last executing test programs:

4.87985806s ago: executing program 3 (id=1287):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x3c}, @in=@dev, {}, {}, {0x2}, 0x1a00, 0x0, 0x2, 0x0, 0x0, 0x96}}, 0xf0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0)

4.649372484s ago: executing program 3 (id=1288):
r0 = epoll_create1(0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e23, 0x3, 'dh\x00', 0x8, 0x7, 0x49}, 0x2c)
r1 = socket(0x400000000010, 0x3, 0x0)
write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c04000700800003", 0x23)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_wait(r4, &(0x7f0000000040), 0x0, 0x1)
unshare(0x10000000)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x2080000001, 0x2, 0x10000000000008, 0x12, 0x8, 0x27, 0x8}, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYRES64=r4], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20048845)
epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000380)={0x20002000})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000004880)=0x20000007, 0x4)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010020bd70100600010007000000080009000200000008000b000000000008000c00a80a0000050012"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x400, 0x2, 0x103300}, &(0x7f00000000c0)=0x10)

4.261257821s ago: executing program 1 (id=1289):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}})
unshare(0x6a040000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000002c0)="a7e3c11073f57f9e4978aafe780ae4f8ae7620312693639f91d0bf5de4a04117e44a1050cc03b8dc9ec3898f6fe8be971a235e2c5b4bed729efd79b53422cad3555a3fea472ba77dcfc36fafb53597b4c1507f9190a4477cc57c169ef4b1e3953659192a1315d362b9697185601352ba2100", &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2bc5bd8db70f3b80ca78f5b990c8db9117657cf0cb591f952cee90776c191451b9187caf0f1a600e4b401fad569ae25d4", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r2, 0x4}, 0x38)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket$netlink(0x10, 0x3, 0xa)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)

2.331622689s ago: executing program 3 (id=1296):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r2, @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x476481, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'pimreg1\x00', @remote})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ff7f00001c0000000d0000009f00000000000000de75ddbf2f6a47c86376c5122dfc1cac9fa8344682c6ef89"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000640)='devlink_hwerr\x00', r6, 0x0, 0x9}, 0x18)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r7)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="010026bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="06001100a8050000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r11)
sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="ff0000db56677d6527b277db92d6c1fc0ee35757b8a624aafb37d95bc47015d780c188240a1f0a88cba28768d880a7a054f753ad586dbfbfa87ec57247f373bd6dc52d722a426dd4669f469702a0bc1acb5295cdc73ea7", @ANYRES32=0x0, @ANYBLOB="0800050007000000"], 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000000000000fbdbdf258800000008000300", @ANYRES32=r14, @ANYBLOB="0c009900020000001c0000000a00060017021100000100000a0006b92102110000000000"], 0x40}}, 0x40)
close(r5)
socket$unix(0x1, 0x5, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r16, {0x0, 0xb}, {0x2, 0x7}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0xfd, 0x5, 0x6361, 0x80, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x5}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000)

2.213447696s ago: executing program 2 (id=1299):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}, 0x27}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, 0x0, 0x20008004)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)

1.949205039s ago: executing program 2 (id=1301):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x48}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x1000000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

1.817603253s ago: executing program 4 (id=1303):
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r1], 0x38}}, 0x200000000000000)

1.807632837s ago: executing program 3 (id=1304):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8ca7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x75}], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x3001}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.657183481s ago: executing program 2 (id=1306):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0xe00, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xfff3, 0x78bbe9f1cfa0a994}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl1\x00', &(0x7f00000005c0)={'erspan0\x00', <r9=>0x0, 0x8000, 0x7, 0x8001, 0x3, {{0x16, 0x4, 0x1, 0x38, 0x58, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @remote, {[@timestamp={0x44, 0x24, 0x1d, 0x0, 0x6, [0x7, 0x9, 0xfffffffe, 0x200, 0xff, 0xbf, 0xff, 0x0]}, @rr={0x7, 0x13, 0xd3, [@loopback, @loopback, @remote, @broadcast]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x38}]}}}}})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x48, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1c}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5d}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24018850)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8d}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)
r10 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000008c0), 0x4)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x40, r11, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7a9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20048040}, 0xc1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018"], 0x54}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x70bd29, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040801}, 0x0)

1.619951387s ago: executing program 0 (id=1307):
socket$kcm(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000200))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r1)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x108, 0x0, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x59}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0xc}, {0x48, 0x1}, {0x4, 0x1}, {0xc, 0x1}, {0x12, 0x1}, {0x12}, {0x48}, {0x33}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1c0}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7fff}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa4, 0xac, "5c2da7ecb1d1df6c312472229bf24a76959e52d3b886b1ddfdc928932fb924cb7524f9cb19c6b21ed6ee1eae89de744f16f3265d04626f593c4eb92a179276c88a27b264e327a3c0989c523c500e6dca96ac2d44385ba58d511b4abd112ebcfc20020be54d7b1756724611fda9f2fa065fcaeee6a04453083111d88b0c825f2489632e5625bf7264d0919edf5f53fb9532def4cb25c1b6f06ef5b6591530459f"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}]}, 0x108}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x2100000000000000)
socket$unix(0x1, 0x2, 0x0)

1.592070915s ago: executing program 4 (id=1308):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100001002abd6e1700000000ff070000", @ANYRES32=0x0, @ANYBLOB="c12900000000000014000300776c616e300000000600000000000000080004003d03000034001680300001800c0004007f000000ff7f000014000a00020000000000000005000000000000000c0003"], 0x70}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

1.525033714s ago: executing program 3 (id=1309):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500"], 0x5b0}, 0x20008001)
sendmsg$inet6(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000840)="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", 0xff}, {&(0x7f0000000600)="fa4930e2f7feb52241e739006ef78c0aeb4dd989f1bf69e01e4eb4bb743569e49e3db4ab502ed698e9d1015794e38f83dc9d177719cb1f7991ee501ad1ff9d69f88d4bb78c0b76402fd5b363a275a95533", 0x51}, {&(0x7f0000002a00)="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", 0x99a}], 0x3, 0x0, 0x0, 0xfffffff5}, 0x20000044)

1.475065633s ago: executing program 1 (id=1310):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x769280, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x2b, 0xb, 0x0, 0x0, {0x6}}, 0x14}}, 0xc00)
unshare(0x8000400)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket(0x2a, 0x2, 0xfffffffc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x80, 0x0, 0x6d, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x7, 0x0, 0x27, 0xfffffffd}})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
shutdown(r1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)

1.357358956s ago: executing program 3 (id=1311):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'wg1\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4}, 0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x4c, 0x49, 0x14, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x8, 0x0, r4, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x18)
unshare(0x6a040000)

1.193326213s ago: executing program 4 (id=1312):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18b0ff004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x40, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0)
readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8, 0x0, 0x0, 0xfff3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PPPIOCGL2TPSTATS(r4, 0x8004745a, &(0x7f0000005280))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r9, 0x15b4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20)
close(r9)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r10, &(0x7f0000000900)}, 0x20)

1.091707612s ago: executing program 1 (id=1313):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r2)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="f3c22f15", @ANYRES16=r3, @ANYBLOB="819b08000000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)=@newtfilter={0x1948, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x4}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x18f8, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x2, 0x7, 0x81, 0x1ff}, {0x4, 0x6, 0x5, 0xd4}, {0xee79, 0x9, 0x1, 0xf4}, {0xa1b0, 0x7, 0xf, 0x3}, {0x401, 0x3, 0x9, 0xb09b}]}}, @TCA_BPF_ACT={0x18b8, 0x1, [@m_mirred={0xac, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x80, 0x6, "d7c90fcf1f6712f2a5d2914f9cab86b1443aef1957de022fc9bab4dd05318ed2506ed21c31f3727378f5a08f66860ac69336baa2ac1698323b63a29daa57ae5d34be0c296bc70e7cbf758f24a5e725904a6cdb68922ef58096b2bbad4599ff354dcaff7d5891f07eef8a3390471f9d1e9f7ec69082577b0f69684164"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xb0, 0x20, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_ZONE={0x6, 0x4, 0x9}]}, {0x77, 0x6, "d228775f8ff5b8ca7eba241166ff3969adcdfdc0fc78cbded62a747c0c27d99c0c4f0cb5a6824dca8cf3abd8023d784b5cacd3ae2bd11834e23879402f7682ec1c6e127bf431c8ebe7b7a2411f97d5a0e82819074abfc08e8a53ea46f9199c02b3778668b986face9f452d92daa9234ad514a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0xc8, 0x17, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xb}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6f}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xffe0}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x5c, 0x6, "75fe2a0c8cdeb6c24ed2d4fa88462fd165e9d65ccb289ef5c2de910b9918ba230a78cbbb3e51e0bcad447c2f30a131c5f89b7e0180ca25c2d9fa75f38d0876a9ee7a0e9c220640f9342a16d121950b7996c2afc7bd96d0c5"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x180, 0xc, 0x0, 0x0, {{0x7}, {0x80, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_LABELS={0x14, 0x7, "c2427b0ec192cbe9fb06b030a698172b"}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00'}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_PARMS={0x18, 0x1, {0x1, 0x4, 0xffffffffffffffff, 0x7fffffff, 0x598}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0xdb, 0x6, "df883c64ad0005450bbf10df6ac295b5556a8473e8936f959c25f9a66fb699a017a8520cdd387914935735f07df2f6fe2e4aeb4d4f4ef569fbd51d77a2e75274df02e614f02c1c95e2966cb4253291a2897146ebfafb34ffc0b1624d3614829635b1ffa8d1f532fb0ab200707dc47d9248906b396edbd2d4ac23e9128d2dc8bf65019b32fad2172f4548859b33435fb642915a56f6bf7a1680017cfb0bd4d11cd6cbafc6bd64852cf83fecaa5b5511de3b82774d966654baac68ecae7e3699601f12f9bd3395fd662d2120ca791e06d9099fe996170073"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x88, 0x20, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="db955afb929b"}, @TCA_IFE_TYPE={0x6, 0x5, 0x28a1}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, {0x3d, 0x6, "57523dd8da5ead2f96341840da5ca9c0a98e74fb5cdae2fc5a178c15cbd876bafc004a2feb34d6b0cef57887eef2e1898f5fed16999b38f405"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x8c, 0x1b, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x7043}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x5, 0x3, 0x6, 0x4}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0x35, 0x6, "c41920fb5f9ccda16ca8917b048f7eff7e5d2fd0fe0af1efde5f38c9e115d8ca7eba1d5a691c834ddb52955405d17b9682"}, {0xc}, {0xc, 0x8, {0x2, 0x56de145f6f49a7db}}}}, @m_xt={0x270, 0xa, 0x0, 0x0, {{0x7}, {0x1d0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xbc, 0x6, {0x3, 'mangle\x00', 0xe, 0x2, "d5f7283a16acca49a3cc0a88e801ec65b1ba6053dda02970511b5b5899ee15b309bb78ed9dd4e0d36c4fe2d6b614003797ce5da41f44b4579b0d84cb649b51b26f644b2573b4e2ec37146432aa2cb95b96e4075031a491bd407472c5c8f091cafc9c918da352ed8752be6ff77e31e6739494ecbaada1f393d528014918fef5d56748462ca0a84a7c50a9b3761b4f7ab1c32b"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x8b, 0x6, {0x8, 'security\x00', 0x3, 0x4, "df9615c23986adeb66e40dfd0dd0b3670d65c1269b0b1355983de61850bdb6eeb5c6c1f2dae2b82b8e74c41847df0555a80338399c4340ad4bd50a961fe8d271a3c17255eb21697ef5c46ca5ce4db68d7bad6279d580f08f410983be619eee6b2c"}}]}, {0x7b, 0x6, "b18dbd4be543fa66c26c93b740a4b1dea6a0ed982270ccdd55065ca372578e8eed82d8bc296f3dedf7b9d566751e7b1a9ab88c2f0d1c07fda573b4b1d6225af7e48d52034adaca9c20b06d3b216712db59d995894eabbc4e6a12bdb1971410470ec327cd9858b0f6f0b6c2ddae23da3ffc490e17a6b853"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x107c, 0xf, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffb}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}]}, {0x1004, 0x6, "9ee5541feffcb44f41fb3089556e2cfc52281e4d189382520817f109f47b0abbf20810171b60f4626ec1ee289eff2651ee2e50a3c31a3dbfcef15399b3d981a24e58e319fdfb960fd9d1c567677c84f7557b4752437199b76c17190afb1474ace0350f5a4325b863349616e63c90d7e2dd644b57c968d07c328f1f3618efd051194682cf48b198266be29e963a70491a6b901efd1d65d4247fa32785f9a4e845ea6f5f37fde25500ec353da14664cba46d998e34774137778c1dcc17cb64fb19ec8d5ef003e1a81faec819cec9be22d3a4e948d5566cdc535e6f67c0773713c76460f6ca204a180b3c60b040f8a90c14c0ef110be9827ac58a1a1136ada0685c15f1bf5ce5c9ef305fe91a0c7f081048b7f4d175886df278bce7ca7d40e3e9d95eccfd9f3da7d58bd5c77890f85fa787cce35074cd26e9607129b67ade4240239b0c0d7d2fac8a751105d237609e42d420761fa4b7a072489c961dabab61e24763e83387f6f54f3f575aaf3c7bc8f1c9b33cd882b1d2b3a6e50d523f557a7ece9bb2cac17545826a34bebf2d5320ec76c5cef758f2a3a87db3bee5e970050c69cbd9cc3f6430402dfe142d7630b5f35358a721f74c0e2964c41303d5faf65bbc5b2f763c57528034c19b3473cf1e886c347290e3e881020d6e9a4f13fc95af002d759b35c4f57d18a30a3353338989c034d82b9e96cbb8ff7be69222f90e348f7bed8a7d68a63d8739cd9188e6b101034f2c8a9369078c14d0e93a564fbb963756059c52ebf7be63d3abab9a84a28623351ddaf11f0bfd1dec590933e6475ea4bef613a6611eebec2ac8d2013b371ff946b4b129218a01dd7036b269a5e7e3e0b974950ea16cefb443cd207219d75d356f82354b1a794758564964a3b78583e3d1c354f4e3a5352267d335f13f7bcc6cfdec558ddbb304515c88587206d4c23bcfa8e8f55489b3824f79264c65f5fc61e5122b0fb0fde8ac45171e298aa562d3896802651c04715efadaf93f66d2d93820a6863fa527ceb3c4e1d14d63a06fa2b2b742d99581a76ef00d318a8346b01a914b73b99a991afcbccb902df71ccf7430940f2980eccca435b887d886c5b3a128092202bfa01dc9a505e45cece2cbed90ae1c8e7411273adceab70414718f3a219edbf2bfc74a1cd33a6b22d19769ea832ce7fb3c3717397e9d9902ddf35b1f94d001fc28dce476063cff80a2a49435eb051097f210bb60c68b423171b62f9ad48be91e7c93e5ab9c0d4b615503b1bc016d2173f3f0041d20cfd95c035f0d50c72238221acc06a64c1d4d13347f9f67790b6a853a652816572ebfb91149a9e3b1ee4d9f95c7d14f186c24d1ae473c604a189a2205003d3f07f45499f17b6e161062eab337d0aa566c4c194fbae4a075eaea68fc8428920371830e256d4f173571aa0f347c3eff5b2cd5f6a19090af7cf35d8bd8eadac71811ea41c0e3eb70271c528b5c37aa5090b8388e81cfe1810fd19e467a5440d4df65d979b47a754e00602092050f771f95d52cfdb499c472bdb0bdd49fe73ce0ee27068e9fab5b589ec3afca7ec6f537922010bf92111183d70c1f4e6aa366641d4398c4e532a3a7e46175997a9e7e248c4901e192ed07ee86a070ddd4163af7b85747a7cf03dc27e6d9dc5f407ff10df0762903c0a36104cb46dac99a4006b9316f1e1f894b5479e51c2a358b103b42994c099764a0f42a635747fcee0b847b151d39df3ea90b7dace37f64b59b4d5894896b980b1f755f40d96456cd596cf3112aa13d58cb86519e61407843b08979ee8bcaf615fa2f8be6de599f64bd2fc04ed453225b978cf1958e1f6d3bd5d2870c303014cb6545bff9901eb8a860a8094a6ab278f453a919a1b658deeba223f398c03626dc54ea1701b7a2f92787b6e50fa206b680fa4ade030823766e3802399cb9b73386bc7bcf8933d2d84b6a92996c4aa7e94557c4b3abe02f210d0ac12f092328f4b1c8fd9137937e040e8bc5b901760105f6037c420f247b629d9c6157caf3c26a79676cc6ab12c1d79b78962a8b8d102ce0b3ff80999c47d7f276257cc06d6e9ec12de08964eb2dc1289ccc9c09248f3b081ad08ffeee41657982f02f1822689a35425ac87f1a04f358a59f6a786362c89b6b2cc526621186709a5f133f2f78b571d86beecaaaccc5b2a9d8a0d01c4b83075ea3133cd42bf8342b8f7fd9baf924d0a3d4ed3cad2941733b13128e0184ca0647d45bcf5b7ad2ef790bfe7597840232d9f41e048c1e5563143426651ccf5b932c6c2088abc7d67665871112e499a84610aac6d26194fb6148001b4a87fb7817712ca3ebdbbe2f0ff6ba2352a5d929b927d9d4854a27aa764ddfa095e29cdd6f2616fdf15725841385ab5b8f2d74b59fba7539f3cdf91b4ada7c4f7ed0816216d4bf0b895add3f9e90af294a9c4da33df236d68db8eab27b58db42c0583254d065d4c4ebda84a760a7c159e50a0621281008562f6fcc167bb479a88760ca389e116a41a15b79457249b390e1a267226cfd6ff80b012cacc7775390835e4f0101c551500af5e057d6edec72ecdab4af24fc88066b83d11a04b9a7a49d139a38cedb2180d0bc12dedcc094a79bf99990e97ba7143533b2482b5c6c1d2917d5dccdb92b938044046205ec8d22b22f12e455c3b752fee14b2b94a626d6e66507f53fd3023f55f2cfcfd133cf0c4b7a9bc7dd5c3025330a93678fb7ff058d041dce7d62407b8add29134c99417861cb0979325a3e18b593514d0cca6bbafd95e4f4afe9997942174467544d1319093604071e91a3483e5c3228a9312a1c73f28692fb02a6e2b7bddaf7bc3c88e565e94de41ccef60b5769de92332560c2d0e70ffd25a553187babd269b2dc0b439b49ca439f0bd71553633315bd09733e1ef1ce48d66b7e089453d91e22ecf313fef1fc102ee14fb63c37b708f3a289f5977c15bdcaf48b87f4ace94a9df4e9bfc705adcf7b29a3a09bd5af6a837c2b0c0bfec135fb1640ce7747ba23e28b70ac4da1cd46b539a7f63e4c0ab70bde8c5e3ffdb21a43f9d6f4262ada7f572325ff90e08ad79913c13eed7e33420be5465d0dd045a10eb2b8ff81addc83e19bb6759d110650a772814407a9328c2781c0a69430279da59e7ac7c47c69c7b393db7d9f973e2b055aaf6cdad613a5b054685ea004ae1b784a348f24fd8b421f64547cc14c1c40b9d4d62b2ddf6750459cdd1dc801c6bc0a33cce7637deef218de81f0f0449daeb89adf46e574c61d432e2c8a141dabe0185f16617031a3d1a56d32bedb6b940c3a0d420cc17e055477fe2eb46c3146cd7602a53a90c0df17afb4fb6f009e9e3eced34abaf7c1c365ff169d7020913d4ce0e66a45fc141a22b3360c0caf73202d336a0e4ccfa4f3819a361cf30a9ca2ce0c0789b2eb1ea3e0a4f8507938f4add717ccff4177f845de39fec7c2122a1958b3ba9492faff5c0f029f8ce257a7602e1db6c7ee3333f608e04eb9df8d72eed409d30601890c0c3879b5a372d5a7157d605df079a90fa8fe6dd969c2e2a68c7eff0899045ea9a6e4d97f61b3d93ccc8c78a9706799b8641bf91f6ae281de1b9aa2fa4f610957f2b4e986143ee9d17af916494b817bb4cafabc83997e86d4394c985114215d2adb1b6b574835c11924ca71bba855bea25a4d02d089a6b162fe8f0ee0f0f9ca9b76c290ffe3939db915629c6c0efda46f53123d1077cc57109bc3e321ebc566ca2a76420a5a39b9ead5dd57b8fbbea92f29d82b27752bfe7ebbf799b273a3a0a9c2166e8e4a1ae507add0b05bbdc5eaa32797822eeee8f64eb178cba254f4ee6143e2d322be8fc8c0fa9482575b3067aa6ae08b2dac98e018dc5b445d843e35ed56d89451fa06815ab9a30eb1c9444d93c318160613e37088c15876375117a3838fff2193d9faa36d7d2592c047868291ecb1ca20dd6e841edddb3f31a9f115763b46b7b09407f4882fc20c233f570b3ce41a35a92da96f106e209791100ffee57c7e8e98013816c4003fa747beeff871d08b6fd3b6e83a6f359d14a54bcd524ae479b2564c4bf3cda2b864e50b1dd831ecbb5f6e1cab95647520966854717a92616cf1be006710f4bf535dc368d13a2ce86ea56e956e5665caed3d6e196bef4c00cf455de55197938af504dbbe3422a6fd39149d42b64c2bd423d356954e86c9bbd74c7e9eee86948d7f4b155d4bb5b2c742f97192de20060cda7bed9c574481cc1d17983a5b0b014610c653aa54e2296ff00fb04405a22329c5ab9764b563f173671067804cd81d5fd8257679c90fe962c8fde956eb25bcc631e027524286dfa1ee5057023515e44dfa91061fdc250b7f1c947090217ae25d39951324c96317745dcfd91c0250848ecf7d880ab91fa6e3e957f85ae4dfa242ff47404c1d999f56a90bd087902406fcad46850de585b766de981c38ce2a0e6845b3b4471575cbe6d64274ac057c105d8c69e1ead026458d1eef8a3d863c494057a572e4c6fc154753c6eda456887b2f3ca9e5c3d80e4999039fcf0397b3962398d6f4d489d098698e39f731e06f618e7190e25339bedadcf9e7c34af5ff215771a137dbc316e028094c53aa4cc8f6e4649276ab46866e5af8448dc339d9c6f8dfc23af64afda53fde7f59cb2a0c50f4d920685d4f588a88f696ff4f769b89952b7b796b682a53cb35eabc781eac1f5148883b57b9ecf0c02c1bfcefe24df2409158154455ca7be4136d8f76117c33866beb5f57725c262f8a64e3bd8c8b12dd0507cfa0ad3daea5057c30f2fe515dc8d4bf8fc7ceae855020c9e93f0bae02e13bdfef77235bc0fd1d8f2d242c5759d07468f30b525159e51b806f1d1c16eb31f51d7af1e8b5a2c31bb6f0c3534b3c88e89e6461dd37cca1b7267cd6dfc6bd1844e2f5b21622f3c34b59ec1af665554e887ee112adbabd54c8fc56a2c645e58225d9e553cecc2046ceb8e82b5be9be75b534090916f0fe4ece78e2c201b193e321d3ace29b92873e9f552ade5bcc63bcfcba816f18f1fbdf537bc1101756e173c82fb6b7e4191361d47534eed50b2809e141d9c5201af295c5a67d9a9925b9f9cc3525929c3bb90dd7c45658fae3940307e5036a277e3a6cf4c3b2941934a5f831034f14bb63d08e40f2e53095aaebeb037b8098b0969f77a3eed21c18ba178ea8fb12d14dae5073a177cc1e55f0fbfd7241ffcc9c2fdbdd928e1f4e9e0fb49266888dbc6e6ac5b6b5f49c726ea0a4bbaf7d2734108f998b1b1411d5a2f68e3cd028eb81fa7c8d75ad88ae0cfae5c26b5fc9efda37ce89d25b6892bb4504cd9a023cc5f78778a093973ca95c1fd7a372ec06c4b57a14593e3659f56f68a52a151a2719cf052c375114bb1d384a7de1cf8d069684f1e52c8bdd6f59c292f1f0fc92f18f0a40b15a8a194baca28079e55204aa83f075bef60c4998c029edf66299aa181d9cdb0143fbe21951c9638f091d8c43e16b190a96b15264888f31c1db73c541db4e68cdbd18eb4d8fdca069297e199a619f6c45ecc6243f415bcc1e4016677ce7e9c30362d5615f67f1c8380c5f16e353ccbe3d6e7c8f9d66af6c48308d56888654961813ee4a210531cbd296207ec5df0018949a501b98b129fe817ea9c27e1dd571bf359e084b060f2600be62fb60efb9307fcdad3f97c7babbfdc6fe4a4f401336f8cba662888cbf129ed54203f5471848e05ebc14065ac5720b08989066f8ad6b1cd875f5271c49bba52d12b47e89f606d1cdee789191fcfe079625b182b9ada7e5a878e4ca8a5027e740787b73033dc5fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x110, 0x3, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xab, 0x6, "c03c582d1666f427215840420803b598277bdef900168132d8953b76ef08784b4541e5f66192014b377259f3aed3d18508b2fcb51e6670cac723ceda9a63e923db4200c946d3e96d81254317cd6c1136d88ddb681fca3d8e665e0d313c6880f36e250bb61daab7fa393f491bdd4211d55e3581d72bcec6313cca91b2b6830e9713b0b079c86617c6b816b79b093c04a8f38906fcbf3f49e1fe3a9fff837394477b77269d8ce1c1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x1948}, 0x1, 0x0, 0x0, 0x80}, 0x40)
socket(0x10, 0x803, 0x0)

1.001646213s ago: executing program 0 (id=1314):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x56}], {0x95, 0x0, 0x0, 0xd4801900}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)

898.328092ms ago: executing program 2 (id=1315):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1c0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x174, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x15c, 0x1, [@m_simple={0x120, 0x1e, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x587, 0x5, 0x81, 0xa}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x20000000, 0x2, 0xd}}]}, {0x81, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fce993992ec472fc2cf0229c29df9308275aa845e17dc1e479ef3bdaac2b22173aa0db0c5c17daa5d8bfdc1952fbe903567065fbecf72fa157c3aaac70e46ef54a9edbaa0fa0c723674743dac222bec911"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(r1, &(0x7f0000001f40)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x1}}], 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1c0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x174, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x15c, 0x1, [@m_simple={0x120, 0x1e, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x587, 0x5, 0x81, 0xa}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x20000000, 0x2, 0xd}}]}, {0x81, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fce993992ec472fc2cf0229c29df9308275aa845e17dc1e479ef3bdaac2b22173aa0db0c5c17daa5d8bfdc1952fbe903567065fbecf72fa157c3aaac70e46ef54a9edbaa0fa0c723674743dac222bec911"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async)
socket(0x10, 0x803, 0x0) (async)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmmsg(r1, &(0x7f0000001f40)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x1}}], 0x2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)

806.095031ms ago: executing program 4 (id=1316):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2010000}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

712.01806ms ago: executing program 0 (id=1317):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001600)="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", 0xe78, 0x48010, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x8004)

621.075137ms ago: executing program 1 (id=1318):
syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="721fdebec0831ea5185935220744158c7a93551792416677b1f2f90f365e129ef3576526dccd9d31d0edb0605e8d9e97ca9bde3d546d8169e61d8bf10a98fb8c32c200ee9862e2cb14f6b157aeef63ff26f43ac0fa17ceee31d46461", 0x5c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, <r2=>0x41424344}, 0x4, 0xffffffff)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r2, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000005c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x0, 0x4, 0x1, 0x5, 0x0, 0x64, 0x0, 0x9, 0x11, 0x0, @remote, @private=0xa010100, {[@cipso={0x86, 0x0, 0x2, [{0x6, 0x0, "92"}, {0x5, 0x0, "843cdc8746558b7320484f"}, {0x1, 0x0, "198c162e80e953ee87dad609"}, {0x5, 0x0, "e60fd7ec0edb62656033af6ceb8b"}, {0x0, 0x0, "595de6319c5bdf01a28fc4"}]}, @ssrr={0x89, 0x0, 0x3d, [@local]}, @rr={0x7, 0x0, 0x36, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @multicast1]}, @generic={0x86, 0x0, "6c46fc65caab6ef1"}, @cipso={0x86, 0x0, 0x0, [{0x6, 0x0, "89059ed1082abc497fb3c4388b"}]}, @noop, @ssrr={0x89, 0x0, 0x7d, [@broadcast, @loopback, @empty]}, @cipso={0x86, 0x0, 0x0, [{0x1, 0x0, "eb86865a6109a09c5ad1ab"}, {0x6, 0x0, "10f2e0e68d1e89b3c9a2b67045732e"}, {0x5, 0x0, "49db778aaf3731090f08be7daed2"}]}, @ra={0x94, 0x0, 0x1}]}}, {0x4e21, 0x4e20, 0x0, 0x0, @wg=@data={0x4, 0x2, 0x0, "700301246231bb4a2705638ada512191dcc56f2ed3be0dac0c666ee26479791bf3594208180a625ba373a8857b9d3fec0c12ba812336f2c1452916ed6c37bd1286ed48c288dd26f010af8b8b6421e13b62761c437cd7ff4c8ac02676b95506b9b57b7ffc3fa81e92915c43baeb6b528a1fb6c3707638b6262195f0c102247193b5eb0fea677a0b87c49ebe1330f3b42401d6b80df47edd76eb6ace586a74ae1c4cd09e2caa3822b5e20d3808bda9e18cfaa799c1702e8fbdb8428c9bbcb7"}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa01c0c20000000800456e442278ec42781ee08a4cc2addb092df8772af8d0dd1a44bab2b50c496c55019c1a27563e9fc263329e5179df2338b5147dbe44496e6bdac1dc455dd790b17d69489b6eeda489519d09ae7ae68a7ff7720e9c5af9f1fe7bd67bb1aed552d0fd780e5265daf6826f22f091cfe2f848109e5a99530c11db9baec44ca2a0bfa028855ca0d60df2ef7c6b33edf98da51bada6a03ce0bb7a3a7b8c94c5c85e77ea8bb00078efc69c9626", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c80000090781000080a7ffffffe200000060000"], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
socket(0x5, 0x3, 0xffff314f)
close(r10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3)

571.68617ms ago: executing program 4 (id=1319):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000500)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb)
syz_emit_ethernet(0x2a, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000001980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0f080045000000000000000000004e2200189078410100003102ec65aee861b82f12198d"], 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005140)={0x60, r5, 0x1, 0x70bd2a, 0x3, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0x30, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0x48, 0x1, 0x0, 0x1, {0x7, 0x1, r3}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x46}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="180000000020000000"], 0x20)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002bc0)={&(0x7f0000002a00)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000006000000010000850300010003000000010000005f6b000000002e71182e2e"], 0x0, 0x38, 0x0, 0x1, 0x8}, 0x28)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xde20, @local}, 0x10)

505.524559ms ago: executing program 0 (id=1320):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}]}]}]}}]}, 0xa8}, 0x1, 0x0, 0xf000000}, 0x0)

504.949105ms ago: executing program 2 (id=1321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x24000040) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r5, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r8}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xcc}}, 0x0)
listen(r6, 0x0) (async)
accept(r6, 0x0, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r6, 0x4008f510, &(0x7f0000000040)=0x73f)

387.864117ms ago: executing program 0 (id=1322):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_delroute={0x44, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "468bd48ed14485a2"}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "fc940df8ae754ae2"}, 0x7}}]}, 0x44}}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0xdc, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x78, 0x2, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x8e, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x6b3}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf4cf, 0x80, 0x7, 0x451, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0xc4fd5f98f6050f4, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000580)=@assoc_value={<r6=>0x0}, &(0x7f00000005c0)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200)={r6, 0xd0b, 0x6, 0xfffffffd}, &(0x7f0000000240)=0x10) (async)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r6, 0x7f}, &(0x7f0000000140)=0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x20}) (async)
ioctl$TUNSETOFFLOAD(r9, 0x400454ce, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'lo\x00', 0x100})
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x3c, r11, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4040804)

146.753048ms ago: executing program 1 (id=1323):
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80000)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xc22, 0x4, 0x726, 0x7fffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

145.858709ms ago: executing program 4 (id=1324):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020100907800000402fe0af989f16d70c0e798"], 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000190001000000000000000000802090000011000500000000080002000a0101010800020000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xa800}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0e2501000000080001000000000000000000", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r5 = socket(0x10, 0x803, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r5, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000540)=""/33, 0x21}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=ANY=[@ANYBLOB="34000000000b0103000200000a080002400100727066696c74656200"/52], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
close(r9)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4710420bfbf747b97a37b8040002558d000100000000000000010000"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

41.555154ms ago: executing program 2 (id=1325):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {0x1, 0x0, 0x80}}, [@tmpl={0x144, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x3, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x1fc}}, 0x0)

19.631671ms ago: executing program 0 (id=1326):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf250b000000180005"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8085)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[], 0xfc}}, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x5a})
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf250b000000180005"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8085) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[], 0xfc}}, 0x0) (async)
socket$kcm(0x21, 0x2, 0x2) (async)
sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async)
recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) (async)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x5a}) (async)

0s ago: executing program 1 (id=1327):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x5, 0x8, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94)

kernel console output (not intermixed with test programs):

.705741][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.713291][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.739747][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.753715][ T5871] team0: Port device team_slave_0 added
[   91.774854][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.781920][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.808448][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.862089][ T5871] team0: Port device team_slave_1 added
[   91.868804][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.876161][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.903105][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.929258][ T5863] hsr_slave_0: entered promiscuous mode
[   91.935990][ T5863] hsr_slave_1: entered promiscuous mode
[   92.022938][ T5862] hsr_slave_0: entered promiscuous mode
[   92.029795][ T5862] hsr_slave_1: entered promiscuous mode
[   92.036839][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   92.042758][ T5862] Cannot create hsr debugfs directory
[   92.114333][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.121360][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.147691][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.180485][ T5865] hsr_slave_0: entered promiscuous mode
[   92.188183][ T5865] hsr_slave_1: entered promiscuous mode
[   92.195199][ T5865] debugfs: 'hsr0' already exists in 'hsr'
[   92.201508][ T5865] Cannot create hsr debugfs directory
[   92.230217][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.237878][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.264088][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.294395][ T5864] hsr_slave_0: entered promiscuous mode
[   92.302467][ T5864] hsr_slave_1: entered promiscuous mode
[   92.311303][ T5864] debugfs: 'hsr0' already exists in 'hsr'
[   92.319247][ T5864] Cannot create hsr debugfs directory
[   92.586416][ T5871] hsr_slave_0: entered promiscuous mode
[   92.594668][ T5871] hsr_slave_1: entered promiscuous mode
[   92.600939][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   92.607100][ T5871] Cannot create hsr debugfs directory
[   93.014449][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.047895][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.060469][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.090485][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.187830][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.206880][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.221740][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.254323][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.312530][ T5872] Bluetooth: hci4: command tx timeout
[   93.318560][   T51] Bluetooth: hci3: command tx timeout
[   93.318600][ T5880] Bluetooth: hci1: command tx timeout
[   93.325001][   T51] Bluetooth: hci0: command tx timeout
[   93.336852][ T5183] Bluetooth: hci2: command tx timeout
[   93.365221][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.385845][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.429202][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.440918][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.549818][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.607551][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.649729][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.675644][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.691397][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.746355][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.758253][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.790060][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.799626][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.831668][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   93.847092][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.897492][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.904853][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.920899][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.938189][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   93.955703][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.962902][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.989392][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.996600][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.047603][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.054816][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.078205][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[   94.103253][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.110615][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.137554][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.144868][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.436185][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.486037][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   94.523913][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.545563][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.552814][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.606733][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.614099][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.668171][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   94.762874][ T4577] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.770560][ T4577] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.801106][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.808419][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.910943][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.069203][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.089709][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.324134][ T5862] veth0_vlan: entered promiscuous mode
[   95.403677][ T5183] Bluetooth: hci0: command tx timeout
[   95.403990][   T51] Bluetooth: hci2: command tx timeout
[   95.409171][ T5183] Bluetooth: hci4: command tx timeout
[   95.418230][   T51] Bluetooth: hci1: command tx timeout
[   95.422191][ T5183] Bluetooth: hci3: command tx timeout
[   95.438875][ T5862] veth1_vlan: entered promiscuous mode
[   95.478795][ T5865] veth0_vlan: entered promiscuous mode
[   95.515456][ T5865] veth1_vlan: entered promiscuous mode
[   95.560883][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.586414][ T5865] veth0_macvtap: entered promiscuous mode
[   95.680539][ T5862] veth0_macvtap: entered promiscuous mode
[   95.689558][ T5865] veth1_macvtap: entered promiscuous mode
[   95.710607][ T5862] veth1_macvtap: entered promiscuous mode
[   95.763121][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.780077][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.793312][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.827335][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.853559][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.861135][ T5864] veth0_vlan: entered promiscuous mode
[   95.872297][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.897919][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.907412][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.921336][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.956833][ T1145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.987307][ T5864] veth1_vlan: entered promiscuous mode
[   95.994358][ T1145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.004153][ T1145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.026708][ T5863] veth0_vlan: entered promiscuous mode
[   96.046865][ T1145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.095053][ T5871] veth0_vlan: entered promiscuous mode
[   96.112893][ T5863] veth1_vlan: entered promiscuous mode
[   96.168721][ T5871] veth1_vlan: entered promiscuous mode
[   96.229189][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.248276][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.265234][ T5863] veth0_macvtap: entered promiscuous mode
[   96.288379][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.300506][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.315694][ T5863] veth1_macvtap: entered promiscuous mode
[   96.351504][ T5864] veth0_macvtap: entered promiscuous mode
[   96.365689][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.379303][ T5864] veth1_macvtap: entered promiscuous mode
[   96.398076][ T5871] veth0_macvtap: entered promiscuous mode
[   96.413413][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.438524][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.447325][ T5871] veth1_macvtap: entered promiscuous mode
[   96.455531][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.505723][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.526902][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.540174][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.551949][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.573397][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.576948][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   96.588924][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.622790][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.637171][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.663832][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.707018][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.769565][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.846570][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.908289][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.919235][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.978324][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.988569][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.042055][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.052291][ T1164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.069346][ T5993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.119013][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.147800][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.338718][   T24] cfg80211: failed to load regulatory.db
[   97.447919][ T4577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.469967][ T4577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.479434][ T5872] Bluetooth: hci1: command tx timeout
[   97.485008][ T5872] Bluetooth: hci4: command tx timeout
[   97.490440][ T5872] Bluetooth: hci2: command tx timeout
[   97.496455][ T5872] Bluetooth: hci0: command tx timeout
[   97.501888][ T5183] Bluetooth: hci3: command tx timeout
[   97.740120][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.765908][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.810423][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.819404][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.829441][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.839796][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.004330][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.024157][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.447444][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'.
[   98.537310][ T6014] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   98.625172][ T6014] team0: Port device dummy0 added
[   99.125278][ T6031] warning: `syz.2.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   99.278155][ T6031] netlink: 'syz.2.12': attribute type 10 has an invalid length.
[   99.520654][ T6031] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   99.537803][   T30] audit: type=1800 audit(1756853380.650:2): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0
[   99.948997][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'.
[  100.012349][ T6049] netlink: 'syz.1.15': attribute type 3 has an invalid length.
[  100.175727][ T6053] syzkaller0: entered promiscuous mode
[  100.212059][ T6053] syzkaller0: entered allmulticast mode
[  100.344289][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.298072][ T6067] netlink: 'syz.1.20': attribute type 12 has an invalid length.
[  101.338479][ T6067] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.20'.
[  101.436234][ T6063] netlink: 'syz.0.18': attribute type 10 has an invalid length.
[  101.518209][ T6071] netlink: 'syz.0.18': attribute type 10 has an invalid length.
[  101.618925][ T6077] netlink: 3 bytes leftover after parsing attributes in process `syz.4.22'.
[  101.675734][ T6071] team0: Port device dummy0 removed
[  101.777225][ T6079] syz.4.22 uses obsolete (PF_INET,SOCK_PACKET)
[  101.804664][ T6071] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  101.928858][ T6077] batadv1: entered promiscuous mode
[  101.949132][ T6077] batadv1: entered allmulticast mode
[  102.040401][ T6085] netlink: 'syz.1.23': attribute type 10 has an invalid length.
[  102.166842][ T6083] bridge_slave_0: left allmulticast mode
[  102.173165][ T6083] bridge_slave_0: left promiscuous mode
[  102.180090][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.273787][ T6083] bridge_slave_1: left allmulticast mode
[  102.290660][ T6083] bridge_slave_1: left promiscuous mode
[  102.406895][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.469741][ T6083] bond0: (slave bond_slave_0): Releasing backup interface
[  102.509628][ T6083] bond0: (slave bond_slave_1): Releasing backup interface
[  102.597627][ T6083] team0: Port device team_slave_0 removed
[  102.642927][ T6083] team0: Port device team_slave_1 removed
[  102.670387][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.694791][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.705729][ T6083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.722927][ T6083] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.856610][ T6085] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  103.104635][ T6094] Zero length message leads to an empty skb
[  103.154195][ T6102] netlink: 32 bytes leftover after parsing attributes in process `syz.4.28'.
[  103.175996][   T10] IPVS: starting estimator thread 0...
[  103.195369][ T6101] tipc: Started in network mode
[  103.200513][ T6101] tipc: Node identity ac1414aa, cluster identity 4711
[  103.236283][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'.
[  103.238875][ T6101] tipc: Enabled bearer <udp:s>, priority 10
[  103.292089][ T6105] IPVS: using max 26 ests per chain, 62400 per kthread
[  103.317458][ T6109] team0: No ports can be present during mode change
[  103.357976][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'.
[  103.506539][ T6115] netlink: 'syz.3.31': attribute type 1 has an invalid length.
[  103.526242][ T6115] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.31'.
[  103.558648][ T6115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.31'.
[  103.645688][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'.
[  103.687781][ T6121] bond0: (slave bond_slave_1): Releasing backup interface
[  104.203595][ T6139] netlink: 264 bytes leftover after parsing attributes in process `syz.1.35'.
[  104.230622][ T6139] netlink: 56 bytes leftover after parsing attributes in process `syz.1.35'.
[  104.242500][ T5986] tipc: Node number set to 2886997162
[  104.496743][ T6149] netlink: 72 bytes leftover after parsing attributes in process `syz.4.34'.
[  104.639992][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'.
[  105.313094][ T6171] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  105.340762][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'.
[  105.397738][ T6176] lo speed is unknown, defaulting to 1000
[  105.459760][ T6181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.43'.
[  105.488984][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'.
[  105.628883][ T6181] veth0_to_bridge: entered promiscuous mode
[  105.628942][ T6176] lo speed is unknown, defaulting to 1000
[  105.691855][ T6181] veth0_to_bridge: entered allmulticast mode
[  105.852670][ T6176] lo speed is unknown, defaulting to 1000
[  105.882755][ T6176] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  105.962311][ T6176] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  106.115040][ T6190] lo speed is unknown, defaulting to 1000
[  106.126956][ T6176] lo speed is unknown, defaulting to 1000
[  106.139686][ T6176] lo speed is unknown, defaulting to 1000
[  106.154445][ T6197] netlink: 'syz.0.49': attribute type 8 has an invalid length.
[  106.170955][ T6197] bond0: entered promiscuous mode
[  106.201427][ T6197] bond_slave_0: entered promiscuous mode
[  106.230263][ T6197] dummy0: entered promiscuous mode
[  106.385613][ T6197] bond0: left promiscuous mode
[  106.391221][ T6197] bond_slave_0: left promiscuous mode
[  106.401824][ T6197] dummy0: left promiscuous mode
[  106.563538][ T6176] lo speed is unknown, defaulting to 1000
[  106.721646][ T6176] lo speed is unknown, defaulting to 1000
[  106.917893][ T6176] lo speed is unknown, defaulting to 1000
[  107.022961][ T6208] geneve2: entered promiscuous mode
[  107.083330][ T6208] geneve2: entered allmulticast mode
[  107.619415][ T6221] bridge0: entered promiscuous mode
[  107.644991][ T6221] vlan2: entered promiscuous mode
[  108.584762][ T6239] bond0: (slave bond_slave_1): Releasing backup interface
[  108.653486][ T6244] siw: device registration error -23
[  108.723464][ T6244] __nla_validate_parse: 6 callbacks suppressed
[  108.723487][ T6244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.61'.
[  108.861365][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'.
[  109.080045][ T6238] veth0_to_bridge: entered promiscuous mode
[  109.145649][ T6238] veth0_to_bridge: entered allmulticast mode
[  110.262465][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.67'.
[  110.568155][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'.
[  110.890759][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'.
[  110.946193][ T6276] lo speed is unknown, defaulting to 1000
[  110.964245][ T6276] lo speed is unknown, defaulting to 1000
[  110.986995][ T6276] lo speed is unknown, defaulting to 1000
[  111.005947][ T6279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.71'.
[  111.010070][ T6280] netlink: 700 bytes leftover after parsing attributes in process `syz.1.72'.
[  111.040549][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'.
[  111.053827][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'.
[  111.085929][ T6282] veth0_to_bridge: entered promiscuous mode
[  111.093483][ T6282] veth0_to_bridge: entered allmulticast mode
[  111.139632][ T6276] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  111.284929][ T6276] lo speed is unknown, defaulting to 1000
[  111.298293][ T6276] lo speed is unknown, defaulting to 1000
[  111.309075][ T6276] lo speed is unknown, defaulting to 1000
[  111.388392][ T6285] syz.1.74 (6285) used greatest stack depth: 17864 bytes left
[  111.423306][ T6276] lo speed is unknown, defaulting to 1000
[  111.470723][ T6276] lo speed is unknown, defaulting to 1000
[  111.643016][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'.
[  111.665186][ T6295] siw: device registration error -23
[  111.872478][ T6296] bond0: (slave bond_slave_1): Releasing backup interface
[  112.008155][ T6304] geneve2: entered promiscuous mode
[  112.014306][ T6304] geneve2: entered allmulticast mode
[  112.239255][ T6313] netlink: 'syz.1.80': attribute type 8 has an invalid length.
[  112.294142][ T6313] bond0: entered promiscuous mode
[  112.308016][ T6313] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  112.365009][ T6313] bond0: left promiscuous mode
[  112.370927][ T6313] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  112.426011][ T6318] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  112.749520][ T6328] lo speed is unknown, defaulting to 1000
[  112.944029][ T6327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  113.236892][ T6349] siw: device registration error -23
[  113.403470][ T6349] veth0_to_bridge: entered promiscuous mode
[  113.411040][ T6349] veth0_to_bridge: entered allmulticast mode
[  113.826016][ T6376] __nla_validate_parse: 9 callbacks suppressed
[  113.826035][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'.
[  113.846495][ T6372] lo speed is unknown, defaulting to 1000
[  114.033843][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'.
[  114.143164][ T6384] netlink: 264 bytes leftover after parsing attributes in process `syz.0.101'.
[  114.172245][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'.
[  114.243154][ T6384] netlink: 56 bytes leftover after parsing attributes in process `syz.0.101'.
[  115.596221][ T6402] lo speed is unknown, defaulting to 1000
[  116.186070][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'.
[  116.284797][ T6433] netlink: 72 bytes leftover after parsing attributes in process `syz.0.111'.
[  116.469004][ T6438] netlink: 'syz.1.113': attribute type 1 has an invalid length.
[  116.487080][ T6438] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.113'.
[  116.510061][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.113'.
[  116.660248][ T6440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.114'.
[  116.990314][ T6445] team0: No ports can be present during mode change
[  118.586026][ T6487] lo speed is unknown, defaulting to 1000
[  118.865515][ T6499] tipc: Started in network mode
[  118.871420][ T6499] tipc: Node identity ac1414aa, cluster identity 4711
[  118.889744][ T6499] tipc: Enabled bearer <udp:s>, priority 10
[  119.277575][ T6505] bond0: (slave dummy0): Releasing backup interface
[  119.288604][ T6509] __nla_validate_parse: 6 callbacks suppressed
[  119.288624][ T6509] netlink: 32 bytes leftover after parsing attributes in process `syz.2.130'.
[  119.305420][ T6505] bridge_slave_0: left allmulticast mode
[  119.316573][ T6505] bridge_slave_0: left promiscuous mode
[  119.329839][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.342289][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'.
[  119.374064][ T6511] netlink: 'syz.0.129': attribute type 10 has an invalid length.
[  119.401368][ T6505] bridge_slave_1: left allmulticast mode
[  119.407925][ T6505] bridge_slave_1: left promiscuous mode
[  119.433032][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.469524][ T6505] bond0: (slave bond_slave_0): Releasing backup interface
[  119.481286][ T6516] netlink: 3 bytes leftover after parsing attributes in process `syz.3.132'.
[  119.541972][ T6505] team0: Port device team_slave_0 removed
[  119.588924][ T6505] team0: Port device team_slave_1 removed
[  119.606756][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.615157][ T6505] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.628030][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.652277][ T6505] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.723046][ T5986] lo speed is unknown, defaulting to 1000
[  119.888418][ T5957] tipc: Node number set to 2886997162
[  119.903281][ T6511] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  119.967251][ T6516] batadv1: entered promiscuous mode
[  119.974974][ T6516] batadv1: entered allmulticast mode
[  120.401639][ T6539] netlink: 'syz.1.135': attribute type 10 has an invalid length.
[  120.456789][ T6539] team0: Port device dummy0 added
[  120.474958][ T6543] netlink: 'syz.1.135': attribute type 10 has an invalid length.
[  120.515685][ T6541] tipc: Started in network mode
[  120.521059][ T6541] tipc: Node identity ac1414aa, cluster identity 4711
[  120.533695][ T6541] tipc: Enabled bearer <udp:s>, priority 10
[  120.588320][ T6547] netlink: 'syz.2.141': attribute type 12 has an invalid length.
[  120.622726][ T6546] lo speed is unknown, defaulting to 1000
[  120.681122][ T6543] team0: Port device dummy0 removed
[  120.688214][ T6547] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.141'.
[  120.718015][ T6543] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  120.731232][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'.
[  120.845785][ T6549] syzkaller0: entered promiscuous mode
[  120.864880][ T6549] syzkaller0: entered allmulticast mode
[  121.368432][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'.
[  121.623685][ T6569] netlink: 'syz.4.147': attribute type 3 has an invalid length.
[  121.652838][ T5956] tipc: Node number set to 2886997162
[  122.814018][ T6582] lo speed is unknown, defaulting to 1000
[  122.835244][ T6590] tipc: Started in network mode
[  122.841385][ T6590] tipc: Node identity ac1414aa, cluster identity 4711
[  122.873235][ T6590] tipc: Enabled bearer <udp:s>, priority 10
[  122.911697][ T6593] netlink: 52 bytes leftover after parsing attributes in process `syz.3.155'.
[  122.999611][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'.
[  123.131581][ T6600] netlink: 'syz.2.165': attribute type 3 has an invalid length.
[  123.642507][ T6601] lo speed is unknown, defaulting to 1000
[  123.872316][ T5957] tipc: Node number set to 2886997162
[  124.354404][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'.
[  124.405682][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'.
[  124.410878][ T6621] netlink: 'syz.4.160': attribute type 20 has an invalid length.
[  124.430699][ T6625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.161'.
[  124.498882][ T6625] gretap1: entered promiscuous mode
[  124.515221][ T1145] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.536745][ T1145] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.590578][ T1145] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.631989][ T1145] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.698541][ T6582] netlink: 152 bytes leftover after parsing attributes in process `syz.0.151'.
[  124.851168][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'.
[  125.309648][   T44] IPVS: starting estimator thread 0...
[  125.342977][ T6648] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  125.369364][ T6651] netlink: 'syz.3.170': attribute type 21 has an invalid length.
[  125.388170][ T6651] netlink: 156 bytes leftover after parsing attributes in process `syz.3.170'.
[  125.431910][ T6653] IPVS: using max 26 ests per chain, 62400 per kthread
[  125.551176][ T6657] netlink: 52 bytes leftover after parsing attributes in process `syz.1.171'.
[  125.642732][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'.
[  126.259114][ T6663] lo speed is unknown, defaulting to 1000
[  126.869329][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'.
[  126.881282][ T6698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.180'.
[  126.962900][ T6698] gretap1: entered promiscuous mode
[  126.998968][ T6692] lo speed is unknown, defaulting to 1000
[  127.207990][ T6694] gtp0: entered promiscuous mode
[  127.648393][ T6708] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  127.937818][ T6719] netlink: 'syz.0.186': attribute type 21 has an invalid length.
[  128.897261][  T980] IPVS: starting estimator thread 0...
[  128.906432][ T6749] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  128.929797][ T6746] gtp0: entered promiscuous mode
[  129.001999][ T6750] IPVS: using max 22 ests per chain, 52800 per kthread
[  129.453407][ T6765] team0: Mode changed to "loadbalance"
[  129.458159][ T6771] __nla_validate_parse: 3 callbacks suppressed
[  129.458184][ T6771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.208'.
[  129.609765][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'.
[  129.766899][   T44] IPVS: starting estimator thread 0...
[  129.775879][ T6788] netlink: 'syz.3.214': attribute type 4 has an invalid length.
[  129.892242][ T6787] IPVS: using max 27 ests per chain, 64800 per kthread
[  130.038024][ T6800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.216'.
[  130.041637][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'.
[  130.172481][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'.
[  130.223275][ T6804] netlink: 32 bytes leftover after parsing attributes in process `syz.0.217'.
[  130.260830][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'.
[  130.372632][ T6808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.466999][ T6802] tipc: Disabling bearer <eth:syzkaller0>
[  130.524535][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'.
[  130.857978][ T6826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'.
[  131.101377][ T6839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.231'.
[  131.310651][ T6845] siw: device registration error -23
[  131.356265][ T6845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.388876][ T6844] tipc: Disabling bearer <eth:syzkaller0>
[  131.833344][ T5957] IPVS: starting estimator thread 0...
[  131.965324][ T6864] IPVS: using max 26 ests per chain, 62400 per kthread
[  132.297782][ T6885] siw: device registration error -23
[  132.311530][ T6885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.372890][ T6884] tipc: Disabling bearer <eth:syzkaller0>
[  133.060726][ T6908] netlink: 'syz.3.256': attribute type 29 has an invalid length.
[  133.100003][ T6908] netlink: 'syz.3.256': attribute type 29 has an invalid length.
[  133.123281][ T6908] unsupported nla_type 58
[  133.460089][ T6920] siw: device registration error -23
[  133.591282][ T6920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.608859][ T6924] veth0_to_bridge: entered promiscuous mode
[  133.615673][ T6924] veth0_to_bridge: entered allmulticast mode
[  133.637629][ T6919] tipc: Disabling bearer <eth:syzkaller0>
[  134.476952][ T6959] __nla_validate_parse: 21 callbacks suppressed
[  134.476974][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'.
[  134.663957][ T6966] siw: device registration error -23
[  134.687820][ T6966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.278'.
[  134.722321][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'.
[  134.758031][ T6975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.772372][ T6967] Driver unsupported XDP return value 0 on prog  (id 184) dev N/A, expect packet loss!
[  134.853708][ T6965] tipc: Disabling bearer <eth:syzkaller0>
[  134.918776][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'.
[  135.601334][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'.
[  135.616552][ T7003] netlink: 'syz.3.291': attribute type 2 has an invalid length.
[  135.624580][ T7003] netlink: 'syz.3.291': attribute type 8 has an invalid length.
[  135.641850][ T7003] netlink: 132 bytes leftover after parsing attributes in process `syz.3.291'.
[  135.666020][ T7003] Bluetooth: MGMT ver 1.23
[  135.966705][ T7020] siw: device registration error -23
[  135.987504][ T7020] netlink: 32 bytes leftover after parsing attributes in process `syz.4.295'.
[  136.001681][ T7013] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.294'.
[  136.020536][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'.
[  136.066888][ T7015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.078549][ T7013] netlink: 'syz.1.294': attribute type 10 has an invalid length.
[  136.108212][ T7014] tipc: Disabling bearer <eth:syzkaller0>
[  136.125665][ T7023] tipc: Started in network mode
[  136.130954][ T7023] tipc: Node identity ac1414aa, cluster identity 4711
[  136.143742][ T7023] tipc: Enabled bearer <udp:s>, priority 10
[  136.740156][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'.
[  137.107844][ T7056] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  137.216411][ T7059] siw: device registration error -23
[  137.247145][ T7059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.261996][ T5956] tipc: Node number set to 2886997162
[  137.308136][ T7058] tipc: Disabling bearer <eth:syzkaller0>
[  138.189656][ T7100] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  138.278210][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  138.291922][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  138.559718][ T7110] siw: device registration error -23
[  138.655820][ T7110] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.821019][ T7109] tipc: Disabling bearer <eth:syzkaller0>
[  139.358286][ T7136] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  139.556714][ T7149] __nla_validate_parse: 10 callbacks suppressed
[  139.556738][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'.
[  139.891202][ T7159] netlink: 32 bytes leftover after parsing attributes in process `syz.0.346'.
[  139.915612][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'.
[  139.963844][ T7159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.040423][ T7158] tipc: Disabling bearer <eth:syzkaller0>
[  140.292285][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'.
[  140.339077][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'.
[  140.486700][ T7151] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  140.611419][ T7183] netlink: 104 bytes leftover after parsing attributes in process `syz.4.354'.
[  140.805625][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'.
[  141.001407][ T7200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.361'.
[  141.012136][ T7202] netlink: 'syz.0.362': attribute type 10 has an invalid length.
[  141.024806][ T7202] macvlan0: entered promiscuous mode
[  141.303091][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'.
[  141.712481][ T5872] Bluetooth: hci0: command 0x0401 tx timeout
[  141.834745][ T7237] netlink: 'syz.4.374': attribute type 8 has an invalid length.
[  141.857624][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'.
[  141.925171][ T7237] bond0: entered promiscuous mode
[  141.933818][ T7237] bond_slave_0: entered promiscuous mode
[  141.952295][ T7237] bond_slave_1: entered promiscuous mode
[  141.978476][ T7237] bond0: left promiscuous mode
[  141.999626][ T7237] bond_slave_0: left promiscuous mode
[  142.006096][ T7237] bond_slave_1: left promiscuous mode
[  142.490288][ T7261] tipc: Invalid UDP bearer configuration
[  142.490352][ T7261] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  142.735849][ T7265] bridge_slave_1: left allmulticast mode
[  142.743934][ T7265] bridge_slave_1: left promiscuous mode
[  142.758679][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.773628][ T7265] bridge_slave_0: left allmulticast mode
[  142.781389][ T7265] bridge_slave_0: left promiscuous mode
[  142.788875][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.268424][ T7294] batadv1: entered promiscuous mode
[  143.283601][ T7294] batadv1: entered allmulticast mode
[  143.537392][ T7308] netlink: 'syz.1.399': attribute type 10 has an invalid length.
[  143.574334][ T7308] bond0: (slave dummy0): Releasing backup interface
[  143.655974][ T7308] team0: Port device dummy0 added
[  144.030858][ T7323] netlink: 'syz.4.403': attribute type 2 has an invalid length.
[  144.177491][ T7329] netlink: del zone limit has 4 unknown bytes
[  144.484601][ T7339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.503529][ T7338] tipc: Disabling bearer <eth:syzkaller0>
[  144.545327][ T7341] siw: device registration error -23
[  144.557144][ T7341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.578046][ T7340] tipc: Disabling bearer <eth:syzkaller0>
[  144.855567][ T7357] __nla_validate_parse: 12 callbacks suppressed
[  144.855591][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'.
[  144.880585][ T7356] FAULT_INJECTION: forcing a failure.
[  144.880585][ T7356] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  144.915951][ T7356] CPU: 1 UID: 0 PID: 7356 Comm: syz.3.416 Not tainted syzkaller #0 PREEMPT(full) 
[  144.915982][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  144.916003][ T7356] Call Trace:
[  144.916012][ T7356]  <TASK>
[  144.916022][ T7356]  dump_stack_lvl+0x189/0x250
[  144.916062][ T7356]  ? __pfx____ratelimit+0x10/0x10
[  144.916083][ T7356]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.916108][ T7356]  ? __pfx__printk+0x10/0x10
[  144.916139][ T7356]  ? fs_reclaim_acquire+0x7d/0x100
[  144.916183][ T7356]  should_fail_ex+0x414/0x560
[  144.916218][ T7356]  prepare_alloc_pages+0x213/0x610
[  144.916248][ T7356]  __alloc_frozen_pages_noprof+0x123/0x370
[  144.916274][ T7356]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  144.916293][ T7356]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.916317][ T7356]  ? exc_page_fault+0x9f/0xf0
[  144.916339][ T7356]  ? policy_nodemask+0x27c/0x720
[  144.916376][ T7356]  alloc_pages_mpol+0x232/0x4a0
[  144.916411][ T7356]  alloc_pages_noprof+0xa9/0x190
[  144.916442][ T7356]  bpf_prog_test_run_xdp+0xb8d/0x1000
[  144.916485][ T7356]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  144.916513][ T7356]  ? __fget_files+0x2a/0x420
[  144.916538][ T7356]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  144.916560][ T7356]  bpf_prog_test_run+0x2c7/0x340
[  144.916597][ T7356]  __sys_bpf+0x581/0x870
[  144.916628][ T7356]  ? __pfx___sys_bpf+0x10/0x10
[  144.916672][ T7356]  ? ksys_write+0x22a/0x250
[  144.916703][ T7356]  ? __pfx_ksys_write+0x10/0x10
[  144.916730][ T7356]  ? rcu_is_watching+0x15/0xb0
[  144.916760][ T7356]  __x64_sys_bpf+0x7c/0x90
[  144.916786][ T7356]  do_syscall_64+0xfa/0x3b0
[  144.916807][ T7356]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.916839][ T7356]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.916860][ T7356]  ? clear_bhb_loop+0x60/0xb0
[  144.916887][ T7356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.916920][ T7356] RIP: 0033:0x7fd06998ebe9
[  144.916955][ T7356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.916974][ T7356] RSP: 002b:00007fd06a7ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  144.917006][ T7356] RAX: ffffffffffffffda RBX: 00007fd069bc5fa0 RCX: 00007fd06998ebe9
[  144.917022][ T7356] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a
[  144.917036][ T7356] RBP: 00007fd06a7ca090 R08: 0000000000000000 R09: 0000000000000000
[  144.917050][ T7356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.917062][ T7356] R13: 00007fd069bc6038 R14: 00007fd069bc5fa0 R15: 00007ffd46595ea8
[  144.917100][ T7356]  </TASK>
[  144.955354][ T7358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  145.380791][ T7363] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.419'.
[  145.490207][ T7362] netlink: 'syz.3.419': attribute type 10 has an invalid length.
[  145.520737][ T7362] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  145.699169][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.426'.
[  145.704501][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.425'.
[  145.736103][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.425'.
[  145.820846][ T7376] team0: entered promiscuous mode
[  145.827297][ T7376] team_slave_0: entered promiscuous mode
[  145.836292][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'.
[  145.844079][ T7376] team_slave_1: entered promiscuous mode
[  145.886023][ T7376] ip6gretap0: entered promiscuous mode
[  145.930066][ T7385] vlan2: entered promiscuous mode
[  145.989027][ T7385] dummy0: entered promiscuous mode
[  146.009280][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'.
[  146.087364][ T7392] IPVS: length: 55 != 8
[  146.109398][ T7392] IPVS: set_ctl: invalid protocol: 199 100.1.1.0:20004
[  146.286865][ T7402] netlink: 5 bytes leftover after parsing attributes in process `syz.3.433'.
[  147.057797][ T7424] siw: device registration error -23
[  147.112372][ T7424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.443'.
[  147.141734][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.443'.
[  147.172284][ T7437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.227352][ T7423] tipc: Disabling bearer <eth:syzkaller0>
[  147.482006][ T7444] netlink: 'syz.3.451': attribute type 4 has an invalid length.
[  147.617814][ T7452] syz_tun: entered allmulticast mode
[  147.804457][ T7455] bond0: (slave bond_slave_1): Releasing backup interface
[  148.006862][ T7465] lo speed is unknown, defaulting to 1000
[  148.214827][ T7451] syz_tun: left allmulticast mode
[  148.439955][ T7485] siw: device registration error -23
[  148.472459][ T7485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.497295][ T7484] tipc: Disabling bearer <eth:syzkaller0>
[  149.315176][ T7516] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.362627][ T7519] lo speed is unknown, defaulting to 1000
[  149.427083][ T7515] tipc: Disabling bearer <eth:syzkaller0>
[  149.878892][ T7540] __nla_validate_parse: 12 callbacks suppressed
[  149.878917][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'.
[  149.900463][ T7540] openvswitch: netlink: Missing key (keys=40, expected=100)
[  149.914331][ T7540] netlink: 'syz.0.482': attribute type 1 has an invalid length.
[  149.923821][ T7540] netlink: 'syz.0.482': attribute type 1 has an invalid length.
[  150.499420][ T7560] siw: device registration error -23
[  150.512514][ T7560] netlink: 32 bytes leftover after parsing attributes in process `syz.3.490'.
[  150.543322][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'.
[  150.596475][ T7562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.626095][ T7558] tipc: Disabling bearer <eth:syzkaller0>
[  150.818575][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'.
[  150.821673][ T7572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.840849][ T7568] lo speed is unknown, defaulting to 1000
[  150.848756][ T7572] syzkaller0: entered promiscuous mode
[  150.868836][ T7572] syzkaller0: entered allmulticast mode
[  150.994966][ T7572] tipc: Resetting bearer <eth:syzkaller0>
[  151.067379][ T7570] tipc: Resetting bearer <eth:syzkaller0>
[  151.117657][ T7570] tipc: Disabling bearer <eth:syzkaller0>
[  151.130628][ T7588] netlink: 48 bytes leftover after parsing attributes in process `syz.2.501'.
[  151.183900][ T7586] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  151.562137][ T7601] syzkaller1: entered promiscuous mode
[  151.568304][ T7599] netlink: 'syz.4.506': attribute type 10 has an invalid length.
[  151.568839][ T7601] syzkaller1: entered allmulticast mode
[  151.650978][ T7599] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  151.679797][ T7599] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  151.797294][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'.
[  151.846704][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'.
[  151.928512][ T7609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.511'.
[  151.967513][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'.
[  152.030015][ T7620] syz_tun: entered allmulticast mode
[  152.126009][ T7615] dvmrp8: entered allmulticast mode
[  152.207956][ T7615] netlink: 'syz.2.513': attribute type 23 has an invalid length.
[  152.267668][ T7626] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  152.281507][ T7614] syz_tun: left allmulticast mode
[  152.294675][ T7614] dvmrp8: left allmulticast mode
[  152.972521][ T7646] bridge0: entered promiscuous mode
[  153.016780][ T7646] vlan2: entered promiscuous mode
[  153.264925][ T7659] netlink: 264 bytes leftover after parsing attributes in process `syz.4.527'.
[  153.379391][ T7664] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  153.707561][ T7679] siw: device registration error -23
[  153.721025][ T7679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.742005][ T7678] tipc: Disabling bearer <eth:syzkaller0>
[  153.785426][ T7683] !
: renamed from dummy0
[  154.093718][ T7690] lo speed is unknown, defaulting to 1000
[  154.899845][ T7725] netlink: 'syz.1.542': attribute type 10 has an invalid length.
[  154.946596][ T7725] 8021q: adding VLAN 0 to HW filter on device team0
[  155.004135][ T7725] bond0: (slave team0): Enslaving as an active interface with an up link
[  155.103513][ T7724] __nla_validate_parse: 4 callbacks suppressed
[  155.103536][ T7724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.544'.
[  155.395316][ T7737] siw: device registration error -23
[  155.406518][ T7737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.546'.
[  155.459741][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'.
[  155.531642][ T7744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.664782][ T7735] tipc: Disabling bearer <eth:syzkaller0>
[  155.889539][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'.
[  156.422197][ T7786] siw: device registration error -23
[  156.454976][ T7786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.554'.
[  156.538633][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'.
[  156.660425][ T7788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.749565][ T7785] tipc: Disabling bearer <eth:syzkaller0>
[  156.873023][ T7801] FAULT_INJECTION: forcing a failure.
[  156.873023][ T7801] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  157.005999][ T7801] CPU: 1 UID: 0 PID: 7801 Comm: syz.4.558 Not tainted syzkaller #0 PREEMPT(full) 
[  157.006033][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  157.006047][ T7801] Call Trace:
[  157.006056][ T7801]  <TASK>
[  157.006065][ T7801]  dump_stack_lvl+0x189/0x250
[  157.006097][ T7801]  ? __pfx____ratelimit+0x10/0x10
[  157.006120][ T7801]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.006146][ T7801]  ? __pfx__printk+0x10/0x10
[  157.006176][ T7801]  ? __might_fault+0xb0/0x130
[  157.006218][ T7801]  should_fail_ex+0x414/0x560
[  157.006251][ T7801]  _copy_from_user+0x2d/0xb0
[  157.006277][ T7801]  do_sock_getsockopt+0x17d/0x450
[  157.006305][ T7801]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  157.006328][ T7801]  ? write_ibpb+0x30/0x40
[  157.006349][ T7801]  ? __fget_files+0x3a0/0x420
[  157.006367][ T7801]  ? __fget_files+0x2a/0x420
[  157.006394][ T7801]  __x64_sys_getsockopt+0x1a5/0x250
[  157.006416][ T7801]  ? write_ibpb+0x30/0x40
[  157.006439][ T7801]  ? write_ibpb+0x30/0x40
[  157.006465][ T7801]  do_syscall_64+0xfa/0x3b0
[  157.006486][ T7801]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.006507][ T7801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.006528][ T7801]  ? clear_bhb_loop+0x60/0xb0
[  157.006553][ T7801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.006573][ T7801] RIP: 0033:0x7f74c158ebe9
[  157.006593][ T7801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.006610][ T7801] RSP: 002b:00007f74c24a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  157.006633][ T7801] RAX: ffffffffffffffda RBX: 00007f74c17c5fa0 RCX: 00007f74c158ebe9
[  157.006648][ T7801] RDX: 0000000000000082 RSI: 000000000000010f RDI: 0000000000000003
[  157.006661][ T7801] RBP: 00007f74c24a0090 R08: 0000200000000240 R09: 0000000000000000
[  157.006674][ T7801] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  157.006687][ T7801] R13: 00007f74c17c6038 R14: 00007f74c17c5fa0 R15: 00007ffcdace0e78
[  157.006722][ T7801]  </TASK>
[  157.500518][ T7813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'.
[  157.628005][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'.
[  157.640587][ T7816] siw: device registration error -23
[  157.650801][ T7816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.564'.
[  157.660224][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'.
[  157.714149][ T7816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.729393][ T7815] tipc: Disabling bearer <eth:syzkaller0>
[  157.872023][ T7826] unknown channel width for channel at 909000KHz?
[  157.928089][ T7827] netlink: 'syz.1.568': attribute type 10 has an invalid length.
[  158.162732][ T7836] netlink: del zone limit has 4 unknown bytes
[  158.755763][ T7852] netlink: 'syz.3.578': attribute type 4 has an invalid length.
[  158.797268][ T7852] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  158.953636][ T7855] vlan2: entered promiscuous mode
[  159.129302][ T7864] siw: device registration error -23
[  159.174448][ T7864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.249758][ T7863] tipc: Disabling bearer <eth:syzkaller0>
[  159.291025][ T7870] batadv1: entered promiscuous mode
[  159.300883][ T7870] batadv1: entered allmulticast mode
[  160.282203][ T7914] __nla_validate_parse: 11 callbacks suppressed
[  160.282225][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'.
[  160.308089][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'.
[  160.937807][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'.
[  160.964169][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'.
[  161.052085][ T7962] netlink: 188 bytes leftover after parsing attributes in process `syz.3.615'.
[  161.304220][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'.
[  161.332233][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'.
[  161.742518][ T7969] netlink: 48 bytes leftover after parsing attributes in process `syz.1.617'.
[  161.819024][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.618'.
[  161.843721][ T7975] siw: device registration error -23
[  161.868882][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz.3.619'.
[  161.930290][ T7980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.940154][ T7978] lo speed is unknown, defaulting to 1000
[  162.011289][ T7974] tipc: Disabling bearer <eth:syzkaller0>
[  162.535417][ T7999] geneve2: entered promiscuous mode
[  162.541315][ T7999] geneve2: entered allmulticast mode
[  162.713015][ T7996] lo speed is unknown, defaulting to 1000
[  162.940938][ T8014] !
: renamed from dummy0
[  163.282370][ T8014] lo speed is unknown, defaulting to 1000
[  163.780778][ T8040] siw: device registration error -23
[  163.800922][ T8040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.854746][ T8038] tipc: Disabling bearer <eth:syzkaller0>
[  164.597224][ T8062] netlink: 'syz.3.638': attribute type 10 has an invalid length.
[  164.695975][ T8062] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  164.905584][ T8075] lo speed is unknown, defaulting to 1000
[  165.468274][ T8098] __nla_validate_parse: 16 callbacks suppressed
[  165.468296][ T8098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.649'.
[  165.616573][ T8096] siw: device registration error -23
[  165.664639][ T8096] netlink: 32 bytes leftover after parsing attributes in process `syz.4.648'.
[  165.681671][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'.
[  165.706878][ T8104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.651'.
[  165.727955][ T8096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.748382][ T8095] tipc: Disabling bearer <eth:syzkaller0>
[  166.043304][ T8117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'.
[  166.582386][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'.
[  166.867373][ T8154] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  166.907088][ T8154] bond0: (slave netdevsim0): Releasing backup interface
[  166.939829][ T8154] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  167.267259][ T8171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.294095][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'.
[  167.630997][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.674'.
[  167.694849][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[  167.785685][ T8182] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  167.809699][ T8184] netlink: 32 bytes leftover after parsing attributes in process `syz.3.675'.
[  167.825045][ T8184] tipc: Invalid UDP bearer configuration
[  167.825127][ T8184] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  168.221574][ T8194] syzkaller1: entered promiscuous mode
[  168.238102][ T8194] syzkaller1: entered allmulticast mode
[  168.308061][ T8196] netlink: 'syz.4.680': attribute type 10 has an invalid length.
[  168.324736][ T8198] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  168.379675][ T8196] team0: Port device dummy0 added
[  168.618313][ T8207] batadv1: entered promiscuous mode
[  168.667662][ T8207] batadv1: entered allmulticast mode
[  169.029921][ T8225] netlink: 'syz.4.688': attribute type 4 has an invalid length.
[  169.063275][ T8225] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  169.109350][ T8227] Bluetooth: MGMT ver 1.23
[  169.533148][ T8242] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  170.050625][ T8264] lo speed is unknown, defaulting to 1000
[  170.198833][ T8267] geneve2: entered promiscuous mode
[  170.245708][ T8266] lo speed is unknown, defaulting to 1000
[  170.977719][ T8288] siw: device registration error -23
[  170.990141][ T8288] __nla_validate_parse: 9 callbacks suppressed
[  170.990162][ T8288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.707'.
[  171.018589][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'.
[  171.087163][ T8288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.193217][ T8287] tipc: Disabling bearer <eth:syzkaller0>
[  171.338630][ T8266] lo speed is unknown, defaulting to 1000
[  171.888912][ T8307] sctp: [Deprecated]: syz.0.712 (pid 8307) Use of int in max_burst socket option.
[  171.888912][ T8307] Use struct sctp_assoc_value instead
[  171.898000][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'.
[  171.972018][ T8307] tap0: tun_chr_ioctl cmd 1074025677
[  171.978368][ T8307] tap0: linktype set to 776
[  172.059053][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.713'.
[  172.239474][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'.
[  172.265111][ T8310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.713'.
[  172.284901][ T8310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.713'.
[  172.298980][ T8312] netlink: 'syz.2.713': attribute type 10 has an invalid length.
[  172.309445][ T8310] netlink: 540 bytes leftover after parsing attributes in process `syz.2.713'.
[  173.143278][ T8330] lo speed is unknown, defaulting to 1000
[  173.333654][ T8336] netlink: 'syz.1.724': attribute type 10 has an invalid length.
[  173.414228][ T8336] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  173.799655][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'.
[  173.943068][ T8359] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  174.003049][ T8359] netlink: 'syz.3.729': attribute type 13 has an invalid length.
[  174.011376][ T8359] netlink: 'syz.3.729': attribute type 17 has an invalid length.
[  174.180457][ T8359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.377161][ T8365] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  174.728641][ T8379] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  174.935571][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'.
[  175.097784][ T8393] FAULT_INJECTION: forcing a failure.
[  175.097784][ T8393] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  175.118632][ T8393] CPU: 1 UID: 0 PID: 8393 Comm: syz.1.740 Not tainted syzkaller #0 PREEMPT(full) 
[  175.118665][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  175.118678][ T8393] Call Trace:
[  175.118686][ T8393]  <TASK>
[  175.118696][ T8393]  dump_stack_lvl+0x189/0x250
[  175.118729][ T8393]  ? __pfx____ratelimit+0x10/0x10
[  175.118751][ T8393]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.118776][ T8393]  ? __pfx__printk+0x10/0x10
[  175.118807][ T8393]  ? __might_fault+0xb0/0x130
[  175.118848][ T8393]  should_fail_ex+0x414/0x560
[  175.118885][ T8393]  _copy_from_user+0x2d/0xb0
[  175.118912][ T8393]  ___sys_sendmsg+0x158/0x2a0
[  175.118942][ T8393]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.119012][ T8393]  ? __fget_files+0x2a/0x420
[  175.119030][ T8393]  ? __fget_files+0x3a0/0x420
[  175.119062][ T8393]  __x64_sys_sendmsg+0x19b/0x260
[  175.119091][ T8393]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.119129][ T8393]  ? __pfx_ksys_write+0x10/0x10
[  175.119155][ T8393]  ? rcu_is_watching+0x15/0xb0
[  175.119181][ T8393]  ? do_syscall_64+0xbe/0x3b0
[  175.119206][ T8393]  do_syscall_64+0xfa/0x3b0
[  175.119227][ T8393]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.119248][ T8393]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.119268][ T8393]  ? clear_bhb_loop+0x60/0xb0
[  175.119293][ T8393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.119311][ T8393] RIP: 0033:0x7fa0cf58ebe9
[  175.119329][ T8393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.119357][ T8393] RSP: 002b:00007fa0d031e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.119377][ T8393] RAX: ffffffffffffffda RBX: 00007fa0cf7c5fa0 RCX: 00007fa0cf58ebe9
[  175.119393][ T8393] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003
[  175.119407][ T8393] RBP: 00007fa0d031e090 R08: 0000000000000000 R09: 0000000000000000
[  175.119419][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.119431][ T8393] R13: 00007fa0cf7c6038 R14: 00007fa0cf7c5fa0 R15: 00007ffe7dc43f48
[  175.119464][ T8393]  </TASK>
[  175.140406][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.522732][ T8397] tls_set_device_offload: netdev not found
[  175.656569][ T8385] bridge_slave_1 (unregistering): left allmulticast mode
[  175.671969][ T8385] bridge_slave_1 (unregistering): left promiscuous mode
[  175.679926][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.748335][ T8390] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  175.972651][ T8410] netlink: 'syz.3.746': attribute type 4 has an invalid length.
[  176.090422][ T8413] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  176.132917][ T8413] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  176.342586][ T8420] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  176.428699][ T8422] __nla_validate_parse: 1 callbacks suppressed
[  176.428720][ T8422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.751'.
[  176.479416][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'.
[  176.484953][ T8425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.623249][ T8421] tipc: Disabling bearer <eth:syzkaller0>
[  176.669734][ T5986] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  176.690379][ T5986] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  176.874190][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.758'.
[  177.018533][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'.
[  177.216818][ T8233] Set syz1 is full, maxelem 65536 reached
[  177.306222][ T8450] netlink: 'syz.0.761': attribute type 2 has an invalid length.
[  177.375834][ T8453] netlink: 'syz.3.762': attribute type 10 has an invalid length.
[  177.392390][ T8450] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.761'.
[  177.490811][ T8453] macvlan0: entered promiscuous mode
[  177.584422][ T8453] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  177.602850][ T8456] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  177.676466][ T8460] lo speed is unknown, defaulting to 1000
[  178.211611][ T8451] infiniband syz!: set down
[  178.217587][ T8451] infiniband syz!: added team_slave_0
[  178.226661][ T8451] syz!: rxe_create_cq: returned err = -12
[  178.234798][ T8451] infiniband syz!: Couldn't create ib_mad CQ
[  178.252063][ T8451] infiniband syz!: Couldn't open port 1
[  178.258887][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'.
[  178.359482][ T8470] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  178.378233][ T8451] RDS/IB: syz!: added
[  178.412919][ T8451] smc: adding ib device syz! with port count 1
[  178.437262][ T8451] smc:    ib device syz! port 1 has pnetid 
[  178.586689][ T8484] netlink: 32 bytes leftover after parsing attributes in process `syz.2.768'.
[  178.601673][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.768'.
[  178.692810][ T8485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.759039][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'.
[  178.776658][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'.
[  179.002644][ T8491] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  179.303618][ T8480] tipc: Disabling bearer <eth:syzkaller0>
[  179.508994][ T8508] netlink: 'syz.3.781': attribute type 4 has an invalid length.
[  179.548614][ T8508] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  179.637915][ T8511] FAULT_INJECTION: forcing a failure.
[  179.637915][ T8511] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.677742][ T8511] CPU: 1 UID: 0 PID: 8511 Comm: syz.1.782 Not tainted syzkaller #0 PREEMPT(full) 
[  179.677773][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  179.677786][ T8511] Call Trace:
[  179.677796][ T8511]  <TASK>
[  179.677806][ T8511]  dump_stack_lvl+0x189/0x250
[  179.677840][ T8511]  ? __pfx____ratelimit+0x10/0x10
[  179.677863][ T8511]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.677890][ T8511]  ? __pfx__printk+0x10/0x10
[  179.677921][ T8511]  ? __might_fault+0xb0/0x130
[  179.677965][ T8511]  should_fail_ex+0x414/0x560
[  179.678009][ T8511]  _copy_from_user+0x2d/0xb0
[  179.678037][ T8511]  bpf_prog_test_run_xdp+0xd05/0x1000
[  179.678081][ T8511]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  179.678110][ T8511]  ? __fget_files+0x2a/0x420
[  179.678133][ T8511]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  179.678151][ T8511]  bpf_prog_test_run+0x2c7/0x340
[  179.678180][ T8511]  __sys_bpf+0x581/0x870
[  179.678204][ T8511]  ? __pfx___sys_bpf+0x10/0x10
[  179.678238][ T8511]  ? ksys_write+0x22a/0x250
[  179.678264][ T8511]  ? __pfx_ksys_write+0x10/0x10
[  179.678284][ T8511]  ? rcu_is_watching+0x15/0xb0
[  179.678308][ T8511]  __x64_sys_bpf+0x7c/0x90
[  179.678330][ T8511]  do_syscall_64+0xfa/0x3b0
[  179.678350][ T8511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.678366][ T8511]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  179.678384][ T8511]  ? clear_bhb_loop+0x60/0xb0
[  179.678404][ T8511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.678421][ T8511] RIP: 0033:0x7fa0cf58ebe9
[  179.678439][ T8511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.678454][ T8511] RSP: 002b:00007fa0d031e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  179.678473][ T8511] RAX: ffffffffffffffda RBX: 00007fa0cf7c5fa0 RCX: 00007fa0cf58ebe9
[  179.678485][ T8511] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a
[  179.678495][ T8511] RBP: 00007fa0d031e090 R08: 0000000000000000 R09: 0000000000000000
[  179.678505][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  179.678515][ T8511] R13: 00007fa0cf7c6038 R14: 00007fa0cf7c5fa0 R15: 00007ffe7dc43f48
[  179.678542][ T8511]  </TASK>
[  180.124775][ T8518] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  181.431721][ T8481] siw: device registration error -23
[  181.556810][ T8551] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  181.672278][ T8555] __nla_validate_parse: 4 callbacks suppressed
[  181.672304][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.798'.
[  181.796819][ T8558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.805407][ T8558] syzkaller0: entered promiscuous mode
[  181.820528][ T8558] syzkaller0: entered allmulticast mode
[  181.829558][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'.
[  181.996969][ T8571] netlink: 'syz.4.802': attribute type 1 has an invalid length.
[  182.002362][ T8558] tipc: Resetting bearer <eth:syzkaller0>
[  182.006778][ T8571] netlink: 228 bytes leftover after parsing attributes in process `syz.4.802'.
[  182.031233][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'.
[  182.081974][ T8556] tipc: Resetting bearer <eth:syzkaller0>
[  182.119712][ T8556] tipc: Disabling bearer <eth:syzkaller0>
[  182.282323][ T8580] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  182.416353][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.0.808'.
[  182.440261][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'.
[  182.484622][ T8583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.536980][ T8582] tipc: Disabling bearer <eth:syzkaller0>
[  182.574278][ T8590] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  182.577193][ T8588] netlink: 'syz.3.810': attribute type 10 has an invalid length.
[  182.597345][ T8588] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  182.627497][ T8588] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  183.384892][ T8592] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  183.542150][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'.
[  183.574805][ T8639] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  183.711283][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'.
[  184.134325][ T8665] netlink: 264 bytes leftover after parsing attributes in process `syz.0.841'.
[  184.297946][ T8670] netlink: 'syz.2.842': attribute type 12 has an invalid length.
[  184.355962][ T8670] netlink: 'syz.2.842': attribute type 18 has an invalid length.
[  184.391723][ T8670] netlink: 'syz.2.842': attribute type 21 has an invalid length.
[  184.442984][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'.
[  184.448236][ T8671] lo speed is unknown, defaulting to 1000
[  184.477849][ T8670] netlink: 'syz.2.842': attribute type 26 has an invalid length.
[  184.592652][ T5872] Bluetooth: hci0: command 0x0401 tx timeout
[  185.666970][ T8678] veth0_to_bridge: left promiscuous mode
[  185.739134][ T8678] veth0_to_bridge: left allmulticast mode
[  186.415446][ T8678] geneve2: left promiscuous mode
[  186.432384][ T8678] geneve2: left allmulticast mode
[  186.548826][ T8683] netlink: 'syz.2.845': attribute type 29 has an invalid length.
[  186.852598][   T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.902189][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.956677][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.014014][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.361686][ T8722] __nla_validate_parse: 1 callbacks suppressed
[  187.361707][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'.
[  187.571242][ T8728] netlink: 700 bytes leftover after parsing attributes in process `syz.0.852'.
[  187.600435][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'.
[  187.930753][ T8732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.855'.
[  187.946989][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'.
[  187.964540][ T8732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.019705][ T8731] tipc: Disabling bearer <eth:syzkaller0>
[  188.181622][ T8735] lo speed is unknown, defaulting to 1000
[  188.229190][ T8740] netlink: 'syz.1.858': attribute type 8 has an invalid length.
[  188.257370][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'.
[  188.319239][ T8740] bond0: entered promiscuous mode
[  188.359493][ T8740] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  188.393860][ T8740] team0: entered promiscuous mode
[  188.416429][ T8740] !
: entered promiscuous mode
[  188.447386][ T8740] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  188.483440][ T8740] bond0: left promiscuous mode
[  188.498586][ T8740] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  188.528210][ T8740] team0: left promiscuous mode
[  188.557131][ T8740] !
: left promiscuous mode
[  188.586562][ T8740] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  188.699307][ T8743] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.773020][ T8743] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.074935][ T8743] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.098982][ T8743] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.305847][ T8757] netlink: 5 bytes leftover after parsing attributes in process `syz.0.863'.
[  189.321059][ T8743] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.340777][ T8743] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.608847][ T8743] bond0: (slave netdevsim0): Releasing backup interface
[  189.648663][ T8743] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.682707][ T8743] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.733147][ T8767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.761549][ T8763] syzkaller0: entered promiscuous mode
[  189.790261][ T8763] syzkaller0: entered allmulticast mode
[  189.922391][ T8763] tipc: Resetting bearer <eth:syzkaller0>
[  190.019091][ T8762] tipc: Resetting bearer <eth:syzkaller0>
[  190.068644][ T8762] tipc: Disabling bearer <eth:syzkaller0>
[  190.121905][   T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.151901][   T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.303647][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.869'.
[  190.313217][ T8773] netlink: 3 bytes leftover after parsing attributes in process `syz.0.868'.
[  190.332698][   T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.349620][   T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.369712][   T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.390084][   T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.438063][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'.
[  190.529030][ T8773] batadv1: entered promiscuous mode
[  190.580062][ T8773] batadv1: entered allmulticast mode
[  190.665010][ T7771] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.680170][ T7771] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.859542][ T8789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.897083][ T8789] syzkaller0: entered promiscuous mode
[  190.912664][ T8789] syzkaller0: entered allmulticast mode
[  191.016658][ T8789] tipc: Resetting bearer <eth:syzkaller0>
[  191.050302][ T8788] tipc: Resetting bearer <eth:syzkaller0>
[  191.152696][ T8788] tipc: Disabling bearer <eth:syzkaller0>
[  191.193262][ T8811] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  191.844248][ T8800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  193.208815][ T8869] __nla_validate_parse: 4 callbacks suppressed
[  193.208836][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'.
[  193.391498][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.900'.
[  193.758134][ T8856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  193.900833][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'.
[  194.022362][ T8889] netlink: 88 bytes leftover after parsing attributes in process `syz.0.905'.
[  194.067445][ T8894] netlink: 'syz.1.906': attribute type 2 has an invalid length.
[  194.073441][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.905'.
[  194.095134][ T8894] netlink: 4856 bytes leftover after parsing attributes in process `syz.1.906'.
[  194.105334][ T8890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.905'.
[  194.287110][ T8903] veth1_vlan: left promiscuous mode
[  194.329390][ T8903] netlink: 'syz.0.910': attribute type 2 has an invalid length.
[  194.485627][ T8910] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  194.677827][ T8918] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  194.706952][ T8918] tipc: Enabled bearer <udp:syz2>, priority 10
[  194.749672][ T8918] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  194.782110][ T8918] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  194.799213][ T8918] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  194.812308][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  194.859728][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'.
[  195.075589][ T8943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.924'.
[  195.082148][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  195.089067][ T8943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.924'.
[  195.098098][ T8944] netlink: 'syz.4.925': attribute type 12 has an invalid length.
[  195.114737][ T8943] team0: entered promiscuous mode
[  195.120599][ T8943] team_slave_0: entered promiscuous mode
[  195.130165][ T8943] team_slave_1: entered promiscuous mode
[  195.142854][ T8943] ip6gretap0: entered promiscuous mode
[  195.161070][ T8943] debugfs: 'hsr1' already exists in 'hsr'
[  195.178019][ T8943] Cannot create hsr debugfs directory
[  195.521291][ T8958] vlan2: entered promiscuous mode
[  195.612173][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  196.671949][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  197.292151][ T9017] netlink: 'syz.2.950': attribute type 10 has an invalid length.
[  197.531567][ T9021] lo speed is unknown, defaulting to 1000
[  197.616627][ T9029] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  197.711987][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  198.151460][ T9045] FAULT_INJECTION: forcing a failure.
[  198.151460][ T9045] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  198.201981][ T9045] CPU: 0 UID: 0 PID: 9045 Comm: syz.2.965 Not tainted syzkaller #0 PREEMPT(full) 
[  198.202013][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  198.202027][ T9045] Call Trace:
[  198.202036][ T9045]  <TASK>
[  198.202045][ T9045]  dump_stack_lvl+0x189/0x250
[  198.202077][ T9045]  ? __pfx____ratelimit+0x10/0x10
[  198.202099][ T9045]  ? __pfx_dump_stack_lvl+0x10/0x10
[  198.202126][ T9045]  ? __pfx__printk+0x10/0x10
[  198.202170][ T9045]  ? __might_fault+0xb0/0x130
[  198.202213][ T9045]  should_fail_ex+0x414/0x560
[  198.202248][ T9045]  _copy_from_iter+0x1de/0x1790
[  198.202279][ T9045]  ? rcu_is_watching+0x15/0xb0
[  198.202303][ T9045]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  198.202336][ T9045]  ? __pfx__copy_from_iter+0x10/0x10
[  198.202360][ T9045]  ? __build_skb_around+0x257/0x3e0
[  198.202387][ T9045]  ? netlink_sendmsg+0x642/0xb30
[  198.202500][ T9045]  ? skb_put+0x11b/0x210
[  198.202531][ T9045]  netlink_sendmsg+0x6b2/0xb30
[  198.202567][ T9045]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.202593][ T9045]  ? aa_sock_msg_perm+0xf1/0x1d0
[  198.202617][ T9045]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  198.202640][ T9045]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.202664][ T9045]  __sock_sendmsg+0x219/0x270
[  198.202699][ T9045]  ____sys_sendmsg+0x505/0x830
[  198.202732][ T9045]  ? __pfx_____sys_sendmsg+0x10/0x10
[  198.202768][ T9045]  ? import_iovec+0x74/0xa0
[  198.202798][ T9045]  ___sys_sendmsg+0x21f/0x2a0
[  198.202827][ T9045]  ? __pfx____sys_sendmsg+0x10/0x10
[  198.202895][ T9045]  ? __fget_files+0x2a/0x420
[  198.202914][ T9045]  ? __fget_files+0x3a0/0x420
[  198.202945][ T9045]  __x64_sys_sendmsg+0x19b/0x260
[  198.202974][ T9045]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  198.203012][ T9045]  ? __pfx_ksys_write+0x10/0x10
[  198.203038][ T9045]  ? rcu_is_watching+0x15/0xb0
[  198.203066][ T9045]  ? do_syscall_64+0xbe/0x3b0
[  198.203095][ T9045]  do_syscall_64+0xfa/0x3b0
[  198.203118][ T9045]  ? lockdep_hardirqs_on+0x9c/0x150
[  198.203140][ T9045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.203244][ T9045]  ? clear_bhb_loop+0x60/0xb0
[  198.203271][ T9045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.203293][ T9045] RIP: 0033:0x7f82e898ebe9
[  198.203314][ T9045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.203332][ T9045] RSP: 002b:00007f82e987c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  198.203355][ T9045] RAX: ffffffffffffffda RBX: 00007f82e8bc5fa0 RCX: 00007f82e898ebe9
[  198.203371][ T9045] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003
[  198.203385][ T9045] RBP: 00007f82e987c090 R08: 0000000000000000 R09: 0000000000000000
[  198.203397][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.203409][ T9045] R13: 00007f82e8bc6038 R14: 00007f82e8bc5fa0 R15: 00007fffc19ef7d8
[  198.203442][ T9045]  </TASK>
[  198.752158][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  199.019528][ T9056] vlan2: entered promiscuous mode
[  199.412666][ T9077] __nla_validate_parse: 9 callbacks suppressed
[  199.412687][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.975'.
[  199.483008][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'.
[  199.707952][ T9084] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  199.725886][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  199.725989][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  199.792457][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  199.908762][ T9086] macvlan1: entered promiscuous mode
[  199.924173][ T9086] ipvlan0: entered promiscuous mode
[  199.931064][ T9090] netlink: 3 bytes leftover after parsing attributes in process `syz.3.980'.
[  199.947154][ T9086] ipvlan0: left promiscuous mode
[  199.964536][ T9086] macvlan1: left promiscuous mode
[  200.063242][ T9090] batadv1: entered promiscuous mode
[  200.075438][ T9090] batadv1: entered allmulticast mode
[  200.432551][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.984'.
[  200.566183][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'.
[  200.587589][ T9112] netlink: 700 bytes leftover after parsing attributes in process `syz.0.988'.
[  200.600611][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.988'.
[  200.832064][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  200.876329][ T9117] smc: net device nicvf0 applied user defined pnetid SYZ1
[  200.896890][ T9119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.991'.
[  200.961701][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'.
[  200.991007][ T9123] netlink: 'syz.4.992': attribute type 4 has an invalid length.
[  201.324353][ T9134] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  201.334647][ T9134] tipc: Enabled bearer <udp:syz2>, priority 10
[  201.387894][ T9134] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  201.407044][ T9134] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  201.426668][ T9134] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  201.462172][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  201.476359][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'.
[  201.732069][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  201.872092][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  202.010557][ T9151] syz_tun: entered allmulticast mode
[  202.111017][ T9149] dvmrp8: entered allmulticast mode
[  202.262173][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  202.580100][ T9147] syz_tun: left allmulticast mode
[  202.611244][ T9147] dvmrp8: left allmulticast mode
[  202.781649][ T9172] netlink: 'syz.0.1007': attribute type 8 has an invalid length.
[  202.851227][ T9172] bond0: entered promiscuous mode
[  202.870097][ T9172] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  202.903698][ T9172] bond0: left promiscuous mode
[  202.909839][ T9172] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  202.912691][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  203.311942][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  203.374459][ T9195] lo speed is unknown, defaulting to 1000
[  203.952141][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  204.250132][ T9229] IPv6: sit2: Disabled Multicast RS
[  204.438795][ T9234] netlink: 'syz.2.1030': attribute type 12 has an invalid length.
[  204.462535][ T9234] __nla_validate_parse: 10 callbacks suppressed
[  204.462558][ T9234] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1030'.
[  204.581481][ T9240] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1032'.
[  204.800641][ T9246] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004
[  204.835299][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'.
[  204.842733][ T9242] lo speed is unknown, defaulting to 1000
[  204.882952][ T9244] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  204.979983][ T9252] netlink: 'syz.2.1037': attribute type 4 has an invalid length.
[  204.992179][    C1] net_ratelimit: 1 callbacks suppressed
[  204.992201][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  205.401938][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  205.447523][ T9274] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1044'.
[  205.486874][ T9274] batadv1: entered promiscuous mode
[  205.494004][ T9274] batadv1: entered allmulticast mode
[  205.596155][ T9277] bridge0: entered promiscuous mode
[  205.602768][ T9277] vlan2: entered promiscuous mode
[  205.788487][ T9285] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1048'.
[  206.032019][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  206.310105][ T9302] netlink: 'syz.2.1054': attribute type 1 has an invalid length.
[  206.346332][ T9302] 8021q: adding VLAN 0 to HW filter on device bond2
[  206.377264][ T9302] bond2: (slave dummy0): making interface the new active one
[  206.388235][ T9302] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  206.432284][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  206.611237][ T9313] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1056'.
[  206.623628][ T9313] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1056'.
[  206.827074][ T9317] Bluetooth: MGMT ver 1.23
[  206.947631][ T9320] TCP: TCP_TX_DELAY enabled
[  207.071994][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  207.368716][ T9307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  207.479150][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  207.576702][ T9338] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1065'.
[  207.678315][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'.
[  207.808522][ T9344] syzkaller1: entered promiscuous mode
[  207.827333][ T9344] syzkaller1: entered allmulticast mode
[  207.845862][ T9339] syzkaller0: mtu less than device minimum
[  208.112228][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  208.220106][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'.
[  208.516562][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  209.154454][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  210.191969][    C1] net_ratelimit: 1 callbacks suppressed
[  210.191992][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  210.428661][ T9396] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1080'.
[  210.592244][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  210.691452][ T9402] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1084'.
[  210.709471][ T9400] lo speed is unknown, defaulting to 1000
[  211.001377][ T9410] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1087'.
[  211.043561][ T9410] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  211.232852][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  211.632166][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  211.722420][ T9433] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1093'.
[  211.902520][ T9444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1096'.
[  212.034677][ T5876] Bluetooth: hci2: command 0x0406 tx timeout
[  212.040991][ T5880] Bluetooth: hci1: command 0x0406 tx timeout
[  212.055802][ T5868] Bluetooth: hci3: command 0x0406 tx timeout
[  212.272075][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  212.397361][ T9455] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  212.591081][ T9460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.604283][ T9460] syzkaller0: entered promiscuous mode
[  212.648516][ T9460] syzkaller0: entered allmulticast mode
[  212.682018][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  212.782741][ T9460] tipc: Resetting bearer <eth:syzkaller0>
[  213.011029][ T9459] tipc: Resetting bearer <eth:syzkaller0>
[  213.144988][ T9459] tipc: Disabling bearer <eth:syzkaller0>
[  213.170211][ T9477] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1105'.
[  213.312062][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  213.374588][ T9484] netlink: 'syz.1.1109': attribute type 11 has an invalid length.
[  213.580151][ T9487] netlink: 'syz.2.1112': attribute type 29 has an invalid length.
[  213.615285][ T9487] netlink: 'syz.2.1112': attribute type 29 has an invalid length.
[  213.635310][ T9487] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1112'.
[  213.636374][ T9493] syz_tun: entered allmulticast mode
[  213.670655][ T9490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.694666][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'.
[  213.712113][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  213.739519][ T9490] syzkaller0: entered promiscuous mode
[  213.753816][ T9490] syzkaller0: entered allmulticast mode
[  213.824723][ T9499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1115'.
[  213.854184][ T9489] syz_tun: left allmulticast mode
[  213.935804][ T9503] netlink: 'syz.2.1115': attribute type 1 has an invalid length.
[  213.950272][ T9496] tipc: Resetting bearer <eth:syzkaller0>
[  213.979975][ T9503] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1115'.
[  214.009264][ T9490] can: request_module (can-proto-0) failed.
[  214.033285][ T9503] netlink: 'syz.2.1115': attribute type 2 has an invalid length.
[  214.082350][ T9503] netlink: 'syz.2.1115': attribute type 1 has an invalid length.
[  214.168526][ T9488] tipc: Resetting bearer <eth:syzkaller0>
[  214.295296][ T9488] tipc: Disabling bearer <eth:syzkaller0>
[  214.352092][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  214.411283][ T9518] netlink: 'syz.3.1120': attribute type 2 has an invalid length.
[  214.705969][ T9527] netlink: 'syz.0.1121': attribute type 2 has an invalid length.
[  214.752101][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  215.298062][ T9547] netlink: 'syz.1.1129': attribute type 2 has an invalid length.
[  215.391961][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  215.470170][ T9557] team_slave_1: entered promiscuous mode
[  215.477146][ T9557] dummy0: entered promiscuous mode
[  215.485724][ T9557] vlan3: entered promiscuous mode
[  215.530709][ T9557] team0: entered promiscuous mode
[  215.546540][ T9557] team_slave_0: entered promiscuous mode
[  215.667741][ T9566] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  215.792257][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  216.012888][ T9573] netlink: 'syz.2.1139': attribute type 6 has an invalid length.
[  216.028036][ T9581] __nla_validate_parse: 4 callbacks suppressed
[  216.028060][ T9581] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1146'.
[  216.298906][ T9590] netlink: 'syz.3.1148': attribute type 10 has an invalid length.
[  216.320662][ T9588] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1149'.
[  216.431967][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  216.447066][ T9590] bond0: (slave dummy0): Releasing backup interface
[  216.468446][ T9590] dummy0: entered promiscuous mode
[  216.480718][ T9590] team0: Port device dummy0 added
[  216.537891][ T9591] dummy0: left promiscuous mode
[  216.577889][ T9591] team0: Port device dummy0 removed
[  216.605509][ T9591] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  216.605667][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  216.799580][ T9603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1155'.
[  216.841989][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  217.126579][ T9623] vlan2: entered promiscuous mode
[  217.134884][ T9623] bridge0: entered promiscuous mode
[  217.173273][ T9622] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  217.335162][ T9634] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1164'.
[  217.471955][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  217.666082][ T9653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1170'.
[  217.802994][ T9659] team0: Port device 
0!
 added
[  217.872038][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  217.896626][ T9662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1173'.
[  217.928853][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  218.061586][ T9673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1178'.
[  218.086517][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'.
[  218.200557][ T9679] veth1_vlan: left promiscuous mode
[  218.512161][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  218.611108][ T9704] validate_nla: 7 callbacks suppressed
[  218.611128][ T9704] netlink: 'syz.4.1188': attribute type 2 has an invalid length.
[  218.690987][ T9706] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  218.765650][ T9710] FAULT_INJECTION: forcing a failure.
[  218.765650][ T9710] name failslab, interval 1, probability 0, space 0, times 1
[  218.783495][ T9710] CPU: 1 UID: 0 PID: 9710 Comm: syz.4.1191 Not tainted syzkaller #0 PREEMPT(full) 
[  218.783526][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  218.783540][ T9710] Call Trace:
[  218.783549][ T9710]  <TASK>
[  218.783558][ T9710]  dump_stack_lvl+0x189/0x250
[  218.783591][ T9710]  ? __pfx____ratelimit+0x10/0x10
[  218.783615][ T9710]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.783641][ T9710]  ? __pfx__printk+0x10/0x10
[  218.783682][ T9710]  ? __pfx___might_resched+0x10/0x10
[  218.783703][ T9710]  ? fs_reclaim_acquire+0x7d/0x100
[  218.783743][ T9710]  should_fail_ex+0x414/0x560
[  218.783779][ T9710]  should_failslab+0xa8/0x100
[  218.783813][ T9710]  __kmalloc_noprof+0xcb/0x4f0
[  218.783842][ T9710]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  218.783879][ T9710]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  218.783919][ T9710]  genl_family_rcv_msg_doit+0xb8/0x300
[  218.783957][ T9710]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  218.783996][ T9710]  ? apparmor_capable+0x137/0x1b0
[  218.784026][ T9710]  ? bpf_lsm_capable+0x9/0x20
[  218.784055][ T9710]  ? security_capable+0x7e/0x2e0
[  218.784095][ T9710]  genl_rcv_msg+0x60e/0x790
[  218.784132][ T9710]  ? __pfx_genl_rcv_msg+0x10/0x10
[  218.784159][ T9710]  ? __pfx_ieee802154_llsec_add_dev+0x10/0x10
[  218.784207][ T9710]  netlink_rcv_skb+0x205/0x470
[  218.784226][ T9710]  ? __lock_acquire+0xab9/0xd20
[  218.784258][ T9710]  ? __pfx_genl_rcv_msg+0x10/0x10
[  218.784288][ T9710]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  218.784333][ T9710]  ? down_read+0x1ad/0x2e0
[  218.784362][ T9710]  genl_rcv+0x28/0x40
[  218.784387][ T9710]  netlink_unicast+0x82f/0x9e0
[  218.784432][ T9710]  ? __pfx_netlink_unicast+0x10/0x10
[  218.784471][ T9710]  ? netlink_sendmsg+0x642/0xb30
[  218.784491][ T9710]  ? skb_put+0x11b/0x210
[  218.784518][ T9710]  netlink_sendmsg+0x805/0xb30
[  218.784551][ T9710]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.784577][ T9710]  ? aa_sock_msg_perm+0xf1/0x1d0
[  218.784599][ T9710]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  218.784621][ T9710]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.784653][ T9710]  __sock_sendmsg+0x219/0x270
[  218.784690][ T9710]  ____sys_sendmsg+0x505/0x830
[  218.784723][ T9710]  ? __pfx_____sys_sendmsg+0x10/0x10
[  218.784761][ T9710]  ? import_iovec+0x74/0xa0
[  218.784792][ T9710]  ___sys_sendmsg+0x21f/0x2a0
[  218.784821][ T9710]  ? __pfx____sys_sendmsg+0x10/0x10
[  218.784891][ T9710]  ? __fget_files+0x2a/0x420
[  218.784910][ T9710]  ? __fget_files+0x3a0/0x420
[  218.784943][ T9710]  __x64_sys_sendmsg+0x19b/0x260
[  218.784973][ T9710]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  218.785011][ T9710]  ? __pfx_ksys_write+0x10/0x10
[  218.785038][ T9710]  ? rcu_is_watching+0x15/0xb0
[  218.785067][ T9710]  ? do_syscall_64+0xbe/0x3b0
[  218.785096][ T9710]  do_syscall_64+0xfa/0x3b0
[  218.785118][ T9710]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.785139][ T9710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.785161][ T9710]  ? clear_bhb_loop+0x60/0xb0
[  218.785188][ T9710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.785209][ T9710] RIP: 0033:0x7f74c158ebe9
[  218.785229][ T9710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.785247][ T9710] RSP: 002b:00007f74c24a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.785270][ T9710] RAX: ffffffffffffffda RBX: 00007f74c17c5fa0 RCX: 00007f74c158ebe9
[  218.785286][ T9710] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  218.785299][ T9710] RBP: 00007f74c24a0090 R08: 0000000000000000 R09: 0000000000000000
[  218.785312][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.785324][ T9710] R13: 00007f74c17c6038 R14: 00007f74c17c5fa0 R15: 00007ffcdace0e78
[  218.785361][ T9710]  </TASK>
[  218.952079][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  219.494883][   T30] audit: type=1800 audit(1756853500.610:3): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1199" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1276 res=0 errno=0
[  219.552003][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  219.849813][ T9747] vlan2: entered promiscuous mode
[  220.041946][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  220.067084][ T9717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  220.160246][ T9753] netlink: 'syz.3.1207': attribute type 12 has an invalid length.
[  220.293200][ T9760] netlink: 'syz.2.1210': attribute type 2 has an invalid length.
[  220.365331][ T9764] FAULT_INJECTION: forcing a failure.
[  220.365331][ T9764] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  220.387652][ T9764] CPU: 0 UID: 0 PID: 9764 Comm: syz.1.1212 Not tainted syzkaller #0 PREEMPT(full) 
[  220.387685][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  220.387698][ T9764] Call Trace:
[  220.387707][ T9764]  <TASK>
[  220.387717][ T9764]  dump_stack_lvl+0x189/0x250
[  220.387750][ T9764]  ? __pfx____ratelimit+0x10/0x10
[  220.387773][ T9764]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.387799][ T9764]  ? __pfx__printk+0x10/0x10
[  220.387831][ T9764]  ? __might_fault+0xb0/0x130
[  220.387874][ T9764]  should_fail_ex+0x414/0x560
[  220.387910][ T9764]  _copy_from_user+0x2d/0xb0
[  220.387937][ T9764]  bpf_prog_test_run_xdp+0xd05/0x1000
[  220.387980][ T9764]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  220.388008][ T9764]  ? __fget_files+0x2a/0x420
[  220.388034][ T9764]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  220.388058][ T9764]  bpf_prog_test_run+0x2c7/0x340
[  220.388094][ T9764]  __sys_bpf+0x581/0x870
[  220.388125][ T9764]  ? __pfx___sys_bpf+0x10/0x10
[  220.388170][ T9764]  ? ksys_write+0x22a/0x250
[  220.388202][ T9764]  ? __pfx_ksys_write+0x10/0x10
[  220.388228][ T9764]  ? rcu_is_watching+0x15/0xb0
[  220.388281][ T9764]  __x64_sys_bpf+0x7c/0x90
[  220.388309][ T9764]  do_syscall_64+0xfa/0x3b0
[  220.388330][ T9764]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.388353][ T9764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.388374][ T9764]  ? clear_bhb_loop+0x60/0xb0
[  220.388401][ T9764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.388422][ T9764] RIP: 0033:0x7fa0cf58ebe9
[  220.388442][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.388460][ T9764] RSP: 002b:00007fa0d031e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  220.388484][ T9764] RAX: ffffffffffffffda RBX: 00007fa0cf7c5fa0 RCX: 00007fa0cf58ebe9
[  220.388499][ T9764] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a
[  220.388517][ T9764] RBP: 00007fa0d031e090 R08: 0000000000000000 R09: 0000000000000000
[  220.388530][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  220.388543][ T9764] R13: 00007fa0cf7c6038 R14: 00007fa0cf7c5fa0 R15: 00007ffe7dc43f48
[  220.388578][ T9764]  </TASK>
[  220.592270][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  221.071924][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  221.139253][ T9789] netlink: 'syz.3.1223': attribute type 2 has an invalid length.
[  221.228788][ T9795] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  221.253648][ T9795] CPU: 0 UID: 0 PID: 9795 Comm: syz.1.1225 Not tainted syzkaller #0 PREEMPT(full) 
[  221.253682][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  221.253697][ T9795] Call Trace:
[  221.253706][ T9795]  <TASK>
[  221.253717][ T9795]  dump_stack_lvl+0x189/0x250
[  221.253866][ T9795]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.253896][ T9795]  ? __pfx__printk+0x10/0x10
[  221.253936][ T9795]  ? kernfs_path_from_node+0x2f/0x290
[  221.253963][ T9795]  ? kernfs_path_from_node+0x250/0x290
[  221.253987][ T9795]  ? kernfs_path_from_node+0x2f/0x290
[  221.254019][ T9795]  sysfs_warn_dup+0x8e/0xa0
[  221.254044][ T9795]  sysfs_do_create_link_sd+0xc0/0x110
[  221.254073][ T9795]  device_add_class_symlinks+0x1cf/0x240
[  221.254104][ T9795]  device_add+0x475/0xb50
[  221.254135][ T9795]  wiphy_register+0x1ba6/0x28d0
[  221.254182][ T9795]  ? __pfx_wiphy_register+0x10/0x10
[  221.254207][ T9795]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  221.254248][ T9795]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  221.254285][ T9795]  ieee80211_register_hw+0x3425/0x4080
[  221.254341][ T9795]  ? ieee80211_register_hw+0x14e1/0x4080
[  221.254385][ T9795]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  221.254423][ T9795]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  221.254483][ T9795]  ? __hrtimer_setup+0x187/0x210
[  221.254507][ T9795]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  221.254548][ T9795]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  221.254622][ T9795]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  221.254657][ T9795]  ? trace_kmalloc+0x1f/0xd0
[  221.254684][ T9795]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  221.254717][ T9795]  ? kstrndup+0xbf/0x160
[  221.254755][ T9795]  hwsim_new_radio_nl+0xea4/0x1b10
[  221.254792][ T9795]  ? __pfx___nla_validate_parse+0x10/0x10
[  221.254850][ T9795]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.254901][ T9795]  ? __nla_parse+0x40/0x60
[  221.254947][ T9795]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  221.254991][ T9795]  genl_family_rcv_msg_doit+0x212/0x300
[  221.255035][ T9795]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  221.255086][ T9795]  ? bpf_lsm_capable+0x9/0x20
[  221.255117][ T9795]  ? security_capable+0x7e/0x2e0
[  221.255159][ T9795]  genl_rcv_msg+0x60e/0x790
[  221.255199][ T9795]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.255229][ T9795]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.255282][ T9795]  netlink_rcv_skb+0x205/0x470
[  221.255304][ T9795]  ? __lock_acquire+0xab9/0xd20
[  221.255340][ T9795]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.255373][ T9795]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  221.255424][ T9795]  ? down_read+0x1ad/0x2e0
[  221.255467][ T9795]  genl_rcv+0x28/0x40
[  221.255495][ T9795]  netlink_unicast+0x82f/0x9e0
[  221.255545][ T9795]  ? __pfx_netlink_unicast+0x10/0x10
[  221.255585][ T9795]  ? netlink_sendmsg+0x642/0xb30
[  221.255606][ T9795]  ? skb_put+0x11b/0x210
[  221.255635][ T9795]  netlink_sendmsg+0x805/0xb30
[  221.255674][ T9795]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.255704][ T9795]  ? aa_sock_msg_perm+0xf1/0x1d0
[  221.255730][ T9795]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  221.255756][ T9795]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.255782][ T9795]  __sock_sendmsg+0x219/0x270
[  221.255822][ T9795]  ____sys_sendmsg+0x505/0x830
[  221.255859][ T9795]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.255900][ T9795]  ? import_iovec+0x74/0xa0
[  221.255934][ T9795]  ___sys_sendmsg+0x21f/0x2a0
[  221.255965][ T9795]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.256043][ T9795]  ? __fget_files+0x2a/0x420
[  221.256064][ T9795]  ? __fget_files+0x3a0/0x420
[  221.256100][ T9795]  __x64_sys_sendmsg+0x19b/0x260
[  221.256134][ T9795]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  221.256178][ T9795]  ? rcu_is_watching+0x15/0xb0
[  221.256210][ T9795]  ? do_syscall_64+0xbe/0x3b0
[  221.256242][ T9795]  do_syscall_64+0xfa/0x3b0
[  221.256266][ T9795]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.256289][ T9795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.256313][ T9795]  ? clear_bhb_loop+0x60/0xb0
[  221.256343][ T9795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.256366][ T9795] RIP: 0033:0x7fa0cf58ebe9
[  221.256388][ T9795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.256408][ T9795] RSP: 002b:00007fa0d031e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.256433][ T9795] RAX: ffffffffffffffda RBX: 00007fa0cf7c5fa0 RCX: 00007fa0cf58ebe9
[  221.256462][ T9795] RDX: 0500000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  221.256478][ T9795] RBP: 00007fa0cf611e19 R08: 0000000000000000 R09: 0000000000000000
[  221.256492][ T9795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.256505][ T9795] R13: 00007fa0cf7c6038 R14: 00007fa0cf7c5fa0 R15: 00007ffe7dc43f48
[  221.256545][ T9795]  </TASK>
[  221.322298][ T9800] __nla_validate_parse: 10 callbacks suppressed
[  221.322325][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'.
[  221.356650][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1227'.
[  221.493648][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1227'.
[  221.632948][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  221.868417][ T9786] lo speed is unknown, defaulting to 1000
[  222.112025][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  222.466139][ T9838] netlink: 'syz.3.1236': attribute type 4 has an invalid length.
[  222.670862][ T9845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.672099][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  222.685694][ T9845] syzkaller0: entered promiscuous mode
[  222.711597][ T9845] syzkaller0: entered allmulticast mode
[  222.778658][ T9845] tipc: Resetting bearer <eth:syzkaller0>
[  222.786835][ T9847] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1240'.
[  222.958439][ T9842] tipc: Resetting bearer <eth:syzkaller0>
[  222.975394][ T9842] tipc: Disabling bearer <eth:syzkaller0>
[  223.149731][ T9852] netlink: 'syz.1.1242': attribute type 10 has an invalid length.
[  223.158788][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  223.359693][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1244'.
[  223.590638][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1244'.
[  223.622686][ T9869] FAULT_INJECTION: forcing a failure.
[  223.622686][ T9869] name failslab, interval 1, probability 0, space 0, times 0
[  223.641293][ T9869] CPU: 0 UID: 0 PID: 9869 Comm: syz.2.1249 Not tainted syzkaller #0 PREEMPT(full) 
[  223.641325][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  223.641340][ T9869] Call Trace:
[  223.641349][ T9869]  <TASK>
[  223.641358][ T9869]  dump_stack_lvl+0x189/0x250
[  223.641392][ T9869]  ? __pfx____ratelimit+0x10/0x10
[  223.641415][ T9869]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.641441][ T9869]  ? __pfx__printk+0x10/0x10
[  223.641476][ T9869]  ? __pfx___might_resched+0x10/0x10
[  223.641496][ T9869]  ? fs_reclaim_acquire+0x7d/0x100
[  223.641537][ T9869]  should_fail_ex+0x414/0x560
[  223.641585][ T9869]  should_failslab+0xa8/0x100
[  223.641619][ T9869]  kmem_cache_alloc_noprof+0x73/0x3c0
[  223.641647][ T9869]  ? radix_tree_node_alloc+0x7e/0x3a0
[  223.641675][ T9869]  radix_tree_node_alloc+0x7e/0x3a0
[  223.641704][ T9869]  idr_get_free+0x2b3/0xa70
[  223.641759][ T9869]  idr_alloc_u32+0x159/0x2d0
[  223.641790][ T9869]  ? __pfx_idr_alloc_u32+0x10/0x10
[  223.641820][ T9869]  ? tcf_idr_check_alloc+0xc8/0x7b0
[  223.641856][ T9869]  tcf_idr_check_alloc+0x5de/0x7b0
[  223.641886][ T9869]  ? tcf_idr_check_alloc+0xc8/0x7b0
[  223.641922][ T9869]  ? __pfx_tcf_idr_check_alloc+0x10/0x10
[  223.641956][ T9869]  ? __nla_parse+0x40/0x60
[  223.641995][ T9869]  tcf_pedit_init+0x249/0xff0
[  223.642043][ T9869]  ? __pfx_tcf_pedit_init+0x10/0x10
[  223.642082][ T9869]  ? nla_memcpy+0x5b/0xc0
[  223.642123][ T9869]  tcf_action_init_1+0x463/0x6d0
[  223.642171][ T9869]  ? __pfx_tcf_action_init_1+0x10/0x10
[  223.642201][ T9869]  ? _raw_read_unlock+0x28/0x50
[  223.642241][ T9869]  ? tc_action_load_ops+0x214/0x4e0
[  223.642294][ T9869]  ? __nla_parse+0x40/0x60
[  223.642327][ T9869]  tcf_action_init+0x2cf/0xab0
[  223.642366][ T9869]  ? __pfx_tcf_action_init+0x10/0x10
[  223.642428][ T9869]  ? __pfx___nla_validate_parse+0x10/0x10
[  223.642457][ T9869]  ? trace_sched_exit_tp+0x36/0x110
[  223.642483][ T9869]  ? __schedule+0x17ae/0x4cc0
[  223.642554][ T9869]  tc_ctl_action+0x430/0xbd0
[  223.642597][ T9869]  ? __pfx_tc_ctl_action+0x10/0x10
[  223.642633][ T9869]  ? rcu_is_watching+0x15/0xb0
[  223.642714][ T9869]  ? __pfx_tc_ctl_action+0x10/0x10
[  223.642746][ T9869]  rtnetlink_rcv_msg+0x77c/0xb70
[  223.642775][ T9869]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  223.642795][ T9869]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  223.642814][ T9869]  ? ref_tracker_free+0x63a/0x7d0
[  223.642845][ T9869]  ? __asan_memcpy+0x40/0x70
[  223.642868][ T9869]  ? __pfx_ref_tracker_free+0x10/0x10
[  223.642912][ T9869]  netlink_rcv_skb+0x205/0x470
[  223.642937][ T9869]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  223.642962][ T9869]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  223.643000][ T9869]  ? netlink_deliver_tap+0x2e/0x1b0
[  223.643034][ T9869]  netlink_unicast+0x82f/0x9e0
[  223.643079][ T9869]  ? __pfx_netlink_unicast+0x10/0x10
[  223.643116][ T9869]  ? netlink_sendmsg+0x642/0xb30
[  223.643136][ T9869]  ? skb_put+0x11b/0x210
[  223.643165][ T9869]  netlink_sendmsg+0x805/0xb30
[  223.643200][ T9869]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.643227][ T9869]  ? aa_sock_msg_perm+0xf1/0x1d0
[  223.643264][ T9869]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  223.643288][ T9869]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.643312][ T9869]  __sock_sendmsg+0x219/0x270
[  223.643349][ T9869]  ____sys_sendmsg+0x505/0x830
[  223.643384][ T9869]  ? __pfx_____sys_sendmsg+0x10/0x10
[  223.643422][ T9869]  ? import_iovec+0x74/0xa0
[  223.643451][ T9869]  ___sys_sendmsg+0x21f/0x2a0
[  223.643478][ T9869]  ? __pfx____sys_sendmsg+0x10/0x10
[  223.643545][ T9869]  ? __fget_files+0x2a/0x420
[  223.643562][ T9869]  ? __fget_files+0x3a0/0x420
[  223.643595][ T9869]  __x64_sys_sendmsg+0x19b/0x260
[  223.643627][ T9869]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  223.643666][ T9869]  ? __pfx_ksys_write+0x10/0x10
[  223.643694][ T9869]  ? rcu_is_watching+0x15/0xb0
[  223.643723][ T9869]  ? do_syscall_64+0xbe/0x3b0
[  223.643754][ T9869]  do_syscall_64+0xfa/0x3b0
[  223.643775][ T9869]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.643797][ T9869]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.643820][ T9869]  ? clear_bhb_loop+0x60/0xb0
[  223.643848][ T9869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.643870][ T9869] RIP: 0033:0x7f82e898ebe9
[  223.643891][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.643908][ T9869] RSP: 002b:00007f82e987c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.643932][ T9869] RAX: ffffffffffffffda RBX: 00007f82e8bc5fa0 RCX: 00007f82e898ebe9
[  223.643949][ T9869] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003
[  223.643963][ T9869] RBP: 00007f82e987c090 R08: 0000000000000000 R09: 0000000000000000
[  223.643977][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.643989][ T9869] R13: 00007f82e8bc6038 R14: 00007f82e8bc5fa0 R15: 00007fffc19ef7d8
[  223.644027][ T9869]  </TASK>
[  223.712139][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  224.201995][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  224.326048][ T9868] netlink: 'syz.3.1248': attribute type 2 has an invalid length.
[  224.335403][ T9864] lo speed is unknown, defaulting to 1000
[  224.405636][ T9877] lo speed is unknown, defaulting to 1000
[  224.508419][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'.
[  224.689177][ T9886] netlink: 'syz.3.1255': attribute type 8 has an invalid length.
[  224.702252][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'.
[  224.729652][ T9886] bond0: entered promiscuous mode
[  224.752037][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  224.773178][ T9886] bond_slave_0: entered promiscuous mode
[  224.800072][ T9886] dummy0: entered promiscuous mode
[  224.871240][ T9886] bond0: left promiscuous mode
[  224.881989][ T9886] bond_slave_0: left promiscuous mode
[  224.890244][ T9886] dummy0: left promiscuous mode
[  225.231958][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  225.791940][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  226.071452][ T9916] vlan3: entered promiscuous mode
[  226.271967][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  226.388226][ T9923] Bluetooth: MGMT ver 1.23
[  226.597981][ T9933] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1270'.
[  226.832162][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  226.863608][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'.
[  227.066698][ T9956] pimreg: entered allmulticast mode
[  227.096468][ T9956] pimreg: left allmulticast mode
[  227.130077][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1277'.
[  227.197318][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'.
[  227.198893][ T9960] netlink: 'syz.4.1276': attribute type 13 has an invalid length.
[  227.274020][ T9960] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1276'.
[  227.311921][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  227.327751][ T9960] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1276'.
[  227.484021][ T9965] dummy0: entered promiscuous mode
[  227.489644][ T9965] vlan1: entered promiscuous mode
[  227.752982][ T9972] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  227.774588][ T9972] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1283'.
[  227.833161][ T9972] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1283'.
[  227.871956][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  228.352026][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  228.501234][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'.
[  228.825767][T10000] lo speed is unknown, defaulting to 1000
[  228.911928][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  228.917800][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'.
[  229.392063][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  229.896002][T10014] FAULT_INJECTION: forcing a failure.
[  229.896002][T10014] name failslab, interval 1, probability 0, space 0, times 0
[  229.926406][T10014] CPU: 1 UID: 0 PID: 10014 Comm: syz.4.1293 Not tainted syzkaller #0 PREEMPT(full) 
[  229.926440][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  229.926455][T10014] Call Trace:
[  229.926464][T10014]  <TASK>
[  229.926474][T10014]  dump_stack_lvl+0x189/0x250
[  229.926508][T10014]  ? __pfx____ratelimit+0x10/0x10
[  229.926531][T10014]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.926555][T10014]  ? __pfx__printk+0x10/0x10
[  229.926678][T10014]  ? __pfx___might_resched+0x10/0x10
[  229.926698][T10014]  ? fs_reclaim_acquire+0x7d/0x100
[  229.926735][T10014]  should_fail_ex+0x414/0x560
[  229.926769][T10014]  should_failslab+0xa8/0x100
[  229.926801][T10014]  __kmalloc_cache_noprof+0x70/0x3d0
[  229.926829][T10014]  ? tcf_action_init_1+0x19f/0x6d0
[  229.926864][T10014]  tcf_action_init_1+0x19f/0x6d0
[  229.926900][T10014]  ? __pfx_tcf_action_init_1+0x10/0x10
[  229.926927][T10014]  ? _raw_read_unlock+0x28/0x50
[  229.926958][T10014]  ? tc_action_load_ops+0x214/0x4e0
[  229.927005][T10014]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  229.927035][T10014]  ? __nla_parse+0x40/0x60
[  229.927070][T10014]  tcf_action_init+0x2cf/0xab0
[  229.927104][T10014]  ? __pfx_stack_trace_save+0x10/0x10
[  229.927133][T10014]  ? __pfx_tcf_action_init+0x10/0x10
[  229.927194][T10014]  ? __pfx___nla_validate_parse+0x10/0x10
[  229.927268][T10014]  tc_ctl_action+0x430/0xbd0
[  229.927309][T10014]  ? __pfx_tc_ctl_action+0x10/0x10
[  229.927343][T10014]  ? rcu_is_watching+0x15/0xb0
[  229.927364][T10014]  ? trace_contention_end+0x39/0x120
[  229.927448][T10014]  ? __pfx_tc_ctl_action+0x10/0x10
[  229.927476][T10014]  rtnetlink_rcv_msg+0x77c/0xb70
[  229.927502][T10014]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  229.927520][T10014]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  229.927538][T10014]  ? ref_tracker_free+0x63a/0x7d0
[  229.927568][T10014]  ? __asan_memcpy+0x40/0x70
[  229.927590][T10014]  ? __pfx_ref_tracker_free+0x10/0x10
[  229.927633][T10014]  netlink_rcv_skb+0x205/0x470
[  229.927655][T10014]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  229.927676][T10014]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  229.927709][T10014]  ? netlink_deliver_tap+0x2e/0x1b0
[  229.927740][T10014]  netlink_unicast+0x82f/0x9e0
[  229.927782][T10014]  ? __pfx_netlink_unicast+0x10/0x10
[  229.927814][T10014]  ? netlink_sendmsg+0x642/0xb30
[  229.927833][T10014]  ? skb_put+0x11b/0x210
[  229.927860][T10014]  netlink_sendmsg+0x805/0xb30
[  229.927893][T10014]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.927918][T10014]  ? aa_sock_msg_perm+0xf1/0x1d0
[  229.927941][T10014]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  229.927964][T10014]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.927987][T10014]  __sock_sendmsg+0x219/0x270
[  229.928022][T10014]  ____sys_sendmsg+0x505/0x830
[  229.928053][T10014]  ? __pfx_____sys_sendmsg+0x10/0x10
[  229.928088][T10014]  ? import_iovec+0x74/0xa0
[  229.928117][T10014]  ___sys_sendmsg+0x21f/0x2a0
[  229.928144][T10014]  ? __pfx____sys_sendmsg+0x10/0x10
[  229.928211][T10014]  ? __fget_files+0x2a/0x420
[  229.928229][T10014]  ? __fget_files+0x3a0/0x420
[  229.928259][T10014]  __x64_sys_sendmsg+0x19b/0x260
[  229.928287][T10014]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  229.928323][T10014]  ? __pfx_ksys_write+0x10/0x10
[  229.928348][T10014]  ? rcu_is_watching+0x15/0xb0
[  229.928374][T10014]  ? do_syscall_64+0xbe/0x3b0
[  229.928453][T10014]  do_syscall_64+0xfa/0x3b0
[  229.928474][T10014]  ? lockdep_hardirqs_on+0x9c/0x150
[  229.928495][T10014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.928516][T10014]  ? clear_bhb_loop+0x60/0xb0
[  229.928541][T10014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.928562][T10014] RIP: 0033:0x7f74c158ebe9
[  229.928584][T10014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.928602][T10014] RSP: 002b:00007f74c24a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.928625][T10014] RAX: ffffffffffffffda RBX: 00007f74c17c5fa0 RCX: 00007f74c158ebe9
[  229.928641][T10014] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003
[  229.928654][T10014] RBP: 00007f74c24a0090 R08: 0000000000000000 R09: 0000000000000000
[  229.928667][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.928679][T10014] R13: 00007f74c17c6038 R14: 00007f74c17c5fa0 R15: 00007ffcdace0e78
[  229.928714][T10014]  </TASK>
[  230.391916][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  230.415128][T10017] netlink: 'syz.2.1295': attribute type 4 has an invalid length.
[  231.343019][T10038] net_ratelimit: 1 callbacks suppressed
[  231.343045][T10038] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  231.370510][T10038] tipc: Enabled bearer <udp:syz2>, priority 10
[  231.398197][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  231.427631][T10040] team0: Port device 
0!
 removed
[  231.454560][T10045] netlink: 'syz.0.1307': attribute type 10 has an invalid length.
[  231.471939][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  231.481963][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  231.515393][T10040] bond0: (slave wlan1): Releasing backup interface
[  231.547479][T10040] bond1: (slave ip6gretap1): Releasing backup interface
[  231.590104][T10046] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  231.605454][T10038] __nla_validate_parse: 2 callbacks suppressed
[  231.605476][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'.
[  231.638912][T10046] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  231.691703][T10045] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  231.751941][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  231.890969][T10055] lo speed is unknown, defaulting to 1000
[  232.281922][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  232.432120][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  232.453625][T10079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1321'.
[  232.470819][T10079] netlink: 'syz.2.1321': attribute type 32 has an invalid length.
[  232.484556][T10075] netlink: 'syz.4.1319': attribute type 1 has an invalid length.
[  232.512158][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  232.523195][T10075] netlink: 'syz.4.1319': attribute type 1 has an invalid length.
[  232.543451][T10079] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  232.581451][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1319'.
[  232.627554][T10075] block nbd0: shutting down sockets
[  232.854725][T10097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1324'.
[  232.896917][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'.
[  232.959119][T10104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1326'.
[  232.962372][T10097] ==================================================================
[  232.976931][T10097] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  232.985138][T10097] Read of size 1 at addr ffff88805692cff0 by task syz.4.1324/10097
[  232.994378][T10097] 
[  232.996736][T10097] CPU: 0 UID: 0 PID: 10097 Comm: syz.4.1324 Not tainted syzkaller #0 PREEMPT(full) 
[  232.996765][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  232.996779][T10097] Call Trace:
[  232.996789][T10097]  <TASK>
[  232.996797][T10097]  dump_stack_lvl+0x189/0x250
[  232.996827][T10097]  ? __kasan_check_byte+0x12/0x40
[  232.996862][T10097]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.996887][T10097]  ? lock_release+0x4b/0x3e0
[  232.996923][T10097]  ? __virt_addr_valid+0x4a5/0x5c0
[  232.996953][T10097]  print_report+0xca/0x240
[  232.996973][T10097]  ? xfrm_state_find+0x2cf2/0x5400
[  232.996996][T10097]  kasan_report+0x118/0x150
[  232.997027][T10097]  ? xfrm_state_find+0x2cf2/0x5400
[  232.997070][T10097]  xfrm_state_find+0x2cf2/0x5400
[  232.997094][T10097]  ? __lock_acquire+0xab9/0xd20
[  232.997137][T10097]  ? xfrm_state_find+0x1da/0x5400
[  232.997164][T10097]  ? __pfx_xfrm_state_find+0x10/0x10
[  232.997204][T10097]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  232.997249][T10097]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  232.997282][T10097]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  232.997315][T10097]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  232.997349][T10097]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  232.997400][T10097]  ? xfrm_expand_policies+0x41f/0x6a0
[  232.997432][T10097]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  232.997466][T10097]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  232.997499][T10097]  ? __lock_acquire+0xab9/0xd20
[  232.997532][T10097]  xfrm_lookup_route+0x3c/0x1c0
[  232.997562][T10097]  __ip4_datagram_connect+0x9a5/0x1270
[  232.997601][T10097]  udp_connect+0x33/0x1f0
[  232.997624][T10097]  __sys_connect+0x313/0x440
[  232.997647][T10097]  ? __pfx___sys_connect+0x10/0x10
[  232.997675][T10097]  ? rcu_is_watching+0x15/0xb0
[  232.997702][T10097]  __x64_sys_connect+0x7a/0x90
[  232.997723][T10097]  do_syscall_64+0xfa/0x3b0
[  232.997746][T10097]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.997766][T10097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.997788][T10097]  ? clear_bhb_loop+0x60/0xb0
[  232.997812][T10097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.997833][T10097] RIP: 0033:0x7f74c158ebe9
[  232.997852][T10097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.997872][T10097] RSP: 002b:00007f74c247f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  232.997894][T10097] RAX: ffffffffffffffda RBX: 00007f74c17c6090 RCX: 00007f74c158ebe9
[  232.997911][T10097] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000009
[  232.997924][T10097] RBP: 00007f74c1611e19 R08: 0000000000000000 R09: 0000000000000000
[  232.997938][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.997951][T10097] R13: 00007f74c17c6128 R14: 00007f74c17c6090 R15: 00007ffcdace0e78
[  232.997976][T10097]  </TASK>
[  232.997983][T10097] 
[  233.312316][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  233.316371][T10097] Allocated by task 9865:
[  233.336004][T10097]  kasan_save_track+0x3e/0x80
[  233.341327][T10097]  __kasan_slab_alloc+0x6c/0x80
[  233.346730][T10097]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  233.353486][T10097]  xfrm_state_alloc+0x24/0x2f0
[  233.358381][T10097]  xfrm_state_find+0x37d4/0x5400
[  233.363531][T10097]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  233.369717][T10097]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  233.375364][T10097]  xfrm_lookup_route+0x3c/0x1c0
[  233.380234][T10097]  ip6_datagram_dst_update+0x75c/0xcb0
[  233.386156][T10097]  __ip6_datagram_connect+0xbd1/0x1150
[  233.391668][T10097]  ip6_datagram_connect_v6_only+0x63/0xa0
[  233.397500][T10097]  __sys_connect+0x313/0x440
[  233.402190][T10097]  __x64_sys_connect+0x7a/0x90
[  233.407059][T10097]  do_syscall_64+0xfa/0x3b0
[  233.411769][T10097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.420144][T10097] 
[  233.423284][T10097] Freed by task 8687:
[  233.428474][T10097]  kasan_save_track+0x3e/0x80
[  233.433644][T10097]  kasan_save_free_info+0x46/0x50
[  233.439384][T10097]  __kasan_slab_free+0x5b/0x80
[  233.444177][T10097]  kmem_cache_free+0x18f/0x400
[  233.449057][T10097]  xfrm_state_gc_task+0x52d/0x6b0
[  233.454497][T10097]  process_scheduled_works+0xae1/0x17b0
[  233.460373][T10097]  worker_thread+0x8a0/0xda0
[  233.465511][T10097]  kthread+0x70e/0x8a0
[  233.469715][T10097]  ret_from_fork+0x3f9/0x770
[  233.476804][T10097]  ret_from_fork_asm+0x1a/0x30
[  233.482823][T10097] 
[  233.485170][T10097] The buggy address belongs to the object at ffff88805692ccc0
[  233.485170][T10097]  which belongs to the cache xfrm_state of size 928
[  233.501131][T10097] The buggy address is located 816 bytes inside of
[  233.501131][T10097]  freed 928-byte region [ffff88805692ccc0, ffff88805692d060)
[  233.515945][T10097] 
[  233.518876][T10097] The buggy address belongs to the physical page:
[  233.525690][T10097] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805692f740 pfn:0x5692c
[  233.538065][T10097] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  233.549661][T10097] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  233.560548][T10097] page_type: f5(slab)
[  233.565081][T10097] raw: 00fff00000000040 ffff888143eabdc0 0000000000000000 0000000000000001
[  233.576585][T10097] raw: ffff88805692f740 00000000000f000d 00000000f5000000 0000000000000000
[  233.586685][T10097] head: 00fff00000000040 ffff888143eabdc0 0000000000000000 0000000000000001
[  233.597385][T10097] head: ffff88805692f740 00000000000f000d 00000000f5000000 0000000000000000
[  233.609910][T10097] head: 00fff00000000002 ffffea00015a4b01 00000000ffffffff 00000000ffffffff
[  233.621072][T10097] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  233.632229][T10097] page dumped because: kasan: bad access detected
[  233.639349][T10097] page_owner tracks the page as allocated
[  233.645450][T10097] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6060, tgid 6058 (syz.0.18), ts 101151259727, free_ts 101134279564
[  233.669216][T10097]  post_alloc_hook+0x240/0x2a0
[  233.676921][T10097]  get_page_from_freelist+0x21e4/0x22c0
[  233.688691][T10097]  __alloc_frozen_pages_noprof+0x181/0x370
[  233.695493][T10097]  alloc_pages_mpol+0x232/0x4a0
[  233.701618][T10097]  allocate_slab+0x8a/0x370
[  233.706336][T10097]  ___slab_alloc+0xbeb/0x1410
[  233.711687][T10097]  kmem_cache_alloc_noprof+0x283/0x3c0
[  233.717457][T10097]  xfrm_state_alloc+0x24/0x2f0
[  233.725119][T10097]  xfrm_add_sa+0x17d1/0x4070
[  233.731394][T10097]  xfrm_user_rcv_msg+0x7a0/0xab0
[  233.736564][T10097]  netlink_rcv_skb+0x205/0x470
[  233.742761][T10097]  xfrm_netlink_rcv+0x79/0x90
[  233.747670][T10097]  netlink_unicast+0x82f/0x9e0
[  233.752830][T10097]  netlink_sendmsg+0x805/0xb30
[  233.758505][T10097]  __sock_sendmsg+0x219/0x270
[  233.763450][T10097]  ____sys_sendmsg+0x505/0x830
[  233.768668][T10097] page last free pid 6060 tgid 6058 stack trace:
[  233.776181][T10097]  __free_frozen_pages+0xbc4/0xd30
[  233.781603][T10097]  stack_depot_save_flags+0x436/0x860
[  233.787138][T10097]  kasan_save_track+0x4f/0x80
[  233.793160][T10097]  __kasan_kmalloc+0x93/0xb0
[  233.798126][T10097]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  233.805805][T10097]  kmalloc_reserve+0x136/0x290
[  233.812379][T10097]  __alloc_skb+0x142/0x2d0
[  233.817618][T10097]  netlink_ack+0x146/0xa50
[  233.822157][T10097]  audit_receive+0x2ea/0x2a80
[  233.826868][T10097]  netlink_unicast+0x82f/0x9e0
[  233.831741][T10097]  netlink_sendmsg+0x805/0xb30
[  233.836554][T10097]  __sock_sendmsg+0x219/0x270
[  233.841799][T10097]  ____sys_sendmsg+0x505/0x830
[  233.847560][T10097]  ___sys_sendmsg+0x21f/0x2a0
[  233.852737][T10097]  __x64_sys_sendmsg+0x19b/0x260
[  233.858155][T10097]  do_syscall_64+0xfa/0x3b0
[  233.864743][T10097] 
[  233.867275][T10097] Memory state around the buggy address:
[  233.874227][T10097]  ffff88805692ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.883704][T10097]  ffff88805692cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.893020][T10097] >ffff88805692cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.901327][T10097]                                                              ^
[  233.910072][T10097]  ffff88805692d000: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  233.919673][T10097]  ffff88805692d080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  233.928086][T10097] ==================================================================
[  233.985283][T10097] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  233.993733][T10097] CPU: 0 UID: 0 PID: 10097 Comm: syz.4.1324 Not tainted syzkaller #0 PREEMPT(full) 
[  234.004969][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  234.017338][T10097] Call Trace:
[  234.020932][T10097]  <TASK>
[  234.024500][T10097]  dump_stack_lvl+0x99/0x250
[  234.029518][T10097]  ? __asan_memcpy+0x40/0x70
[  234.034529][T10097]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.040385][T10097]  ? __pfx__printk+0x10/0x10
[  234.045307][T10097]  vpanic+0x281/0x750
[  234.050822][T10097]  ? preempt_schedule+0xae/0xc0
[  234.056548][T10097]  ? __pfx_vpanic+0x10/0x10
[  234.062649][T10097]  ? preempt_schedule_common+0x83/0xd0
[  234.070330][T10097]  ? preempt_schedule+0xae/0xc0
[  234.075570][T10097]  ? __pfx_preempt_schedule+0x10/0x10
[  234.080973][T10097]  panic+0xb9/0xc0
[  234.085080][T10097]  ? __pfx_panic+0x10/0x10
[  234.090171][T10097]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  234.097503][T10097]  ? xfrm_state_find+0x2cf2/0x5400
[  234.103464][T10097]  check_panic_on_warn+0x89/0xb0
[  234.111442][T10097]  ? xfrm_state_find+0x2cf2/0x5400
[  234.117704][T10097]  end_report+0x78/0x160
[  234.123218][T10097]  kasan_report+0x129/0x150
[  234.128509][T10097]  ? xfrm_state_find+0x2cf2/0x5400
[  234.133889][T10097]  xfrm_state_find+0x2cf2/0x5400
[  234.140268][T10097]  ? __lock_acquire+0xab9/0xd20
[  234.145490][T10097]  ? xfrm_state_find+0x1da/0x5400
[  234.150976][T10097]  ? __pfx_xfrm_state_find+0x10/0x10
[  234.157063][T10097]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  234.163656][T10097]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  234.169778][T10097]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  234.176984][T10097]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  234.183495][T10097]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  234.189632][T10097]  ? xfrm_expand_policies+0x41f/0x6a0
[  234.198548][T10097]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  234.204477][T10097]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  234.212642][T10097]  ? __lock_acquire+0xab9/0xd20
[  234.219426][T10097]  xfrm_lookup_route+0x3c/0x1c0
[  234.224768][T10097]  __ip4_datagram_connect+0x9a5/0x1270
[  234.230762][T10097]  udp_connect+0x33/0x1f0
[  234.235453][T10097]  __sys_connect+0x313/0x440
[  234.240453][T10097]  ? __pfx___sys_connect+0x10/0x10
[  234.247987][T10097]  ? rcu_is_watching+0x15/0xb0
[  234.254472][T10097]  __x64_sys_connect+0x7a/0x90
[  234.259953][T10097]  do_syscall_64+0xfa/0x3b0
[  234.265485][T10097]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.271996][T10097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.279689][T10097]  ? clear_bhb_loop+0x60/0xb0
[  234.284663][T10097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.294687][T10097] RIP: 0033:0x7f74c158ebe9
[  234.302646][T10097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.327760][T10097] RSP: 002b:00007f74c247f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  234.337486][T10097] RAX: ffffffffffffffda RBX: 00007f74c17c6090 RCX: 00007f74c158ebe9
[  234.346293][T10097] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000009
[  234.355700][T10097] RBP: 00007f74c1611e19 R08: 0000000000000000 R09: 0000000000000000
[  234.366155][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.379527][T10097] R13: 00007f74c17c6128 R14: 00007f74c17c6090 R15: 00007ffcdace0e78
[  234.389515][T10097]  </TASK>
[  234.394647][T10097] Kernel Offset: disabled
[  234.400575][T10097] Rebooting in 86400 seconds..