T10361]  ? __pfx_ksys_write+0x10/0x10
[  188.062820][T10361]  ? do_syscall_64+0xbe/0xfa0
[  188.062844][T10361]  do_syscall_64+0xfa/0xfa0
[  188.062862][T10361]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.062882][T10361]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.062899][T10361]  ? clear_bhb_loop+0x60/0xb0
[  188.062919][T10361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.062935][T10361] RIP: 0033:0x7f1bee38f749
[  188.062958][T10361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.062972][T10361] RSP: 002b:00007f1bef2c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.062998][T10361] RAX: ffffffffffffffda RBX: 00007f1bee5e5fa0 RCX: 00007f1bee38f749
[  188.063011][T10361] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003
[  188.063022][T10361] RBP: 00007f1bef2c2090 R08: 0000000000000000 R09: 0000000000000000
[  188.063032][T10361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.063042][T10361] R13: 00007f1bee5e6038 R14: 00007f1bee5e5fa0 R15: 00007ffedfbd7b88
[  188.063073][T10361]  </TASK>
[  188.425962][T10367] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1127'.
[  188.600825][T10380] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  188.740886][T10393] syzkaller0: entered promiscuous mode
[  188.769557][T10393] syzkaller0: entered allmulticast mode
[  188.829315][T10392] tipc: Started in network mode
[  188.834390][T10392] tipc: Node identity , cluster identity 4711
[  188.840465][T10392] tipc: Failed to obtain node identity
[  188.853531][T10392] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  188.946724][T10398] bridge4: the hash_elasticity option has been deprecated and is always 16
[  188.949501][T10401] x_tables: ip_tables: icmp match: only valid for protocol 1
[  188.959531][T10398] bridge4: entered allmulticast mode
[  188.983101][T10399] bridge5: the hash_elasticity option has been deprecated and is always 16
[  188.993285][T10399] bridge5: entered allmulticast mode
[  189.069440][T10410] FAULT_INJECTION: forcing a failure.
[  189.069440][T10410] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.075704][T10401] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1135'.
[  189.087761][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.4.1138 Not tainted syzkaller #0 PREEMPT(full) 
[  189.087786][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  189.087796][T10410] Call Trace:
[  189.087803][T10410]  <TASK>
[  189.087810][T10410]  dump_stack_lvl+0x189/0x250
[  189.087839][T10410]  ? __pfx____ratelimit+0x10/0x10
[  189.087858][T10410]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.087880][T10410]  ? __pfx__printk+0x10/0x10
[  189.087896][T10410]  ? __might_fault+0xb0/0x130
[  189.087929][T10410]  should_fail_ex+0x414/0x560
[  189.087958][T10410]  _copy_from_user+0x2d/0xb0
[  189.087980][T10410]  ___sys_sendmsg+0x158/0x2a0
[  189.088003][T10410]  ? __pfx____sys_sendmsg+0x10/0x10
[  189.088056][T10410]  ? __fget_files+0x2a/0x420
[  189.088072][T10410]  ? __fget_files+0x3a0/0x420
[  189.088098][T10410]  __x64_sys_sendmsg+0x19b/0x260
[  189.088121][T10410]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  189.088150][T10410]  ? __pfx_ksys_write+0x10/0x10
[  189.088176][T10410]  ? do_syscall_64+0xbe/0xfa0
[  189.088198][T10410]  do_syscall_64+0xfa/0xfa0
[  189.088216][T10410]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.088235][T10410]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.088251][T10410]  ? clear_bhb_loop+0x60/0xb0
[  189.088271][T10410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.088285][T10410] RIP: 0033:0x7f2aa298f749
[  189.088301][T10410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.088314][T10410] RSP: 002b:00007f2aa38dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.088333][T10410] RAX: ffffffffffffffda RBX: 00007f2aa2be5fa0 RCX: 00007f2aa298f749
[  189.088345][T10410] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003
[  189.088356][T10410] RBP: 00007f2aa38dc090 R08: 0000000000000000 R09: 0000000000000000
[  189.088366][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.088375][T10410] R13: 00007f2aa2be6038 R14: 00007f2aa2be5fa0 R15: 00007ffdd0a2fc28
[  189.088412][T10410]  </TASK>
[  189.193900][T10413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1140'.
[  189.215846][T10416] FAULT_INJECTION: forcing a failure.
[  189.215846][T10416] name failslab, interval 1, probability 0, space 0, times 0
[  189.319566][T10416] CPU: 0 UID: 0 PID: 10416 Comm: syz.1.1141 Not tainted syzkaller #0 PREEMPT(full) 
[  189.319589][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  189.319599][T10416] Call Trace:
[  189.319606][T10416]  <TASK>
[  189.319613][T10416]  dump_stack_lvl+0x189/0x250
[  189.319639][T10416]  ? __pfx____ratelimit+0x10/0x10
[  189.319658][T10416]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.319679][T10416]  ? __pfx__printk+0x10/0x10
[  189.319699][T10416]  ? __pfx___might_resched+0x10/0x10
[  189.319717][T10416]  ? fs_reclaim_acquire+0x7d/0x100
[  189.319736][T10416]  should_fail_ex+0x414/0x560
[  189.319764][T10416]  should_failslab+0xa8/0x100
[  189.319781][T10416]  kmem_cache_alloc_node_noprof+0x77/0x710
[  189.319802][T10416]  ? __alloc_skb+0x255/0x430
[  189.319818][T10416]  ? napi_skb_cache_get+0x4a5/0x790
[  189.319833][T10416]  ? napi_skb_cache_get+0x151/0x790
[  189.319854][T10416]  __alloc_skb+0x255/0x430
[  189.319871][T10416]  ? __pfx___alloc_skb+0x10/0x10
[  189.319890][T10416]  ? netlink_autobind+0xdb/0x300
[  189.319908][T10416]  ? netlink_autobind+0x2c2/0x300
[  189.319933][T10416]  netlink_sendmsg+0x5c6/0xb30
[  189.319960][T10416]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.319984][T10416]  ? aa_sock_msg_perm+0xf1/0x1d0
[  189.320011][T10416]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  189.320027][T10416]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.320048][T10416]  __sock_sendmsg+0x21c/0x270
[  189.320073][T10416]  ____sys_sendmsg+0x505/0x830
[  189.320098][T10416]  ? __pfx_____sys_sendmsg+0x10/0x10
[  189.320127][T10416]  ? import_iovec+0x74/0xa0
[  189.320152][T10416]  ___sys_sendmsg+0x21f/0x2a0
[  189.320173][T10416]  ? __pfx____sys_sendmsg+0x10/0x10
[  189.320231][T10416]  ? __fget_files+0x2a/0x420
[  189.320246][T10416]  ? __fget_files+0x3a0/0x420
[  189.320270][T10416]  __x64_sys_sendmsg+0x19b/0x260
[  189.320293][T10416]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  189.320321][T10416]  ? __pfx_ksys_write+0x10/0x10
[  189.320346][T10416]  ? do_syscall_64+0xbe/0xfa0
[  189.320367][T10416]  do_syscall_64+0xfa/0xfa0
[  189.320391][T10416]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.320411][T10416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.320427][T10416]  ? clear_bhb_loop+0x60/0xb0
[  189.320445][T10416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.320458][T10416] RIP: 0033:0x7f1bee38f749
[  189.320477][T10416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.320489][T10416] RSP: 002b:00007f1bef2c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.320505][T10416] RAX: ffffffffffffffda RBX: 00007f1bee5e5fa0 RCX: 00007f1bee38f749
[  189.320517][T10416] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003
[  189.320527][T10416] RBP: 00007f1bef2c2090 R08: 0000000000000000 R09: 0000000000000000
[  189.320536][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.320544][T10416] R13: 00007f1bee5e6038 R14: 00007f1bee5e5fa0 R15: 00007ffedfbd7b88
[  189.320573][T10416]  </TASK>
[  189.929940][T10438] wg1 speed is unknown, defaulting to 1000
[  190.264262][T10467] __nla_validate_parse: 3 callbacks suppressed
[  190.264280][T10467] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1154'.
[  190.347709][T10446] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1147'.
[  190.389092][T10462] wg1 speed is unknown, defaulting to 1000
[  190.669428][T10475] FAULT_INJECTION: forcing a failure.
[  190.669428][T10475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  190.687857][T10475] CPU: 0 UID: 0 PID: 10475 Comm: syz.3.1157 Not tainted syzkaller #0 PREEMPT(full) 
[  190.687882][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  190.687892][T10475] Call Trace:
[  190.687899][T10475]  <TASK>
[  190.687906][T10475]  dump_stack_lvl+0x189/0x250
[  190.687934][T10475]  ? __pfx____ratelimit+0x10/0x10
[  190.687954][T10475]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.687975][T10475]  ? __pfx__printk+0x10/0x10
[  190.687992][T10475]  ? __might_fault+0xb0/0x130
[  190.688024][T10475]  should_fail_ex+0x414/0x560
[  190.688055][T10475]  _copy_from_iter+0x1de/0x1790
[  190.688074][T10475]  ? kmem_cache_alloc_node_noprof+0x483/0x710
[  190.688096][T10475]  ? kmalloc_reserve+0xbd/0x290
[  190.688128][T10475]  ? __pfx__copy_from_iter+0x10/0x10
[  190.688145][T10475]  ? __alloc_skb+0x2f1/0x430
[  190.688165][T10475]  ? __pfx___alloc_skb+0x10/0x10
[  190.688185][T10475]  ? netlink_sendmsg+0x642/0xb30
[  190.688205][T10475]  ? skb_put+0x11b/0x210
[  190.688226][T10475]  netlink_sendmsg+0x6b2/0xb30
[  190.688257][T10475]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.688281][T10475]  ? aa_sock_msg_perm+0xf1/0x1d0
[  190.688307][T10475]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  190.688324][T10475]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.688354][T10475]  __sock_sendmsg+0x21c/0x270
[  190.688382][T10475]  ____sys_sendmsg+0x505/0x830
[  190.688408][T10475]  ? __pfx_____sys_sendmsg+0x10/0x10
[  190.688438][T10475]  ? import_iovec+0x74/0xa0
[  190.688462][T10475]  ___sys_sendmsg+0x21f/0x2a0
[  190.688481][T10475]  ? __pfx____sys_sendmsg+0x10/0x10
[  190.688534][T10475]  ? __fget_files+0x2a/0x420
[  190.688548][T10475]  ? __fget_files+0x3a0/0x420
[  190.688571][T10475]  __x64_sys_sendmsg+0x19b/0x260
[  190.688592][T10475]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  190.688622][T10475]  ? __pfx_ksys_write+0x10/0x10
[  190.688647][T10475]  ? do_syscall_64+0xbe/0xfa0
[  190.688671][T10475]  do_syscall_64+0xfa/0xfa0
[  190.688689][T10475]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.688708][T10475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.688725][T10475]  ? clear_bhb_loop+0x60/0xb0
[  190.688744][T10475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.688760][T10475] RIP: 0033:0x7f8721d8f749
[  190.688776][T10475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.688788][T10475] RSP: 002b:00007f8722c1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.688805][T10475] RAX: ffffffffffffffda RBX: 00007f8721fe5fa0 RCX: 00007f8721d8f749
[  190.688821][T10475] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003
[  190.688832][T10475] RBP: 00007f8722c1d090 R08: 0000000000000000 R09: 0000000000000000
[  190.688843][T10475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.688853][T10475] R13: 00007f8721fe6038 R14: 00007f8721fe5fa0 R15: 00007ffd95cd9e98
[  190.688884][T10475]  </TASK>
[  191.352917][T10483] wg1 speed is unknown, defaulting to 1000
[  191.404573][T10495] FAULT_INJECTION: forcing a failure.
[  191.404573][T10495] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  191.434890][T10495] CPU: 1 UID: 0 PID: 10495 Comm: syz.1.1163 Not tainted syzkaller #0 PREEMPT(full) 
[  191.434916][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  191.434926][T10495] Call Trace:
[  191.434932][T10495]  <TASK>
[  191.434940][T10495]  dump_stack_lvl+0x189/0x250
[  191.434965][T10495]  ? __pfx____ratelimit+0x10/0x10
[  191.434983][T10495]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.435004][T10495]  ? __pfx__printk+0x10/0x10
[  191.435020][T10495]  ? __might_fault+0xb0/0x130
[  191.435052][T10495]  should_fail_ex+0x414/0x560
[  191.435082][T10495]  _copy_from_iter+0x1de/0x1790
[  191.435100][T10495]  ? kmem_cache_alloc_node_noprof+0x483/0x710
[  191.435122][T10495]  ? kmalloc_reserve+0xbd/0x290
[  191.435151][T10495]  ? __pfx__copy_from_iter+0x10/0x10
[  191.435168][T10495]  ? __alloc_skb+0x2f1/0x430
[  191.435188][T10495]  ? __pfx___alloc_skb+0x10/0x10
[  191.435207][T10495]  ? netlink_sendmsg+0x642/0xb30
[  191.435225][T10495]  ? skb_put+0x11b/0x210
[  191.435247][T10495]  netlink_sendmsg+0x6b2/0xb30
[  191.435276][T10495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.435298][T10495]  ? aa_sock_msg_perm+0xf1/0x1d0
[  191.435323][T10495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  191.435340][T10495]  ? __pfx_netlink_sendmsg+0x10/0x10
[  191.435361][T10495]  __sock_sendmsg+0x21c/0x270
[  191.435389][T10495]  ____sys_sendmsg+0x505/0x830
[  191.435415][T10495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  191.435445][T10495]  ? import_iovec+0x74/0xa0
[  191.435477][T10495]  ___sys_sendmsg+0x21f/0x2a0
[  191.435498][T10495]  ? __pfx____sys_sendmsg+0x10/0x10
[  191.435554][T10495]  ? __fget_files+0x2a/0x420
[  191.435570][T10495]  ? __fget_files+0x3a0/0x420
[  191.435595][T10495]  __x64_sys_sendmsg+0x19b/0x260
[  191.435619][T10495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  191.435649][T10495]  ? __pfx_ksys_write+0x10/0x10
[  191.435677][T10495]  ? do_syscall_64+0xbe/0xfa0
[  191.435701][T10495]  do_syscall_64+0xfa/0xfa0
[  191.435719][T10495]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.435738][T10495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.435755][T10495]  ? clear_bhb_loop+0x60/0xb0
[  191.435774][T10495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.435790][T10495] RIP: 0033:0x7f1bee38f749
[  191.435806][T10495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.435820][T10495] RSP: 002b:00007f1bef2c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.435837][T10495] RAX: ffffffffffffffda RBX: 00007f1bee5e5fa0 RCX: 00007f1bee38f749
[  191.435849][T10495] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003
[  191.435859][T10495] RBP: 00007f1bef2c2090 R08: 0000000000000000 R09: 0000000000000000
[  191.435868][T10495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.435878][T10495] R13: 00007f1bee5e6038 R14: 00007f1bee5e5fa0 R15: 00007ffedfbd7b88
[  191.435908][T10495]  </TASK>
[  191.926563][T10505] netlink: 'syz.0.1167': attribute type 1 has an invalid length.
[  191.942999][T10510] openvswitch: netlink: VXLAN extension message has 8 unknown bytes.
[  192.108301][T10520] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1168'.
[  192.121585][T10522] netlink: 'syz.2.1170': attribute type 21 has an invalid length.
[  192.139445][T10522] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1170'.
[  192.149590][T10522] netlink: 'syz.2.1170': attribute type 21 has an invalid length.
[  192.158489][T10521] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  192.158699][T10522] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1170'.
[  192.167355][T10521] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  192.275761][T10525] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.409653][T10533] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1173'.
[  192.604140][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'.
[  192.611052][T10540] IPv6: sit1: Disabled Multicast RS
[  192.833745][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'.
[  192.885618][T10552] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1179'.
[  192.907900][T10559] FAULT_INJECTION: forcing a failure.
[  192.907900][T10559] name failslab, interval 1, probability 0, space 0, times 0
[  192.933290][T10559] CPU: 0 UID: 0 PID: 10559 Comm: syz.1.1181 Not tainted syzkaller #0 PREEMPT(full) 
[  192.933313][T10559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  192.933323][T10559] Call Trace:
[  192.933330][T10559]  <TASK>
[  192.933339][T10559]  dump_stack_lvl+0x189/0x250
[  192.933373][T10559]  ? __pfx____ratelimit+0x10/0x10
[  192.933395][T10559]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.933417][T10559]  ? __pfx__printk+0x10/0x10
[  192.933442][T10559]  ? __pfx___might_resched+0x10/0x10
[  192.933460][T10559]  ? fs_reclaim_acquire+0x7d/0x100
[  192.933482][T10559]  should_fail_ex+0x414/0x560
[  192.933513][T10559]  should_failslab+0xa8/0x100
[  192.933533][T10559]  __kmalloc_noprof+0xcb/0x7f0
[  192.933555][T10559]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  192.933573][T10559]  ? is_bpf_text_address+0x26/0x2b0
[  192.933598][T10559]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  192.933624][T10559]  genl_family_rcv_msg_doit+0xb8/0x300
[  192.933650][T10559]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  192.933676][T10559]  ? apparmor_capable+0x137/0x1b0
[  192.933698][T10559]  ? bpf_lsm_capable+0x9/0x20
[  192.933717][T10559]  ? security_capable+0x7e/0x2e0
[  192.933747][T10559]  genl_rcv_msg+0x60e/0x790
[  192.933771][T10559]  ? __pfx_genl_rcv_msg+0x10/0x10
[  192.933786][T10559]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  192.933809][T10559]  ? __pfx_nl80211_connect+0x10/0x10
[  192.933825][T10559]  ? __pfx_nl80211_post_doit+0x10/0x10
[  192.933864][T10559]  netlink_rcv_skb+0x208/0x470
[  192.933883][T10559]  ? __lock_acquire+0xab9/0xd20
[  192.933902][T10559]  ? __pfx_genl_rcv_msg+0x10/0x10
[  192.933923][T10559]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  192.933965][T10559]  ? down_read+0x1ad/0x2e0
[  192.933991][T10559]  genl_rcv+0x28/0x40
[  192.934012][T10559]  netlink_unicast+0x82f/0x9e0
[  192.934042][T10559]  ? __pfx_netlink_unicast+0x10/0x10
[  192.934064][T10559]  ? netlink_sendmsg+0x642/0xb30
[  192.934082][T10559]  ? skb_put+0x11b/0x210
[  192.934104][T10559]  netlink_sendmsg+0x805/0xb30
[  192.934135][T10559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.934160][T10559]  ? aa_sock_msg_perm+0xf1/0x1d0
[  192.934186][T10559]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  192.934203][T10559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.934225][T10559]  __sock_sendmsg+0x21c/0x270
[  192.934254][T10559]  ____sys_sendmsg+0x505/0x830
[  192.934282][T10559]  ? __pfx_____sys_sendmsg+0x10/0x10
[  192.934313][T10559]  ? import_iovec+0x74/0xa0
[  192.934339][T10559]  ___sys_sendmsg+0x21f/0x2a0
[  192.934370][T10559]  ? __pfx____sys_sendmsg+0x10/0x10
[  192.934432][T10559]  ? __fget_files+0x2a/0x420
[  192.934448][T10559]  ? __fget_files+0x3a0/0x420
[  192.934477][T10559]  __x64_sys_sendmsg+0x19b/0x260
[  192.934502][T10559]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  192.934534][T10559]  ? __pfx_ksys_write+0x10/0x10
[  192.934562][T10559]  ? do_syscall_64+0xbe/0xfa0
[  192.934587][T10559]  do_syscall_64+0xfa/0xfa0
[  192.934606][T10559]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.934625][T10559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.934642][T10559]  ? clear_bhb_loop+0x60/0xb0
[  192.934664][T10559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.934680][T10559] RIP: 0033:0x7f1bee38f749
[  192.934696][T10559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.934711][T10559] RSP: 002b:00007f1bef2c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.934732][T10559] RAX: ffffffffffffffda RBX: 00007f1bee5e5fa0 RCX: 00007f1bee38f749
[  192.934745][T10559] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003
[  192.934757][T10559] RBP: 00007f1bef2c2090 R08: 0000000000000000 R09: 0000000000000000
[  192.934768][T10559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.934779][T10559] R13: 00007f1bee5e6038 R14: 00007f1bee5e5fa0 R15: 00007ffedfbd7b88
[  192.934813][T10559]  </TASK>
[  193.404221][T10567] FAULT_INJECTION: forcing a failure.
[  193.404221][T10567] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  193.419195][T10567] CPU: 0 UID: 0 PID: 10567 Comm: syz.1.1185 Not tainted syzkaller #0 PREEMPT(full) 
[  193.419220][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  193.419230][T10567] Call Trace:
[  193.419236][T10567]  <TASK>
[  193.419244][T10567]  dump_stack_lvl+0x189/0x250
[  193.419271][T10567]  ? __pfx____ratelimit+0x10/0x10
[  193.419298][T10567]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.419320][T10567]  ? __pfx__printk+0x10/0x10
[  193.419338][T10567]  ? __might_fault+0xb0/0x130
[  193.419372][T10567]  should_fail_ex+0x414/0x560
[  193.419402][T10567]  _copy_from_user+0x2d/0xb0
[  193.419424][T10567]  ___sys_sendmsg+0x158/0x2a0
[  193.419449][T10567]  ? __pfx____sys_sendmsg+0x10/0x10
[  193.419507][T10567]  ? __fget_files+0x2a/0x420
[  193.419523][T10567]  ? __fget_files+0x3a0/0x420
[  193.419550][T10567]  __x64_sys_sendmsg+0x19b/0x260
[  193.419574][T10567]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  193.419604][T10567]  ? __pfx_ksys_write+0x10/0x10
[  193.419630][T10567]  ? do_syscall_64+0xbe/0xfa0
[  193.419654][T10567]  do_syscall_64+0xfa/0xfa0
[  193.419673][T10567]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.419693][T10567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.419709][T10567]  ? clear_bhb_loop+0x60/0xb0
[  193.419730][T10567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.419746][T10567] RIP: 0033:0x7f1bee38f749
[  193.419762][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.419777][T10567] RSP: 002b:00007f1bef2c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.419794][T10567] RAX: ffffffffffffffda RBX: 00007f1bee5e5fa0 RCX: 00007f1bee38f749
[  193.419807][T10567] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[  193.419818][T10567] RBP: 00007f1bef2c2090 R08: 0000000000000000 R09: 0000000000000000
[  193.419829][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.419839][T10567] R13: 00007f1bee5e6038 R14: 00007f1bee5e5fa0 R15: 00007ffedfbd7b88
[  193.419871][T10567]  </TASK>
[  193.641974][T10569] openvswitch: netlink: Multiple metadata blocks provided
[  193.670932][T10565] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  193.735876][T10578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1188'.
[  193.751676][T10580] netlink: 'syz.1.1187': attribute type 12 has an invalid length.
[  193.762772][T10580] netlink: 'syz.1.1187': attribute type 4 has an invalid length.
[  194.146746][T10605] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  194.585136][T10628] netlink: 'syz.0.1206': attribute type 1 has an invalid length.
[  194.635381][T10628] 8021q: adding VLAN 0 to HW filter on device bond4
[  196.236599][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  196.240538][ T5840] Bluetooth: hci2: command 0x0406 tx timeout
[  196.245399][ T5147] Bluetooth: hci3: command 0x0406 tx timeout
[  196.248803][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  196.790165][T10646] __nla_validate_parse: 8 callbacks suppressed
[  196.790183][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1208'.
[  196.807824][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1208'.
[  196.824173][T10651] tipc: Enabling of bearer <udp:skz0> rejected, failed to enable media
[  196.856002][T10640] wg1 speed is unknown, defaulting to 1000
[  197.151552][T10673] FAULT_INJECTION: forcing a failure.
[  197.151552][T10673] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.168791][T10673] CPU: 0 UID: 0 PID: 10673 Comm: syz.1.1218 Not tainted syzkaller #0 PREEMPT(full) 
[  197.168818][T10673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  197.168828][T10673] Call Trace:
[  197.168836][T10673]  <TASK>
[  197.168843][T10673]  dump_stack_lvl+0x189/0x250
[  197.168872][T10673]  ? __pfx____ratelimit+0x10/0x10
[  197.168892][T10673]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.168914][T10673]  ? __pfx__printk+0x10/0x10
[  197.168933][T10673]  ? __might_fault+0xb0/0x130
[  197.168969][T10673]  should_fail_ex+0x414/0x560
[  197.168999][T10673]  _copy_from_user+0x2d/0xb0
[  197.169021][T10673]  kstrtouint_from_user+0xc4/0x170
[  197.169044][T10673]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  197.169082][T10673]  proc_fail_nth_write+0x88/0x200
[  197.169103][T10673]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  197.169131][T10673]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  197.169154][T10673]  vfs_write+0x27e/0xb30
[  197.169187][T10673]  ? __pfx_vfs_write+0x10/0x10
[  197.169211][T10673]  ? __fget_files+0x2a/0x420
[  197.169232][T10673]  ? __fget_files+0x3a0/0x420
[  197.169246][T10673]  ? __fget_files+0x2a/0x420
[  197.169270][T10673]  ksys_write+0x145/0x250
[  197.169296][T10673]  ? __pfx_ksys_write+0x10/0x10
[  197.169322][T10673]  ? do_syscall_64+0xbe/0xfa0
[  197.169346][T10673]  do_syscall_64+0xfa/0xfa0
[  197.169364][T10673]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.169384][T10673]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.169401][T10673]  ? clear_bhb_loop+0x60/0xb0
[  197.169422][T10673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.169439][T10673] RIP: 0033:0x7f1bee38e1ff
[  197.169455][T10673] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  197.169471][T10673] RSP: 002b:00007f1bef2c2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  197.169490][T10673] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1bee38e1ff
[  197.169503][T10673] RDX: 0000000000000001 RSI: 00007f1bef2c20a0 RDI: 0000000000000004
[  197.169514][T10673] RBP: 00007f1bef2c2090 R08: 0000000000000000 R09: 0000000000000000
[  197.169525][T10673] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  197.169536][T10673] R13: 00007f1bee5e6038 R14: 00007f1bee5e5fa0 R15: 00007ffedfbd7b88
[  197.169569][T10673]  </TASK>
[  197.410967][T10675] wg1 speed is unknown, defaulting to 1000
[  198.030237][T10693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1220'.
[  198.069820][T10687] wg1 speed is unknown, defaulting to 1000
[  198.828853][T10725] bridge0: entered promiscuous mode
[  198.841603][T10727] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1230'.
[  198.863077][T10729] atomic_op ffff88802d7b6998 conn xmit_atomic 0000000000000000
[  198.875678][T10732] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1230'.
[  198.877501][T10725] bridge0: port 1(vlan3) entered blocking state
[  198.892762][T10725] bridge0: port 1(vlan3) entered disabled state
[  198.899832][T10725] vlan3: entered allmulticast mode
[  198.905868][T10725] bridge0: entered allmulticast mode
[  198.915574][T10725] vlan3: left allmulticast mode
[  198.922792][T10725] bridge0: left allmulticast mode
[  198.929851][T10725] bridge0: left promiscuous mode
[  198.976360][T10733] netlink: 'syz.3.1222': attribute type 10 has an invalid length.
[  199.008695][T10733] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.030688][T10733] team0: Port device bond0 added
[  199.040061][T10727] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.132747][T10727] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.346944][T10727] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.461846][T10727] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.655634][T10772] FAULT_INJECTION: forcing a failure.
[  199.655634][T10772] name failslab, interval 1, probability 0, space 0, times 0
[  199.686569][T10772] CPU: 1 UID: 0 PID: 10772 Comm: syz.0.1239 Not tainted syzkaller #0 PREEMPT(full) 
[  199.686597][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  199.686608][T10772] Call Trace:
[  199.686616][T10772]  <TASK>
[  199.686624][T10772]  dump_stack_lvl+0x189/0x250
[  199.686650][T10772]  ? __pfx____ratelimit+0x10/0x10
[  199.686671][T10772]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.686693][T10772]  ? __pfx__printk+0x10/0x10
[  199.686717][T10772]  ? __pfx___might_resched+0x10/0x10
[  199.686756][T10772]  should_fail_ex+0x414/0x560
[  199.686786][T10772]  should_failslab+0xa8/0x100
[  199.686807][T10772]  kmem_cache_alloc_node_noprof+0x77/0x710
[  199.686830][T10772]  ? ovs_flow_alloc+0x103/0x1f0
[  199.686851][T10772]  ? ovs_flow_alloc+0x24/0x1f0
[  199.686879][T10772]  ovs_flow_alloc+0x103/0x1f0
[  199.686905][T10772]  ovs_flow_cmd_new+0x1ee/0xd80
[  199.686935][T10772]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  199.687014][T10772]  ? rcu_is_watching+0x15/0xb0
[  199.687038][T10772]  ? __nla_parse+0x40/0x60
[  199.687060][T10772]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  199.687087][T10772]  genl_family_rcv_msg_doit+0x215/0x300
[  199.687112][T10772]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  199.687143][T10772]  ? bpf_lsm_capable+0x9/0x20
[  199.687163][T10772]  ? security_capable+0x7e/0x2e0
[  199.687192][T10772]  genl_rcv_msg+0x60e/0x790
[  199.687216][T10772]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.687231][T10772]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  199.687267][T10772]  netlink_rcv_skb+0x208/0x470
[  199.687285][T10772]  ? __lock_acquire+0xab9/0xd20
[  199.687303][T10772]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.687321][T10772]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  199.687362][T10772]  ? down_read+0x1ad/0x2e0
[  199.687388][T10772]  genl_rcv+0x28/0x40
[  199.687410][T10772]  netlink_unicast+0x82f/0x9e0
[  199.687435][T10772]  ? __pfx_netlink_unicast+0x10/0x10
[  199.687456][T10772]  ? netlink_sendmsg+0x642/0xb30
[  199.687474][T10772]  ? skb_put+0x11b/0x210
[  199.687497][T10772]  netlink_sendmsg+0x805/0xb30
[  199.687529][T10772]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.687553][T10772]  ? aa_sock_msg_perm+0xf1/0x1d0
[  199.687580][T10772]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.687596][T10772]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.687618][T10772]  __sock_sendmsg+0x21c/0x270
[  199.687646][T10772]  ____sys_sendmsg+0x505/0x830
[  199.687673][T10772]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.687704][T10772]  ? import_iovec+0x74/0xa0
[  199.687730][T10772]  ___sys_sendmsg+0x21f/0x2a0
[  199.687761][T10772]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.687822][T10772]  ? __fget_files+0x2a/0x420
[  199.687839][T10772]  ? __fget_files+0x3a0/0x420
[  199.687867][T10772]  __x64_sys_sendmsg+0x19b/0x260
[  199.687892][T10772]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.687923][T10772]  ? __pfx_ksys_write+0x10/0x10
[  199.687950][T10772]  ? do_syscall_64+0xbe/0xfa0
[  199.687975][T10772]  do_syscall_64+0xfa/0xfa0
[  199.687993][T10772]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.688012][T10772]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.688029][T10772]  ? clear_bhb_loop+0x60/0xb0
[  199.688049][T10772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.688066][T10772] RIP: 0033:0x7f7ce598f749
[  199.688082][T10772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.688096][T10772] RSP: 002b:00007f7ce67a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.688115][T10772] RAX: ffffffffffffffda RBX: 00007f7ce5be5fa0 RCX: 00007f7ce598f749
[  199.688128][T10772] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[  199.688139][T10772] RBP: 00007f7ce67a7090 R08: 0000000000000000 R09: 0000000000000000
[  199.688151][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.688161][T10772] R13: 00007f7ce5be6038 R14: 00007f7ce5be5fa0 R15: 00007ffe4b0df718
[  199.688194][T10772]  </TASK>
[  200.161375][ T3509] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.172405][ T3509] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.181973][ T3509] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.207006][T10779] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1238'.
[  200.232841][T10775] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  200.299671][  T144] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.320889][T10786] gtp1: entered promiscuous mode
[  200.326203][T10786] gtp1: entered allmulticast mode
[  200.413890][T10792] netlink: 'syz.2.1245': attribute type 1 has an invalid length.
[  200.526115][T10795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.534121][T10795] syzkaller0: entered promiscuous mode
[  200.542779][T10795] syzkaller0: entered allmulticast mode
[  200.590832][T10806] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  200.603150][T10806] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  200.661149][   T30] audit: type=1800 audit(1764661298.261:5): pid=10791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1243" name="memory.events" dev="tmpfs" ino=1357 res=0 errno=0
[  200.772986][T10792] bond2: (slave bridge2): Enslaving as an active interface with a down link
[  200.792428][T10811] netlink: 1548 bytes leftover after parsing attributes in process `syz.4.1250'.
[  200.809146][T10811] openvswitch: netlink: Multiple metadata blocks provided
[  200.822370][T10805] tipc: Resetting bearer <eth:syzkaller0>
[  200.839277][T10794] tipc: Resetting bearer <eth:syzkaller0>
[  200.887778][T10794] tipc: Disabling bearer <eth:syzkaller0>
[  200.912734][T10799] macvlan0: entered promiscuous mode
[  200.919737][T10799] macvlan0: entered allmulticast mode
[  200.928685][T10799] bond2: entered promiscuous mode
[  200.936269][T10799] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  200.972443][T10799] bond2: left promiscuous mode
[  200.987849][T10822] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1253'.
[  201.011075][T10822] netlink: 'syz.4.1253': attribute type 5 has an invalid length.
[  201.180527][T10824] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  201.197712][T10824] bond3 (unregistering): Released all slaves
[  201.492632][T10846] netlink: 'syz.4.1260': attribute type 8 has an invalid length.
[  201.636229][T10854] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1257'.
[  201.947354][T10870] netlink: 'syz.0.1264': attribute type 13 has an invalid length.
[  201.991589][T10870] netlink: 'syz.0.1264': attribute type 17 has an invalid length.
[  202.158949][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'.
[  202.347266][T10885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.526283][T10885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.991877][T10870] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.001022][T10870] 8021q: adding VLAN 0 to HW filter on device `
[  204.016609][T10870] 0ªX¹¦À: left allmulticast mode
[  204.021597][T10870] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  204.039605][T10879] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  204.162980][T10900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1269'.
[  204.186362][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1269'.
[  204.202052][T10874] wg1 speed is unknown, defaulting to 1000
[  204.212721][T10878] wg1 speed is unknown, defaulting to 1000
[  204.328615][T10905] wg1 speed is unknown, defaulting to 1000
[  205.035567][T10931] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1277'.
[  207.173547][T10939] syzkaller0: entered promiscuous mode
[  207.179063][T10939] syzkaller0: entered allmulticast mode
[  207.367579][T10947] ip6gre1: entered allmulticast mode
[  207.817235][T10971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.886474][T10976] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1289'.
[  207.886474][T10978] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1289'.
[  207.926708][T10981] openvswitch: netlink: Message has 4 unknown bytes.
[  207.942265][T10976] netlink: 'syz.1.1289': attribute type 1 has an invalid length.
[  207.950467][T10976] netlink: 'syz.1.1289': attribute type 1 has an invalid length.
[  207.963674][T10976] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.1289'.
[  208.249316][T10997] sch_tbf: burst 0 is lower than device tunl0 mtu (32769) !
[  208.275813][T10997] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  208.302655][T11001] tipc: New replicast peer: 255.255.255.255
[  208.324304][T11001] tipc: Enabled bearer <udp:s>, priority 10
[  208.492999][T11015] xt_hashlimit: overflow, rate too high: 0
[  208.704980][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'.
[  208.924480][T11016] wg1 speed is unknown, defaulting to 1000
[  209.038097][T11040] openvswitch: netlink: Message has 4 unknown bytes.
[  209.330396][T11053] netlink: 'syz.4.1316': attribute type 58 has an invalid length.
[  209.346212][T11053] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1316'.
[  209.375193][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1316'.
[  209.386337][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'.
[  209.418802][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1314'.
[  209.772262][T11077] syzkaller0: left promiscuous mode
[  209.791386][T11077] syzkaller0: left allmulticast mode
[  209.889723][T11083] netlink: 'syz.3.1324': attribute type 46 has an invalid length.
[  209.938976][T11086] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  209.995502][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'.
[  210.149245][T11090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1327'.
[  210.306650][T11095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1329'.
[  210.335745][T11095] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  210.366556][T11095] netlink: 'syz.3.1329': attribute type 5 has an invalid length.
[  210.871292][T11121] netlink: 'syz.1.1338': attribute type 29 has an invalid length.
[  210.964966][T11125] unsupported nla_type 58
[  210.970896][T11129] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  210.984466][T11121] netlink: 'syz.1.1338': attribute type 29 has an invalid length.
[  211.208349][T11145] netlink: 'syz.0.1344': attribute type 1 has an invalid length.
[  211.262079][T11142] delete_channel: no stack
[  211.283880][T11146] bond5: Unable to set up delay as MII monitoring is disabled
[  211.304251][T11146] bond5 (unregistering): Released all slaves
[  211.930684][T11182] wg1 speed is unknown, defaulting to 1000
[  212.523917][T11224] tc_dump_action: action bad kind
[  212.761995][T11242] netlink: 'syz.3.1372': attribute type 21 has an invalid length.
[  212.935438][T11242] netlink: 'syz.3.1372': attribute type 4 has an invalid length.
[  212.955668][T11253] netlink: 'syz.4.1375': attribute type 5 has an invalid length.
[  212.964171][T11253] __nla_validate_parse: 17 callbacks suppressed
[  212.964186][T11253] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1375'.
[  212.976510][T11242] netlink: 'syz.3.1372': attribute type 5 has an invalid length.
[  213.012034][T11257] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.1376'.
[  213.015616][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1374'.
[  213.027629][T11242] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1372'.
[  213.088126][T11257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1376'.
[  213.240788][T11266] openvswitch: netlink: Multiple metadata blocks provided
[  213.286861][T11269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1378'.
[  213.529785][T11281] syzkaller0: entered promiscuous mode
[  213.541245][T11281] syzkaller0: entered allmulticast mode
[  213.625351][T11273] wg1 speed is unknown, defaulting to 1000
[  213.727702][T11292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1386'.
[  213.874886][T11296] wg1 speed is unknown, defaulting to 1000
[  213.921227][T11299] syzkaller0: entered promiscuous mode
[  213.927701][T11299] syzkaller0: entered allmulticast mode
[  213.985832][T11301] wg1 speed is unknown, defaulting to 1000
[  214.299466][T11308] netlink: 'syz.4.1391': attribute type 3 has an invalid length.
[  214.454496][T11315] netlink: 'syz.2.1392': attribute type 3 has an invalid length.
[  214.472899][T11315] netlink: 'syz.2.1392': attribute type 3 has an invalid length.
[  214.487684][T11315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1392'.
[  214.504026][T11316] IPVS: set_ctl: invalid protocol: 88 10.1.1.1:20001
[  214.605966][T11319] lo: entered allmulticast mode
[  214.628728][T11317] lo: left allmulticast mode
[  216.004263][T11360] IPVS: set_ctl: invalid protocol: 58 172.20.20.32:20001
[  216.029611][T11361] netlink: 'syz.4.1405': attribute type 3 has an invalid length.
[  216.037681][T11361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1405'.
[  216.197151][T11367] FAULT_INJECTION: forcing a failure.
[  216.197151][T11367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.227598][T11367] CPU: 0 UID: 0 PID: 11367 Comm: syz.0.1407 Not tainted syzkaller #0 PREEMPT(full) 
[  216.227625][T11367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  216.227636][T11367] Call Trace:
[  216.227643][T11367]  <TASK>
[  216.227652][T11367]  dump_stack_lvl+0x189/0x250
[  216.227681][T11367]  ? __pfx____ratelimit+0x10/0x10
[  216.227701][T11367]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.227723][T11367]  ? __pfx__printk+0x10/0x10
[  216.227740][T11367]  ? __might_fault+0xb0/0x130
[  216.227774][T11367]  should_fail_ex+0x414/0x560
[  216.227804][T11367]  _copy_from_user+0x2d/0xb0
[  216.227827][T11367]  kstrtouint_from_user+0xc4/0x170
[  216.227849][T11367]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  216.227886][T11367]  proc_fail_nth_write+0x88/0x200
[  216.227908][T11367]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  216.227936][T11367]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  216.227959][T11367]  vfs_write+0x27e/0xb30
[  216.227993][T11367]  ? __pfx_vfs_write+0x10/0x10
[  216.228017][T11367]  ? __fget_files+0x2a/0x420
[  216.228039][T11367]  ? __fget_files+0x3a0/0x420
[  216.228058][T11367]  ? __fget_files+0x2a/0x420
[  216.228085][T11367]  ksys_write+0x145/0x250
[  216.228111][T11367]  ? __pfx_ksys_write+0x10/0x10
[  216.228137][T11367]  ? do_syscall_64+0xbe/0xfa0
[  216.228162][T11367]  do_syscall_64+0xfa/0xfa0
[  216.228181][T11367]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.228202][T11367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.228219][T11367]  ? clear_bhb_loop+0x60/0xb0
[  216.228241][T11367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.228257][T11367] RIP: 0033:0x7f7ce598e1ff
[  216.228274][T11367] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  216.228290][T11367] RSP: 002b:00007f7ce6786030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  216.228309][T11367] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7ce598e1ff
[  216.228322][T11367] RDX: 0000000000000001 RSI: 00007f7ce67860a0 RDI: 0000000000000004
[  216.228333][T11367] RBP: 00007f7ce6786090 R08: 0000000000000000 R09: 0000000000000000
[  216.228350][T11367] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  216.228360][T11367] R13: 00007f7ce5be6128 R14: 00007f7ce5be6090 R15: 00007ffe4b0df718
[  216.228394][T11367]  </TASK>
[  216.840297][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1413'.
[  217.128318][T11400] wg1 speed is unknown, defaulting to 1000
[  217.543016][T11421] wg1 speed is unknown, defaulting to 1000
[  217.683439][T11429] 8021q: adding VLAN 0 to HW filter on device bond5
[  217.758184][T11431] vlan2: entered allmulticast mode
[  217.771960][T11431] erspan0: entered allmulticast mode
[  217.782101][T11390] syz.3.1413 (11390) used greatest stack depth: 17640 bytes left
[  217.817654][T11431] bond5: (slave vlan2): Enslaving as an active interface with an up link
[  218.615534][T11460] netlink: 'syz.0.1429': attribute type 8 has an invalid length.
[  218.655932][T11457] wg1 speed is unknown, defaulting to 1000
[  219.094311][T11473] netlink: 'syz.2.1431': attribute type 8 has an invalid length.
[  219.114376][ T5829] Bluetooth: hci0: command 0x0406 tx timeout
[  219.120925][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  219.232619][T11475] netlink: 'syz.2.1431': attribute type 29 has an invalid length.
[  219.259377][T11475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.305230][T11475] __nla_validate_parse: 1 callbacks suppressed
[  219.305248][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'.
[  219.671141][T11472] wg1 speed is unknown, defaulting to 1000
[  219.700127][T11441] Can't find ip_set type hash:n
[  219.730232][T11463] wg1 speed is unknown, defaulting to 1000
[  220.585361][T11485] syzkaller0: entered promiscuous mode
[  220.590895][T11485] syzkaller0: entered allmulticast mode
[  220.605035][T11485] syzkaller0: mtu less than device minimum
[  221.206512][T11491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1436'.
[  221.584463][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'.
[  221.743523][T11503] wg1 speed is unknown, defaulting to 1000
[  221.865292][T11514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1442'.
[  222.155737][T11523] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1443'.
[  222.241085][T11527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1445'.
[  222.452969][T11535] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1448'.
[  222.504345][T11535] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  222.559631][T11542] FAULT_INJECTION: forcing a failure.
[  222.559631][T11542] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.594081][T11542] CPU: 0 UID: 0 PID: 11542 Comm: syz.4.1450 Not tainted syzkaller #0 PREEMPT(full) 
[  222.594107][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  222.594118][T11542] Call Trace:
[  222.594126][T11542]  <TASK>
[  222.594133][T11542]  dump_stack_lvl+0x189/0x250
[  222.594162][T11542]  ? __pfx____ratelimit+0x10/0x10
[  222.594182][T11542]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.594204][T11542]  ? __pfx__printk+0x10/0x10
[  222.594223][T11542]  ? __might_fault+0xb0/0x130
[  222.594258][T11542]  should_fail_ex+0x414/0x560
[  222.594288][T11542]  _copy_from_user+0x2d/0xb0
[  222.594311][T11542]  ___sys_sendmsg+0x158/0x2a0
[  222.594336][T11542]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.594399][T11542]  ? __fget_files+0x2a/0x420
[  222.594415][T11542]  ? __fget_files+0x3a0/0x420
[  222.594442][T11542]  __x64_sys_sendmsg+0x19b/0x260
[  222.594467][T11542]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  222.594504][T11542]  ? __pfx_ksys_write+0x10/0x10
[  222.594531][T11542]  ? do_syscall_64+0xbe/0xfa0
[  222.594555][T11542]  do_syscall_64+0xfa/0xfa0
[  222.594574][T11542]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.594604][T11542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.594620][T11542]  ? clear_bhb_loop+0x60/0xb0
[  222.594642][T11542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.594658][T11542] RIP: 0033:0x7f2aa298f749
[  222.594674][T11542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.594689][T11542] RSP: 002b:00007f2aa38dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.594708][T11542] RAX: ffffffffffffffda RBX: 00007f2aa2be5fa0 RCX: 00007f2aa298f749
[  222.594722][T11542] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009
[  222.594733][T11542] RBP: 00007f2aa38dc090 R08: 0000000000000000 R09: 0000000000000000
[  222.594743][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.594754][T11542] R13: 00007f2aa2be6038 R14: 00007f2aa2be5fa0 R15: 00007ffdd0a2fc28
[  222.594785][T11542]  </TASK>
[  222.956273][T11553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1453'.
[  222.971358][T11553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1453'.
[  223.029079][T11555] 8021q: adding VLAN 0 to HW filter on device bond4
[  223.068447][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'.
[  223.072581][T11557] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  223.133791][   T36] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  223.283923][   T36] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  223.345588][T11563] 8021q: adding VLAN 0 to HW filter on device bond5
[  223.660437][T11577] syzkaller0: entered promiscuous mode
[  223.673121][T11577] syzkaller0: entered allmulticast mode
[  223.784417][T11584] netlink: 'syz.4.1462': attribute type 1 has an invalid length.
[  223.854428][T11584] bond5: entered promiscuous mode
[  223.864313][T11584] 8021q: adding VLAN 0 to HW filter on device bond5
[  224.035843][T11601] IPVS: length: 153 != 24
[  224.072964][T11584] bond5: (slave bridge7): making interface the new active one
[  224.131803][T11584] bridge7: entered promiscuous mode
[  224.151584][T11584] bond5: (slave bridge7): Enslaving as an active interface with an up link
[  224.327027][T11614] __nla_validate_parse: 4 callbacks suppressed
[  224.327046][T11614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1471'.
[  224.576339][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1472'.
[  224.622795][T11620] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1473'.
[  224.636792][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'.
[  224.732979][T11622] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1473'.
[  224.855471][T11630] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1476'.
[  225.001045][T11637] tipc: New replicast peer: 255.255.255.255
[  225.026332][T11637] tipc: Enabled bearer <udp:syz2>, priority 10
[  225.048021][T11637] netlink: 'syz.3.1478': attribute type 11 has an invalid length.
[  225.060521][T11637] netlink: 'syz.3.1478': attribute type 11 has an invalid length.
[  225.071222][T11637] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1478'.
[  225.210345][T11642] bridge3: entered promiscuous mode
[  225.225069][T11642] bridge3: entered allmulticast mode
[  225.267140][T11649] netlink: 'syz.1.1480': attribute type 2 has an invalid length.
[  225.276045][T11649] netlink: 'syz.1.1480': attribute type 1 has an invalid length.
[  225.284645][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'.
[  225.402898][T11655] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1482'.
[  225.427954][T11655] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1482'.
[  225.497639][T11657] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  225.532252][T11657] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.628382][T11657] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  225.676579][T11657] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.775347][T11674] openvswitch: netlink: Multiple metadata blocks provided
[  225.787650][T11657] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  225.806688][T11678] netlink: 'syz.4.1486': attribute type 5 has an invalid length.
[  225.810368][T11657] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.890291][T11657] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  225.904230][T11657] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.035547][   T67] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.046614][   T67] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.072048][   T67] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.081300][   T67] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.097551][   T67] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.106013][   T67] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.127081][   T67] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.137126][   T67] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.146174][ T5879] tipc: Node number set to 3758096385
[  226.882247][T11709] xt_CT: No such helper "snmp_trap"
[  226.891151][T11711] netlink: 'syz.4.1497': attribute type 27 has an invalid length.
[  226.900684][T11711] netlink: 'syz.4.1497': attribute type 4 has an invalid length.
[  227.772718][T11701] 8021q: VLANs not supported on caif0
[  227.985450][T11719] team0: Port device bond0 removed
[  228.041440][T11719] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  228.122429][T11727] delete_channel: no stack
[  228.132130][T11727] delete_channel: no stack
[  228.145349][T11737] netlink: 'syz.4.1504': attribute type 4 has an invalid length.
[  228.446107][T11759] team0: Port device xfrm1 added
[  228.570747][T11763] syzkaller0: entered promiscuous mode
[  228.576489][T11763] syzkaller0: entered allmulticast mode
[  230.124789][T11766] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  230.134980][T11772] __nla_validate_parse: 23 callbacks suppressed
[  230.135001][T11772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1513'.
[  230.174551][T11769] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.286302][T11769] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.359138][T11789] syzkaller0: entered promiscuous mode
[  230.365003][T11789] syzkaller0: entered allmulticast mode
[  230.376838][T11769] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.475262][T11769] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.520237][T11791] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  230.534162][T11791] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  230.653701][ T3509] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.761982][   T67] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.808497][T11807] xt_recent: Unsupported userspace flags (000000b1)
[  230.819685][ T8126] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.885356][ T8126] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.989032][T11814] xt_TCPMSS: Only works on TCP SYN packets
[  231.016171][T11812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1527'.
[  231.517897][T11844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1534'.
[  231.584630][T11849] netlink: 'syz.2.1536': attribute type 15 has an invalid length.
[  231.623637][T11849] netlink: 'syz.2.1536': attribute type 10 has an invalid length.
[  231.631940][T11849] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1536'.
[  231.854675][T11859] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1538'.
[  231.922790][T11859] lo: left promiscuous mode
[  232.281413][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805337e800: rx timeout, send abort
[  232.782386][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805337d000: rx timeout, send abort
[  232.790983][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805337e800: abort rx timeout. Force session deactivation
[  232.923075][T11896] xt_hashlimit: size too large, truncated to 1048576
[  232.939775][T11896] xt_hashlimit: max too large, truncated to 1048576
[  232.959982][T11901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.029931][T11896] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  233.067091][T11910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1551'.
[  233.096296][T11910] netlink: 'syz.3.1551': attribute type 21 has an invalid length.
[  233.105398][T11910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1551'.
[  233.198789][T11915] netlink: 'syz.0.1555': attribute type 10 has an invalid length.
[  233.223878][T11915] xt_hashlimit: size too large, truncated to 1048576
[  233.248302][T11913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  233.255637][T11913] IPv6: NLM_F_CREATE should be set when creating new route
[  233.262878][T11913] IPv6: NLM_F_CREATE should be set when creating new route
[  233.290659][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805337d000: abort rx timeout. Force session deactivation
[  233.327326][T11917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  233.335320][T11917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  233.344499][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'.
[  233.355357][T11913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  233.396623][T11929] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1557'.
[  233.561090][T11938] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  233.617192][T11938] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.692703][T11938] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.722452][T11950] netlink: 'syz.2.1562': attribute type 39 has an invalid length.
[  233.809425][T11938] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.885030][T11938] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.018663][T11962] xt_hashlimit: overflow, try lower: 3/0
[  234.090074][   T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.104756][   T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.130902][   T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.140182][   T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.485814][T11996] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1577'.
[  235.167508][T12032] veth0_virt_wifi: entered allmulticast mode
[  235.251158][T12049] __nla_validate_parse: 28 callbacks suppressed
[  235.251178][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'.
[  235.380479][T12049] hsr_slave_1 (unregistering): left promiscuous mode
[  235.403064][T12062] netlink: 'syz.3.1596': attribute type 62 has an invalid length.
[  235.727439][T12082] wg1 speed is unknown, defaulting to 1000
[  235.746030][T12086] netlink: 'syz.1.1601': attribute type 2 has an invalid length.
[  235.785980][T12086] @„;: entered promiscuous mode
[  235.791628][T12089] netlink: 'syz.2.1602': attribute type 16 has an invalid length.
[  235.794057][T12086] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1601'.
[  235.865824][T12075] wg1 speed is unknown, defaulting to 1000
[  236.349616][T12112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.860345][T12121] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000
[  237.095897][T12128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1608'.
[  237.596814][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'.
[  237.616663][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'.
[  237.631978][T12166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'.
[  238.306569][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'.
[  238.349064][T12198] netlink: 'syz.1.1623': attribute type 30 has an invalid length.
[  238.543282][T12205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  238.698841][T12215] tipc: Started in network mode
[  238.715692][T12215] tipc: Node identity 228096234ffd, cluster identity 4711
[  238.736540][T12215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.790186][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1632'.
[  238.898461][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'.
[  238.989268][T12215] syzkaller0: entered promiscuous mode
[  238.995985][T12215] syzkaller0: entered allmulticast mode
[  239.004946][T12215] tipc: Resetting bearer <eth:syzkaller0>
[  239.068891][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.088517][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  239.118597][T12214] tipc: Resetting bearer <eth:syzkaller0>
[  239.645493][T12271] delete_channel: no stack
[  239.970926][T12287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1641'.
[  240.975410][T12214] tipc: Disabling bearer <eth:syzkaller0>
[  240.985465][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.994352][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.012816][  T938] tipc: Node number set to 1836946979
[  241.166823][T12288] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  241.185025][T12295] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  241.364792][T12314] lo speed is unknown, defaulting to 1000
[  241.381231][T12314] lo speed is unknown, defaulting to 1000
[  241.405704][T12314] lo speed is unknown, defaulting to 1000
[  241.421433][T12311] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1648'.
[  241.445140][T12318] wg1 speed is unknown, defaulting to 1000
[  241.467004][T12314] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  241.510515][T12320] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1648'.
[  241.612758][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'.
[  241.718531][T12338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1652'.
[  241.743528][T12338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1652'.
[  241.778247][T12314] lo speed is unknown, defaulting to 1000
[  241.815821][T12314] lo speed is unknown, defaulting to 1000
[  241.846870][T12314] lo speed is unknown, defaulting to 1000
[  241.920422][T12314] lo speed is unknown, defaulting to 1000
[  241.938770][T12314] lo speed is unknown, defaulting to 1000
[  241.962222][T12314] lo speed is unknown, defaulting to 1000
[  241.994826][T12342] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.023040][T12342] netem: change failed
[  242.138553][T12350] sctp: [Deprecated]: syz.2.1658 (pid 12350) Use of int in max_burst socket option.
[  242.138553][T12350] Use struct sctp_assoc_value instead
[  242.178952][T12356] netlink: 'syz.2.1658': attribute type 2 has an invalid length.
[  242.916256][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1666'.
[  242.938398][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1666'.
[  242.973639][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1666'.
[  243.003944][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1666'.
[  243.054642][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1666'.
[  243.083420][T12392] xt_hashlimit: max too large, truncated to 1048576
[  243.123699][T12393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  243.450551][T12404] bond3: Removing last ns target with arp_interval on
[  243.769998][T12416] syzkaller1: entered promiscuous mode
[  243.777983][T12416] syzkaller1: entered allmulticast mode
[  244.125538][T12436] lo: entered promiscuous mode
[  244.133570][T12436] tunl0: entered promiscuous mode
[  244.140124][T12436] gre0: entered promiscuous mode
[  244.149442][T12436] gretap0: entered promiscuous mode
[  244.166657][T12436] erspan0: entered promiscuous mode
[  244.184582][T12436] ip_vti0: entered promiscuous mode
[  244.191349][T12436] ip6_vti0: entered promiscuous mode
[  244.199718][T12436] sit0: entered promiscuous mode
[  244.211845][T12436] ip6tnl0: entered promiscuous mode
[  244.221002][T12436] ip6gre0: entered promiscuous mode
[  244.229344][T12436] syz_tun: entered promiscuous mode
[  244.256423][T12436] ip6gretap0: entered promiscuous mode
[  244.275573][T12436] bridge0: entered promiscuous mode
[  244.304892][T12436] bond0: entered promiscuous mode
[  244.321389][T12436] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.331958][T12436] team0: entered promiscuous mode
[  244.338249][T12436] geneve0: entered promiscuous mode
[  244.344927][T12436] 8021q: adding VLAN 0 to HW filter on device team0
[  244.352884][T12436] dummy0: entered promiscuous mode
[  244.368599][T12436] nlmon0: entered promiscuous mode
[  244.377514][T12436] caif0: entered promiscuous mode
[  244.382572][T12436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.404170][T12439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.432060][T12445] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  244.446667][T12445] 0ªî{X¹¦: entered allmulticast mode
[  244.452652][T12445] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  244.571819][T12453] netlink: 'syz.3.1683': attribute type 2 has an invalid length.
[  244.995004][T12479] netlink: 'syz.0.1689': attribute type 9 has an invalid length.
[  245.254871][T12492] syzkaller0: entered promiscuous mode
[  245.304954][T12492] syzkaller0: entered allmulticast mode
[  246.457692][T12537] __nla_validate_parse: 30 callbacks suppressed
[  246.457710][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'.
[  246.495974][T12537] netlink: 'syz.4.1702': attribute type 1 has an invalid length.
[  246.529481][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'.
[  246.540877][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'.
[  246.631506][T12543] 8021q: adding VLAN 0 to HW filter on device bond3
[  247.036756][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'.
[  247.047148][T12564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1709'.
[  247.056969][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'.
[  247.066516][T12564] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1709'.
[  247.105061][T12564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1709'.
[  247.178640][T12584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  247.186024][T12584] IPv6: NLM_F_CREATE should be set when creating new route
[  247.193291][T12584] IPv6: NLM_F_CREATE should be set when creating new route
[  247.208108][T12584] ------------[ cut here ]------------
[  247.213708][T12584] WARNING: CPU: 1 PID: 12584 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080
[  247.224199][T12584] Modules linked in:
[  247.228371][T12584] CPU: 1 UID: 0 PID: 12584 Comm: syz.0.1713 Not tainted syzkaller #0 PREEMPT(full) 
[  247.237967][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  247.248080][T12584] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080
[  247.254276][T12584] Code: fa be 02 00 00 00 eb 0a e8 15 0d e1 fa be 01 00 00 00 4c 89 f7 e8 e8 a7 aa fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 f9 0c e1 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35
[  247.274161][T12584] RSP: 0018:ffffc900051deee8 EFLAGS: 00010287
[  247.280255][T12584] RAX: ffffffff86def6b7 RBX: 0000000000000001 RCX: 0000000000080000
[  247.288281][T12584] RDX: ffffc9000d65d000 RSI: 00000000000070fe RDI: 00000000000070ff
[  247.296348][T12584] RBP: dffffc0000000000 R08: ffff888031b0842f R09: 1ffff11006361085
[  247.304456][T12584] R10: dffffc0000000000 R11: ffffed1006361086 R12: ffff88805452e000
[  247.312454][T12584] R13: ffffc900051df060 R14: 0000000000000000 R15: ffffc900051df078
[  247.321079][T12584] FS:  00007f7ce67866c0(0000) GS:ffff888126231000(0000) knlGS:0000000000000000
[  247.330085][T12584] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  247.336754][T12584] CR2: 0000000000000000 CR3: 0000000078fc2000 CR4: 00000000003526f0
[  247.344916][T12584] Call Trace:
[  247.348213][T12584]  <TASK>
[  247.351170][T12584]  notifier_call_chain+0x1b6/0x3e0
[  247.356374][T12584]  ? atomic_notifier_call_chain+0x26/0x180
[  247.362227][T12584]  atomic_notifier_call_chain+0xda/0x180
[  247.367942][T12584]  call_fib_notifiers+0x31/0x60
[  247.372822][T12584]  call_fib6_multipath_entry_notifiers+0xe6/0x150
[  247.379368][T12584]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[  247.386481][T12584]  ? inet6_rtm_newroute+0xe8b/0x18c0
[  247.391801][T12584]  inet6_rtm_newroute+0x12f5/0x18c0
[  247.397086][T12584]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.402426][T12584]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  247.408130][T12584]  ? nlmon_xmit+0xb0/0x100
[  247.412567][T12584]  ? kmem_cache_free+0x19b/0x690
[  247.417611][T12584]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  247.423430][T12584]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  247.429010][T12584]  rtnetlink_rcv_msg+0x7cf/0xb70
[  247.434115][T12584]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  247.439250][T12584]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  247.444954][T12584]  ? ref_tracker_free+0x63a/0x7d0
[  247.449994][T12584]  ? __asan_memcpy+0x40/0x70
[  247.454646][T12584]  ? __pfx_ref_tracker_free+0x10/0x10
[  247.460043][T12584]  netlink_rcv_skb+0x208/0x470
[  247.464893][T12584]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  247.470373][T12584]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  247.475725][T12584]  ? netlink_deliver_tap+0x2e/0x1b0
[  247.480959][T12584]  netlink_unicast+0x82f/0x9e0
[  247.485794][T12584]  ? __pfx_netlink_unicast+0x10/0x10
[  247.491096][T12584]  ? netlink_sendmsg+0x642/0xb30
[  247.496111][T12584]  ? skb_put+0x11b/0x210
[  247.500370][T12584]  netlink_sendmsg+0x805/0xb30
[  247.505195][T12584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.510500][T12584]  ? aa_sock_msg_perm+0xf1/0x1d0
[  247.515522][T12584]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  247.520826][T12584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  247.526212][T12584]  __sock_sendmsg+0x21c/0x270
[  247.530913][T12584]  ____sys_sendmsg+0x52d/0x830
[  247.535758][T12584]  ? __pfx_____sys_sendmsg+0x10/0x10
[  247.541076][T12584]  ? import_iovec+0x74/0xa0
[  247.545698][T12584]  ___sys_sendmsg+0x21f/0x2a0
[  247.550403][T12584]  ? __pfx____sys_sendmsg+0x10/0x10
[  247.555706][T12584]  ? preempt_schedule+0xae/0xc0
[  247.560608][T12584]  ? __fget_files+0x2a/0x420
[  247.565268][T12584]  ? __fget_files+0x3a0/0x420
[  247.569968][T12584]  __sys_sendmmsg+0x227/0x430
[  247.574785][T12584]  ? __pfx___sys_sendmmsg+0x10/0x10
[  247.580051][T12584]  ? __pfx_do_futex+0x10/0x10
[  247.584852][T12584]  __x64_sys_sendmmsg+0xa0/0xc0
[  247.589722][T12584]  do_syscall_64+0xfa/0xfa0
[  247.594376][T12584]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.599599][T12584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.605733][T12584]  ? clear_bhb_loop+0x60/0xb0
[  247.610458][T12584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.616479][T12584] RIP: 0033:0x7f7ce598f749
[  247.620912][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.640749][T12584] RSP: 002b:00007f7ce6786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  247.649297][T12584] RAX: ffffffffffffffda RBX: 00007f7ce5be6090 RCX: 00007f7ce598f749
[  247.657340][T12584] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008
[  247.665387][T12584] RBP: 00007f7ce5a13f91 R08: 0000000000000000 R09: 0000000000000000
[  247.673471][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.681458][T12584] R13: 00007f7ce5be6128 R14: 00007f7ce5be6090 R15: 00007ffe4b0df718
[  247.689511][T12584]  </TASK>
[  247.692541][T12584] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  247.699822][T12584] CPU: 1 UID: 0 PID: 12584 Comm: syz.0.1713 Not tainted syzkaller #0 PREEMPT(full) 
[  247.709192][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  247.719238][T12584] Call Trace:
[  247.722514][T12584]  <TASK>
[  247.725440][T12584]  dump_stack_lvl+0x99/0x250
[  247.730032][T12584]  ? __asan_memcpy+0x40/0x70
[  247.734617][T12584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.739814][T12584]  ? __pfx__printk+0x10/0x10
[  247.744405][T12584]  vpanic+0x237/0x6d0
[  247.748419][T12584]  ? __pfx_vpanic+0x10/0x10
[  247.752964][T12584]  panic+0xb9/0xc0
[  247.756709][T12584]  ? __pfx_panic+0x10/0x10
[  247.761142][T12584]  __warn+0x31b/0x4b0
[  247.765130][T12584]  ? nsim_fib_event_nb+0xed8/0x1080
[  247.770337][T12584]  ? nsim_fib_event_nb+0xed8/0x1080
[  247.775533][T12584]  report_bug+0x2be/0x4f0
[  247.779866][T12584]  ? nsim_fib_event_nb+0xed8/0x1080
[  247.785061][T12584]  ? nsim_fib_event_nb+0xed8/0x1080
[  247.790250][T12584]  ? nsim_fib_event_nb+0xeda/0x1080
[  247.795439][T12584]  handle_bug+0x84/0x160
[  247.799677][T12584]  exc_invalid_op+0x1a/0x50
[  247.804172][T12584]  asm_exc_invalid_op+0x1a/0x20
[  247.809009][T12584] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080
[  247.814822][T12584] Code: fa be 02 00 00 00 eb 0a e8 15 0d e1 fa be 01 00 00 00 4c 89 f7 e8 e8 a7 aa fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 f9 0c e1 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35
[  247.834428][T12584] RSP: 0018:ffffc900051deee8 EFLAGS: 00010287
[  247.840582][T12584] RAX: ffffffff86def6b7 RBX: 0000000000000001 RCX: 0000000000080000
[  247.848542][T12584] RDX: ffffc9000d65d000 RSI: 00000000000070fe RDI: 00000000000070ff
[  247.856502][T12584] RBP: dffffc0000000000 R08: ffff888031b0842f R09: 1ffff11006361085
[  247.864464][T12584] R10: dffffc0000000000 R11: ffffed1006361086 R12: ffff88805452e000
[  247.872430][T12584] R13: ffffc900051df060 R14: 0000000000000000 R15: ffffc900051df078
[  247.880406][T12584]  ? nsim_fib_event_nb+0xed7/0x1080
[  247.885615][T12584]  ? nsim_fib_event_nb+0xed7/0x1080
[  247.890823][T12584]  notifier_call_chain+0x1b6/0x3e0
[  247.895938][T12584]  ? atomic_notifier_call_chain+0x26/0x180
[  247.901739][T12584]  atomic_notifier_call_chain+0xda/0x180
[  247.907367][T12584]  call_fib_notifiers+0x31/0x60
[  247.912217][T12584]  call_fib6_multipath_entry_notifiers+0xe6/0x150
[  247.918634][T12584]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[  247.925678][T12584]  ? inet6_rtm_newroute+0xe8b/0x18c0
[  247.930965][T12584]  inet6_rtm_newroute+0x12f5/0x18c0
[  247.936163][T12584]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.941376][T12584]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  247.946936][T12584]  ? nlmon_xmit+0xb0/0x100
[  247.951358][T12584]  ? kmem_cache_free+0x19b/0x690
[  247.956309][T12584]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  247.962074][T12584]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  247.967617][T12584]  rtnetlink_rcv_msg+0x7cf/0xb70
[  247.972566][T12584]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  247.977692][T12584]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  247.983140][T12584]  ? ref_tracker_free+0x63a/0x7d0
[  247.988162][T12584]  ? __asan_memcpy+0x40/0x70
[  247.992750][T12584]  ? __pfx_ref_tracker_free+0x10/0x10
[  247.998123][T12584]  netlink_rcv_skb+0x208/0x470
[  248.002885][T12584]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  248.008336][T12584]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  248.013622][T12584]  ? netlink_deliver_tap+0x2e/0x1b0
[  248.018823][T12584]  netlink_unicast+0x82f/0x9e0
[  248.023597][T12584]  ? __pfx_netlink_unicast+0x10/0x10
[  248.028890][T12584]  ? netlink_sendmsg+0x642/0xb30
[  248.033855][T12584]  ? skb_put+0x11b/0x210
[  248.038106][T12584]  netlink_sendmsg+0x805/0xb30
[  248.042878][T12584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  248.048163][T12584]  ? aa_sock_msg_perm+0xf1/0x1d0
[  248.053105][T12584]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  248.058387][T12584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  248.063676][T12584]  __sock_sendmsg+0x21c/0x270
[  248.068364][T12584]  ____sys_sendmsg+0x52d/0x830
[  248.073138][T12584]  ? __pfx_____sys_sendmsg+0x10/0x10
[  248.078424][T12584]  ? import_iovec+0x74/0xa0
[  248.082923][T12584]  ___sys_sendmsg+0x21f/0x2a0
[  248.087608][T12584]  ? __pfx____sys_sendmsg+0x10/0x10
[  248.092799][T12584]  ? preempt_schedule+0xae/0xc0
[  248.097673][T12584]  ? __fget_files+0x2a/0x420
[  248.102254][T12584]  ? __fget_files+0x3a0/0x420
[  248.106926][T12584]  __sys_sendmmsg+0x227/0x430
[  248.111605][T12584]  ? __pfx___sys_sendmmsg+0x10/0x10
[  248.116810][T12584]  ? __pfx_do_futex+0x10/0x10
[  248.121507][T12584]  __x64_sys_sendmmsg+0xa0/0xc0
[  248.126351][T12584]  do_syscall_64+0xfa/0xfa0
[  248.130850][T12584]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.136039][T12584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.142094][T12584]  ? clear_bhb_loop+0x60/0xb0
[  248.146772][T12584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.152831][T12584] RIP: 0033:0x7f7ce598f749
[  248.157237][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.176836][T12584] RSP: 002b:00007f7ce6786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  248.185250][T12584] RAX: ffffffffffffffda RBX: 00007f7ce5be6090 RCX: 00007f7ce598f749
[  248.193213][T12584] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008
[  248.201189][T12584] RBP: 00007f7ce5a13f91 R08: 0000000000000000 R09: 0000000000000000
[  248.209149][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  248.217113][T12584] R13: 00007f7ce5be6128 R14: 00007f7ce5be6090 R15: 00007ffe4b0df718
[  248.225096][T12584]  </TASK>
[  248.228251][T12584] Kernel Offset: disabled
[  248.232560][T12584] Rebooting in 86400 seconds..