last executing test programs:

2.466998389s ago: executing program 2 (id=1913):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r1, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) (async)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x85}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={<r5=>0x0}, &(0x7f0000000140)=0xc)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}}, 0x300040c3) (async)
r6 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @null, 0x1, @rose}, &(0x7f0000000040)=0x1c, 0x800)
shutdown(r6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

2.260866475s ago: executing program 2 (id=1916):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x4000000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
listen(r2, 0x9)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10)
r10 = socket$igmp(0x2, 0x3, 0x2)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r9)
r12 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r11, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001b40)={0xffffffffffffffff, r13, 0x25, 0x14, @void}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x41, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x90)

2.136727842s ago: executing program 2 (id=1919):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xec, &(0x7f00000004c0)=""/236}, 0x94)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x0)
recvmmsg(r2, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/21, 0x15}, 0x4b73}], 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002e09000018000180140002006261746164765f736c6176655f31"], 0x2c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r8, @ANYBLOB="02002bbd7000fbdbdf251100000038000180140002007866726d300000000000000000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="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"/320, @ANYRES32=r5, @ANYBLOB="08000300010000003800018008000100", @ANYRESHEX=r7, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030003000000080003000000000014000200736974300000000000000000000000003c0001801400020062617461647630000000000000000000080003000300000008000100", @ANYRES32=r11, @ANYBLOB="14000200626f6e645f736c6176655f3100000000"], 0xc0}, 0x1, 0x0, 0x0, 0x480c}, 0x24000804)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xfff0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)={r1, r4})
r12 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r12, 0x0, 0x2a, 0x0, 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES16=r0, @ANYBLOB="0b3a8a29d3a67572d28701f199738ceda1f6cc503500261ba60fe4d156ee2196fd7d887ed7ea294f2d1a5c5051a9f02fbf3650199949cd9965f1992464d236ba4d87", @ANYRES32=r2, @ANYRESOCT=0x0, @ANYRESDEC=r5, @ANYBLOB="a171779e5da966e179b343ccc2c1a805001d94fbc59f86a7836dcf2650d9843038152a0af78756901f4259bd1c8501fffcf1aaef25acf8572851e8c96acced28547f7cb8d8f4e11cbcf38e9b14a74b2f07db6597aaa13d5a0732a379a89d4740f83a20276c414990622b", @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="b1d82d3697c70e666c3fea5435cd526d5b5769daf8d8088e33030a4f96970f1c29d32ff3fe96298d32897e47b20defee75d8695d95a2371c37f5cc48c97c62fc03e4795ad39281ac86f269"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

1.962949305s ago: executing program 3 (id=1922):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, 0x0}, 0x94)
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@mcast2, 0x39, r1})
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4562f067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl(r2, 0x8916, &(0x7f0000000000))

1.743579173s ago: executing program 3 (id=1926):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0x8}, {r0, 0x30c8}, {0xffffffffffffffff, 0x4116}, {r0, 0x2020}, {r1, 0x404}], 0x5, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x9]}, 0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r4, 0xb00, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000010)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f9078ac1e0001ac1414aa000086dd"], 0xb9)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, &(0x7f0000000080))
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, 0x0, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$NL80211_CMD_SET_MAC_ACL(r8, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x5c, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1d}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040004)

1.51001235s ago: executing program 0 (id=1930):
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)

1.455609872s ago: executing program 4 (id=1931):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4020004)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="06000000040000000300f1ff05000000000000000cf86e6a2a26811d9e85ace79cd23ea3177e3c57c1053c1acd8bbfee3fbd27f7ebe8debb01bfee9e321195eb9015c913d902cd6738b36fda7f961a4595846d96e6691dba0a53b1a60d17022b119d16252ae55bc4f4b2997adc552e58bc8ebc19e403deb55e327c57213833a767abc43d09c59b8870f08850f63bc8020ff48f76f476a6f0fa96ea46a99c16c6ea7189801622baabb449d75f", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="b5929479c84c8819c72ce58f675eff8abd9506b7c9bb7ff04b4ce55ec5b0094ae065be3ccf8840608900007ccec330ea106ca14e52a3f18004d60cffc7c12a217f169a51c7ab1372737aa01a55a6b2a6ad0712fd84ea753e663cc0fcaf4e7385dddaf9ad75201050d4523421d58a114c"], 0x20}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r3, 0x0, 0xa0028000}, 0x86)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x11, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100))
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x2000000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendto$inet(r0, &(0x7f0000000680)="8b929dbfc9b261a8181b708655a121ccf5b6b29b2df153d9663632b64c3bc37d642a384e5d546cdad47eb792c1c1e2ca42496ac521f593e821d62cd39e2e1e6df9521c1ca0506d96e399be5f43e751b6c7f82d57964571710def87f679ddd9f37cea6dafb292d5070ee137e5a6f689bfdda9425a62b4312338a50866557ea79353463839b4ffbaa417c068d0b62f993d3235168306d94f065ea3f3a002be155d81752021bf99ae361b287cb72a69d6f21fc1c950ad03ec829d016af2ced9a0f37d5b29f48465b6308012cc25", 0xcc, 0x4000, &(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="67fdffff1000010000000000000000000000000a54000000060a0904000000000000cb4e0000020000040900010073797a30000000000900020073797a3200000000200004801c0001800b00010065787468647200000c00028008000640000000010500074012000000140000001100010000000000000000000200"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0x6e)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000003000)=@abs={0x1}, 0x4f)
r9 = socket$netlink(0x10, 0x3, 0x4)
listen(r8, 0x5)
write(r9, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29)
unshare(0x6a040000)

1.382384135s ago: executing program 0 (id=1932):
syz_open_procfs$namespace(0x0, &(0x7f00000013c0)='ns/mnt\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001440)='ns/mnt\x00')

1.314607103s ago: executing program 1 (id=1933):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50)
mmap(&(0x7f0000fa2000/0x1000)=nil, 0x1000, 0x3, 0x13, r0, 0x3d80f000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) (async)
mmap(&(0x7f0000fa2000/0x1000)=nil, 0x1000, 0x3, 0x13, r0, 0x3d80f000) (async)

1.25132098s ago: executing program 3 (id=1934):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
close(0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4090)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.249219582s ago: executing program 0 (id=1935):
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4e23, @private=0xfffffffc}}) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0xc, ')'}, {0x10, 0x104, 0x10000}], 0x28}, 0x20004000)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x7, [0x7ff, 0x5, 0x1, 0xc, 0x1d5, 0xfffffffffffffffa, 0x4]}})

1.199864124s ago: executing program 1 (id=1936):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)="bfe28d13d8ad3bd574037c3355396d6bc4fd09e716c22ec879a006e3768d922cccd2b2c030825f926956bb73313fb10c05e8ebd8c6c5969fc464e64f5810406be58f98c0a4e68c8f541dbc7580b7bafe1fa73284677569949313f0b84ebbe30a81d712e65e821a98ba3b4f2aa8733f31feebdc15", &(0x7f00000004c0), 0x1000, r2}, 0x38)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4)
setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4)
close(r4)
pipe(&(0x7f0000000140))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, r8, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)={0x358, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff5}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x59}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffffffff, @mcast1, 0xffffffff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0xec7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @private1, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x772, 0x0, @remote, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffb, @mcast2, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000001, @mcast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf784}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}]}]}, 0x358}}, 0x4000804)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00'})
sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20004804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000000000000c0000000100000006000080"], 0x20}], 0x1}, 0x0)

1.146021338s ago: executing program 2 (id=1937):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x2)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x3}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000bc0)={r8, 0x2, "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"}, &(0x7f0000000000)=0x10b)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={<r12=>0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xac, r11, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES16=r9, @ANYRES32=r6], 0x6)
clock_gettime(0x0, &(0x7f0000000200))
socket$inet_sctp(0x2, 0x5, 0x84)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)

1.130858489s ago: executing program 0 (id=1938):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000000)=""/2, &(0x7f0000000080)=0x2)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)

999.666565ms ago: executing program 0 (id=1939):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1c)
listen(r0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_buf(r6, 0x29, 0x3d, &(0x7f0000000580)=""/201, &(0x7f0000000000)=0xc9)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

854.184232ms ago: executing program 4 (id=1940):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000003c0)={'ip_vti0\x00', <r0=>0x0, 0x1, 0x8017, 0x2, 0x9, {{0x35, 0x4, 0x1, 0x3, 0xd4, 0x65, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xd0, [@rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @private=0xa010101, @empty]}, @timestamp={0x44, 0xc, 0xf6, 0x0, 0x8, [0x8001, 0x8]}, @rr={0x7, 0xf, 0xed, [@rand_addr=0x64010100, @loopback, @empty]}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0x12, "14f062df80738c842e4047ae5cf39094"}, {0x6, 0x6, "e065436d"}]}, @rr={0x7, 0x17, 0x6d, [@remote, @broadcast, @local, @private=0xa010100, @multicast2]}, @timestamp_addr={0x44, 0x14, 0xa6, 0x1, 0x4, [{@loopback, 0xffff}, {@multicast1, 0x3}]}, @noop, @ssrr={0x89, 0x7, 0x19, [@multicast2]}, @cipso={0x86, 0x34, 0x3, [{0x5, 0x10, "c2e0b4badb8e4a1ab17a6e2e2fb4"}, {0x1, 0x2}, {0x0, 0xf, "23ab5e66299a0f671df8d4ac62"}, {0x1, 0xd, "7f719b10df8c64c0e7626c"}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800920000001da01800000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', r0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000080)={0xfffffffe, 0x8}, 0xffffffffffffff2d}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xda68c000)
syz_extract_tcp_res$synack(&(0x7f0000000580)={<r4=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344, <r5=>0x41424344}, 0x6, 0x1ff)
write$tun(r3, &(0x7f0000000600)={@void, @void, @ipv4=@tcp={{0x6, 0x4, 0x3, 0x8, 0x172, 0x66, 0x0, 0x0, 0x6, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4e24, r4, r5, 0x1, 0x0, 0x1a, 0xc2, 0x800, 0x0, 0x84f4, {[@sack={0x5, 0x22, [0x3, 0x9, 0xd70f, 0xe, 0x6, 0xa, 0x3ff, 0x9]}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x5, "999b26"}, @generic={0x13, 0xf, "ddbce17a3aa32f999479e4f13b"}, @md5sig={0x13, 0x12, "7d173224813310a460f6886cab62ffe1"}, @eol, @sack_perm={0x4, 0x2}]}}, {"b69ad0f3e5cf024fedba1522eb2c38004526567d1b3701b565757e60d80fb0383e6b646e8d8ba2cd7874a1abfebb04907f53e910d3112eaa4faf2583a03b03e9d3c79304740425dc44f228569b85d7047214a2294278c48eb34e7a0b1e5d4687a81faa5c04070e74c2b83b0c1376cb1e22e51f6c63a2a045f0b9d7d2992ffa3a29326fba05e9c2cbbdaaa8c73615cf5ffc8f353ba82798aea5583b1c380972e5b02eb4e52919c98ad4b7f68300c7c5111013e71a85c87b042bb278aaec6d8ee27fa07a518fd9b16391e3c8cb2b40b2a1fe48c48cd65f9d6d4b69b4f579c1f4b11a7bfe7f57a54211a57b2970d7f178028938"}}}}, 0x172)
r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, 0x1407, 0x8, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000890)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

852.813843ms ago: executing program 1 (id=1941):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x28}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @remote})

694.147778ms ago: executing program 4 (id=1942):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711239000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={<r1=>0x0, 0x61, 0x20, 0xfffffffffffffff8, 0x3}, &(0x7f0000000040)=0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x81, 0x0, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9febe400180000000000000034000008340000000654b100040000000000000e04ec30accfe72484a70700000000003f897c475bcf2a6100020000000002000000000000080200000000040000000000090300000000005f5f6100"], 0x0, 0x52}, 0x20)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000100)={0x0, 'rose0\x00', {0x4}, 0x3})
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x5, 0x8, 0x7, 0x3, 0x3, 0x5, 0x0, r1}, 0x20)

657.0269ms ago: executing program 1 (id=1943):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$isdn(0x22, 0x3, 0x22)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYRES8=r4, @ANYRES32=r2, @ANYRESOCT=r1, @ANYRESDEC=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a0400000069c27fad8db1f41f000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(r7, 0x0, 0x0, 0x28144, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r8}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000340), 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="d40000001b0001000000000000000000fc0000000000000000000000000000000000000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000004000000000000000ed920000000000000000000000000000000000000000000001000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001500000000000000000008001f0000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20000045}, 0x0)
bind$inet6(r10, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c)
connect$inet6(r10, &(0x7f0000001d40)={0xa, 0x4e1d, 0xf, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @loopback={0xffffffffffff0000}, 0x1}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000b04400000000119078ac1414bbe000000100004e20009c9078010000000100400069eb047c187e143bddcbe699ef7a74fd2c1a7c6b59dd637719d6395dda566f426e8c0b7dc217c78b70a4dc5eeb6f624200e45176f0c8444ad4b18c65ce5eb8dbb3b30234e8bea411688bf272fdef179dff2a09d662def3d2eb45734d1b7067384ff2442258e9fc1dfc1701ba18b0a3516f6b94835c625da017fdd0357fa6bc2b0e933988c64a103320cfe3d2"], 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000018f7cf0cd5b0b7b85e3e081b25a0000000000000000000000000a09000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032bed0000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0x67, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044884)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020605000000000000000000070000001400078008001140000000000800124000000c8f0500010006000000050005000200000005000404000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x60}}, 0x20004000)

646.030831ms ago: executing program 3 (id=1944):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000000200)="fe19fcbb0abd041de9f24f3c3b927cb77a8100eacfc008c40696a86439f023363ad98affc28c96acc03b190243bbc1ed291bd505e29d8ba18e61e55332d24a5291dd41a821bc4f97bb43e1106a691ebc92c6a8af4d0dba5549ad623abbc096def6d22fe022edea655d084a14ba6be4f1f91738c8011593c86d9f6e5a70f249a6d6fe4c4a0a49b903814bf859927bc3ebefeaafd5cc3fd2dd2b4d9f5c92cfffdb4b6d382ff7e1d1132b2668e182f309605e7e06b99e32d129b829a01e0805b1d7c46115af13585406c285a63996c4eaab767bbcd7b7672e1c30f0c0d7", 0xdc) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000005440)='dvmrp1\x00', 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x33, 0x400, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

498.205311ms ago: executing program 3 (id=1945):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0x8}, {r0, 0x30c8}, {0xffffffffffffffff, 0x4116}, {r0, 0x2020}, {r1, 0x404}], 0x5, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x9]}, 0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r4, 0xb00, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000010)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f9078ac1e0001ac1414aa000086dd"], 0xb9)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, &(0x7f0000000080))
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, 0x0, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$NL80211_CMD_SET_MAC_ACL(r8, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x5c, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1d}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040004)

495.658636ms ago: executing program 4 (id=1946):
r0 = socket(0x10, 0x80003, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@mpls_getnetconf={0x34, 0x52, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7f}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x800) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000180000080000000000000000040000020000000500040000060015000500e8002800161000000000000000000000000000400401000878000000000000000000000000000000000046bd0b7c713939c3e4e69ebbfe9f9039cbb39dfa46fa07b436fdb5449675ea"], 0x4c}}, 0x0) (async)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0x3c, 0x7f, 0x1, 0x5efe277e, 0x3, 0x5]}, &(0x7f00000000c0)=0x78)

389.72393ms ago: executing program 4 (id=1947):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e00000000007464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast1, 0x2}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r6, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000e3ffffff000000000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r8}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x40000c0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0300000000000000ffffffff", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)

292.723943ms ago: executing program 1 (id=1948):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r6}, 0x10)
pipe(&(0x7f0000000480)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f0000000340), 0x11000)
vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x38, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008080)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ffff27bd7000ebdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500400012800e0001006970366772657461700000002c0002801400060000000000000000000000ffff7f000001140007000000000000000041fffffffffffffffe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

222.362166ms ago: executing program 2 (id=1949):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000300)=@buf)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x60, r6, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x300}}, {0x8, 0x6, r4}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$packet(r9, 0x0, &(0x7f00000002c0))
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40080d0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r10], 0xd8}}, 0x40000800)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r11}, &(0x7f0000000380), &(0x7f00000003c0)=r12}, 0x20)
r13 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r15 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800)
connect$vsock_stream(r15, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10)

100.954123ms ago: executing program 2 (id=1950):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xc0, 0x19, 0x1, 0x70bd25, 0x25dfdbfc, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x3, 0x2, 0x4}, {0x0, 0xfffffffffffffffc, 0x105}, 0x0, 0x0, 0x1}, [@tfcpad={0x8, 0x16, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x1, 0x20008890)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$NL80211_CMD_SET_KEY(r3, 0x0, 0x4004)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)

91.989631ms ago: executing program 3 (id=1951):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x9}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xf4, 0x453, 0x200, 0x70bd27, 0x25dfdbff, "da006ef08c20297a5d45135ad02376ec498468977ecf7c1bd74d1503b205ce32c122ae3d35e7b0f8474525a5cced79e46a91c6d135378ad19908c47671970418c092fd62672ea48a9f10b790a28c990a64e0e5ae76cf5cea37b6fd592ad2df46353c2589f47079e97295505cc3c8dbe30d062e84d51f0014f7f31f73dbb72ee06b3f05b20585c524f6985d21ab9874cafff425203adf0778fbaaa40baf3e9ece197d923f03d94d80bb22cc5f568ed4596e86b99b461c4da890b450b47c682ff4aeda27eaecb0f0e0468109c24522310a676604338b6cf7672d1035de5a19d76b7c665c53"}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x9}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) (async)
socket(0x10, 0x80002, 0x0) (async)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xf4, 0x453, 0x200, 0x70bd27, 0x25dfdbff, "da006ef08c20297a5d45135ad02376ec498468977ecf7c1bd74d1503b205ce32c122ae3d35e7b0f8474525a5cced79e46a91c6d135378ad19908c47671970418c092fd62672ea48a9f10b790a28c990a64e0e5ae76cf5cea37b6fd592ad2df46353c2589f47079e97295505cc3c8dbe30d062e84d51f0014f7f31f73dbb72ee06b3f05b20585c524f6985d21ab9874cafff425203adf0778fbaaa40baf3e9ece197d923f03d94d80bb22cc5f568ed4596e86b99b461c4da890b450b47c682ff4aeda27eaecb0f0e0468109c24522310a676604338b6cf7672d1035de5a19d76b7c665c53"}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0) (async)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)

91.193511ms ago: executing program 4 (id=1952):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e, 0x2e, 0x20]}}, 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=<r0=>0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'wlan1\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, 0x0, 0x8001)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r6=>0x0})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r7, 0x8947, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a")
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r4, 0x852dd6c070cd7e4d, 0x0, 0xfffffffd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x34}, 0x4, 0x700000000000000, 0x0, 0x8010}, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x80)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.508172ms ago: executing program 1 (id=1953):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)

0s ago: executing program 0 (id=1954):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
r2 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 32)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x3)
unshare(0x2040400) (async, rerun: 32)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000140)=0x7, 0x4) (async, rerun: 32)
setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x8, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0x300, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {0x9, 0x3}, {0x0, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private0}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x24004804)

kernel console output (not intermixed with test programs):

id protocol: 3 8.0.0.0:49190
[  122.504689][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'.
[  122.528021][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.568885][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.585967][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.349'.
[  122.603076][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.620986][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.654092][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.667565][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.691610][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.714105][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.728088][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.738276][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.745078][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.753170][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.759782][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.769029][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.777266][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.784136][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.791227][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.799007][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.805773][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.812393][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.822724][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.829466][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.836626][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.843324][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  122.850100][ T7422] IPVS: set_ctl: invalid protocol: 3 8.0.0.0:49190
[  123.109958][ T7449] FAULT_INJECTION: forcing a failure.
[  123.109958][ T7449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.164274][ T7449] CPU: 0 UID: 0 PID: 7449 Comm: syz.0.354 Not tainted syzkaller #0 PREEMPT(full) 
[  123.164298][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  123.164308][ T7449] Call Trace:
[  123.164315][ T7449]  <TASK>
[  123.164322][ T7449]  dump_stack_lvl+0x189/0x250
[  123.164346][ T7449]  ? __pfx____ratelimit+0x10/0x10
[  123.164364][ T7449]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.164382][ T7449]  ? __pfx__printk+0x10/0x10
[  123.164415][ T7449]  should_fail_ex+0x414/0x560
[  123.164443][ T7449]  _copy_to_user+0x31/0xb0
[  123.164464][ T7449]  simple_read_from_buffer+0xe1/0x170
[  123.164492][ T7449]  proc_fail_nth_read+0x1b3/0x220
[  123.164515][ T7449]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  123.164536][ T7449]  ? rw_verify_area+0x2a6/0x4d0
[  123.164555][ T7449]  ? __lock_acquire+0xab9/0xd20
[  123.164575][ T7449]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  123.164595][ T7449]  vfs_read+0x200/0xa30
[  123.164614][ T7449]  ? fdget_pos+0x247/0x320
[  123.164634][ T7449]  ? __pfx___mutex_lock+0x10/0x10
[  123.164654][ T7449]  ? __pfx_vfs_read+0x10/0x10
[  123.164676][ T7449]  ? __fget_files+0x2a/0x420
[  123.164696][ T7449]  ? __fget_files+0x3a0/0x420
[  123.164710][ T7449]  ? __fget_files+0x2a/0x420
[  123.164734][ T7449]  ksys_read+0x145/0x250
[  123.164757][ T7449]  ? __pfx_ksys_read+0x10/0x10
[  123.164774][ T7449]  ? rcu_is_watching+0x15/0xb0
[  123.164797][ T7449]  ? do_syscall_64+0xbe/0x3b0
[  123.164819][ T7449]  do_syscall_64+0xfa/0x3b0
[  123.164836][ T7449]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.164853][ T7449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.164869][ T7449]  ? clear_bhb_loop+0x60/0xb0
[  123.164889][ T7449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.164905][ T7449] RIP: 0033:0x7fbfa018d5bc
[  123.164920][ T7449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  123.164933][ T7449] RSP: 002b:00007fbfa10ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  123.164951][ T7449] RAX: ffffffffffffffda RBX: 00007fbfa03d5fa0 RCX: 00007fbfa018d5bc
[  123.164963][ T7449] RDX: 000000000000000f RSI: 00007fbfa10ef0a0 RDI: 0000000000000008
[  123.164973][ T7449] RBP: 00007fbfa10ef090 R08: 0000000000000000 R09: 0000000000000000
[  123.164983][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.164994][ T7449] R13: 00007fbfa03d6038 R14: 00007fbfa03d5fa0 R15: 00007ffdffd85518
[  123.165023][ T7449]  </TASK>
[  132.817089][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  170.688204][ T7460] netlink: 'syz.4.362': attribute type 12 has an invalid length.
[  170.719328][ T7460] raw_sendmsg: syz.4.362 forgot to set AF_INET. Fix it!
[  171.208022][ T7492] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  172.055665][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'.
[  172.980850][ T7542] netlink: 'syz.2.372': attribute type 1 has an invalid length.
[  173.299464][ T7547] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  173.362405][ T7554] netlink: 'syz.3.376': attribute type 30 has an invalid length.
[  173.370590][ T7557] netlink: 'syz.0.375': attribute type 30 has an invalid length.
[  173.918167][   T49] net_ratelimit: 45 callbacks suppressed
[  173.918192][   T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  173.919332][ T7547] 8021q: adding VLAN 0 to HW filter on device bond1
[  174.256805][ T7548] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  174.271386][ T7548] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  174.295781][ T7548] bond1 (unregistering): Released all slaves
[  174.461359][ T7591] netlink: 124 bytes leftover after parsing attributes in process `syz.4.377'.
[  174.653480][ T7591] nbd4: detected capacity change from 0 to 63
[  174.662235][ T7595] block nbd4: NBD_DISCONNECT
[  174.691146][ T7595] block nbd4: Disconnected due to user request.
[  174.697757][ T7595] block nbd4: shutting down sockets
[  175.285567][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'.
[  175.288762][ T7619] tipc: Started in network mode
[  175.302892][ T7619] tipc: Node identity 92685c82fe23, cluster identity 4711
[  175.326433][ T7619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.344805][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'.
[  175.410403][ T7630] IPVS: length: 117 != 8
[  175.423670][ T7627] syzkaller0: entered promiscuous mode
[  175.429262][ T7627] syzkaller0: entered allmulticast mode
[  175.463055][ T7630] IPVS: length: 117 != 8
[  175.509700][ T7619] tipc: Resetting bearer <eth:syzkaller0>
[  175.550964][ T7617] tipc: Resetting bearer <eth:syzkaller0>
[  175.572756][ T7617] tipc: Disabling bearer <eth:syzkaller0>
[  175.578762][ T7640] netlink: 124 bytes leftover after parsing attributes in process `syz.4.389'.
[  175.604549][ T7636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.387'.
[  175.773253][ T7640] nbd4: detected capacity change from 0 to 63
[  175.781645][ T7650] block nbd4: NBD_DISCONNECT
[  175.788848][ T7650] block nbd4: Disconnected due to user request.
[  175.799018][ T7650] block nbd4: shutting down sockets
[  176.193113][ T7667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.394'.
[  176.500285][ T7676] netlink: 'syz.0.397': attribute type 30 has an invalid length.
[  176.701520][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'.
[  176.720984][ T7682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.398'.
[  176.815700][ T7686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.400'.
[  177.034704][ T7701] netlink: 'syz.2.408': attribute type 1 has an invalid length.
[  177.073309][ T7701] netlink: 224 bytes leftover after parsing attributes in process `syz.2.408'.
[  177.105758][ T7707] batadv_slave_0: entered promiscuous mode
[  177.318489][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'.
[  177.330485][ T7723] netlink: 576 bytes leftover after parsing attributes in process `syz.2.414'.
[  177.347852][ T7720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.413'.
[  177.357180][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'.
[  177.372569][ T7724] netlink: 576 bytes leftover after parsing attributes in process `syz.2.414'.
[  177.407244][ T7725] tipc: Started in network mode
[  177.419127][ T7725] tipc: Node identity 7ef16e42323b, cluster identity 4711
[  177.438336][ T7725] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.469869][ T7727] tipc: Enabled bearer <udp:s>, priority 10
[  177.480119][ T7718] netlink: 52 bytes leftover after parsing attributes in process `syz.1.412'.
[  177.491403][ T7724] netlink: 'syz.2.414': attribute type 178 has an invalid length.
[  177.561165][ T7728] syzkaller0: entered promiscuous mode
[  177.570339][ T7728] syzkaller0: entered allmulticast mode
[  177.611848][ T7718] tipc: Resetting bearer <eth:syzkaller0>
[  177.669215][ T7718] tipc: Resetting bearer <eth:syzkaller0>
[  177.789864][ T7718] tipc: Disabling bearer <eth:syzkaller0>
[  177.881992][ T2991] syzkaller0: tun_net_xmit 76
[  177.892198][ T2991] syzkaller0: tun_net_xmit 48
[  177.903549][    T9] syzkaller0: tun_net_xmit 76
[  178.584657][    T9] tipc: Node number set to 1816878210
[  178.588279][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'.
[  179.999149][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'.
[  180.618826][ T7784] delete_channel: no stack
[  181.027906][ T7797] pim6reg: entered allmulticast mode
[  181.198242][ T7794] pim6reg: left allmulticast mode
[  181.340012][ T7810] netlink: 'syz.2.437': attribute type 27 has an invalid length.
[  181.348540][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'.
[  181.510803][ T7330] IPVS: starting estimator thread 0...
[  181.617977][ T7818] IPVS: using max 30 ests per chain, 72000 per kthread
[  181.823749][ T7821] nbd3: detected capacity change from 0 to 63
[  181.831791][ T7826] block nbd3: NBD_DISCONNECT
[  181.836618][ T7826] block nbd3: Disconnected due to user request.
[  181.847994][ T7826] block nbd3: shutting down sockets
[  181.971153][ T7841] netlink: 'syz.1.445': attribute type 16 has an invalid length.
[  181.991936][ T7841] netlink: 'syz.1.445': attribute type 17 has an invalid length.
[  182.064433][ T7841] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.304855][ T7841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  182.321950][ T7848] __nla_validate_parse: 5 callbacks suppressed
[  182.321969][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'.
[  182.603320][ T7852] syzkaller1: entered promiscuous mode
[  182.611142][ T7852] syzkaller1: entered allmulticast mode
[  182.662814][ T7852] team0: Device gtp0 is of different type
[  182.693692][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'.
[  182.913572][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.459'.
[  183.036020][ T7885] IPv6: addrconf: prefix option has invalid lifetime
[  183.254406][ T7896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.461'.
[  183.360831][ T7895] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  183.375053][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[  183.395067][ T7900] netlink: 'syz.0.464': attribute type 5 has an invalid length.
[  183.405558][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'.
[  183.699515][ T7910] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  184.010213][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'.
[  184.306683][ T7951] syzkaller1: entered allmulticast mode
[  185.125531][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'.
[  185.365153][ T8004] _ÐZ`Ô€@: entered promiscuous mode
[  185.464132][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  185.630438][ T8022] netlink: 56 bytes leftover after parsing attributes in process `syz.3.485'.
[  185.770058][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.486'.
[  186.318903][ T8036] syzkaller1: entered promiscuous mode
[  186.346620][ T8036] syzkaller1: entered allmulticast mode
[  187.856332][ T8069] sctp: [Deprecated]: syz.4.497 (pid 8069) Use of int in maxseg socket option.
[  187.856332][ T8069] Use struct sctp_assoc_value instead
[  188.109495][ T8080] __nla_validate_parse: 2 callbacks suppressed
[  188.109515][ T8080] netlink: 124 bytes leftover after parsing attributes in process `syz.2.500'.
[  188.244475][ T8080] nbd2: detected capacity change from 0 to 63
[  188.268980][ T8085] block nbd2: NBD_DISCONNECT
[  188.296479][ T8085] block nbd2: Disconnected due to user request.
[  188.317448][ T8085] block nbd2: shutting down sockets
[  188.370246][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'.
[  188.379264][ T8089] netlink: 'syz.1.503': attribute type 19 has an invalid length.
[  188.387718][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'.
[  188.409644][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'.
[  188.434008][ T8089] netlink: 'syz.1.503': attribute type 19 has an invalid length.
[  188.455560][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'.
[  189.091581][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'.
[  189.107151][ T8111] netlink: 124 bytes leftover after parsing attributes in process `syz.1.510'.
[  189.257789][ T8115] netlink: 124 bytes leftover after parsing attributes in process `syz.2.511'.
[  189.273401][ T8111] nbd1: detected capacity change from 0 to 63
[  189.281496][ T8113] block nbd1: NBD_DISCONNECT
[  189.293157][ T8113] block nbd1: Disconnected due to user request.
[  189.309730][ T8113] block nbd1: shutting down sockets
[  189.453741][ T8118] netlink: 'syz.1.512': attribute type 9 has an invalid length.
[  189.473094][ T8115] nbd2: detected capacity change from 0 to 63
[  189.473209][ T8118] netlink: 'syz.1.512': attribute type 7 has an invalid length.
[  189.479620][ T8119] block nbd2: NBD_DISCONNECT
[  189.491687][ T8119] block nbd2: Disconnected due to user request.
[  189.511792][ T8119] block nbd2: shutting down sockets
[  189.511839][ T8118] netlink: 'syz.1.512': attribute type 8 has an invalid length.
[  190.149156][ T8143] netlink: 3 bytes leftover after parsing attributes in process `syz.2.516'.
[  190.173850][ T8142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'.
[  190.194863][ T8143] batadv1: entered promiscuous mode
[  190.203147][ T8143] batadv1: entered allmulticast mode
[  190.228018][ T8145] netlink: 'syz.1.517': attribute type 10 has an invalid length.
[  190.491208][ T8150] netlink: 'syz.4.519': attribute type 10 has an invalid length.
[  190.536055][ T8150] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  190.614868][ T5873] block nbd0: Receive control failed (result -32)
[  191.082224][ T8186] netlink: 'syz.1.530': attribute type 30 has an invalid length.
[  191.148250][ T2940] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  191.357478][ T8202] bond0: (slave syz_tun): Releasing backup interface
[  191.407304][ T8202] bridge_slave_0: left allmulticast mode
[  191.429733][ T8202] bridge_slave_0: left promiscuous mode
[  191.442718][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.476927][ T8202] bridge_slave_1: left allmulticast mode
[  191.493663][ T8202] bridge_slave_1: left promiscuous mode
[  191.499486][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.519235][ T8202] bond0: (slave bond_slave_0): Releasing backup interface
[  191.529645][ T8202] bond0: (slave bond_slave_1): Releasing backup interface
[  191.541927][ T8202] team0: Port device team_slave_0 removed
[  191.551467][ T8202] team0: Port device team_slave_1 removed
[  191.559809][ T8202] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.569226][ T8202] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.580787][ T8202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  192.026508][ T8176] delete_channel: no stack
[  192.279346][ T8224] syzkaller1: tun_chr_ioctl cmd 1074025677
[  192.294979][ T8224] syzkaller1: linktype set to 778
[  192.382056][ T8230] syz_tun: entered promiscuous mode
[  192.392463][ T8230] syz_tun: left promiscuous mode
[  192.596566][ T8247] netlink: 'syz.1.544': attribute type 30 has an invalid length.
[  193.562119][ T8300] __nla_validate_parse: 7 callbacks suppressed
[  193.562137][ T8300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.550'.
[  193.778943][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'.
[  193.892639][ T8309] geneve3: entered promiscuous mode
[  193.923959][ T8309] geneve3: entered allmulticast mode
[  193.971772][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.012290][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.038357][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.072643][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.241079][ T8341] netlink: 'syz.3.567': attribute type 39 has an invalid length.
[  194.264035][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  194.304988][ T8345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.567'.
[  194.598059][ T8356] netlink: 'syz.4.571': attribute type 1 has an invalid length.
[  194.622349][ T8356] netlink: 172 bytes leftover after parsing attributes in process `syz.4.571'.
[  194.652671][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.573'.
[  194.701702][ T8365] netlink: 'syz.3.573': attribute type 1 has an invalid length.
[  194.777029][ T8362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.573'.
[  194.860863][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'.
[  194.874217][ T8367] tipc: Enabled bearer <udp:syz2>, priority 10
[  194.911014][ T8370] macvlan2: entered promiscuous mode
[  194.942494][ T8370] bond0: entered promiscuous mode
[  194.955065][ T8370] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  194.969093][ T8375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.015802][ T8375] syzkaller0: entered promiscuous mode
[  195.021456][ T8375] syzkaller0: entered allmulticast mode
[  195.124411][ T8381] xt_l2tp: missing protocol rule (udp|l2tpip)
[  195.129815][ T8375] tipc: Resetting bearer <eth:syzkaller0>
[  195.188182][ T8374] tipc: Resetting bearer <eth:syzkaller0>
[  195.275533][ T8374] tipc: Disabling bearer <eth:syzkaller0>
[  195.299785][ T8387] netlink: 'syz.0.580': attribute type 9 has an invalid length.
[  195.309760][ T8387] netlink: 'syz.0.580': attribute type 7 has an invalid length.
[  195.330040][ T8387] netlink: 'syz.0.580': attribute type 8 has an invalid length.
[  195.341755][ T8389] openvswitch: netlink: Missing valid actions attribute.
[  195.356681][ T8389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.422112][ T8389] dvmrp1: tun_chr_ioctl cmd 1074025677
[  195.457584][ T8389] dvmrp1: linktype set to 805
[  195.501506][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.584'.
[  195.702096][ T8407] netlink: 277 bytes leftover after parsing attributes in process `syz.0.585'.
[  196.000810][ T8419] dummy0: mtu less than device minimum
[  196.060235][ T8421] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.589'.
[  196.192260][ T8434] netlink: 'syz.0.593': attribute type 9 has an invalid length.
[  196.202586][ T8434] netlink: 'syz.0.593': attribute type 7 has an invalid length.
[  196.212887][ T8434] netlink: 'syz.0.593': attribute type 8 has an invalid length.
[  196.317586][ T8435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.335879][ T8342] Bluetooth: hci1: command 0x0406 tx timeout
[  196.342574][ T8342] Bluetooth: hci2: command 0x0406 tx timeout
[  196.349238][ T8342] Bluetooth: hci4: command 0x0401 tx timeout
[  196.353157][ T5871] Bluetooth: hci3: command 0x0406 tx timeout
[  196.582237][ T8449] netlink: 'syz.3.598': attribute type 1 has an invalid length.
[  197.228693][ T8472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.259200][ T8471] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  197.277821][ T8471] syzkaller0: entered promiscuous mode
[  197.283758][ T8471] syzkaller0: entered allmulticast mode
[  197.999816][ T8462] _ÐZ`Ô€@: entered promiscuous mode
[  198.148639][ T8471] tipc: Resetting bearer <eth:syzkaller0>
[  198.191189][ T8471] tipc: Disabling bearer <eth:syzkaller0>
[  198.357848][ T8489] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  198.376956][ T8502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.416112][ T8492] syzkaller0: entered promiscuous mode
[  198.421638][ T8492] syzkaller0: entered allmulticast mode
[  198.484495][ T8492] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  198.570903][ T8516] __nla_validate_parse: 3 callbacks suppressed
[  198.570919][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'.
[  198.681481][ T8502] tipc: Resetting bearer <eth:syzkaller0>
[  198.892203][ T8541] netlink: 124 bytes leftover after parsing attributes in process `syz.3.619'.
[  199.122694][ T8531] wg1: left promiscuous mode
[  199.129795][ T8531] wg1: left allmulticast mode
[  199.257344][ T8531] batadv_slave_0: left promiscuous mode
[  199.569849][ T8491] tipc: Resetting bearer <eth:syzkaller0>
[  199.600613][ T8491] tipc: Disabling bearer <eth:syzkaller0>
[  199.629041][ T8528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.641688][ T8536] batadv0: entered promiscuous mode
[  199.662084][ T8527] tipc: Disabling bearer <eth:syzkaller0>
[  199.681627][  T139] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.702267][  T139] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.721844][  T139] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.763026][  T139] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.795851][  T139] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.815036][  T139] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.834860][ T8560] validate_nla: 4 callbacks suppressed
[  199.834877][ T8560] netlink: 'syz.0.622': attribute type 9 has an invalid length.
[  199.863901][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.876352][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  199.883040][ T8560] netlink: 'syz.0.622': attribute type 7 has an invalid length.
[  199.899731][ T8560] netlink: 'syz.0.622': attribute type 8 has an invalid length.
[  200.030388][ T8569] netlink: 'syz.1.625': attribute type 13 has an invalid length.
[  200.041112][ T8569] netlink: 'syz.1.625': attribute type 17 has an invalid length.
[  200.210218][ T8590] netlink: 96 bytes leftover after parsing attributes in process `syz.0.627'.
[  200.344158][ T8569] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.370961][ T8569] 8021q: adding VLAN 0 to HW filter on device team0
[  200.411651][ T8569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.449795][ T8590] 8021q: VLANs not supported on sit0
[  200.460914][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'.
[  200.491476][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.632'.
[  200.595013][ T8609] bridge_slave_0: left allmulticast mode
[  200.607385][ T8609] bridge_slave_0: left promiscuous mode
[  200.637439][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.687689][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'.
[  200.727045][ T8620] netlink: 'syz.4.637': attribute type 9 has an invalid length.
[  200.740930][ T8609] bridge_slave_1: left allmulticast mode
[  200.747926][ T8609] bridge_slave_1: left promiscuous mode
[  200.750659][ T8620] netlink: 'syz.4.637': attribute type 7 has an invalid length.
[  200.755048][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.761448][ T8620] netlink: 'syz.4.637': attribute type 8 has an invalid length.
[  200.783308][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.634'.
[  200.801329][ T8609] team0: Port device team_slave_0 removed
[  200.811346][ T8609] team0: Port device team_slave_1 removed
[  200.818523][ T8609] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.827384][ T8609] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.828389][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'.
[  200.844353][ T8609] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  200.871686][ T8618] syz_tun: refused to change device tx_queue_len
[  200.878437][ T8618] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  200.953816][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'.
[  201.074625][ T8638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.641'.
[  201.133470][ T8638] netlink: 'syz.2.641': attribute type 5 has an invalid length.
[  201.538933][ T8675] netlink: 'syz.2.653': attribute type 9 has an invalid length.
[  201.602888][ T8678] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  201.811317][ T8684] nbd: nbd0 already in use
[  201.826637][ T8684] block nbd0: NBD_DISCONNECT
[  201.845314][ T8684] block nbd0: Send disconnect failed -32
[  201.851004][ T8684] block nbd0: shutting down sockets
[  202.034303][ T8700] ieee802154 phy0 wpan0: encryption failed: -22
[  202.146355][ T2940] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[  202.757931][ T8726] unsupported nlmsg_type 40
[  203.102485][ T8742] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  203.111775][ T8742] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  252.431643][ T8763] validate_nla: 6 callbacks suppressed
[  252.431662][ T8763] netlink: 'syz.4.682': attribute type 1 has an invalid length.
[  252.449652][ T8763] netlink: 'syz.4.682': attribute type 1 has an invalid length.
[  252.463828][ T8764] __nla_validate_parse: 13 callbacks suppressed
[  252.463846][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  252.483266][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  252.570720][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  252.602367][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  252.685658][ T8784] netlink: 'syz.4.682': attribute type 1 has an invalid length.
[  252.859958][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  252.878441][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  252.905660][ T8784] 8021q: adding VLAN 0 to HW filter on device bond1
[  252.927830][ T8790] bond1: (slave wlan0): Enslaving as an active interface with a down link
[  252.947910][ T8763] vlan0: entered allmulticast mode
[  252.956275][ T8763] veth1: entered allmulticast mode
[  252.962194][ T8763] bond1: (slave vlan0): Opening slave failed
[  253.095292][ T8792] vxcan1: entered allmulticast mode
[  253.106602][ T8793] vxcan1: left allmulticast mode
[  253.115110][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'.
[  253.130483][ T8798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.687'.
[  253.268459][ T8807] netlink: 'syz.4.691': attribute type 1 has an invalid length.
[  253.287821][ T8809] netlink: 68 bytes leftover after parsing attributes in process `syz.0.689'.
[  253.299238][ T8809] ÿ: renamed from bond_slave_0
[  253.475971][ T8822] netlink: 44 bytes leftover after parsing attributes in process `syz.4.694'.
[  253.509428][ T8823] netlink: 'syz.3.692': attribute type 12 has an invalid length.
[  253.581023][ T8831] netlink: 'syz.4.694': attribute type 1 has an invalid length.
[  253.651177][ T8831] 8021q: adding VLAN 0 to HW filter on device bond2
[  253.715280][ T8835] bond2: (slave geneve4): making interface the new active one
[  253.724900][ T8835] bond2: (slave geneve4): Enslaving as an active interface with an up link
[  253.736757][ T8839] netlink: 'syz.3.698': attribute type 1 has an invalid length.
[  253.748285][ T8839] netlink: 'syz.3.698': attribute type 1 has an invalid length.
[  254.571638][ T8887] tipc: Invalid UDP bearer configuration
[  254.571698][ T8887] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  255.247086][ T8925] syz_tun: entered promiscuous mode
[  255.289976][ T8925] syz_tun: left promiscuous mode
[  255.371973][ T8928] syz_tun: entered promiscuous mode
[  255.382531][ T8928] syz_tun: left promiscuous mode
[  255.697273][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  255.880215][ T8963] ip6erspan0: entered promiscuous mode
[  256.054727][ T8967] nbd4: detected capacity change from 0 to 63
[  256.069284][ T8971] block nbd4: NBD_DISCONNECT
[  256.076534][ T8971] block nbd4: Disconnected due to user request.
[  256.086367][ T8971] block nbd4: shutting down sockets
[  256.447725][ T8981] netlink: 'syz.4.736': attribute type 30 has an invalid length.
[  256.930023][ T9002] netlink: 'syz.2.741': attribute type 3 has an invalid length.
[  257.359598][ T9023] syzkaller0: entered promiscuous mode
[  257.418483][ T9023] syzkaller0: entered allmulticast mode
[  258.348673][ T9051] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  258.588543][ T9054] __nla_validate_parse: 22 callbacks suppressed
[  258.588562][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'.
[  258.610625][ T9056] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  258.620226][ T9056] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  258.633438][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'.
[  258.696060][ T9054] bridge0: port 1(macsec1) entered blocking state
[  258.702890][ T9054] bridge0: port 1(macsec1) entered disabled state
[  258.710854][ T9054] macsec1: entered allmulticast mode
[  258.716516][ T9054] bridge0: entered allmulticast mode
[  258.726918][ T9054] macsec1: left allmulticast mode
[  258.732112][ T9054] bridge0: left allmulticast mode
[  258.923399][ T9069] sctp: [Deprecated]: syz.3.760 (pid 9069) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.923399][ T9069] Use struct sctp_sack_info instead
[  259.008611][ T9071] netlink: 'syz.4.762': attribute type 2 has an invalid length.
[  259.283203][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'.
[  259.420275][ T9057] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  259.453352][ T9057] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  259.495301][ T9083] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  259.503677][ T9084] netlink: 'syz.2.766': attribute type 12 has an invalid length.
[  259.514509][ T9083] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  259.984445][ T9106] Illegal XDP return value 1367383552 on prog  (id 360) dev N/A, expect packet loss!
[  260.030160][ T9110] netlink: 'syz.0.770': attribute type 1 has an invalid length.
[  260.201968][ T9114] netlink: 'syz.2.776': attribute type 4 has an invalid length.
[  260.210096][ T9114] netlink: 152 bytes leftover after parsing attributes in process `syz.2.776'.
[  260.239314][ T9114] : renamed from bond0
[  260.338754][ T9120] netlink: 'syz.3.778': attribute type 72 has an invalid length.
[  260.678445][ T9128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.780'.
[  260.691063][ T9128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.780'.
[  260.700350][ T9128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.780'.
[  260.711690][ T9128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.780'.
[  261.055653][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.784'.
[  261.218351][ T8962] Set syz1 is full, maxelem 65536 reached
[  261.467105][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'.
[  261.497547][ T9172] hsr_slave_0: left promiscuous mode
[  261.513097][ T9172] hsr_slave_1: left promiscuous mode
[  261.755749][ T9178] nbd3: detected capacity change from 0 to 63
[  261.773132][ T9182] block nbd3: NBD_DISCONNECT
[  261.781560][ T9182] block nbd3: Disconnected due to user request.
[  261.790073][ T9182] block nbd3: shutting down sockets
[  262.997595][ T9197] netlink: 'syz.3.799': attribute type 1 has an invalid length.
[  263.429449][ T9221] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  263.598841][ T9223] lo speed is unknown, defaulting to 1000
[  263.604876][ T9223] lo speed is unknown, defaulting to 1000
[  263.614252][ T9223] lo speed is unknown, defaulting to 1000
[  263.670025][ T9223] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  263.757180][ T9228] ieee802154 phy0 wpan0: encryption failed: -22
[  263.764693][ T9223] lo speed is unknown, defaulting to 1000
[  263.771299][ T5943] IPVS: starting estimator thread 0...
[  263.774870][ T9223] lo speed is unknown, defaulting to 1000
[  263.792460][ T9223] lo speed is unknown, defaulting to 1000
[  263.807062][ T9223] lo speed is unknown, defaulting to 1000
[  263.826169][ T9223] lo speed is unknown, defaulting to 1000
[  263.836656][ T9227] lo speed is unknown, defaulting to 1000
[  263.853905][ T9232] __nla_validate_parse: 3 callbacks suppressed
[  263.853922][ T9232] netlink: 124 bytes leftover after parsing attributes in process `syz.3.809'.
[  263.877357][ T9229] IPVS: using max 30 ests per chain, 72000 per kthread
[  264.025281][ T9232] nbd3: detected capacity change from 0 to 63
[  264.042067][ T9234] block nbd3: NBD_DISCONNECT
[  264.048296][ T9234] block nbd3: Disconnected due to user request.
[  264.100214][ T9234] block nbd3: shutting down sockets
[  264.210620][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'.
[  264.272522][ T9240] vlan0: entered promiscuous mode
[  264.308317][ T9240] bridge0: entered promiscuous mode
[  264.330127][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.815'.
[  264.411912][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'.
[  264.420138][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'.
[  264.580507][ T9257] netlink: 212 bytes leftover after parsing attributes in process `syz.0.818'.
[  264.600300][ T9257] netlink: 'syz.0.818': attribute type 1 has an invalid length.
[  264.636255][ T9257] netlink: 72 bytes leftover after parsing attributes in process `syz.0.818'.
[  264.726375][ T9262] : (slave bond_slave_0): Releasing backup interface
[  264.767449][ T9262] bond_slave_0: left promiscuous mode
[  264.810583][ T9262] : (slave bond_slave_1): Releasing backup interface
[  264.842437][ T9262] bond_slave_1: left promiscuous mode
[  264.899336][ T9275] ieee802154 phy0 wpan0: encryption failed: -22
[  264.938875][ T9262] team0: Port device team_slave_0 removed
[  265.051944][ T9262] team0: Port device team_slave_1 removed
[  265.076899][ T9262] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.090336][ T9262] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.100222][ T9262] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.108443][ T9262] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.118183][ T9262] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  265.147759][ T9276] syzkaller0: entered promiscuous mode
[  265.180706][ T9276] syzkaller0: entered allmulticast mode
[  265.237341][ T9271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.260343][ T9275] team0: Mode changed to "loadbalance"
[  265.295388][ T9291] tipc: Resetting bearer <eth:syzkaller0>
[  265.342045][ T9263] tipc: Resetting bearer <eth:syzkaller0>
[  265.400604][ T9263] tipc: Disabling bearer <eth:syzkaller0>
[  265.438362][ T9293] vlan0: entered promiscuous mode
[  265.443680][ T9293] syz_tun: entered promiscuous mode
[  265.954992][ T9318] lo speed is unknown, defaulting to 1000
[  267.424092][ T9366] netlink: 'syz.0.846': attribute type 30 has an invalid length.
[  267.739075][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'.
[  267.757135][ T9379] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  267.767664][ T9379] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  267.793988][ T9379] netlink: 'syz.2.849': attribute type 12 has an invalid length.
[  268.053263][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.069560][ T9394] 8021q: adding VLAN 0 to HW filter on device bond1
[  268.072314][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.097280][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'.
[  268.097521][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.140942][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.167008][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.183117][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.191764][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.200425][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.209101][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.217918][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.229135][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.240574][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.256350][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.265304][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.274033][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.282654][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.291302][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.306782][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.315681][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.325895][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.361587][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.373216][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.375998][ T9401] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.389754][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.396336][ T9401] netlink: 'syz.2.857': attribute type 11 has an invalid length.
[  268.428859][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.437778][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.443653][ T9204] Set syz1 is full, maxelem 65536 reached
[  268.446552][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.461045][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.469766][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.495399][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.504180][ T5183] block nbd0: Receive control failed (result -32)
[  268.532246][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.543793][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.558550][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.586511][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.595094][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.603755][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.612455][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.623081][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.640733][ T9404] netlink: 'syz.4.858': attribute type 8 has an invalid length.
[  268.643204][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.658269][ T9404] netlink: 40 bytes leftover after parsing attributes in process `syz.4.858'.
[  268.670856][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.679834][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.725249][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.749209][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.769277][ T9396] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.793188][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.801668][ T9392] tipc: Failed to remove unknown binding: 66,1,1/0:4165276552/4165276554
[  268.925348][ T9409] lo speed is unknown, defaulting to 1000
[  268.932639][ T9410] syzkaller1: entered promiscuous mode
[  268.943558][ T9410] syzkaller1: entered allmulticast mode
[  268.969674][ T9420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.863'.
[  268.984781][ T9420] nbd: must specify at least one socket
[  269.032672][ T9415] bridge0: entered allmulticast mode
[  269.180031][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'.
[  269.236841][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'.
[  269.336929][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'.
[  269.715424][ T9425] 8021q: adding VLAN 0 to HW filter on device bond1
[  270.056152][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'.
[  270.089274][ T9455] netlink: 'syz.1.870': attribute type 5 has an invalid length.
[  270.121200][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'.
[  270.691761][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.874'.
[  270.739003][ T9479] IPv6: sit1: Disabled Multicast RS
[  270.784439][ T9479] sit1: entered allmulticast mode
[  270.792464][ T9485] netlink: 'syz.2.876': attribute type 13 has an invalid length.
[  270.819391][ T9486] netlink: 68 bytes leftover after parsing attributes in process `syz.3.875'.
[  270.843939][ T9485] netlink: 'syz.2.876': attribute type 17 has an invalid length.
[  270.971257][ T9496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.078700][ T9485] : left promiscuous mode
[  271.083974][ T9485] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  271.092636][ T9485] 8021q: adding VLAN 0 to HW filter on device 
[  271.123510][ T9485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.267437][ T9492] lo speed is unknown, defaulting to 1000
[  271.307417][ T9487] lo speed is unknown, defaulting to 1000
[  271.438093][ T9497] syzkaller0: entered promiscuous mode
[  271.443985][ T9497] syzkaller0: entered allmulticast mode
[  271.557586][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'.
[  271.748813][ T9514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.882'.
[  272.060490][ T9518] lo speed is unknown, defaulting to 1000
[  272.362918][ T9536] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.403601][ T9535] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  272.450303][ T9536] syzkaller0: entered promiscuous mode
[  272.483387][ T9536] syzkaller0: entered allmulticast mode
[  272.502535][ T9535] tipc: Resetting bearer <eth:syzkaller0>
[  272.593234][ T9535] tipc: Resetting bearer <eth:syzkaller0>
[  272.622446][ T9535] tipc: Disabling bearer <eth:syzkaller0>
[  272.856160][ T9558] netlink: 'syz.3.896': attribute type 1 has an invalid length.
[  272.879645][ T9554] nbd: socks must be embedded in a SOCK_ITEM attr
[  273.011374][ T9556] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  273.023974][ T9556] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  273.034387][ T9556] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  273.417359][ T9579] syz_tun: entered allmulticast mode
[  273.490494][ T9588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.588529][ T9579] dvmrp8: entered allmulticast mode
[  273.641909][ T9602] netlink: 'syz.4.907': attribute type 30 has an invalid length.
[  273.697065][ T9588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.831314][ T9588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.862788][ T9605] lo speed is unknown, defaulting to 1000
[  273.995458][ T9588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  274.112398][ T9578] syz_tun: left allmulticast mode
[  274.119293][ T9578] dvmrp8: left allmulticast mode
[  274.273617][  T139] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  274.502650][  T139] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  274.532885][ T9625] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.559472][  T139] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  274.696974][ T9648] __nla_validate_parse: 5 callbacks suppressed
[  274.696994][ T9648] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.918'.
[  274.701129][ T9650] FAULT_INJECTION: forcing a failure.
[  274.701129][ T9650] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  274.727219][ T9650] CPU: 1 UID: 0 PID: 9650 Comm: syz.3.920 Not tainted syzkaller #0 PREEMPT(full) 
[  274.727243][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  274.727267][ T9650] Call Trace:
[  274.727274][ T9650]  <TASK>
[  274.727282][ T9650]  dump_stack_lvl+0x189/0x250
[  274.727306][ T9650]  ? __pfx____ratelimit+0x10/0x10
[  274.727322][ T9650]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.727339][ T9650]  ? __pfx__printk+0x10/0x10
[  274.727371][ T9650]  should_fail_ex+0x414/0x560
[  274.727396][ T9650]  _copy_to_user+0x31/0xb0
[  274.727417][ T9650]  copy_to_sockptr+0x5e/0xa0
[  274.727436][ T9650]  sk_getsockopt+0x99e/0x2530
[  274.727460][ T9650]  ? __pfx_sk_getsockopt+0x10/0x10
[  274.727476][ T9650]  ? write_ibpb+0x30/0x40
[  274.727502][ T9650]  ? __lock_acquire+0xab9/0xd20
[  274.727534][ T9650]  ? __might_fault+0xb0/0x130
[  274.727574][ T9650]  do_sock_getsockopt+0x237/0x450
[  274.727592][ T9650]  ? write_ibpb+0x30/0x40
[  274.727612][ T9650]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  274.727629][ T9650]  ? write_ibpb+0x30/0x40
[  274.727647][ T9650]  ? ksys_write+0x1e1/0x250
[  274.727672][ T9650]  __x64_sys_getsockopt+0x1a5/0x250
[  274.727688][ T9650]  ? write_ibpb+0x30/0x40
[  274.727705][ T9650]  ? write_ibpb+0x30/0x40
[  274.727723][ T9650]  do_syscall_64+0xfa/0x3b0
[  274.727746][ T9650]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.727762][ T9650]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.727778][ T9650]  ? clear_bhb_loop+0x60/0xb0
[  274.727798][ T9650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.727813][ T9650] RIP: 0033:0x7f58c0b8eba9
[  274.727829][ T9650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.727842][ T9650] RSP: 002b:00007f58c19c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  274.727861][ T9650] RAX: ffffffffffffffda RBX: 00007f58c0dd5fa0 RCX: 00007f58c0b8eba9
[  274.727873][ T9650] RDX: 0000000000000037 RSI: 0000000000000001 RDI: 0000000000000004
[  274.727882][ T9650] RBP: 00007f58c19c1090 R08: 0000200000000100 R09: 0000000000000000
[  274.727892][ T9650] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  274.727902][ T9650] R13: 00007f58c0dd6038 R14: 00007f58c0dd5fa0 R15: 00007ffd52887168
[  274.727929][ T9650]  </TASK>
[  275.088960][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.921'.
[  275.121247][ T9656] netlink: 56 bytes leftover after parsing attributes in process `syz.1.922'.
[  275.142156][ T9662] netlink: 'syz.3.925': attribute type 30 has an invalid length.
[  275.156102][ T9656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.922'.
[  275.348495][ T9672] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.485441][ T9672] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.505154][ T9683] netlink: 'syz.2.931': attribute type 1 has an invalid length.
[  275.548529][ T9684] bond1: (slave bridge0): Enslaving as a backup interface with an up link
[  275.570424][ T9672] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.632444][ T9694] FAULT_INJECTION: forcing a failure.
[  275.632444][ T9694] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.648692][ T9694] CPU: 0 UID: 0 PID: 9694 Comm: syz.3.933 Not tainted syzkaller #0 PREEMPT(full) 
[  275.648716][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  275.648726][ T9694] Call Trace:
[  275.648733][ T9694]  <TASK>
[  275.648740][ T9694]  dump_stack_lvl+0x189/0x250
[  275.648764][ T9694]  ? __pfx____ratelimit+0x10/0x10
[  275.648783][ T9694]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.648801][ T9694]  ? __pfx__printk+0x10/0x10
[  275.648835][ T9694]  should_fail_ex+0x414/0x560
[  275.648861][ T9694]  _copy_to_user+0x31/0xb0
[  275.648882][ T9694]  simple_read_from_buffer+0xe1/0x170
[  275.648905][ T9694]  proc_fail_nth_read+0x1b3/0x220
[  275.648921][ T9694]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  275.648936][ T9694]  ? rw_verify_area+0x2a6/0x4d0
[  275.648950][ T9694]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  275.648964][ T9694]  vfs_read+0x200/0xa30
[  275.648987][ T9694]  ? __pfx_vfs_read+0x10/0x10
[  275.649015][ T9694]  ? do_sock_getsockopt+0x237/0x450
[  275.649032][ T9694]  ? write_ibpb+0x30/0x40
[  275.649062][ T9694]  ksys_read+0x145/0x250
[  275.649084][ T9694]  ? __pfx_ksys_read+0x10/0x10
[  275.649110][ T9694]  ? do_syscall_64+0xbe/0x3b0
[  275.649131][ T9694]  do_syscall_64+0xfa/0x3b0
[  275.649149][ T9694]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.649164][ T9694]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  275.649181][ T9694]  ? clear_bhb_loop+0x60/0xb0
[  275.649201][ T9694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.649215][ T9694] RIP: 0033:0x7f58c0b8d5bc
[  275.649228][ T9694] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  275.649239][ T9694] RSP: 002b:00007f58c19c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  275.649255][ T9694] RAX: ffffffffffffffda RBX: 00007f58c0dd5fa0 RCX: 00007f58c0b8d5bc
[  275.649266][ T9694] RDX: 000000000000000f RSI: 00007f58c19c10a0 RDI: 0000000000000005
[  275.649276][ T9694] RBP: 00007f58c19c1090 R08: 0000000000000000 R09: 0000000000000000
[  275.649285][ T9694] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  275.649295][ T9694] R13: 00007f58c0dd6038 R14: 00007f58c0dd5fa0 R15: 00007ffd52887168
[  275.649321][ T9694]  </TASK>
[  275.876559][ T9672] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.051063][ T7986] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.061175][ T7986] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.094680][ T7993] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.113095][ T7993] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.201625][ T9582] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  276.311230][ T9717] pim6reg: entered allmulticast mode
[  276.352180][ T9582] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  276.399342][ T9715] pim6reg: left allmulticast mode
[  276.512592][ T9582] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  276.761236][ T9730] syzkaller0: entered promiscuous mode
[  276.773376][ T9730] syzkaller0: entered allmulticast mode
[  276.801038][ T9732] netlink: 'syz.1.945': attribute type 2 has an invalid length.
[  277.051859][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  277.145868][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.947'.
[  277.155191][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  277.170946][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.237772][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  277.289806][ T9745] sctp: [Deprecated]: syz.4.949 (pid 9745) Use of struct sctp_assoc_value in delayed_ack socket option.
[  277.289806][ T9745] Use struct sctp_sack_info instead
[  277.341484][ T9745] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002
[  277.940793][ T9781] netlink: 'syz.0.958': attribute type 2 has an invalid length.
[  278.105856][ T9788] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  278.218928][ T9791] Set syz1 is full, maxelem 65536 reached
[  278.336826][ T9795] tipc: Started in network mode
[  278.342264][ T9795] tipc: Node identity aec208524893, cluster identity 4711
[  278.362427][ T9795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.375298][ T9795] syzkaller0: entered promiscuous mode
[  278.381942][ T9795] syzkaller0: entered allmulticast mode
[  278.501921][ T9795] tipc: Resetting bearer <eth:syzkaller0>
[  278.666163][ T9795] tipc: Disabling bearer <eth:syzkaller0>
[  278.721250][ T9813] netlink: 'syz.0.969': attribute type 4 has an invalid length.
[  279.040365][ T9827] netlink: 'syz.1.973': attribute type 2 has an invalid length.
[  279.317954][ T9840] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  279.366482][ T9840] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.978'.
[  279.482811][ T9844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.522816][ T9844] syzkaller0: entered promiscuous mode
[  279.542087][ T9844] syzkaller0: entered allmulticast mode
[  279.629940][ T9844] tipc: Resetting bearer <eth:syzkaller0>
[  279.657946][ T9843] tipc: Resetting bearer <eth:syzkaller0>
[  279.701324][ T9843] tipc: Disabling bearer <eth:syzkaller0>
[  279.717491][ T9850] netlink: 'syz.0.981': attribute type 15 has an invalid length.
[  279.870921][ T9861] netlink: 508 bytes leftover after parsing attributes in process `syz.4.984'.
[  279.968959][ T9863] netlink: 'syz.3.985': attribute type 1 has an invalid length.
[  279.987358][ T9863] netlink: 224 bytes leftover after parsing attributes in process `syz.3.985'.
[  280.270798][ T9865] netlink: 68 bytes leftover after parsing attributes in process `syz.4.986'.
[  280.291932][ T7986] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.310095][ T7986] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.320815][ T9852] lo speed is unknown, defaulting to 1000
[  280.329923][ T7986] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.370289][ T7986] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  280.488316][ T9876] netlink: 'syz.0.988': attribute type 2 has an invalid length.
[  280.869076][ T9890] netlink: 'syz.1.992': attribute type 21 has an invalid length.
[  280.909445][ T9890] netlink: 'syz.1.992': attribute type 22 has an invalid length.
[  280.919858][ T9890] netlink: 'syz.1.992': attribute type 23 has an invalid length.
[  280.936623][ T9890] netlink: 'syz.1.992': attribute type 25 has an invalid length.
[  280.945276][ T9890] netlink: 96 bytes leftover after parsing attributes in process `syz.1.992'.
[  281.040010][ T9900] delete_channel: no stack
[  281.410729][ T9917] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1002'.
[  281.750581][ T9949] vlan0: entered promiscuous mode
[  281.769377][ T9949] bridge0: entered promiscuous mode
[  281.793829][ T9951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.189328][ T9965] netdevsim netdevsim2: loading /lib/firmware// failed with error -22
[  282.198284][ T9965] netdevsim netdevsim2: Direct firmware load for / failed with error -22
[  282.206879][ T9965] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  282.239927][ T9966] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  282.821518][ T9992] netlink: 'syz.4.1018': attribute type 30 has an invalid length.
[  283.218058][T10010] Set syz1 is full, maxelem 65536 reached
[  283.335079][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'.
[  283.369442][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'.
[  283.379359][T10030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1031'.
[  283.388819][T10030] tipc: Invalid UDP bearer configuration
[  283.388873][T10030] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  283.530864][T10034] bond2: (slave ip6gretap1): making interface the new active one
[  283.556574][T10034] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  283.604505][T10046] netlink: 'syz.0.1035': attribute type 1 has an invalid length.
[  283.612270][T10046] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1035'.
[  283.731802][T10040] syzkaller0: entered promiscuous mode
[  283.737455][T10040] syzkaller0: entered allmulticast mode
[  283.766497][T10040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1033'.
[  283.810894][T10060] openvswitch: netlink: IP tunnel dst address not specified
[  283.945773][   T30] audit: type=1107 audit(1757644160.815:4): pid=10062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='€
'
[  285.857609][T10064] wg1: entered promiscuous mode
[  285.863959][T10064] wg1: entered allmulticast mode
[  286.027467][T10078] lo speed is unknown, defaulting to 1000
[  286.033926][T10082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.056760][T10082] syzkaller0: entered promiscuous mode
[  286.062256][T10082] syzkaller0: entered allmulticast mode
[  286.233202][T10086] tipc: Enabled bearer <udp:s>, priority 10
[  286.294780][T10083] lo speed is unknown, defaulting to 1000
[  286.307181][T10082] tipc: Resetting bearer <eth:syzkaller0>
[  286.526089][T10079] tipc: Resetting bearer <eth:syzkaller0>
[  286.582168][T10079] tipc: Disabling bearer <eth:syzkaller0>
[  286.690193][T10102] netlink: 'syz.3.1051': attribute type 1 has an invalid length.
[  286.829495][T10102] 8021q: adding VLAN 0 to HW filter on device bond2
[  286.971050][T10104] lo speed is unknown, defaulting to 1000
[  286.977144][T10116] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1044'.
[  287.343225][ T8551] tipc: Node number set to 1288334914
[  287.350913][T10133] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  287.555939][T10139] netlink: 'syz.2.1058': attribute type 30 has an invalid length.
[  287.646407][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'.
[  287.907632][T10153] netlink: 'syz.0.1061': attribute type 2 has an invalid length.
[  288.098528][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'.
[  289.168217][T10213] tipc: Can't bind to reserved service type 0
[  290.009861][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'.
[  290.031711][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'.
[  290.041618][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'.
[  290.088969][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'.
[  290.100261][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'.
[  290.118078][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'.
[  290.140144][T10235] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1086'.
[  290.291422][T10239] netlink: 'syz.2.1088': attribute type 1 has an invalid length.
[  290.806235][T10279] netlink: 'syz.3.1097': attribute type 1 has an invalid length.
[  290.909445][T10279] bond3: entered promiscuous mode
[  290.932790][T10279] bond3: entered allmulticast mode
[  291.389450][T10291] bridge2: entered promiscuous mode
[  291.395050][T10291] bridge2: entered allmulticast mode
[  291.508225][T10290] syz.2.1101 (10290) used greatest stack depth: 16704 bytes left
[  291.742292][T10314] netlink: 'syz.0.1107': attribute type 1 has an invalid length.
[  291.891990][T10319] macvtap1: entered allmulticast mode
[  291.909096][T10319] veth0_macvtap: entered allmulticast mode
[  292.007287][T10334] __nla_validate_parse: 51 callbacks suppressed
[  292.007305][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'.
[  292.103599][T10326] nbd2: detected capacity change from 0 to 63
[  292.112533][T10339] block nbd2: NBD_DISCONNECT
[  292.120110][T10339] block nbd2: Disconnected due to user request.
[  292.127386][T10339] block nbd2: shutting down sockets
[  292.320597][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'.
[  292.437489][T10363] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1122'.
[  292.452414][T10363] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1122'.
[  292.468206][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'.
[  292.618049][T10365] lo speed is unknown, defaulting to 1000
[  293.354835][T10408] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1129'.
[  293.382850][T10402] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1128'.
[  293.582349][T10418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1132'.
[  293.816662][T10421] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  293.886653][T10429] netlink: 'syz.1.1137': attribute type 11 has an invalid length.
[  293.895312][T10429] netlink: 'syz.1.1137': attribute type 4 has an invalid length.
[  293.904295][T10429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1137'.
[  293.917793][T10429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1137'.
[  294.630485][T10462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.643853][T10462] syzkaller0: entered promiscuous mode
[  294.649344][T10462] syzkaller0: entered allmulticast mode
[  294.673713][T10462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.698883][T10462] tipc: Resetting bearer <eth:syzkaller0>
[  294.714540][T10460] tipc: Resetting bearer <eth:syzkaller0>
[  294.755300][T10460] tipc: Disabling bearer <eth:syzkaller0>
[  294.805283][T10474] netlink: 'syz.4.1155': attribute type 1 has an invalid length.
[  295.245986][T10505] netdevsim netdevsim1: loading /lib/firmware// failed with error -22
[  295.254546][T10505] netdevsim netdevsim1: Direct firmware load for / failed with error -22
[  295.263217][T10505] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[  295.288851][T10507] netlink: 'syz.3.1166': attribute type 12 has an invalid length.
[  295.461130][T10518] netlink: 'syz.3.1168': attribute type 1 has an invalid length.
[  295.678852][T10531] netlink: 'syz.2.1173': attribute type 11 has an invalid length.
[  295.952710][T10541] lo speed is unknown, defaulting to 1000
[  296.429664][T10579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.439271][T10579] syzkaller0: entered promiscuous mode
[  296.463690][T10579] syzkaller0: entered allmulticast mode
[  296.530317][T10579] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  296.567569][T10578] tipc: Resetting bearer <eth:syzkaller0>
[  296.589982][T10578] tipc: Disabling bearer <eth:syzkaller0>
[  296.601950][T10588] netlink: 'syz.1.1189': attribute type 3 has an invalid length.
[  296.794121][T10598] nbd2: detected capacity change from 0 to 63
[  296.821996][T10605] block nbd2: NBD_DISCONNECT
[  296.856577][T10605] block nbd2: Disconnected due to user request.
[  296.865669][T10605] block nbd2: shutting down sockets
[  297.117096][T10623] __nla_validate_parse: 18 callbacks suppressed
[  297.117115][T10623] netlink: 432 bytes leftover after parsing attributes in process `syz.4.1197'.
[  297.123605][T10624] netlink: 'syz.4.1197': attribute type 21 has an invalid length.
[  297.123626][T10624] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1197'.
[  297.123699][T10624] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1197'.
[  297.359395][T10634] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  297.583405][T10641] wireguard0: entered promiscuous mode
[  297.588971][T10641] wireguard0: entered allmulticast mode
[  297.592503][T10648] netlink: 'syz.0.1201': attribute type 10 has an invalid length.
[  297.644963][T10648] dummy0: entered promiscuous mode
[  297.665787][T10648] team0: Port device dummy0 added
[  297.690993][T10646] lo speed is unknown, defaulting to 1000
[  297.695940][T10641] netlink: 'syz.0.1201': attribute type 10 has an invalid length.
[  297.756921][T10641] dummy0: left promiscuous mode
[  297.769185][T10641] team0: Port device dummy0 removed
[  297.780456][T10641] dummy0: entered promiscuous mode
[  297.789237][T10641] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  297.814215][T10661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1204'.
[  297.859999][T10648] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  298.090439][T10679] lo speed is unknown, defaulting to 1000
[  298.203793][T10684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.219819][T10679] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1211'.
[  298.666407][T10696] netlink: 'syz.4.1214': attribute type 8 has an invalid length.
[  298.849668][T10710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1216'.
[  299.079961][T10725] netlink: 'syz.2.1220': attribute type 10 has an invalid length.
[  299.104466][T10725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1220'.
[  299.181326][T10728] netlink: 'syz.1.1222': attribute type 1 has an invalid length.
[  299.209598][T10728] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1222'.
[  299.214620][T10725] team0: Port device geneve0 added
[  299.269825][ T7342] IPVS: starting estimator thread 0...
[  299.367969][T10734] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1223'.
[  299.377486][T10737] IPVS: using max 33 ests per chain, 79200 per kthread
[  299.736278][T10754] »»»»»»: renamed from bridge_slave_1
[  299.786980][T10757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.868696][T10761] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1230'.
[  301.276680][T10802] lo speed is unknown, defaulting to 1000
[  301.292382][T10806] FAULT_INJECTION: forcing a failure.
[  301.292382][T10806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.337568][T10801] nbd1: detected capacity change from 0 to 63
[  301.367654][T10806] CPU: 0 UID: 0 PID: 10806 Comm: syz.1.1241 Not tainted syzkaller #0 PREEMPT(full) 
[  301.367700][T10806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  301.367710][T10806] Call Trace:
[  301.367718][T10806]  <TASK>
[  301.367727][T10806]  dump_stack_lvl+0x189/0x250
[  301.367752][T10806]  ? __pfx____ratelimit+0x10/0x10
[  301.367771][T10806]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.367790][T10806]  ? __pfx__printk+0x10/0x10
[  301.367812][T10806]  ? __might_fault+0xb0/0x130
[  301.367844][T10806]  should_fail_ex+0x414/0x560
[  301.367871][T10806]  _copy_from_user+0x2d/0xb0
[  301.367890][T10806]  ___sys_sendmsg+0x158/0x2a0
[  301.367912][T10806]  ? __pfx____sys_sendmsg+0x10/0x10
[  301.367969][T10806]  ? __fget_files+0x2a/0x420
[  301.367983][T10806]  ? __fget_files+0x3a0/0x420
[  301.368009][T10806]  __x64_sys_sendmsg+0x19b/0x260
[  301.368031][T10806]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  301.368061][T10806]  ? __pfx_ksys_write+0x10/0x10
[  301.368089][T10806]  ? do_syscall_64+0xbe/0x3b0
[  301.368111][T10806]  do_syscall_64+0xfa/0x3b0
[  301.368128][T10806]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.368146][T10806]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.368162][T10806]  ? clear_bhb_loop+0x60/0xb0
[  301.368183][T10806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.368200][T10806] RIP: 0033:0x7f47f5d8eba9
[  301.368216][T10806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.368229][T10806] RSP: 002b:00007f47f6ba5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.368248][T10806] RAX: ffffffffffffffda RBX: 00007f47f5fd6090 RCX: 00007f47f5d8eba9
[  301.368260][T10806] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000005
[  301.368270][T10806] RBP: 00007f47f6ba5090 R08: 0000000000000000 R09: 0000000000000000
[  301.368280][T10806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.368289][T10806] R13: 00007f47f5fd6128 R14: 00007f47f5fd6090 R15: 00007ffc53f06618
[  301.368319][T10806]  </TASK>
[  301.647055][ T5183] block nbd1: Receive control failed (result -32)
[  302.183933][T10830] lo speed is unknown, defaulting to 1000
[  302.256473][T10835] __nla_validate_parse: 3 callbacks suppressed
[  302.256492][T10835] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1250'.
[  302.452801][T10834] bond2: entered promiscuous mode
[  302.483073][T10834] bond2: entered allmulticast mode
[  302.488837][T10834] 8021q: adding VLAN 0 to HW filter on device bond2
[  302.623113][T10842] nbd3: detected capacity change from 0 to 63
[  302.643141][T10835] block nbd3: NBD_DISCONNECT
[  302.647882][T10835] block nbd3: Disconnected due to user request.
[  302.664079][T10835] block nbd3: shutting down sockets
[  302.713345][T10844] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1251'.
[  303.006421][T10857] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1255'.
[  303.047069][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'.
[  303.110930][T10858] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1254'.
[  303.142715][T10863] FAULT_INJECTION: forcing a failure.
[  303.142715][T10863] name failslab, interval 1, probability 0, space 0, times 0
[  303.166904][T10863] CPU: 0 UID: 0 PID: 10863 Comm: syz.3.1255 Not tainted syzkaller #0 PREEMPT(full) 
[  303.166930][T10863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  303.166941][T10863] Call Trace:
[  303.166950][T10863]  <TASK>
[  303.166958][T10863]  dump_stack_lvl+0x189/0x250
[  303.166983][T10863]  ? __pfx____ratelimit+0x10/0x10
[  303.167002][T10863]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.167021][T10863]  ? __pfx__printk+0x10/0x10
[  303.167049][T10863]  ? __pfx___might_resched+0x10/0x10
[  303.167071][T10863]  should_fail_ex+0x414/0x560
[  303.167099][T10863]  should_failslab+0xa8/0x100
[  303.167124][T10863]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  303.167144][T10863]  ? __alloc_skb+0x112/0x2d0
[  303.167166][T10863]  __alloc_skb+0x112/0x2d0
[  303.167188][T10863]  netlink_sendmsg+0x5c6/0xb30
[  303.167217][T10863]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.167239][T10863]  ? aa_sock_msg_perm+0xf1/0x1d0
[  303.167258][T10863]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  303.167283][T10863]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.167302][T10863]  __sock_sendmsg+0x21c/0x270
[  303.167328][T10863]  ____sys_sendmsg+0x505/0x830
[  303.167355][T10863]  ? __pfx_____sys_sendmsg+0x10/0x10
[  303.167383][T10863]  ? import_iovec+0x74/0xa0
[  303.167406][T10863]  ___sys_sendmsg+0x21f/0x2a0
[  303.167429][T10863]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.167486][T10863]  ? __fget_files+0x2a/0x420
[  303.167500][T10863]  ? __fget_files+0x3a0/0x420
[  303.167525][T10863]  __x64_sys_sendmsg+0x19b/0x260
[  303.167548][T10863]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  303.167577][T10863]  ? __pfx_ksys_write+0x10/0x10
[  303.167603][T10863]  ? do_syscall_64+0xbe/0x3b0
[  303.167625][T10863]  do_syscall_64+0xfa/0x3b0
[  303.167642][T10863]  ? lockdep_hardirqs_on+0x9c/0x150
[  303.167659][T10863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.167675][T10863]  ? clear_bhb_loop+0x60/0xb0
[  303.167695][T10863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.167711][T10863] RIP: 0033:0x7f58c0b8eba9
[  303.167727][T10863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.167741][T10863] RSP: 002b:00007f58c19a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.167761][T10863] RAX: ffffffffffffffda RBX: 00007f58c0dd6090 RCX: 00007f58c0b8eba9
[  303.167773][T10863] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000005
[  303.167785][T10863] RBP: 00007f58c19a0090 R08: 0000000000000000 R09: 0000000000000000
[  303.167796][T10863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.167806][T10863] R13: 00007f58c0dd6128 R14: 00007f58c0dd6090 R15: 00007ffd52887168
[  303.167835][T10863]  </TASK>
[  303.176451][T10858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  303.229215][T10865] Set syz1 is full, maxelem 65536 reached
[  303.456774][T10857] nbd3: detected capacity change from 0 to 63
[  303.469798][ T5183] block nbd3: Receive control failed (result -32)
[  303.881963][T10891] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000
[  303.954454][T10894] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1264'.
[  304.044639][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1265'.
[  304.050009][T10898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1266'.
[  304.064301][T10894] lo speed is unknown, defaulting to 1000
[  304.079731][T10899] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1265'.
[  304.210234][T10899] lo speed is unknown, defaulting to 1000
[  304.649414][T10916] lo speed is unknown, defaulting to 1000
[  304.805910][T10919] Set syz1 is full, maxelem 65536 reached
[  305.098159][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1275'.
[  305.177810][T10938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.198878][T10939] syzkaller0: entered promiscuous mode
[  305.213248][T10939] syzkaller0: entered allmulticast mode
[  305.244750][T10928] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  305.274388][T10942] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.367510][T10928] tipc: Resetting bearer <eth:syzkaller0>
[  305.435020][T10927] tipc: Resetting bearer <eth:syzkaller0>
[  305.487314][T10927] tipc: Disabling bearer <eth:syzkaller0>
[  305.566471][T10952] rdma_rxe: rxe_newlink: failed to add dummy0
[  305.708189][T10954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  306.034606][T10967] netlink: 'syz.3.1285': attribute type 30 has an invalid length.
[  306.065138][T10969] netlink: 'syz.1.1286': attribute type 30 has an invalid length.
[  306.494072][T10976] netlink: 'syz.4.1288': attribute type 1 has an invalid length.
[  306.606388][T10976] 8021q: adding VLAN 0 to HW filter on device bond3
[  306.657619][T10991] ipvlan4: entered allmulticast mode
[  306.676002][T10991] bond3: entered allmulticast mode
[  307.013500][T11013] nbd: nbd3 already in use
[  307.018503][T11013] block nbd3: NBD_DISCONNECT
[  307.023346][T11013] block nbd3: Send disconnect failed -32
[  307.029001][T11013] block nbd3: shutting down sockets
[  307.059154][T11010] Set syz1 is full, maxelem 65536 reached
[  307.210521][T11025] netlink: 'syz.2.1297': attribute type 11 has an invalid length.
[  307.315795][T11027] vlan1: entered allmulticast mode
[  307.363660][T11027] veth0_vlan: entered allmulticast mode
[  307.375095][T11027] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  307.641477][T11043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.680151][T11043] syzkaller0: entered promiscuous mode
[  307.704688][T11043] syzkaller0: entered allmulticast mode
[  307.730251][T11046] netlink: 'syz.1.1303': attribute type 30 has an invalid length.
[  307.919297][T11043] tipc: Resetting bearer <eth:syzkaller0>
[  308.038448][T11042] tipc: Resetting bearer <eth:syzkaller0>
[  308.099669][T11042] tipc: Disabling bearer <eth:syzkaller0>
[  308.549114][T11070] Set syz1 is full, maxelem 65536 reached
[  308.805590][T11084] __nla_validate_parse: 7 callbacks suppressed
[  308.805610][T11084] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1310'.
[  308.983455][T11084] nbd3: detected capacity change from 0 to 63
[  308.989816][T11088] block nbd3: NBD_DISCONNECT
[  308.994794][T11088] block nbd3: Disconnected due to user request.
[  309.011983][T11088] block nbd3: shutting down sockets
[  309.738316][T11124] Set syz1 is full, maxelem 65536 reached
[  309.777879][T11127] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1322'.
[  310.027438][T11141] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1323'.
[  310.065468][T11144] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1325'.
[  310.183054][T11144] nbd3: detected capacity change from 0 to 63
[  310.189424][T11150] block nbd3: NBD_DISCONNECT
[  310.194405][T11150] block nbd3: Disconnected due to user request.
[  310.200653][T11150] block nbd3: shutting down sockets
[  310.727403][T11155] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1326'.
[  310.892358][T11169] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1330'.
[  311.211939][T11182] netlink: 'syz.0.1333': attribute type 30 has an invalid length.
[  311.425873][T11185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1334'.
[  311.872220][T11201] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1337'.
[  311.916022][T11206] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1340'.
[  312.033394][T11201] nbd4: detected capacity change from 0 to 63
[  312.053924][T11213] block nbd4: NBD_DISCONNECT
[  312.063553][T11213] block nbd4: Disconnected due to user request.
[  312.095469][T11213] block nbd4: shutting down sockets
[  312.168295][T11216] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1343'.
[  312.255952][T11216] nbd: nbd0 already in use
[  312.260777][T11216] block nbd0: NBD_DISCONNECT
[  312.265700][T11216] block nbd0: Send disconnect failed -32
[  312.278318][T11216] block nbd0: shutting down sockets
[  312.457681][T11223] netlink: 'syz.4.1346': attribute type 12 has an invalid length.
[  312.625178][T11237] macvlan2: entered allmulticast mode
[  312.630801][T11237] veth1_vlan: entered allmulticast mode
[  312.643373][T11237] veth1_vlan: left allmulticast mode
[  312.770711][T11242] syzkaller1: entered promiscuous mode
[  312.785121][T11242] syzkaller1: entered allmulticast mode
[  313.099778][T11250] batadv0: left promiscuous mode
[  313.328376][T11250] ip6tnl1: left promiscuous mode
[  313.339386][T11250] veth0_macvtap: left allmulticast mode
[  313.347557][T11250] macvtap1: left allmulticast mode
[  313.358031][T11250] geneve2: left promiscuous mode
[  313.368837][T11250] geneve2: left allmulticast mode
[  313.380750][T11250] bond2: left promiscuous mode
[  313.386524][T11250] bond2: left allmulticast mode
[  313.412479][ T7993] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  313.434956][T11269] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  313.435852][ T7993] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.473430][T11267] nbd3: detected capacity change from 0 to 63
[  313.480143][ T7993] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  313.480331][T11265] nbd: must specify an index to disconnect
[  313.492462][ T7993] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.505844][ T7993] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  313.515097][ T5183] block nbd3: Receive control failed (result -32)
[  313.522073][ T7993] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.553508][ T7993] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  313.562416][ T7993] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.665804][T11277] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  314.268076][T11312] __nla_validate_parse: 6 callbacks suppressed
[  314.268095][T11312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1366'.
[  314.331511][T11317] netlink: 'syz.2.1369': attribute type 30 has an invalid length.
[  314.405819][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'.
[  314.414829][T11318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1366'.
[  314.452721][T11318] gretap1: entered promiscuous mode
[  314.475947][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1372'.
[  314.485712][T11328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1372'.
[  314.510637][T11328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.549320][T11330] lo speed is unknown, defaulting to 1000
[  315.049686][T11357] netlink: 212936 bytes leftover after parsing attributes in process `syz.2.1380'.
[  315.236304][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'.
[  315.260447][T11361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1381'.
[  315.322124][T11361] netlink: 540 bytes leftover after parsing attributes in process `syz.0.1381'.
[  315.669606][T11382] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1386'.
[  315.865085][T11404] geneve1: entered allmulticast mode
[  315.948720][T11407] lo speed is unknown, defaulting to 1000
[  316.249405][T11421] syzkaller0: entered promiscuous mode
[  316.268202][T11421] syzkaller0: entered allmulticast mode
[  316.341188][T11428] netlink: 'syz.3.1398': attribute type 1 has an invalid length.
[  316.353471][T11428] netlink: 'syz.3.1398': attribute type 1 has an invalid length.
[  316.382097][T11421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.447696][T11420] tipc: Resetting bearer <eth:syzkaller0>
[  316.478212][T11420] tipc: Disabling bearer <eth:syzkaller0>
[  316.721790][T11435] dvmrp8: entered allmulticast mode
[  316.888848][T11443] lo speed is unknown, defaulting to 1000
[  316.971727][T11440] lo speed is unknown, defaulting to 1000
[  317.025811][T11424] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  317.055197][T11436] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  317.142328][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.578818][T11487] netlink: 'syz.2.1411': attribute type 10 has an invalid length.
[  317.645666][T11487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.708982][T11487] : (slave batadv0): Enslaving as an active interface with an up link
[  318.013232][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  318.209892][T11513] netlink: 'syz.4.1417': attribute type 21 has an invalid length.
[  318.333219][ T5183] Bluetooth: hci4: command 0x0401 tx timeout
[  318.816232][T11544] lo speed is unknown, defaulting to 1000
[  319.053180][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  319.173991][T11555] lo: entered allmulticast mode
[  319.179109][T11555] tunl0: entered allmulticast mode
[  319.188941][T11555] gre0: entered allmulticast mode
[  319.194330][T11555] gretap0: entered allmulticast mode
[  319.200044][T11555] erspan0: entered allmulticast mode
[  319.210191][T11555] ip_vti0: entered allmulticast mode
[  319.217419][T11555] ip6_vti0: entered allmulticast mode
[  319.241264][T11555] sit0: entered allmulticast mode
[  319.332688][ T7346] IPVS: starting estimator thread 0...
[  319.359317][T11555] ip6tnl0: entered allmulticast mode
[  319.365505][T11555] ip6gre0: entered allmulticast mode
[  319.371094][T11555] ip6gretap0: entered allmulticast mode
[  319.377016][T11555] vcan0: entered allmulticast mode
[  319.385653][T11555] bond0: entered allmulticast mode
[  319.390937][T11555] ÿ: entered allmulticast mode
[  319.396160][T11555] bond_slave_1: entered allmulticast mode
[  319.402048][T11555] dummy0: entered allmulticast mode
[  319.407541][T11555] team0: entered allmulticast mode
[  319.415486][T11555] team_slave_0: entered allmulticast mode
[  319.421312][T11555] team_slave_1: entered allmulticast mode
[  319.427219][T11557] IPVS: using max 26 ests per chain, 62400 per kthread
[  319.441184][T11555] nlmon0: entered allmulticast mode
[  319.446795][T11555] caif0: entered allmulticast mode
[  319.452158][T11555] batadv0: entered allmulticast mode
[  319.458428][T11555] vxcan0: entered allmulticast mode
[  319.464039][T11555] vxcan1: entered allmulticast mode
[  319.494854][T11555] veth0: entered allmulticast mode
[  319.507252][T11555] veth1: entered allmulticast mode
[  319.519685][T11555] wg0: entered allmulticast mode
[  319.583336][T11555] wg1: entered allmulticast mode
[  319.588618][T11555] wg2: entered allmulticast mode
[  319.594947][T11564] __nla_validate_parse: 15 callbacks suppressed
[  319.594963][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'.
[  319.603310][T11555] veth0_to_bridge: entered allmulticast mode
[  319.647038][T11555] bridge_slave_0: entered allmulticast mode
[  319.667300][T11555] veth1_to_bridge: entered allmulticast mode
[  319.693885][T11555] bridge_slave_1: entered allmulticast mode
[  319.710382][T11555] veth0_to_bond: entered allmulticast mode
[  319.730830][T11555] veth1_to_bond: entered allmulticast mode
[  319.747325][T11555] veth0_to_team: entered allmulticast mode
[  319.764060][T11555] veth1_to_team: entered allmulticast mode
[  319.770200][T11555] veth0_to_batadv: entered allmulticast mode
[  319.807028][T11555] batadv_slave_0: entered allmulticast mode
[  319.827236][T11555] veth1_to_batadv: entered allmulticast mode
[  319.843161][T11555] batadv_slave_1: entered allmulticast mode
[  319.859526][T11555] xfrm0: entered allmulticast mode
[  319.865176][T11555] veth0_to_hsr: entered allmulticast mode
[  319.871183][T11555] hsr_slave_0: entered allmulticast mode
[  319.877266][T11555] veth1_to_hsr: entered allmulticast mode
[  319.883428][T11555] hsr_slave_1: entered allmulticast mode
[  319.889342][T11555] hsr0: entered allmulticast mode
[  319.894727][T11555] veth1_virt_wifi: entered allmulticast mode
[  319.900955][T11555] veth0_virt_wifi: entered allmulticast mode
[  319.907262][T11555] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  319.915055][T11555] veth1_macvtap: entered allmulticast mode
[  319.921257][T11555] veth0_macvtap: entered allmulticast mode
[  319.927568][T11555] macvtap0: entered allmulticast mode
[  319.933514][T11555] macsec0: entered allmulticast mode
[  319.939179][T11555] geneve0: entered allmulticast mode
[  319.948082][T11555] geneve1: entered allmulticast mode
[  319.953903][T11555] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  319.961308][T11555] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  319.968931][T11555] hsr1: entered allmulticast mode
[  319.975253][T11555] bridge0: entered allmulticast mode
[  319.981764][T11555] vxlan0: entered allmulticast mode
[  319.987400][T11555] vxlan1: entered allmulticast mode
[  320.000467][T11555] gre1: entered allmulticast mode
[  320.005929][T11555] syztnl1: entered allmulticast mode
[  320.011549][T11555] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode
[  320.019558][T11555] _ÐZ`Ô€@: entered allmulticast mode
[  320.025344][T11555] ip6erspan0: left promiscuous mode
[  320.030621][T11555] ip6erspan0: entered allmulticast mode
[  320.037604][T11555] bridge1: entered allmulticast mode
[  320.046880][T11555] erspan1: entered allmulticast mode
[  320.052337][T11555] mac80211_hwsim hwsim5 nicvf0: entered allmulticast mode
[  320.061247][T11555] bond1: entered allmulticast mode
[  320.069753][T11568] netlink: 'syz.2.1433': attribute type 1 has an invalid length.
[  320.072659][T11555] netdevsim netdevsim0 eth0: entered allmulticast mode
[  320.077779][T11568] netlink: 'syz.2.1433': attribute type 2 has an invalid length.
[  320.093046][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  320.100388][T11555] netdevsim netdevsim0 eth1: entered allmulticast mode
[  320.108795][T11555] netdevsim netdevsim0 eth2: entered allmulticast mode
[  320.117353][T11555] netdevsim netdevsim0 eth3: entered allmulticast mode
[  320.125233][T11555] sit2: entered allmulticast mode
[  320.132646][T11555] bridge2: entered allmulticast mode
[  320.146303][T11555] wireguard0: left promiscuous mode
[  320.154322][T11555] gretap1: left promiscuous mode
[  320.159437][T11555] gretap1: entered allmulticast mode
[  320.169845][T11555] syztnl2: entered allmulticast mode
[  320.401827][T11575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.437869][T11577] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1437'.
[  320.469061][T11575] syzkaller0: entered promiscuous mode
[  320.481455][T11575] syzkaller0: entered allmulticast mode
[  320.560490][T11583] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1440'.
[  320.591702][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1434'.
[  320.628419][T11575] tipc: Resetting bearer <eth:syzkaller0>
[  320.650569][T11572] tipc: Resetting bearer <eth:syzkaller0>
[  320.696894][T11590] nbd: nbd1 already in use
[  320.706979][T11572] tipc: Disabling bearer <eth:syzkaller0>
[  320.723691][T11590] block nbd1: NBD_DISCONNECT
[  320.728536][T11590] block nbd1: Send disconnect failed -32
[  320.742849][T11590] block nbd1: shutting down sockets
[  320.773487][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'.
[  320.829348][T11600] netlink: 'syz.4.1445': attribute type 30 has an invalid length.
[  321.131047][T11616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1449'.
[  321.140387][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  321.153568][T11616] netlink: 'syz.0.1449': attribute type 3 has an invalid length.
[  321.174624][T11617] lo speed is unknown, defaulting to 1000
[  321.295737][T11624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.348843][T11624] syzkaller0: entered promiscuous mode
[  321.354380][T11624] syzkaller0: entered allmulticast mode
[  321.392267][T11623] tipc: Resetting bearer <eth:syzkaller0>
[  321.837518][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'.
[  322.183043][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  322.940251][T11623] tipc: Disabling bearer <eth:syzkaller0>
[  322.971492][T11637] pim6reg: entered allmulticast mode
[  322.977925][T11638] pim6reg: left allmulticast mode
[  323.033360][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'.
[  323.051337][T11643] netlink: 'syz.0.1456': attribute type 1 has an invalid length.
[  323.122611][T11643] 8021q: adding VLAN 0 to HW filter on device bond2
[  323.208622][T11648] 8021q: adding VLAN 0 to HW filter on device bond2
[  323.215538][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  323.229331][T11648] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  323.247815][T11648] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  323.295158][T11643] bond2: (slave bridge3): Enslaving as an active interface with a down link
[  323.305314][T11652] veth0_to_bond: entered allmulticast mode
[  323.411846][T11659] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1460'.
[  323.474682][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'.
[  323.681820][T11676] netlink: 'syz.0.1465': attribute type 30 has an invalid length.
[  324.086158][T11695] netlink: 'syz.2.1468': attribute type 1 has an invalid length.
[  324.253121][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  324.364417][T11710] lo speed is unknown, defaulting to 1000
[  324.441914][T11718] team1: entered promiscuous mode
[  324.450170][T11718] team1: entered allmulticast mode
[  324.786052][T11749] __nla_validate_parse: 2 callbacks suppressed
[  324.786072][T11749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1482'.
[  325.046733][T11761] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1487'.
[  325.113759][T11765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1486'.
[  325.272128][T11761] nbd2: detected capacity change from 0 to 63
[  325.289411][T11767] block nbd2: NBD_DISCONNECT
[  325.294148][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  325.302454][T11767] block nbd2: Disconnected due to user request.
[  325.314857][T11767] block nbd2: shutting down sockets
[  325.858732][T11793] netlink: 'syz.2.1492': attribute type 1 has an invalid length.
[  325.883466][T11793] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1492'.
[  325.898384][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'.
[  325.914601][T11793] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1492'.
[  326.078663][   T49] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  326.091522][T11765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1486'.
[  326.280449][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'.
[  326.333150][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  326.430016][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1496'.
[  326.767430][T11835] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1502'.
[  326.938670][T11822] lo speed is unknown, defaulting to 1000
[  327.023400][T11835] nbd0: detected capacity change from 0 to 63
[  327.041310][T11838] block nbd0: NBD_DISCONNECT
[  327.057051][T11838] block nbd0: Disconnected due to user request.
[  327.072857][T11838] block nbd0: shutting down sockets
[  327.164283][T11845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.206741][T11845] syzkaller0: entered promiscuous mode
[  327.212246][T11845] syzkaller0: entered allmulticast mode
[  327.320934][T11845] tipc: Resetting bearer <eth:syzkaller0>
[  327.361242][T11845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.383823][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  327.493177][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.540359][T11862] tipc: Resetting bearer <eth:syzkaller0>
[  327.559981][T11862] tipc: Disabling bearer <eth:syzkaller0>
[  328.084325][T11890] nbd1: detected capacity change from 0 to 63
[  328.113554][T11892] block nbd1: NBD_DISCONNECT
[  328.120422][T11892] block nbd1: Disconnected due to user request.
[  328.133064][T11892] block nbd1: shutting down sockets
[  328.263948][T11898] netlink: 'syz.4.1520': attribute type 10 has an invalid length.
[  328.292541][T11898] bond0: (slave wlan1): Opening slave failed
[  328.413054][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  328.468083][T11909] : entered promiscuous mode
[  329.453134][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  329.719721][T11963] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  329.809520][T11945] : (slave netdevsim0): Releasing backup interface
[  329.932390][T11969] syzkaller1: entered promiscuous mode
[  329.950322][T11969] syzkaller1: entered allmulticast mode
[  330.438002][T11978] syzkaller1: entered promiscuous mode
[  330.449630][T11978] syzkaller1: entered allmulticast mode
[  330.493113][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  330.727157][T12001] __nla_validate_parse: 9 callbacks suppressed
[  330.727178][T12001] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1554'.
[  330.820838][T11999] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  330.967845][T12011] netlink: 'syz.4.1558': attribute type 11 has an invalid length.
[  330.977593][T11999] bond3: entered promiscuous mode
[  330.982789][T11999] bond3: entered allmulticast mode
[  330.988547][T11999] 8021q: adding VLAN 0 to HW filter on device bond3
[  331.024836][T12007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.033821][T12007] syzkaller0: entered allmulticast mode
[  331.076365][T12009] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1557'.
[  331.176817][T12007] tipc: Resetting bearer <eth:syzkaller0>
[  331.232809][T12006] tipc: Disabling bearer <eth:syzkaller0>
[  331.264101][T12021] netlink: 'syz.0.1562': attribute type 30 has an invalid length.
[  331.273540][T12019] tun0: tun_chr_ioctl cmd 1074025675
[  331.282192][T12019] tun0: persist enabled
[  331.291215][T12019] tun0: tun_chr_ioctl cmd 1074025675
[  331.297535][T12019] tun0: persist enabled
[  331.533156][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  331.794479][T12087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1569'.
[  331.819476][T12087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1569'.
[  331.934695][T12096] IPVS: Error connecting to the multicast addr
[  332.063935][T12106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1577'.
[  332.066470][T12111] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1578'.
[  332.173480][T12111] nbd1: detected capacity change from 0 to 63
[  332.180835][T12115] block nbd1: NBD_DISCONNECT
[  332.185836][T12115] block nbd1: Disconnected due to user request.
[  332.192321][T12115] block nbd1: shutting down sockets
[  332.502188][T12133] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  332.502416][T12127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  332.578994][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  332.926997][T12158] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1590'.
[  332.951458][T12162] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1591'.
[  332.966924][T12158] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1590'.
[  333.055064][T12162] nbd4: detected capacity change from 0 to 63
[  333.079177][T12171] wlan1: mtu less than device minimum
[  333.084738][T12168] block nbd4: NBD_DISCONNECT
[  333.090554][T12168] block nbd4: Disconnected due to user request.
[  333.107209][T12168] block nbd4: shutting down sockets
[  333.233011][T12176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.310650][T12179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.318397][T12181] syzkaller0: entered promiscuous mode
[  333.325384][T12181] syzkaller0: entered allmulticast mode
[  333.373873][T12185] tipc: Resetting bearer <eth:syzkaller0>
[  333.439510][T12185] tipc: Disabling bearer <eth:syzkaller0>
[  333.568731][T12205] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1596'.
[  333.613324][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  333.626740][T12207] lo speed is unknown, defaulting to 1000
[  333.721390][T12215] netlink: 'syz.4.1604': attribute type 2 has an invalid length.
[  334.185751][T12230] dvmrp8: entered allmulticast mode
[  334.653070][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  334.732469][T12245] netlink: 'syz.4.1611': attribute type 6 has an invalid length.
[  334.762434][T12245] netlink: 'syz.4.1611': attribute type 7 has an invalid length.
[  334.783915][T12245] netlink: 'syz.4.1611': attribute type 8 has an invalid length.
[  334.960665][T12254] pim6reg1: entered promiscuous mode
[  334.966697][T12254] pim6reg1: entered allmulticast mode
[  335.428346][T12264] lo speed is unknown, defaulting to 1000
[  335.693017][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  335.708148][T12270] block nbd0: not configured, cannot reconfigure
[  335.795942][T12274] __nla_validate_parse: 7 callbacks suppressed
[  335.795961][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'.
[  335.831219][T12275] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1620'.
[  336.090491][T12285] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1622'.
[  336.152452][T12264] IPVS: Error connecting to the multicast addr
[  336.288316][T12297] netlink: 'syz.4.1626': attribute type 39 has an invalid length.
[  336.352294][T12302] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1626'.
[  336.522916][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1630'.
[  336.701823][T12322] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1630'.
[  336.733091][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  336.745390][T12310] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1630'.
[  336.776776][   T30] audit: type=1804 audit(1757644213.665:5): pid=12324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1632" name="/newroot/318/cgroup.controllers" dev="tmpfs" ino=1646 res=1 errno=0
[  336.826096][   T30] audit: type=1800 audit(1757644213.665:6): pid=12324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1632" name="cgroup.controllers" dev="tmpfs" ino=1646 res=0 errno=0
[  336.901211][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1633'.
[  337.268501][T12306] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  337.423516][T12352] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20004
[  337.448191][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1635'.
[  337.504540][T12343] geneve1: left allmulticast mode
[  337.529165][T12343] geneve2: left promiscuous mode
[  337.538274][T12343] geneve2: left allmulticast mode
[  337.547787][T12343] gretap1: left promiscuous mode
[  337.559792][T12343] geneve3: left promiscuous mode
[  337.565050][T12343] geneve3: left allmulticast mode
[  337.578943][T12343] bond0: left promiscuous mode
[  337.619664][T12343] macvlan2: left promiscuous mode
[  337.697988][T12343] veth0_macvtap: left allmulticast mode
[  337.719141][T12343] macvtap1: left allmulticast mode
[  337.728298][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'.
[  337.742819][T12343] ipvlan4: left allmulticast mode
[  337.755755][T12370] netlink: 'syz.3.1644': attribute type 1 has an invalid length.
[  337.757074][T12343] bond3: left allmulticast mode
[  337.783033][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  337.792547][T12353] hsr_slave_0: left promiscuous mode
[  337.822915][T12353] hsr_slave_1: left promiscuous mode
[  337.951176][T12074] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.015091][T12371] tun0: tun_chr_ioctl cmd 2148045848
[  338.023615][T12374] tun0: tun_chr_ioctl cmd 21731
[  338.058044][T12074] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.073343][T12074] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.092202][T12074] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  338.561898][T12399] lo speed is unknown, defaulting to 1000
[  338.813130][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  339.200019][T12411] syzkaller0: entered promiscuous mode
[  339.260852][T12411] syzkaller0: entered allmulticast mode
[  339.546286][T12411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.610184][T12410] tipc: Resetting bearer <eth:syzkaller0>
[  339.853179][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  340.903039][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  341.361624][T12410] tipc: Disabling bearer <eth:syzkaller0>
[  341.370979][T12428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.490651][T12428] tipc: Disabling bearer <eth:syzkaller0>
[  341.498857][T12471] __nla_validate_parse: 8 callbacks suppressed
[  341.498875][T12471] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1665'.
[  341.519983][T12472] netlink: 'syz.1.1666': attribute type 1 has an invalid length.
[  341.596819][T12472] 8021q: adding VLAN 0 to HW filter on device bond4
[  341.611794][T12472] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  341.653521][T12471] nbd2: detected capacity change from 0 to 63
[  341.707266][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'.
[  341.707619][T12474] netlink: 'syz.4.1667': attribute type 1 has an invalid length.
[  341.716435][T12472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1666'.
[  341.724445][T12474] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1667'.
[  341.747312][ T5183] block nbd2: Receive control failed (result -32)
[  341.761589][T12472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1666'.
[  341.933009][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  341.986648][T12492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.016956][T12492] netlink: 'syz.2.1671': attribute type 1 has an invalid length.
[  342.386980][T12522] batadv_slave_0: entered promiscuous mode
[  342.433932][T12527] sctp: [Deprecated]: syz.1.1682 (pid 12527) Use of struct sctp_assoc_value in delayed_ack socket option.
[  342.433932][T12527] Use struct sctp_sack_info instead
[  342.460847][T12527] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1682'.
[  342.835706][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'.
[  342.973217][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  343.131907][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'.
[  343.240605][T12575] lo speed is unknown, defaulting to 1000
[  343.550142][T12578] lo speed is unknown, defaulting to 1000
[  343.725033][T12588] lo speed is unknown, defaulting to 1000
[  344.013053][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  344.194623][T12603] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  344.367859][T12595] lo speed is unknown, defaulting to 1000
[  344.450712][T12594] lo speed is unknown, defaulting to 1000
[  344.905655][T12616] netlink: 'syz.4.1705': attribute type 1 has an invalid length.
[  345.014313][T12616] bond4: entered promiscuous mode
[  345.043508][T12616] bond4: entered allmulticast mode
[  345.051651][T12616] 8021q: adding VLAN 0 to HW filter on device bond4
[  345.063006][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  345.156952][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'.
[  345.165953][T12616] 8021q: adding VLAN 0 to HW filter on device bond5
[  345.167586][T12616] bond5: entered promiscuous mode
[  345.178409][T12616] bond5: entered allmulticast mode
[  345.184389][T12616] bond4: (slave bond5): Enslaving as a backup interface with a down link
[  345.345861][T12639] netlink: 'syz.0.1713': attribute type 4 has an invalid length.
[  345.380361][T12639] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1713'.
[  345.395755][T12639] block nbd0: not configured, cannot reconfigure
[  345.491966][T12650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.555776][T12654] C: renamed from lo
[  345.569983][T12654] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  346.033968][T12684] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  346.056072][T12685] vlan0: entered promiscuous mode
[  346.062464][T12685] vlan0: entered allmulticast mode
[  346.080677][T12682] lo speed is unknown, defaulting to 1000
[  346.093205][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  346.440192][T12692] bond0: (slave gretap0): Opening slave failed
[  346.666888][T12710] __nla_validate_parse: 6 callbacks suppressed
[  346.666906][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'.
[  346.705278][T12710] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1736'.
[  346.866571][T12718] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1738'.
[  346.883187][T12718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1738'.
[  346.984150][T12713] lo speed is unknown, defaulting to 1000
[  346.997206][T12722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1739'.
[  347.107283][T12724] vxcan0: entered promiscuous mode
[  347.132023][T12729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1739'.
[  347.141244][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  347.304589][T12729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1739'.
[  347.320498][T12729] geneve2: entered promiscuous mode
[  347.332085][T12729] geneve2: entered allmulticast mode
[  347.468824][T12744] netlink: 'syz.2.1744': attribute type 1 has an invalid length.
[  347.490767][T12744] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1744'.
[  347.515614][T12743] netlink: 'syz.2.1744': attribute type 32 has an invalid length.
[  347.528774][T12743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1744'.
[  347.951563][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1751'.
[  348.173025][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  348.403649][T12798] netlink: 'syz.1.1757': attribute type 1 has an invalid length.
[  348.424687][T12799] netlink: 'syz.1.1757': attribute type 1 has an invalid length.
[  348.446909][T12798] netlink: 'syz.1.1757': attribute type 2 has an invalid length.
[  348.448136][T12799] netlink: 'syz.1.1757': attribute type 2 has an invalid length.
[  348.587741][T12811] netlink: 'syz.3.1759': attribute type 10 has an invalid length.
[  348.599210][T12811] bridge0: port 1(team0) entered blocking state
[  348.608859][T12811] bridge0: port 1(team0) entered disabled state
[  348.632532][T12811] team0: entered allmulticast mode
[  348.730514][T12824] netlink: 'syz.1.1761': attribute type 30 has an invalid length.
[  349.213039][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  349.593233][T12857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.885615][T12864] : renamed from veth0_to_bond
[  350.253100][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  350.467350][T12883] lo speed is unknown, defaulting to 1000
[  350.987376][T12906] netlink: 'syz.2.1783': attribute type 13 has an invalid length.
[  351.134533][T12906] lo speed is unknown, defaulting to 1000
[  351.227826][T12914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.293072][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  351.339173][T12924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.138971][T12946] netlink: 'syz.0.1792': attribute type 2 has an invalid length.
[  352.333016][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  352.671778][T12958] __nla_validate_parse: 14 callbacks suppressed
[  352.671795][T12958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1795'.
[  352.756628][T12961] veth0_to_bond: left allmulticast mode
[  352.779891][T12958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1795'.
[  352.809880][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1795'.
[  353.140334][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'.
[  353.197408][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'.
[  353.201993][T12982] _ÐZ`Ô€@S!: entered promiscuous mode
[  353.256118][T12974] lo speed is unknown, defaulting to 1000
[  353.313616][T12983] lo speed is unknown, defaulting to 1000
[  353.373016][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  353.503355][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'.
[  353.532821][T12993] batman_adv: batadv0: Removing interface: virt_wifi0
[  353.551637][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'.
[  353.607014][T12996] netlink: 'syz.4.1807': attribute type 10 has an invalid length.
[  353.608579][T12993] bond1: (slave wlan0): Releasing active interface
[  353.615484][T12996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1807'.
[  353.632822][T12997] netlink: 'syz.2.1806': attribute type 1 has an invalid length.
[  353.655421][T12997] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1806'.
[  353.688405][T12993] bond2: (slave geneve4): Releasing active interface
[  353.699391][T12997] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR
[  353.717807][T12993] bond4: (slave bond5): Releasing backup interface
[  353.749579][T12993] bond5: left promiscuous mode
[  353.760630][T12993] bond5: left allmulticast mode
[  353.860683][T12996] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  353.902188][T13018] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  354.087490][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1814'.
[  354.091891][T13027] netlink: 'syz.4.1813': attribute type 1 has an invalid length.
[  354.149849][T13027] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[  354.160183][T13027] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  354.175277][T13027] bond6: (slave vcan1): making interface the new active one
[  354.184886][T13027] bond6: (slave vcan1): Enslaving as an active interface with an up link
[  354.231820][T13027] 8021q: adding VLAN 0 to HW filter on device bond6
[  354.263319][T13031] lo speed is unknown, defaulting to 1000
[  354.329728][T13029] lo speed is unknown, defaulting to 1000
[  354.413011][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  355.106651][T13058] lo speed is unknown, defaulting to 1000
[  355.453088][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  355.687990][T13083] netlink: 'syz.1.1829': attribute type 1 has an invalid length.
[  355.712611][T13083] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  356.367759][T13132] netlink: 'syz.0.1838': attribute type 10 has an invalid length.
[  356.368791][T13128] Bluetooth: MGMT ver 1.23
[  356.387410][T13131] netlink: 'syz.3.1841': attribute type 30 has an invalid length.
[  356.493009][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  356.737995][T13156] bridge0: port 1(syz_tun) entered blocking state
[  356.752751][T13156] bridge0: port 1(syz_tun) entered disabled state
[  356.765419][T13156] syz_tun: entered promiscuous mode
[  356.879469][T13154] lo speed is unknown, defaulting to 1000
[  356.959440][T13169] syzkaller1: entered promiscuous mode
[  356.965624][T13169] syzkaller1: entered allmulticast mode
[  357.191799][T13184] pim6reg: entered allmulticast mode
[  357.208462][T13187] netlink: 'syz.4.1857': attribute type 1 has an invalid length.
[  357.349092][T13187] 8021q: adding VLAN 0 to HW filter on device bond7
[  357.451296][T13187] ipvlan2: entered allmulticast mode
[  357.483266][T13187] bond7: entered allmulticast mode
[  357.533006][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  357.544607][T13181] lo speed is unknown, defaulting to 1000
[  357.817522][T13209] __nla_validate_parse: 8 callbacks suppressed
[  357.817542][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'.
[  357.858754][T13209] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1861'.
[  357.930643][T13212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.999998][T13213] syzkaller0: entered promiscuous mode
[  358.029160][T13177] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1853'.
[  358.038617][T13213] syzkaller0: entered allmulticast mode
[  358.049261][T13177] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1853'.
[  358.159310][T13217] tipc: Resetting bearer <eth:syzkaller0>
[  358.170268][T13221] netlink: 'syz.4.1863': attribute type 1 has an invalid length.
[  358.185220][T13210] tipc: Resetting bearer <eth:syzkaller0>
[  358.231169][T13210] tipc: Disabling bearer <eth:syzkaller0>
[  358.490741][T13221] bond8: entered promiscuous mode
[  358.497292][T13221] bond8: entered allmulticast mode
[  358.502820][T13221] 8021q: adding VLAN 0 to HW filter on device bond8
[  358.511475][T13221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1863'.
[  358.573133][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  358.643381][T13234] rdma_rxe: rxe_newlink: failed to add dummy0
[  358.655193][T13234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1865'.
[  358.732832][T13228] bridge4: entered promiscuous mode
[  358.766516][T13228] bridge4: entered allmulticast mode
[  358.786219][T13228] bond8: (slave bridge4): Enslaving as a backup interface with an up link
[  358.800026][T13230] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  358.826581][T12063] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  359.028305][T13247] netlink: 'syz.1.1868': attribute type 1 has an invalid length.
[  359.040967][T13247] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  359.083331][T13247] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1868'.
[  359.138287][T13251] netlink: 'syz.0.1870': attribute type 1 has an invalid length.
[  359.156474][T13251] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1870'.
[  359.186142][T13251] NCSI netlink: No device for ifindex 813332851
[  359.222161][T13255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1871'.
[  359.367604][T13263] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1871'.
[  359.546103][T13271] netlink: 'syz.0.1874': attribute type 1 has an invalid length.
[  359.613207][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  359.666579][T13272] nbd4: detected capacity change from 0 to 63
[  359.679782][ T5183] block nbd4: Receive control failed (result -32)
[  359.899428][T13291] openvswitch: netlink: Flow key attr not present in new flow.
[  360.154173][T13309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.161704][T13309] syzkaller0: entered promiscuous mode
[  360.167813][T13309] syzkaller0: entered allmulticast mode
[  360.217293][T13307] tipc: Resetting bearer <eth:syzkaller0>
[  360.308909][T13307] tipc: Disabling bearer <eth:syzkaller0>
[  360.653257][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  360.664241][T13344] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  361.189700][T13364] batadv2: entered promiscuous mode
[  361.225271][T13364] batadv2: entered allmulticast mode
[  361.384954][T13373] lo speed is unknown, defaulting to 1000
[  361.487254][T13376] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.506563][T13376] 8021q: adding VLAN 0 to HW filter on device team0
[  361.524979][T13376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  361.580515][T13382] netlink: 'syz.2.1903': attribute type 2 has an invalid length.
[  361.618397][T13382] netlink: 'syz.2.1903': attribute type 2 has an invalid length.
[  361.630372][T13379] nbd: nbd3 already in use
[  361.693010][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  361.946480][T13404] bond1: (slave bridge0): Releasing backup interface
[  361.990842][T13410] can: request_module (can-proto-0) failed.
[  362.028339][T13403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.232457][T13424] vlan0: entered promiscuous mode
[  362.242271][T13424] bond0: entered promiscuous mode
[  362.251342][T13424] vlan0: entered allmulticast mode
[  362.260708][T13424] bond0: entered allmulticast mode
[  362.382538][T13432] netlink: 'syz.0.1915': attribute type 2 has an invalid length.
[  362.417388][T13432] k›*·]‘: entered promiscuous mode
[  362.466307][T13432] veth0_to_team: entered promiscuous mode
[  362.637199][T13445] netlink: 'syz.2.1919': attribute type 15 has an invalid length.
[  362.733175][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  362.999529][T13466] __nla_validate_parse: 12 callbacks suppressed
[  362.999549][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'.
[  363.045130][T13467] netlink: 'syz.3.1926': attribute type 30 has an invalid length.
[  363.143300][T12524] tipc: Node number set to 3864070226
[  363.318989][T13490] netlink: 'syz.4.1931': attribute type 83 has an invalid length.
[  363.439983][T13490] lo speed is unknown, defaulting to 1000
[  363.668707][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1936'.
[  363.773117][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  363.891726][T13513] ªªªªª»: renamed from bond_slave_1
[  364.206562][T13529] netlink: 'syz.3.1945': attribute type 30 has an invalid length.
[  364.620292][T13543] netlink: 'syz.2.1950': attribute type 1 has an invalid length.
[  364.676364][T13543] 8021q: adding VLAN 0 to HW filter on device bond4
[  364.740756][T12063] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  364.779821][T13543] bond4: entered promiscuous mode
[  364.808128][T12063] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  364.817191][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  364.862103][T12063] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  364.939938][T12063] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  364.970097][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'.
[  364.993333][T13573] netlink: 'syz.2.1957': attribute type 11 has an invalid length.
[  365.014764][T13573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1957'.
[  365.236497][T13584] netlink: 'syz.3.1962': attribute type 30 has an invalid length.
[  365.528282][T13576] mpoa:mpoad_close: (<unknown>) going down
[  365.853123][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  366.893084][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  367.933060][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  368.973057][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  370.013072][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  371.053085][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  372.093066][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  373.133074][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  374.173190][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  375.213077][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  376.253319][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  377.293355][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  378.333063][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  378.575671][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  379.373060][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  380.413088][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  381.453077][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  382.493046][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  383.533062][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  384.573100][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  385.613075][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  386.653126][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  387.693057][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  388.733047][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  389.773071][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  390.813055][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  391.853091][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  392.893040][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  393.933299][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  394.973058][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  395.055120][    C0] ==================================================================
[  395.063204][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  395.071261][    C0] Write of size 8 at addr ffff88806d8deab0 by task swapper/0/0
[  395.078773][    C0] 
[  395.081103][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  395.081116][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  395.081125][    C0] Call Trace:
[  395.081132][    C0]  <IRQ>
[  395.081139][    C0]  dump_stack_lvl+0x189/0x250
[  395.081152][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  395.081165][    C0]  ? rcu_is_watching+0x15/0xb0
[  395.081176][    C0]  ? __kasan_check_byte+0x12/0x40
[  395.081189][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  395.081200][    C0]  ? rcu_is_watching+0x15/0xb0
[  395.081209][    C0]  ? lock_release+0x4b/0x3e0
[  395.081235][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  395.081247][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  395.081259][    C0]  print_report+0xca/0x240
[  395.081269][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  395.081279][    C0]  kasan_report+0x118/0x150
[  395.081292][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  395.081304][    C0]  __xfrm_state_delete+0x696/0xca0
[  395.081318][    C0]  xfrm_timer_handler+0x18f/0xa00
[  395.081330][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  395.081340][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  395.081350][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  395.081361][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  395.081370][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  395.081384][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  395.081394][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  395.081404][    C0]  __hrtimer_run_queues+0x529/0xc60
[  395.081418][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  395.081427][    C0]  ? read_tsc+0x9/0x20
[  395.081440][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  395.081452][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  395.081463][    C0]  handle_softirqs+0x283/0x870
[  395.081473][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  395.081483][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  395.081498][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  395.081510][    C0]  __irq_exit_rcu+0xca/0x1f0
[  395.081520][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  395.081531][    C0]  irq_exit_rcu+0x9/0x30
[  395.081539][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  395.081550][    C0]  </IRQ>
[  395.081553][    C0]  <TASK>
[  395.081557][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  395.081570][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  395.081582][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 97 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  395.081591][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  395.081601][    C0] RAX: 45c8bccec4064b00 RBX: ffffffff819683f8 RCX: 45c8bccec4064b00
[  395.081608][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b9a1a RDI: ffffffff8be33880
[  395.081615][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  395.081623][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38f30
[  395.081630][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  395.081638][    C0]  ? do_idle+0x1e8/0x510
[  395.081649][    C0]  default_idle+0x13/0x20
[  395.081660][    C0]  default_idle_call+0x74/0xb0
[  395.081671][    C0]  do_idle+0x1e8/0x510
[  395.081681][    C0]  ? __pfx_do_idle+0x10/0x10
[  395.081694][    C0]  cpu_startup_entry+0x44/0x60
[  395.081702][    C0]  rest_init+0x2de/0x300
[  395.081715][    C0]  start_kernel+0x3a9/0x410
[  395.081728][    C0]  x86_64_start_reservations+0x24/0x30
[  395.081742][    C0]  x86_64_start_kernel+0x143/0x1c0
[  395.081754][    C0]  common_startup_64+0x13e/0x147
[  395.081771][    C0]  </TASK>
[  395.081775][    C0] 
[  395.423976][    C0] Allocated by task 13434:
[  395.428372][    C0]  kasan_save_track+0x3e/0x80
[  395.433040][    C0]  __kasan_slab_alloc+0x6c/0x80
[  395.437875][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  395.443330][    C0]  xfrm_state_alloc+0x24/0x2f0
[  395.448091][    C0]  __find_acq_core+0x8a7/0x1c00
[  395.452937][    C0]  xfrm_find_acq+0x78/0xa0
[  395.457353][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  395.462370][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  395.467293][    C0]  netlink_rcv_skb+0x205/0x470
[  395.472038][    C0]  xfrm_netlink_rcv+0x79/0x90
[  395.476698][    C0]  netlink_unicast+0x82f/0x9e0
[  395.481448][    C0]  netlink_sendmsg+0x805/0xb30
[  395.486191][    C0]  __sock_sendmsg+0x21c/0x270
[  395.490853][    C0]  ____sys_sendmsg+0x505/0x830
[  395.495596][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  395.500256][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  395.505181][    C0]  do_syscall_64+0xfa/0x3b0
[  395.509667][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.515542][    C0] 
[  395.517847][    C0] Freed by task 959:
[  395.521715][    C0]  kasan_save_track+0x3e/0x80
[  395.526376][    C0]  kasan_save_free_info+0x46/0x50
[  395.531381][    C0]  __kasan_slab_free+0x5b/0x80
[  395.536131][    C0]  kmem_cache_free+0x18f/0x400
[  395.540880][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  395.545890][    C0]  process_scheduled_works+0xae1/0x17b0
[  395.551416][    C0]  worker_thread+0x8a0/0xda0
[  395.555984][    C0]  kthread+0x70e/0x8a0
[  395.560034][    C0]  ret_from_fork+0x3fc/0x770
[  395.564601][    C0]  ret_from_fork_asm+0x1a/0x30
[  395.569363][    C0] 
[  395.571680][    C0] The buggy address belongs to the object at ffff88806d8dea80
[  395.571680][    C0]  which belongs to the cache xfrm_state of size 928
[  395.585636][    C0] The buggy address is located 48 bytes inside of
[  395.585636][    C0]  freed 928-byte region [ffff88806d8dea80, ffff88806d8dee20)
[  395.599336][    C0] 
[  395.601646][    C0] The buggy address belongs to the physical page:
[  395.608050][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806d8dd980 pfn:0x6d8dc
[  395.618103][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  395.626584][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  395.634115][    C0] page_type: f5(slab)
[  395.638081][    C0] raw: 00fff00000000040 ffff8880202b98c0 dead000000000122 0000000000000000
[  395.646647][    C0] raw: ffff88806d8dd980 00000000800f000b 00000000f5000000 0000000000000000
[  395.655215][    C0] head: 00fff00000000040 ffff8880202b98c0 dead000000000122 0000000000000000
[  395.663866][    C0] head: ffff88806d8dd980 00000000800f000b 00000000f5000000 0000000000000000
[  395.672517][    C0] head: 00fff00000000002 ffffea0001b63701 00000000ffffffff 00000000ffffffff
[  395.681167][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  395.689811][    C0] page dumped because: kasan: bad access detected
[  395.696230][    C0] page_owner tracks the page as allocated
[  395.701930][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8210, tgid 8208 (syz.4.534), ts 191898081993, free_ts 191884913173
[  395.721113][    C0]  post_alloc_hook+0x240/0x2a0
[  395.725885][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  395.731416][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  395.737205][    C0]  alloc_pages_mpol+0x232/0x4a0
[  395.742043][    C0]  allocate_slab+0x8a/0x370
[  395.746527][    C0]  ___slab_alloc+0xbeb/0x1420
[  395.751191][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  395.756635][    C0]  xfrm_state_alloc+0x24/0x2f0
[  395.761384][    C0]  xfrm_add_sa+0x17d1/0x4070
[  395.765960][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  395.770888][    C0]  netlink_rcv_skb+0x205/0x470
[  395.775635][    C0]  xfrm_netlink_rcv+0x79/0x90
[  395.780301][    C0]  netlink_unicast+0x82f/0x9e0
[  395.785056][    C0]  netlink_sendmsg+0x805/0xb30
[  395.789805][    C0]  __sock_sendmsg+0x21c/0x270
[  395.794468][    C0]  ____sys_sendmsg+0x505/0x830
[  395.799214][    C0] page last free pid 2940 tgid 2940 stack trace:
[  395.805520][    C0]  __free_frozen_pages+0xbc4/0xd30
[  395.810619][    C0]  free_large_kmalloc+0x13a/0x1f0
[  395.815631][    C0]  build_detached_freelist+0x22a/0x270
[  395.821079][    C0]  kmem_cache_free_bulk+0xbe/0x520
[  395.826187][    C0]  kvfree_rcu_bulk+0xe5/0x1f0
[  395.830846][    C0]  kfree_rcu_monitor+0x211/0x2a0
[  395.835773][    C0]  process_scheduled_works+0xae1/0x17b0
[  395.841302][    C0]  worker_thread+0x8a0/0xda0
[  395.845873][    C0]  kthread+0x70e/0x8a0
[  395.849929][    C0]  ret_from_fork+0x3fc/0x770
[  395.854503][    C0]  ret_from_fork_asm+0x1a/0x30
[  395.859255][    C0] 
[  395.861560][    C0] Memory state around the buggy address:
[  395.867169][    C0]  ffff88806d8de980: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[  395.875217][    C0]  ffff88806d8dea00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  395.883258][    C0] >ffff88806d8dea80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.891298][    C0]                                      ^
[  395.896908][    C0]  ffff88806d8deb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.904950][    C0]  ffff88806d8deb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  395.912987][    C0] ==================================================================
[  395.921206][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  395.928408][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  395.937344][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  395.947394][    C0] Call Trace:
[  395.950662][    C0]  <IRQ>
[  395.953512][    C0]  dump_stack_lvl+0x99/0x250
[  395.958107][    C0]  ? __asan_memcpy+0x40/0x70
[  395.962688][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  395.967879][    C0]  ? __pfx__printk+0x10/0x10
[  395.972467][    C0]  vpanic+0x281/0x750
[  395.976438][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  395.981622][    C0]  ? __pfx_vpanic+0x10/0x10
[  395.986112][    C0]  ? asm_common_interrupt+0x26/0x40
[  395.991297][    C0]  panic+0xb9/0xc0
[  395.995005][    C0]  ? __pfx_panic+0x10/0x10
[  395.999410][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  396.005288][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  396.011605][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  396.016875][    C0]  check_panic_on_warn+0x89/0xb0
[  396.021801][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  396.027071][    C0]  end_report+0x78/0x160
[  396.031312][    C0]  kasan_report+0x129/0x150
[  396.035831][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  396.041101][    C0]  __xfrm_state_delete+0x696/0xca0
[  396.046207][    C0]  xfrm_timer_handler+0x18f/0xa00
[  396.051219][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  396.056747][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  396.062625][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.067808][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  396.073686][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  396.079997][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  396.085528][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  396.091059][    C0]  __hrtimer_run_queues+0x529/0xc60
[  396.096251][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  396.101955][    C0]  ? read_tsc+0x9/0x20
[  396.106012][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  396.111804][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  396.116904][    C0]  handle_softirqs+0x283/0x870
[  396.121657][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  396.126405][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  396.131677][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  396.136865][    C0]  __irq_exit_rcu+0xca/0x1f0
[  396.141442][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  396.146628][    C0]  irq_exit_rcu+0x9/0x30
[  396.150854][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  396.156473][    C0]  </IRQ>
[  396.159388][    C0]  <TASK>
[  396.162308][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  396.168275][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  396.173992][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 97 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  396.193583][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  396.199637][    C0] RAX: 45c8bccec4064b00 RBX: ffffffff819683f8 RCX: 45c8bccec4064b00
[  396.207591][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b9a1a RDI: ffffffff8be33880
[  396.215547][    C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3
[  396.223504][    C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38f30
[  396.231461][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  396.239421][    C0]  ? do_idle+0x1e8/0x510
[  396.243656][    C0]  default_idle+0x13/0x20
[  396.247980][    C0]  default_idle_call+0x74/0xb0
[  396.252728][    C0]  do_idle+0x1e8/0x510
[  396.256781][    C0]  ? __pfx_do_idle+0x10/0x10
[  396.261364][    C0]  cpu_startup_entry+0x44/0x60
[  396.266110][    C0]  rest_init+0x2de/0x300
[  396.270348][    C0]  start_kernel+0x3a9/0x410
[  396.274838][    C0]  x86_64_start_reservations+0x24/0x30
[  396.280287][    C0]  x86_64_start_kernel+0x143/0x1c0
[  396.285389][    C0]  common_startup_64+0x13e/0x147
[  396.290321][    C0]  </TASK>
[  396.293598][    C0] Kernel Offset: disabled
[  396.297905][    C0] Rebooting in 86400 seconds..