last executing test programs:

1.027218448s ago: executing program 2 (id=4540):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'xfrm0\x00', @local})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x9, 0xa3}, 0x2)

955.99308ms ago: executing program 2 (id=4542):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x20000000)
r1 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8916, &(0x7f0000000000))

900.229222ms ago: executing program 2 (id=4545):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r0, 0x2a643000)
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000012005f3fbd7000000000000700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880)

899.011974ms ago: executing program 2 (id=4547):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x378, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000000000000000a50000000060a090466d2af051be42cafcb0000000000000000020000002401007274000014000280080001400000000e08000240000000240900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/120], 0x78}}, 0x0)
r2 = socket(0xa, 0x4, 0x3)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtaction={0x14, 0x31, 0x53b, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000b80), 0x1, 0x40440c0)
writev(r0, &(0x7f0000000640)=[{&(0x7f0000000280)="2295a38e156d738bc80c80de97636f98d4b7c0b51a7f4cc26b4cbc710292390f90e7fa2f9ff1bfb5a47f9d473bd3bccb53c34cd1d3dc623b8fafdbf2169e528345190a1fb301b67b223e9e82e0d683b97f325a94d19e077e9302530d9b339cd9b6ace29be5ebf583ebc4966b8cd2f6beded72d4595e80da5aec22c719df5c842d4", 0x81}, {&(0x7f0000000400)="7546d86427a888edd4edca550484474c713ee9077714a1328dbb303bce1e4c0716ff77ed7402b823bcfe89c1bccde5798d1c44f6c846307152115ce544941af3e2316085c82ad355945c189a6b0719fdfafa900d7a1249e48e905672fce545aeff9131b9eb6a3bd8414074c1667cef60b77e694c46550d00d44f3ce67fb9a0c63976a2b6014256d7aff7e53a594673dfe124864b797fab9c7a4dd3e423e22dba44", 0xa1}, {&(0x7f0000000200)="2d712a6922e65a3485b6202458bf7d9eff20de815399cd7977026ab59e699259ca05", 0x22}, {&(0x7f00000004c0)="4e805bc5c6810bfdd88c0ece01117eabf7bffa2951b2b35aaaaf299d90ee36a1b8df38fca406dc77c67c23b1c651fc92524ea939344f5bedd23bd4f726e0e9aa720d12c330e5d06b9ebf666496e1189b56a351cb21da42e43139a83a14b37ace4d524f9d202431d0889ba881b88cf25e981bc9bde12ca24f422bda274e5d4d2843a87dc8aa034941843fa20f7e6dc0ed752a446afeb5dd8bb75e83f7b175e86ab2bbdcd4031f1807634d14c94235b3b60124a475bc86bde4e79bb9e94a", 0xbd}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000000580)="3fa0098298c98e3713b10eeb046ef72ff5ae50b338089cdb785019949d30d90eda3b92dfbd9fb5b34ebe227ea42d2adff846d1c403ce40f7e38aa5ec45269d5b08df658471f3464550d58921dc2c193a5cee9d031c4f8de60ff0daa8d4276d3f8e09f3d542a041bdba81c1419c2095af55d976055583e00df49e0e3317e0d348491a563db4664d94ac5d2c8caf248297e01f", 0x92}, {&(0x7f0000001f40)="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", 0x1000}], 0x7)
r4 = accept4(r0, &(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000380)=0x80, 0x0)
sendmsg$unix(r4, &(0x7f0000000a40)={&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000007c0)="5e12ce5088af1a05a8b0ca4edd40c145fea79bb20345f164d1d0e559280613b17fced80d7515bbd3159f279c18dd31dade3c324465c032fee023d2e2cfcbd2243611c611b5858eebce4732248b21e67969eda8affa7bf7888ef597a97dc92b6ed07c12174ca920ae940199e598913262bd6b184ae07e9bfa72ff68efd805201f0508e09f63a65dcbf43556d51a7d26f6c4b78a3cb6ba8650dc66bf81ada4490e648a576fb8c4fb899ef3daf31866e00234661c7eb7a043ae39a4e043742d0ea84d0b9a3e7c0cda02683b9ba543586b482108bd9970bd47392b6809961e5542a376f5ade4537d1bd457730cc1bb09cfacf858e64bea", 0xf5}, {&(0x7f00000008c0)="6d6e3122e676722b1db305447bd898ef36fd89d5b5c416a6e662b8ab79754facd50dc30b9353c7e3d9a2d86bd8c57681b566897d9373de746392bff46c8b2e44b65b9275c7615bc9c4079438b833d6ca12dcbd4b42191086be430001aaea705216945a689ddda5fb58f4670b93d1b0ba40b1f87b28516a30", 0x78}, {&(0x7f0000000940)="2f438d4974368c8c82dc1f7407e70e80342b8c31644bc21d3ec91b0adb6bc2a77d7ea63452c72a4d76932447c03faaa5787563de9ad905b9802b58be843342d1f0aab79308cded1674e9826f44b33b3206fd3d351b1a204baf3b", 0x5a}], 0x3, &(0x7f0000000a00), 0x0, 0x4000}, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000a00)={'team0\x00', <r6=>0x0})
setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000b00)={@private=0xa010101, @empty, r6}, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32000000001400058008000240000000ce07"], 0xa0}}, 0x14b6deac033214c2)
bind$unix(r4, &(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x28)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0)
r9 = accept4(r7, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

700.112597ms ago: executing program 0 (id=4553):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x310, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in6={0xa, 0x4e22, 0x7, @private1, 0x93f}], 0x38)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000018c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf250500000014000600766574685f746f5f6272696467650008000400ffffffff09000500ac1e0101991c16f5f30f3dcbf4315ad038736462637d9608207112439b795c04e8a4ccd8b68cbfb588c88ad435ffb2fea241bc73eab3f9b684508721c496be6fb28e497b44550e25b9335959b0b9719d6d0038daa14cb8c5e16659a20a476ff84f97"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000001840)=ANY=[@ANYBLOB="aaaaaaaac9aa00000000ee6e08004503002c00000000002990780900000000000000001890780400000000000000000000000000009a3ecdfa2d25b301da3f5a379ddb2d48aada89055a8c9e1942ec147e"], 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0xfffffffffffffeb7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)=@newchain={0x64, 0x64, 0x508, 0x170bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x9}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x52}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xffe0}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x64}}, 0x4000450)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001080), r1)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9b31fb980ab252550e41aff8f98b319be0b8663a8030f4ce24665a6acab1ceef7254bc17a49ef5122fa50be2723801f4f3181b3024c060e5b47461f0119007d159a6cbe73df89a8cb3e4d280302070918a97c84a81d334bbe72026a2d93f201f667dd6", @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000"], 0x14}}, 0x0)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000000700)={&(0x7f00000006c0)="53b5e475c70939731a53ebea7631bc346436e48b22a529ab1d78fdf8b2d431ff7198153937e4e98483f4c4351ca45b094ff0f42e04f9", 0x36}, 0x1, 0x0, 0x0, 0x20008085}, 0x48000)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={<r8=>r0, 0xb7b5, 0x2800000000000, 0x80000000})
clock_gettime(0x0, &(0x7f0000000280)={<r9=>0x0, <r10=>0x0})
recvmmsg$unix(r8, &(0x7f0000000240), 0x0, 0x2042, &(0x7f00000002c0)={r9, r10+60000000})
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000800)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08076844a53b14220f", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040000)
r12 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000001b40)=ANY=[@ANYBLOB="8c0e0000", @ANYRES16=r14, @ANYBLOB="f5012cbd7000fcdb34a741a2df3589000000", @ANYRES32=r15, @ANYBLOB="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"], 0xe8c}, 0x1, 0x0, 0x0, 0x4000002}, 0x8040)

611.357388ms ago: executing program 0 (id=4554):
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close(0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r2, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000280)=0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061194c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x0, 0xb63e}, 0xc)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000004c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, {0xa, 0x4e24, 0x1, @mcast2}, 0x0, {[0x0, 0xfffffffc, 0x0, 0x0, 0x6]}}, 0x5c)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0xfe97, [{0x40105, 0x1, 0x5}], 'M6U'}, @datasec={0x7, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000001b00)=""/3, 0x45, 0x3, 0x1, 0x5}, 0x28)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x14, 0x9, 0x3, 0x3, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x18}}, 0x40)

560.320294ms ago: executing program 0 (id=4555):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1400, &(0x7f00000007c0)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x101, 0x70bd2d, 0x25dfdc00}, 0x18}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

538.411848ms ago: executing program 0 (id=4557):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x16}}]}, {0xfffffffffffffeb7}, {0xc}, {0xc, 0x8, {0x21, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

538.175953ms ago: executing program 0 (id=4558):
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="9516", 0x2}], 0x1, 0x8)
ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0x6, 0xff})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
vmsplice(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="9516", 0x2}], 0x1, 0x8) (async)
ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0x6, 0xff}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)

537.482087ms ago: executing program 1 (id=4559):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xfffffffffffffeda, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x1, 0xfffffffe, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0x4, 0x7}, {0xf8, 0x2, 0x0, 0xfdb6, 0x6fb, 0x4}, 0x6, 0x80003}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x7c}}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}, 0x1, 0x400000000000000}, 0x0)

481.1753ms ago: executing program 0 (id=4560):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_pid(r2, &(0x7f0000000140)=0xffffffffffffffff, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)
unshare(0x20000400)
bpf$BPF_GET_PROG_INFO(0x21, 0x0, 0x0)
vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="77690a4ffafe1fbb66ec", 0xa}], 0x1, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r4, &(0x7f0000002440)=ANY=[@ANYBLOB="0800080002000600000014000000450a0fc0006600000b02907864010120ffffffff3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378116020d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf9205000000000000001eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f4989ec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c00e106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f89016c3a0335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc6042e5919c765bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638d1b9b84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72cd67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c260967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27170c687ab5be0e2bbef64ddee1601375abb3000059d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae04753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a99527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14c17564b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c35ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487429a8da93c5e2a14f727e9b134d200000000000000003c214152ef95611be38991558208e8ce416d1f2816b048353ea69ee33ab11cb6b13c9271d4716ce0e8751a7451be98f708d645c640932e939d79ce65d98ba4ef5748311bbcff76e6956206346e694e2f10222f6cf373e74250df77b795f343bba4d748ebf3e4f56a7587e475f09ec2df8020e036faed56251400"/4171], 0xfce)
close(r3)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xc4}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}}, 0x0)
splice(r2, 0x0, r6, 0x0, 0x10d00, 0xf)

480.881221ms ago: executing program 1 (id=4561):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt(r0, 0x7fffffff, 0x3, &(0x7f0000000700)="4dd273c29c942ad87980de05091ff1bbabacb8a9af1fc9b760ec518b87a60970954307996f82eb7f60ad98d17c1bfecef97757e04ca4beb278b134eca1977ba6d8475c0710b1a177d1e21bd0fc594adaa1c0", 0x52)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000300)="cd33", 0x2)
ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @bcast, 0x2, 0x56})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000400791000000000000095", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x24}, 0x94)
ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000001180)={0x6, 0x65f7, @status={[0xdbd, 0x4, 0x3, 0x2a3, 0xc026, 0x9]}, [0x8000000000, 0x4, 0x7fffffffffffffff, 0x20, 0x38000000000, 0x0, 0xd, 0x9, 0x7, 0x1ff, 0x2, 0x61e, 0x9, 0x100, 0xff, 0x3, 0x18, 0x2, 0x1, 0x5, 0x10000, 0x0, 0x2, 0x67b, 0x6, 0x7, 0x1, 0x4, 0xda7, 0xf558, 0x6, 0x9, 0x200, 0x1, 0xfffffffffffffff9, 0x5, 0x3e4, 0xf2, 0x2, 0x9, 0xfffffffffffffff9, 0x0, 0x6, 0x8, 0xff, 0x7, 0x2, 0x8000000000000000, 0x0, 0x7fff, 0x5, 0x7, 0x7, 0x508, 0x100000000, 0x2, 0x3, 0x401, 0x1000, 0x5, 0x8001, 0xfffffffffffffffb, 0x7, 0xb35f]})
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="61b9e36ef3fcc5443ec6968a1cebf278a6df423532cd8d9a4efaa8323365ae2c2e72798aab54e3e8b675a029e0178c197d12d788b8c6643747609fb98201a0a267dfce50421ca586219014c16db978264fe08a9699dc6d5f4b6b9f06b600dd77", @ANYRESDEC], 0xb)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a00)={0x938, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x0, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x2, 0xb3, &(0x7f0000000900)=""/179, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1b, r6, 0x8, &(0x7f00000009c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, r4, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r7, 0x4)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0xfa294de6557d1c45, 0x6, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}, [@exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}]}, &(0x7f0000000440)='syzkaller\x00', 0xc, 0x1000, &(0x7f0000001bc0)=""/4096, 0x40f00, 0x6, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000480)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x9, 0x8, 0xef}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x1], &(0x7f0000000580)=[{0x2, 0x3, 0x6, 0x3}, {0x5, 0x1, 0x0, 0x2}, {0x3, 0x5, 0xf, 0x3}], 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r9}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x24, 0x22, 0x9, 0x0, 0x0, {0x1}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}]}, 0x24}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)

419.253086ms ago: executing program 1 (id=4562):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000, r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000791010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

419.041924ms ago: executing program 1 (id=4563):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000000c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket(0x2a, 0x2, 0x0)
r4 = accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x800)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x1, 0xfffffffe, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0x4, 0x7}, {0xf8, 0x2, 0x0, 0xfdb6, 0x6fb, 0x4}, 0x6, 0x80003}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x60, r6, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f00)=ANY=[@ANYBLOB="1c1600fc", @ANYRES16=r8, @ANYBLOB="01002bbd7000fddbdf250c00000008000600faffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYBLOB="14deb37d7260ff30c557d713166445ba1d99fb56d8f28ae64b494f246c63368c3db32ca5f0b7c5f54ed92a807b2da1f7628e675a6627cc07a97799fa510bdc57ed0823ca3fcf109541860bc53de1a3cd6047d249faf20fb11bed", @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}}, 0x0)

358.848619ms ago: executing program 1 (id=4564):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x2404c844}, 0x40010) (async)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x2404c844}, 0x40010)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='devlink_health_reporter_state_update\x00', r2, 0x0, 0x86ce}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='devlink_health_reporter_state_update\x00', r2, 0x0, 0x86ce}, 0x18)

358.168876ms ago: executing program 1 (id=4565):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@empty, @dev, <r3=>0x0}, &(0x7f0000000240)=0xc)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xe, &(0x7f0000000780)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
mmap(&(0x7f0000ce2000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r7, 0x913e0000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r9=>0x0})
bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r9, 0x1, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x6e073, 0xffffffffffffffff, 0x80000000)
sendmsg$can_raw(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@can={{0x3, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "6a378cd808ae3913"}, 0x10}, 0x1, 0x0, 0x0, 0x4040008}, 0x4000004)

310.795µs ago: executing program 2 (id=4566):
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="76bfc85ba596f8b1dce001a547854d5df1996c7e2755aada8726814cda7b69b09fc564b4d652a82f8b59cffa8bfbb0d537d874ca2aaa520102bdd827b078cc105af8ac67812730be45605e2a5ea313", 0x4f}], 0x1, 0x0, 0x0, 0x24040000}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480))
syz_emit_ethernet(0x68, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00323afffe800000000000000000000000000000fe8000000000000000000000000000aa890090780000000000000000000000000000ffff64010102fc01000000000000000000000000000004019595f429ae08a565904bad1281e877d52e3617615ef13557116a739bf9f7174f6ce346f1615ee1afce3591c67685573aef577a1a6e62b31cc3496a31185b"], 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000300)=0x2, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000060002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

0s ago: executing program 2 (id=4567):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYBLOB="d74f6363c0612f1510b13da288a9b9ecc8c8521fd7263aebf9ae9c5bb4e6", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2654c6c3}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYBLOB="d74f6363c0612f1510b13da288a9b9ecc8c8521fd7263aebf9ae9c5bb4e6", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2654c6c3}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x18, 0x453, 0x5, 0x70bd28, 0x25dfdbfc, "2136460642a1"}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x44000)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0xde}]}, 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
socket$packet(0x11, 0x2, 0x300) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req={0x8, 0x5, 0x9, 0x5}, 0x10) (async)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req={0x8, 0x5, 0x9, 0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

kernel console output (not intermixed with test programs):

[T13413] xfrm1: left allmulticast mode
[  170.907604][T13413] ip6gre1: left allmulticast mode
[  170.911399][T13413] macsec1: left promiscuous mode
[  170.913268][T13413] macsec1: left allmulticast mode
[  170.915882][T13413] erspan1: left promiscuous mode
[  170.917629][T13413] erspan1: left allmulticast mode
[  170.927104][T13413] __nla_validate_parse: 43 callbacks suppressed
[  170.927114][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'.
[  170.935677][T13413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2515'.
[  171.512886][T13431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2520'.
[  171.536004][T13433] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.2521'.
[  171.539739][T13433] netlink: zone id is out of range
[  171.541864][T13433] netlink: zone id is out of range
[  171.543786][T13433] netlink: zone id is out of range
[  171.545570][T13433] netlink: zone id is out of range
[  171.547368][T13433] netlink: zone id is out of range
[  171.549150][T13433] netlink: zone id is out of range
[  171.550958][T13433] netlink: zone id is out of range
[  171.553644][T13433] netlink: zone id is out of range
[  171.585309][T13435] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2522'.
[  171.661151][T13442] netlink: 4676 bytes leftover after parsing attributes in process `syz.2.2525'.
[  171.688728][T13444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2526'.
[  171.691809][T13444] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2526'.
[  171.695707][T13444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2526'.
[  171.706844][T13444] team0: Port device team_slave_0 removed
[  171.710442][T13444] team0: Port device team_slave_1 removed
[  171.715682][T13444] bond1: (slave gretap1): Releasing active interface
[  171.718737][T13444] tipc: Resetting bearer <eth:syzkaller0>
[  171.803709][T13448] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2527'.
[  172.110555][T13474] sctp: [Deprecated]: syz.2.2533 (pid 13474) Use of int in maxseg socket option.
[  172.110555][T13474] Use struct sctp_assoc_value instead
[  172.118160][T13474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.404241][T13491] syzkaller1: entered promiscuous mode
[  172.406091][T13491] syzkaller1: entered allmulticast mode
[  172.555927][T13499] xt_l2tp: invalid flags combination: 4
[  172.585796][T13501] bridge: RTM_NEWNEIGH with invalid ether address
[  172.587998][T13502] bridge: RTM_NEWNEIGH with invalid ether address
[  172.745143][T13515] validate_nla: 11 callbacks suppressed
[  172.745155][T13515] netlink: 'syz.2.2547': attribute type 4 has an invalid length.
[  173.128766][T13545] netlink: 'syz.0.2558': attribute type 2 has an invalid length.
[  173.404828][T13554] netlink: 'syz.1.2559': attribute type 1 has an invalid length.
[  173.407626][T13554] netlink: 'syz.1.2559': attribute type 3 has an invalid length.
[  173.443539][T13556] siw: device registration error -23
[  173.693706][T13570] bond0: option all_slaves_active: invalid value (223)
[  173.774758][T13577] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.779059][T13577] syzkaller0: MTU too low for tipc bearer
[  173.781106][T13577] tipc: Disabling bearer <eth:syzkaller0>
[  173.953773][T13594] tipc: MTU too low for tipc bearer
[  173.968438][T13596] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  173.972167][T13596] vlan0: entered allmulticast mode
[  173.980873][T13596] ip6gretap0: entered allmulticast mode
[  174.154066][T13615] net_ratelimit: 4069 callbacks suppressed
[  174.154078][T13615] openvswitch: netlink: Flow key attr not present in new flow.
[  174.291780][T13623] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  174.565700][T13651] openvswitch: netlink: Flow key attr not present in new flow.
[  174.615071][T13654] netlink: 'syz.2.2598': attribute type 9 has an invalid length.
[  174.621203][T13641] netlink: 'syz.0.2594': attribute type 10 has an invalid length.
[  174.665998][T13641] dummy0: entered promiscuous mode
[  174.669544][T13641] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  174.875314][T13666] IPVS: Unknown mcast interface: pimreg1
[  175.019496][T13676] bridge: RTM_NEWNEIGH with invalid ether address
[  175.167228][T13692] netlink: 'syz.1.2612': attribute type 10 has an invalid length.
[  175.424442][ T5223] Bluetooth: hci1: command 0x0406 tx timeout
[  175.534435][T13721] netlink: 'syz.1.2624': attribute type 1 has an invalid length.
[  175.709017][T13734] ipt_ECN: cannot use operation on non-tcp rule
[  175.911735][T13747] netlink: 'syz.1.2636': attribute type 1 has an invalid length.
[  175.930316][T13747] 8021q: adding VLAN 0 to HW filter on device bond2
[  176.010335][T13760] __nla_validate_parse: 37 callbacks suppressed
[  176.010346][T13760] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2640'.
[  176.139326][T13777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2647'.
[  176.142691][T13777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2647'.
[  176.145593][T13777] netlink: 'syz.2.2647': attribute type 4 has an invalid length.
[  176.335093][T13792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2654'.
[  176.338630][T13792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2654'.
[  176.342505][T13793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2653'.
[  176.393717][T13795] pim6reg9: entered allmulticast mode
[  176.400880][T13795] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2656'.
[  176.720158][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'.
[  176.723115][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2670'.
[  176.735699][T13835] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.738336][T13835] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.741063][T13835] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.743806][T13835] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.816541][T13848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2670'.
[  177.218404][T13901] openvswitch: netlink: Flow key attr not present in new flow.
[  177.312150][T13915] IPv6: NLM_F_CREATE should be specified when creating new route
[  177.629792][T13954] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  177.758530][T13968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.773701][T13968] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.776520][T13968] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.779120][T13968] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.781710][T13968] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.910968][T13982] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  177.918333][T13984] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  178.000440][T13990] lo speed is unknown, defaulting to 1000
[  178.188225][T14007] openvswitch: netlink: Flow key attr not present in new flow.
[  178.229285][T14009] lo speed is unknown, defaulting to 1000
[  178.231051][T14011] smc: net device bond0 applied user defined pnetid SYZ2
[  178.277715][T14012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.339288][T14016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.397440][T14012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.408656][T14018] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  178.422379][T14018] syzkaller0: entered promiscuous mode
[  178.426137][T14018] syzkaller0: entered allmulticast mode
[  178.441490][T14017] bridge0: mtu less than device minimum
[  179.071793][T14043] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  179.128713][T14044] validate_nla: 70 callbacks suppressed
[  179.128725][T14044] netlink: 'syz.2.2746': attribute type 7 has an invalid length.
[  179.147292][T14050] unknown channel width for channel at 909000KHz?
[  179.149606][T14050] unknown channel width for channel at 909000KHz?
[  179.152842][T14044] netlink: 'syz.2.2746': attribute type 8 has an invalid length.
[  179.155601][T14050] unknown channel width for channel at 909000KHz?
[  179.198600][T14054] netlink: 'syz.2.2749': attribute type 1 has an invalid length.
[  179.204395][T14054] netlink: 'syz.2.2749': attribute type 3 has an invalid length.
[  179.282128][T14062] netlink: 'syz.0.2753': attribute type 4 has an invalid length.
[  179.475180][T14079] openvswitch: netlink: Flow key attr not present in new flow.
[  179.479716][T14081] netlink: 'syz.0.2761': attribute type 32 has an invalid length.
[  179.488833][T14081] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  179.580627][T14093] syzkaller1: entered promiscuous mode
[  179.582408][T14093] syzkaller1: entered allmulticast mode
[  179.594296][T14095] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.625274][T14095] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.666254][T14095] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.723714][T14095] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.768742][T14095] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.778123][T14095] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.787366][T14095] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.796509][T14095] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.847476][T14102] netlink: 'syz.1.2767': attribute type 1 has an invalid length.
[  180.104412][T14116] openvswitch: netlink: Flow key attr not present in new flow.
[  180.143810][T14119] sctp: [Deprecated]: syz.1.2773 (pid 14119) Use of struct sctp_assoc_value in delayed_ack socket option.
[  180.143810][T14119] Use struct sctp_sack_info instead
[  180.595653][T14172] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.598529][T14172] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.601329][T14172] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.604095][T14172] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.606830][T14172] geneve2: entered promiscuous mode
[  180.612346][T14172] geneve2: entered allmulticast mode
[  181.355992][T14180] bond3: entered promiscuous mode
[  181.418329][T14186] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  181.461130][T14192] __nla_validate_parse: 97 callbacks suppressed
[  181.461143][T14192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2804'.
[  181.467036][T14192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2804'.
[  181.470460][T14192] netlink: 'syz.2.2804': attribute type 4 has an invalid length.
[  181.572006][T14210] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2808'.
[  181.704730][T14220] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.722209][T14222] ipt_rpfilter: unknown options
[  181.738313][T14220] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.798541][T14220] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.817656][T14224] netlink: 'syz.0.2811': attribute type 13 has an invalid length.
[  181.820398][T14224] netlink: 'syz.0.2811': attribute type 17 has an invalid length.
[  181.835097][T14224] erspan0: left allmulticast mode
[  181.841107][T14224] bond0: left promiscuous mode
[  181.843410][T14224] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.845951][T14224] dummy0: left promiscuous mode
[  181.850173][T14224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.855425][    T9] lo speed is unknown, defaulting to 1000
[  181.857313][    T9] syz0: Port: 1 Link ACTIVE
[  181.858903][    T9] lo speed is unknown, defaulting to 1000
[  181.862209][T14220] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.888052][T14224] lo speed is unknown, defaulting to 1000
[  181.926500][T14220] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.935679][T14225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2811'.
[  181.942380][T14220] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.950144][T14220] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.959493][T14225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.968102][T14220] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.008148][T14227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2812'.
[  182.034153][T14225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.086449][T14230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2813'.
[  182.097319][T14224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.101487][T14230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2813'.
[  182.202959][T14234] IPv6: NLM_F_CREATE should be specified when creating new route
[  182.255731][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2815'.
[  182.426840][T14248] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2818'.
[  182.564674][T14254] bond0: entered promiscuous mode
[  182.822485][T14267] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  182.830324][T14267] 8021q: adding VLAN 0 to HW filter on device bond5
[  182.833749][ T5664] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  182.851662][T14267] veth3: entered promiscuous mode
[  182.857343][T14267] bond5: (slave veth3): Enslaving as a backup interface with a down link
[  182.866107][T14267] batman_adv: batadv0: Interface deactivated: gretap2
[  182.868274][T14267] batman_adv: batadv0: Removing interface: gretap2
[  182.872454][T14267] bond5: (slave ip6gretap2): Removing an active aggregator
[  182.877537][T14267] bond5: (slave ip6gretap2): Releasing backup interface
[  182.879893][T14267] bond5: (slave ip6gretap2): the permanent HWaddr of slave - ca:ed:93:dd:b1:b9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  182.889772][T14267] bond5: (slave veth3): Releasing backup interface
[  183.210158][T14275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2826'.
[  183.287346][T14249] bond0: left promiscuous mode
[  183.962120][T14330] veth4: entered allmulticast mode
[  184.163210][T14340] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  184.168079][T14340] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  184.428372][T14366] unsupported nlmsg_type 40
[  184.461474][T14368] validate_nla: 8 callbacks suppressed
[  184.461491][T14368] netlink: 'syz.1.2855': attribute type 1 has an invalid length.
[  184.468194][T14368] netlink: 'syz.1.2855': attribute type 3 has an invalid length.
[  184.690786][T14380] netlink: 'syz.1.2859': attribute type 1 has an invalid length.
[  184.704100][T14380] 8021q: adding VLAN 0 to HW filter on device bond4
[  184.715624][T14380] 8021q: adding VLAN 0 to HW filter on device bond4
[  184.718028][T14380] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  184.722006][T14380] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  184.766815][T14382] bond4: (slave bridge5): Enslaving as an active interface with a down link
[  184.921735][T14387] netlink: 'syz.1.2861': attribute type 13 has an invalid length.
[  185.119192][T14405] openvswitch: netlink: Flow actions attr not present in new flow.
[  185.130008][T14405] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  185.213689][T14416] openvswitch: netlink: Flow key attr not present in new flow.
[  185.349464][T14429] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[  185.384658][T14432] netlink: 'syz.2.2878': attribute type 1 has an invalid length.
[  185.393537][T14432] netlink: 'syz.2.2878': attribute type 3 has an invalid length.
[  185.439842][T14435] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  185.683714][T14455] netlink: 'syz.2.2885': attribute type 4 has an invalid length.
[  185.718868][T14457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.797545][T14461] syzkaller1: entered allmulticast mode
[  185.888212][T14474] netlink: 'syz.1.2891': attribute type 3 has an invalid length.
[  185.939296][T14479] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.980134][T14479] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.030258][T14479] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.100441][T14479] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.186060][T14479] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.197753][T14479] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.212174][T14479] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.227457][T14479] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.282723][T14503] netlink: 'syz.1.2894': attribute type 4 has an invalid length.
[  186.306632][T14504] xt_ecn: cannot match TCP bits for non-tcp packets
[  186.726624][T14535] netlink: 'syz.1.2903': attribute type 1 has an invalid length.
[  186.729174][T14535] __nla_validate_parse: 26 callbacks suppressed
[  186.729182][T14535] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2903'.
[  186.830446][T14545] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2908'.
[  186.950302][T14555] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  186.962070][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2913'.
[  186.965499][T14557] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2913'.
[  187.050756][T14567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2918'.
[  187.128094][T14580] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2921'.
[  187.342754][ T5223] Bluetooth: hci2: command 0x0406 tx timeout
[  187.362853][T14592] syzkaller1: entered promiscuous mode
[  187.364721][T14592] syzkaller1: entered allmulticast mode
[  187.418015][T14598] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2927'.
[  187.444131][T14600] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2929'.
[  187.447176][T14600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2929'.
[  187.450011][T14600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2929'.
[  187.585532][T14615] sctp: [Deprecated]: syz.1.2935 (pid 14615) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.585532][T14615] Use struct sctp_sack_info instead
[  187.594087][T14615] sctp: [Deprecated]: syz.1.2935 (pid 14615) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.594087][T14615] Use struct sctp_sack_info instead
[  187.602111][T14616] sctp: [Deprecated]: syz.1.2935 (pid 14616) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.602111][T14616] Use struct sctp_sack_info instead
[  187.780080][T14627] lo speed is unknown, defaulting to 1000
[  187.989229][T14635] bond0: entered promiscuous mode
[  187.991838][T14635] bond0: left promiscuous mode
[  188.496915][T14653] IPv6: NLM_F_CREATE should be specified when creating new route
[  188.961213][T14668] lo speed is unknown, defaulting to 1000
[  189.553422][T14712] validate_nla: 10 callbacks suppressed
[  189.553436][T14712] netlink: 'syz.2.2957': attribute type 1 has an invalid length.
[  189.565346][T14712] netlink: 'syz.2.2957': attribute type 3 has an invalid length.
[  189.606546][T14715] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  189.678837][T14713] syzkaller0: entered promiscuous mode
[  189.681491][T14713] syzkaller0: entered allmulticast mode
[  189.818425][T14737] netlink: 'syz.0.2965': attribute type 12 has an invalid length.
[  189.830189][T14730] syzkaller1: entered promiscuous mode
[  189.832058][T14730] syzkaller1: entered allmulticast mode
[  189.859575][T14737] netlink: 'syz.0.2965': attribute type 4 has an invalid length.
[  189.866033][ T5301] lo speed is unknown, defaulting to 1000
[  189.867866][ T5301] syz0: Port: 1 Link DOWN
[  189.869269][ T5301] lo speed is unknown, defaulting to 1000
[  189.871669][T14737] netlink: 'syz.0.2965': attribute type 4 has an invalid length.
[  189.876040][ T5301] lo speed is unknown, defaulting to 1000
[  189.877878][ T5301] syz0: Port: 1 Link ACTIVE
[  190.016123][T14753] netlink: 'syz.2.2971': attribute type 1 has an invalid length.
[  190.019033][T14753] netlink: 'syz.2.2971': attribute type 3 has an invalid length.
[  190.046605][T14757] openvswitch: netlink: Flow key attr not present in new flow.
[  191.331713][T14796] openvswitch: netlink: Flow key attr not present in new flow.
[  191.374736][T14799] sctp: [Deprecated]: syz.0.2984 (pid 14799) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.374736][T14799] Use struct sctp_sack_info instead
[  191.546014][T14832] netlink: 'syz.2.2994': attribute type 7 has an invalid length.
[  191.549142][T14832] netlink: 'syz.2.2994': attribute type 8 has an invalid length.
[  191.570178][T14835] netlink: 'syz.0.2995': attribute type 9 has an invalid length.
[  191.583791][T14834] bond5: entered promiscuous mode
[  191.585504][T14834] bond5: entered allmulticast mode
[  191.586189][T14835] sctp: [Deprecated]: syz.0.2995 (pid 14835) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.586189][T14835] Use struct sctp_sack_info instead
[  191.587720][T14834] 8021q: adding VLAN 0 to HW filter on device bond5
[  191.608935][T14834] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.611640][T14834] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.614682][T14834] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.617599][T14834] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.654367][T14845] xt_l2tp: wrong L2TP version: 0
[  191.659008][T14848] tc_dump_action: action bad kind
[  191.765646][T14858] __nla_validate_parse: 22 callbacks suppressed
[  191.765664][T14858] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3004'.
[  191.865808][T14867] delete_channel: no stack
[  191.924049][T14870] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3008'.
[  191.990461][T14876] delete_channel: no stack
[  192.013473][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'.
[  192.065790][T14884] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  192.097463][T14886] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3013'.
[  192.156068][T14893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3016'.
[  192.210887][T14897] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.335223][T14911] netlink: 4676 bytes leftover after parsing attributes in process `syz.0.3023'.
[  192.338525][T14911] openvswitch: netlink: Flow key attr not present in new flow.
[  192.374733][T14914] x_tables: duplicate underflow at hook 3
[  192.442979][T14920] lo speed is unknown, defaulting to 1000
[  192.478311][T14925] bridge_slave_0: default FDB implementation only supports local addresses
[  192.481338][T14927] bridge1: entered allmulticast mode
[  192.535917][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3030'.
[  192.587282][T14926] bridge1: left allmulticast mode
[  193.013953][T14982] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3047'.
[  193.044787][T14984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3048'.
[  193.047892][T14984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3048'.
[  193.252945][T15007] openvswitch: netlink: Flow key attr not present in new flow.
[  193.275047][T15009] block nbd0: Unsupported socket: shutdown callout must be supported.
[  193.303674][T15011] syzkaller0: MTU too low for tipc bearer
[  193.305873][T15011] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  193.309387][T15011] syzkaller0: entered promiscuous mode
[  193.311592][T15011] syzkaller0: entered allmulticast mode
[  193.486258][T15027] lo speed is unknown, defaulting to 1000
[  193.582782][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  194.017052][T15042] trusted_key: syz.2.3069 sent an empty control message without MSG_MORE.
[  194.025511][T15042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  194.374923][T15074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  194.378081][T15074] IPv6: NLM_F_CREATE should be set when creating new route
[  194.381178][T15074] IPv6: NLM_F_CREATE should be set when creating new route
[  194.387574][T15074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  194.484708][T15087] openvswitch: netlink: Flow key attr not present in new flow.
[  194.589791][T15097] validate_nla: 10 callbacks suppressed
[  194.589802][T15097] netlink: 'syz.0.3088': attribute type 1 has an invalid length.
[  194.612876][T15097] netlink: 'syz.0.3088': attribute type 3 has an invalid length.
[  194.786199][T15114] bond6: entered promiscuous mode
[  194.845993][T15124] openvswitch: netlink: Flow key attr not present in new flow.
[  194.961965][T15138] openvswitch: netlink: Flow key attr not present in new flow.
[  194.985456][T15140] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  195.206989][T15159] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20000
[  195.438626][T15181] netlink: 'syz.2.3120': attribute type 5 has an invalid length.
[  195.540583][T15194] netlink: 'syz.2.3124': attribute type 4 has an invalid length.
[  195.710290][T15206] netlink: 'syz.2.3128': attribute type 2 has an invalid length.
[  195.887176][T15225] openvswitch: netlink: Flow key attr not present in new flow.
[  195.917691][T15227] netlink: 'syz.2.3136': attribute type 4 has an invalid length.
[  195.990459][T15229] xt_CT: No such helper "snmp"
[  196.195088][T15253] veth1_to_bond: entered allmulticast mode
[  196.197961][T15253] bond_slave_1: entered promiscuous mode
[  196.223524][T15256] xt_CT: No such helper "pptp"
[  196.233214][T15252] bond_slave_1: left promiscuous mode
[  196.235765][T15252] veth1_to_bond: left allmulticast mode
[  196.279882][T15264] netlink: 'syz.0.3151': attribute type 4 has an invalid length.
[  196.307460][T15266] netlink: 'syz.1.3152': attribute type 4 has an invalid length.
[  196.329502][T15268] netlink: 'syz.0.3153': attribute type 4 has an invalid length.
[  196.368063][T15274] netlink: 'syz.1.3155': attribute type 4 has an invalid length.
[  196.384328][T15273] IPv6: sit3: Disabled Multicast RS
[  196.615810][T15290] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  196.791999][T15329] __nla_validate_parse: 34 callbacks suppressed
[  196.792016][T15329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3174'.
[  196.802902][T15329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3174'.
[  196.829200][T15333] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  196.835589][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3173'.
[  196.870876][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3176'.
[  196.875048][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3176'.
[  197.184855][T15351] : entered promiscuous mode
[  197.267619][T15359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3182'.
[  197.270527][T15359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3182'.
[  197.369797][T15364] lo speed is unknown, defaulting to 1000
[  197.526380][T15369] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  197.656847][T15388] syzkaller0: entered promiscuous mode
[  197.658753][T15388] syzkaller0: entered allmulticast mode
[  197.719850][T15390] netlink: 724 bytes leftover after parsing attributes in process `syz.2.3191'.
[  197.723940][T15390] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3191'.
[  197.757832][T15392] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3192'.
[  197.900401][T15408] syzkaller0: MTU too low for tipc bearer
[  197.902765][T15408] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  197.981800][T15415] openvswitch: netlink: Flow key attr not present in new flow.
[  198.159119][T15429] openvswitch: netlink: Flow key attr not present in new flow.
[  198.585534][T15468] netlink: zone id is out of range
[  198.591878][T15468] netlink: zone id is out of range
[  198.598050][T15468] netlink: zone id is out of range
[  198.599890][T15468] netlink: zone id is out of range
[  198.601650][T15468] netlink: zone id is out of range
[  198.603632][T15468] netlink: zone id is out of range
[  198.605391][T15468] netlink: zone id is out of range
[  198.607371][T15470] !: renamed from dummy0 (while UP)
[  199.134373][T15522] syzkaller0: entered promiscuous mode
[  199.136253][T15522] syzkaller0: entered allmulticast mode
[  199.145985][T15522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.757319][T15531] validate_nla: 12 callbacks suppressed
[  199.757329][T15531] netlink: 'syz.2.3237': attribute type 4 has an invalid length.
[  199.782745][T15533] nft_compat: unsupported protocol 0
[  199.904460][T15520] tipc: Resetting bearer <eth:syzkaller0>
[  199.917540][T15520] tipc: Disabling bearer <eth:syzkaller0>
[  200.119919][T15574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  200.135553][T15578] netlink: 'syz.1.3255': attribute type 1 has an invalid length.
[  200.138939][T15578] netlink: 'syz.1.3255': attribute type 3 has an invalid length.
[  200.225419][T15591] netlink: 'syz.1.3261': attribute type 2 has an invalid length.
[  200.258425][T15595] netlink: 'syz.1.3263': attribute type 4 has an invalid length.
[  200.303558][T15599] netlink: 'syz.1.3264': attribute type 11 has an invalid length.
[  200.397274][T15611] netlink: 'syz.2.3269': attribute type 4 has an invalid length.
[  200.479057][T15621] netlink: 'syz.1.3273': attribute type 4 has an invalid length.
[  200.659771][T15631] netlink: 'syz.1.3277': attribute type 4 has an invalid length.
[  200.689144][T15628] netlink: 'syz.2.3274': attribute type 58 has an invalid length.
[  200.755888][T15645] netlink: 'syz.1.3280': attribute type 1 has an invalid length.
[  200.803969][T15650] nbd: must specify at least one socket
[  201.017581][T15664] lo speed is unknown, defaulting to 1000
[  201.343177][T15684] delete_channel: no stack
[  201.787397][T15703] bridge_slave_0: entered promiscuous mode
[  201.789497][T15703] bridge_slave_0: entered allmulticast mode
[  201.868112][T15713] __nla_validate_parse: 50 callbacks suppressed
[  201.868124][T15713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3299'.
[  201.873478][T15713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3299'.
[  201.949848][T15722] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  202.048501][T15731] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3307'.
[  202.054987][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3307'.
[  202.058747][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3307'.
[  202.083321][T15729] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  202.089534][T15734] netlink: 4676 bytes leftover after parsing attributes in process `syz.1.3308'.
[  202.092426][T15734] net_ratelimit: 79 callbacks suppressed
[  202.092434][T15734] openvswitch: netlink: Flow key attr not present in new flow.
[  202.174029][T15740] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3311'.
[  202.206919][T15747] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3314'.
[  202.215367][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3313'.
[  202.218270][T15748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3313'.
[  202.271855][T15751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.281977][T15751] veth1: left promiscuous mode
[  202.285858][T15751] bridge_slave_0: left promiscuous mode
[  202.290562][T15751] wireguard0: left promiscuous mode
[  202.292296][T15751] vti0: left promiscuous mode
[  202.294564][T15751] bond1: left promiscuous mode
[  202.297150][T15751] vti1: left promiscuous mode
[  202.299397][T15751] sit2: left promiscuous mode
[  202.301732][T15751] veth3: left promiscuous mode
[  202.304015][T15751] bond6: left promiscuous mode
[  202.999921][T15818] syzkaller0: entered promiscuous mode
[  203.002276][T15818] syzkaller0: entered allmulticast mode
[  204.387881][T15828] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  204.391665][T15828] CPU: 1 UID: 0 PID: 15828 Comm: syz.2.3341 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  204.391677][T15828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.391682][T15828] Call Trace:
[  204.391686][T15828]  <TASK>
[  204.391690][T15828]  dump_stack_lvl+0x189/0x250
[  204.391705][T15828]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.391716][T15828]  ? __pfx__printk+0x10/0x10
[  204.391727][T15828]  ? kernfs_path_from_node+0x2c/0x260
[  204.391736][T15828]  ? kernfs_path_from_node+0x2c/0x260
[  204.391744][T15828]  ? kernfs_path_from_node+0x2c/0x260
[  204.391752][T15828]  ? kernfs_path_from_node+0x22c/0x260
[  204.391761][T15828]  ? kernfs_path_from_node+0x2c/0x260
[  204.391771][T15828]  sysfs_warn_dup+0x8e/0xa0
[  204.391783][T15828]  sysfs_do_create_link_sd+0xc0/0x110
[  204.391792][T15828]  device_add_class_symlinks+0x1cf/0x240
[  204.391805][T15828]  device_add+0x475/0xb50
[  204.391818][T15828]  wiphy_register+0x199a/0x26b0
[  204.391835][T15828]  ? __pfx_wiphy_register+0x10/0x10
[  204.391843][T15828]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  204.391857][T15828]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  204.391871][T15828]  ieee80211_register_hw+0x33e1/0x4120
[  204.391889][T15828]  ? ieee80211_register_hw+0x1451/0x4120
[  204.391905][T15828]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  204.391917][T15828]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  204.391933][T15828]  ? __hrtimer_setup+0x187/0x210
[  204.391942][T15828]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  204.391955][T15828]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  204.391978][T15828]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  204.391988][T15828]  ? trace_kmalloc+0x1f/0xd0
[  204.391998][T15828]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  204.392008][T15828]  ? kstrndup+0xbf/0x160
[  204.392020][T15828]  hwsim_new_radio_nl+0xea4/0x1b10
[  204.392032][T15828]  ? __pfx___nla_validate_parse+0x10/0x10
[  204.392049][T15828]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  204.392065][T15828]  ? __nla_parse+0x40/0x60
[  204.392077][T15828]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  204.392090][T15828]  genl_family_rcv_msg_doit+0x215/0x300
[  204.392101][T15828]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  204.392114][T15828]  ? bpf_lsm_capable+0x9/0x20
[  204.392124][T15828]  ? security_capable+0x7e/0x2e0
[  204.392135][T15828]  genl_rcv_msg+0x60e/0x790
[  204.392145][T15828]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.392153][T15828]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  204.392169][T15828]  netlink_rcv_skb+0x208/0x470
[  204.392180][T15828]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.392188][T15828]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.392205][T15828]  ? down_read+0x1ad/0x2e0
[  204.392215][T15828]  genl_rcv+0x28/0x40
[  204.392221][T15828]  netlink_unicast+0x75c/0x8e0
[  204.392235][T15828]  netlink_sendmsg+0x805/0xb30
[  204.392250][T15828]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.392268][T15828]  ? aa_sock_msg_perm+0x94/0x160
[  204.392279][T15828]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.392288][T15828]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.392299][T15828]  __sock_sendmsg+0x21c/0x270
[  204.392311][T15828]  ____sys_sendmsg+0x505/0x830
[  204.392325][T15828]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.392340][T15828]  ? import_iovec+0x74/0xa0
[  204.392353][T15828]  ___sys_sendmsg+0x21f/0x2a0
[  204.392366][T15828]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.392394][T15828]  ? __fget_files+0x2a/0x420
[  204.392402][T15828]  ? __fget_files+0x3a0/0x420
[  204.392414][T15828]  __x64_sys_sendmsg+0x19b/0x260
[  204.392427][T15828]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.392442][T15828]  ? rcu_is_watching+0x15/0xb0
[  204.392453][T15828]  ? do_syscall_64+0xbe/0x3b0
[  204.392464][T15828]  do_syscall_64+0xfa/0x3b0
[  204.392471][T15828]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.392479][T15828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.392486][T15828]  ? exc_page_fault+0x9f/0xf0
[  204.392495][T15828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.392502][T15828] RIP: 0033:0x7fc92cf8e9a9
[  204.392513][T15828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.392520][T15828] RSP: 002b:00007fc92de7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.392549][T15828] RAX: ffffffffffffffda RBX: 00007fc92d1b5fa0 RCX: 00007fc92cf8e9a9
[  204.392555][T15828] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  204.392561][T15828] RBP: 00007fc92d010d69 R08: 0000000000000000 R09: 0000000000000000
[  204.392565][T15828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.392570][T15828] R13: 0000000000000000 R14: 00007fc92d1b5fa0 R15: 00007ffd0dc4c578
[  204.392585][T15828]  </TASK>
[  204.570678][   T33] audit: type=1800 audit(1753202968.306:3): pid=15833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3343" name="memory.events" dev="tmpfs" ino=5657 res=0 errno=0
[  204.713528][T15848] xt_l2tp: wrong L2TP version: 0
[  204.976683][T15878] x_tables: duplicate underflow at hook 1
[  205.057857][T15897] openvswitch: netlink: Flow key attr not present in new flow.
[  205.135678][T15909] validate_nla: 17 callbacks suppressed
[  205.135692][T15909] netlink: 'syz.0.3370': attribute type 4 has an invalid length.
[  205.160024][T15911] netlink: 'syz.2.3371': attribute type 4 has an invalid length.
[  205.396848][T15926] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  205.412857][T15936] netlink: 'syz.1.3382': attribute type 1 has an invalid length.
[  205.415431][T15936] netlink: 'syz.1.3382': attribute type 3 has an invalid length.
[  205.451663][T15942] netlink: 'syz.1.3384': attribute type 4 has an invalid length.
[  205.512436][T15951] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  205.540135][T15970] syzkaller1: entered promiscuous mode
[  205.548260][T15970] syzkaller1: entered allmulticast mode
[  205.553166][T15963] netlink: 'syz.2.3388': attribute type 3 has an invalid length.
[  205.657033][T15976] netlink: 'syz.2.3392': attribute type 21 has an invalid length.
[  205.677522][T15979] netlink: 'syz.0.3393': attribute type 4 has an invalid length.
[  205.729191][T15989] netlink: 'syz.0.3396': attribute type 4 has an invalid length.
[  205.855715][T16010] netlink: 'syz.0.3403': attribute type 1 has an invalid length.
[  205.883599][T16010] bond7: entered promiscuous mode
[  205.885451][T16010] 8021q: adding VLAN 0 to HW filter on device bond7
[  205.903822][T16010] 8021q: adding VLAN 0 to HW filter on device bond7
[  205.909459][T16010] bond7: (slave vcan0): The slave device specified does not support setting the MAC address
[  205.912994][T16010] bond7: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  205.917485][T16010] bond7: (slave vcan0): making interface the new active one
[  205.919829][T16010] vcan0: entered promiscuous mode
[  205.922757][T16010] bond7: (slave vcan0): Enslaving as an active interface with an up link
[  206.039216][T16027] bond3: entered promiscuous mode
[  206.050262][T16021] bond4: entered promiscuous mode
[  206.465370][T16041] tap0: tun_chr_ioctl cmd 1074025673
[  206.467234][T16040] tap0: tun_chr_ioctl cmd 1074025680
[  206.810128][T16068] openvswitch: netlink: Flow key attr not present in new flow.
[  206.981331][T16080] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.035842][T16080] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.042014][T16085] __nla_validate_parse: 36 callbacks suppressed
[  207.042023][T16085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3433'.
[  207.050408][T16085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3433'.
[  207.078263][T16087] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3434'.
[  207.107447][T16080] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.147099][T16080] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.204933][T16080] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.214708][T16080] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.222005][T16080] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.229660][T16080] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.258705][T16095] netlink: 4676 bytes leftover after parsing attributes in process `syz.2.3438'.
[  207.261695][T16095] openvswitch: netlink: Flow key attr not present in new flow.
[  207.315159][T16102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3441'.
[  207.318214][T16102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3441'.
[  207.379271][T16108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3444'.
[  207.388901][T16108] team0: Port device geneve0 added
[  207.422017][T16113] openvswitch: netlink: Message has 8 unknown bytes.
[  207.429411][T16110] bond6: (slave gretap2): making interface the new active one
[  207.432469][T16110] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  207.459187][T16117] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3447'.
[  207.506468][T16121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3449'.
[  207.509442][T16121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3449'.
[  207.547022][T16128] ip6gretap0: entered promiscuous mode
[  207.549989][T16128] batman_adv: batadv0: Adding interface: macvlan0
[  207.552072][T16128] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  207.560615][T16128] batman_adv: batadv0: Interface activated: macvlan0
[  207.736994][T16159] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  207.741318][T16159] CPU: 0 UID: 0 PID: 16159 Comm: syz.1.3463 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  207.741330][T16159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  207.741335][T16159] Call Trace:
[  207.741339][T16159]  <TASK>
[  207.741343][T16159]  dump_stack_lvl+0x189/0x250
[  207.741359][T16159]  ? __pfx_dump_stack_lvl+0x10/0x10
[  207.741369][T16159]  ? __pfx__printk+0x10/0x10
[  207.741380][T16159]  ? kernfs_path_from_node+0x2c/0x260
[  207.741389][T16159]  ? kernfs_path_from_node+0x2c/0x260
[  207.741396][T16159]  ? kernfs_path_from_node+0x2c/0x260
[  207.741405][T16159]  ? kernfs_path_from_node+0x22c/0x260
[  207.741412][T16159]  ? kernfs_path_from_node+0x2c/0x260
[  207.741421][T16159]  sysfs_warn_dup+0x8e/0xa0
[  207.741434][T16159]  sysfs_do_create_link_sd+0xc0/0x110
[  207.741442][T16159]  device_add_class_symlinks+0x1cf/0x240
[  207.741455][T16159]  device_add+0x475/0xb50
[  207.741467][T16159]  wiphy_register+0x199a/0x26b0
[  207.741484][T16159]  ? __pfx_wiphy_register+0x10/0x10
[  207.741494][T16159]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  207.741508][T16159]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  207.741522][T16159]  ieee80211_register_hw+0x33e1/0x4120
[  207.741543][T16159]  ? ieee80211_register_hw+0x1451/0x4120
[  207.741557][T16159]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  207.741569][T16159]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  207.741584][T16159]  ? __hrtimer_setup+0x187/0x210
[  207.741615][T16159]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  207.741631][T16159]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  207.741655][T16159]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  207.741665][T16159]  ? trace_kmalloc+0x1f/0xd0
[  207.741675][T16159]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  207.741686][T16159]  ? kstrndup+0xbf/0x160
[  207.741699][T16159]  hwsim_new_radio_nl+0xea4/0x1b10
[  207.741711][T16159]  ? __pfx___nla_validate_parse+0x10/0x10
[  207.741728][T16159]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  207.741745][T16159]  ? __nla_parse+0x40/0x60
[  207.741756][T16159]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  207.741768][T16159]  genl_family_rcv_msg_doit+0x215/0x300
[  207.741779][T16159]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  207.741793][T16159]  ? bpf_lsm_capable+0x9/0x20
[  207.741802][T16159]  ? security_capable+0x7e/0x2e0
[  207.741813][T16159]  genl_rcv_msg+0x60e/0x790
[  207.741824][T16159]  ? __pfx_genl_rcv_msg+0x10/0x10
[  207.741831][T16159]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  207.741847][T16159]  netlink_rcv_skb+0x208/0x470
[  207.741857][T16159]  ? __pfx_genl_rcv_msg+0x10/0x10
[  207.741866][T16159]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  207.741884][T16159]  ? down_read+0x1ad/0x2e0
[  207.741895][T16159]  genl_rcv+0x28/0x40
[  207.741903][T16159]  netlink_unicast+0x75c/0x8e0
[  207.741917][T16159]  netlink_sendmsg+0x805/0xb30
[  207.741931][T16159]  ? __pfx_netlink_sendmsg+0x10/0x10
[  207.741942][T16159]  ? aa_sock_msg_perm+0x94/0x160
[  207.741952][T16159]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  207.741961][T16159]  ? __pfx_netlink_sendmsg+0x10/0x10
[  207.741972][T16159]  __sock_sendmsg+0x21c/0x270
[  207.741983][T16159]  ____sys_sendmsg+0x505/0x830
[  207.741997][T16159]  ? __pfx_____sys_sendmsg+0x10/0x10
[  207.742011][T16159]  ? import_iovec+0x74/0xa0
[  207.742023][T16159]  ___sys_sendmsg+0x21f/0x2a0
[  207.742034][T16159]  ? __pfx____sys_sendmsg+0x10/0x10
[  207.742061][T16159]  ? __fget_files+0x2a/0x420
[  207.742068][T16159]  ? __fget_files+0x3a0/0x420
[  207.742079][T16159]  __x64_sys_sendmsg+0x19b/0x260
[  207.742091][T16159]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  207.742106][T16159]  ? rcu_is_watching+0x15/0xb0
[  207.742117][T16159]  ? do_syscall_64+0xbe/0x3b0
[  207.742128][T16159]  do_syscall_64+0xfa/0x3b0
[  207.742135][T16159]  ? lockdep_hardirqs_on+0x9c/0x150
[  207.742142][T16159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.742150][T16159]  ? exc_page_fault+0x9f/0xf0
[  207.742158][T16159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.742166][T16159] RIP: 0033:0x7fcbf678e9a9
[  207.742180][T16159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.742187][T16159] RSP: 002b:00007fcbf766d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  207.742197][T16159] RAX: ffffffffffffffda RBX: 00007fcbf69b5fa0 RCX: 00007fcbf678e9a9
[  207.742203][T16159] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  207.742209][T16159] RBP: 00007fcbf6810d69 R08: 0000000000000000 R09: 0000000000000000
[  207.742214][T16159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  207.742219][T16159] R13: 0000000000000000 R14: 00007fcbf69b5fa0 R15: 00007ffebdb106b8
[  207.742232][T16159]  </TASK>
[  208.200691][T16203] openvswitch: netlink: Flow key attr not present in new flow.
[  208.430621][T16241] openvswitch: netlink: Flow key attr not present in new flow.
[  208.507419][T16251] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  208.512039][T16251] CPU: 1 UID: 0 PID: 16251 Comm: syz.1.3496 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  208.512051][T16251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.512057][T16251] Call Trace:
[  208.512061][T16251]  <TASK>
[  208.512064][T16251]  dump_stack_lvl+0x189/0x250
[  208.512080][T16251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.512089][T16251]  ? __pfx__printk+0x10/0x10
[  208.512101][T16251]  ? kernfs_path_from_node+0x2c/0x260
[  208.512110][T16251]  ? kernfs_path_from_node+0x2c/0x260
[  208.512117][T16251]  ? kernfs_path_from_node+0x2c/0x260
[  208.512126][T16251]  ? kernfs_path_from_node+0x22c/0x260
[  208.512133][T16251]  ? kernfs_path_from_node+0x2c/0x260
[  208.512142][T16251]  sysfs_warn_dup+0x8e/0xa0
[  208.512153][T16251]  sysfs_do_create_link_sd+0xc0/0x110
[  208.512162][T16251]  device_add_class_symlinks+0x1cf/0x240
[  208.512175][T16251]  device_add+0x475/0xb50
[  208.512187][T16251]  wiphy_register+0x199a/0x26b0
[  208.512206][T16251]  ? __pfx_wiphy_register+0x10/0x10
[  208.512215][T16251]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  208.512230][T16251]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  208.512243][T16251]  ieee80211_register_hw+0x33e1/0x4120
[  208.512262][T16251]  ? ieee80211_register_hw+0x1451/0x4120
[  208.512277][T16251]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  208.512290][T16251]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.512305][T16251]  ? __hrtimer_setup+0x187/0x210
[  208.512313][T16251]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  208.512344][T16251]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  208.512368][T16251]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  208.512377][T16251]  ? trace_kmalloc+0x1f/0xd0
[  208.512388][T16251]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  208.512398][T16251]  ? kstrndup+0xbf/0x160
[  208.512412][T16251]  hwsim_new_radio_nl+0xea4/0x1b10
[  208.512424][T16251]  ? __pfx___nla_validate_parse+0x10/0x10
[  208.512440][T16251]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  208.512464][T16251]  ? __nla_parse+0x40/0x60
[  208.512474][T16251]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  208.512487][T16251]  genl_family_rcv_msg_doit+0x215/0x300
[  208.512499][T16251]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  208.512514][T16251]  ? bpf_lsm_capable+0x9/0x20
[  208.512523][T16251]  ? security_capable+0x7e/0x2e0
[  208.512535][T16251]  genl_rcv_msg+0x60e/0x790
[  208.512562][T16251]  ? __pfx_genl_rcv_msg+0x10/0x10
[  208.512573][T16251]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  208.512613][T16251]  netlink_rcv_skb+0x208/0x470
[  208.512627][T16251]  ? __pfx_genl_rcv_msg+0x10/0x10
[  208.512635][T16251]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  208.512654][T16251]  ? down_read+0x1ad/0x2e0
[  208.512665][T16251]  genl_rcv+0x28/0x40
[  208.512672][T16251]  netlink_unicast+0x75c/0x8e0
[  208.512687][T16251]  netlink_sendmsg+0x805/0xb30
[  208.512702][T16251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.512714][T16251]  ? aa_sock_msg_perm+0x94/0x160
[  208.512724][T16251]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  208.512733][T16251]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.512744][T16251]  __sock_sendmsg+0x21c/0x270
[  208.512755][T16251]  ____sys_sendmsg+0x505/0x830
[  208.512768][T16251]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.512783][T16251]  ? import_iovec+0x74/0xa0
[  208.512795][T16251]  ___sys_sendmsg+0x21f/0x2a0
[  208.512807][T16251]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.512833][T16251]  ? __fget_files+0x2a/0x420
[  208.512840][T16251]  ? __fget_files+0x3a0/0x420
[  208.512851][T16251]  __x64_sys_sendmsg+0x19b/0x260
[  208.512863][T16251]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.512879][T16251]  ? rcu_is_watching+0x15/0xb0
[  208.512890][T16251]  ? do_syscall_64+0xbe/0x3b0
[  208.512900][T16251]  do_syscall_64+0xfa/0x3b0
[  208.512907][T16251]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.512915][T16251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.512922][T16251]  ? exc_page_fault+0x9f/0xf0
[  208.512931][T16251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.512938][T16251] RIP: 0033:0x7fcbf678e9a9
[  208.512946][T16251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.512953][T16251] RSP: 002b:00007fcbf766d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.512962][T16251] RAX: ffffffffffffffda RBX: 00007fcbf69b5fa0 RCX: 00007fcbf678e9a9
[  208.512967][T16251] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  208.512972][T16251] RBP: 00007fcbf6810d69 R08: 0000000000000000 R09: 0000000000000000
[  208.512977][T16251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.512982][T16251] R13: 0000000000000000 R14: 00007fcbf69b5fa0 R15: 00007ffebdb106b8
[  208.512994][T16251]  </TASK>
[  208.744040][T16260] No such timeout policy "syz0"
[  208.945524][T16282] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  208.949711][T16282] CPU: 0 UID: 0 PID: 16282 Comm: syz.2.3504 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  208.949723][T16282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.949728][T16282] Call Trace:
[  208.949733][T16282]  <TASK>
[  208.949737][T16282]  dump_stack_lvl+0x189/0x250
[  208.949753][T16282]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.949763][T16282]  ? __pfx__printk+0x10/0x10
[  208.949774][T16282]  ? kernfs_path_from_node+0x2c/0x260
[  208.949783][T16282]  ? kernfs_path_from_node+0x2c/0x260
[  208.949790][T16282]  ? kernfs_path_from_node+0x2c/0x260
[  208.949798][T16282]  ? kernfs_path_from_node+0x22c/0x260
[  208.949805][T16282]  ? kernfs_path_from_node+0x2c/0x260
[  208.949815][T16282]  sysfs_warn_dup+0x8e/0xa0
[  208.949826][T16282]  sysfs_do_create_link_sd+0xc0/0x110
[  208.949835][T16282]  device_add_class_symlinks+0x1cf/0x240
[  208.949850][T16282]  device_add+0x475/0xb50
[  208.949863][T16282]  wiphy_register+0x199a/0x26b0
[  208.949880][T16282]  ? __pfx_wiphy_register+0x10/0x10
[  208.949890][T16282]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  208.949904][T16282]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  208.949918][T16282]  ieee80211_register_hw+0x33e1/0x4120
[  208.949937][T16282]  ? ieee80211_register_hw+0x1451/0x4120
[  208.949951][T16282]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  208.949963][T16282]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.949978][T16282]  ? __hrtimer_setup+0x187/0x210
[  208.950007][T16282]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  208.950021][T16282]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  208.950045][T16282]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  208.950056][T16282]  ? trace_kmalloc+0x1f/0xd0
[  208.950066][T16282]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  208.950077][T16282]  ? kstrndup+0xbf/0x160
[  208.950090][T16282]  hwsim_new_radio_nl+0xea4/0x1b10
[  208.950102][T16282]  ? __pfx___nla_validate_parse+0x10/0x10
[  208.950118][T16282]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  208.950136][T16282]  ? __nla_parse+0x40/0x60
[  208.950147][T16282]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  208.950160][T16282]  genl_family_rcv_msg_doit+0x215/0x300
[  208.950171][T16282]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  208.950184][T16282]  ? bpf_lsm_capable+0x9/0x20
[  208.950194][T16282]  ? security_capable+0x7e/0x2e0
[  208.950205][T16282]  genl_rcv_msg+0x60e/0x790
[  208.950221][T16282]  ? __pfx_genl_rcv_msg+0x10/0x10
[  208.950228][T16282]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  208.950244][T16282]  netlink_rcv_skb+0x208/0x470
[  208.950256][T16282]  ? __pfx_genl_rcv_msg+0x10/0x10
[  208.950264][T16282]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  208.950282][T16282]  ? down_read+0x1ad/0x2e0
[  208.950293][T16282]  genl_rcv+0x28/0x40
[  208.950300][T16282]  netlink_unicast+0x75c/0x8e0
[  208.950315][T16282]  netlink_sendmsg+0x805/0xb30
[  208.950330][T16282]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.950343][T16282]  ? aa_sock_msg_perm+0x94/0x160
[  208.950353][T16282]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  208.950361][T16282]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.950372][T16282]  __sock_sendmsg+0x21c/0x270
[  208.950383][T16282]  ____sys_sendmsg+0x505/0x830
[  208.950396][T16282]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.950411][T16282]  ? import_iovec+0x74/0xa0
[  208.950423][T16282]  ___sys_sendmsg+0x21f/0x2a0
[  208.950435][T16282]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.950463][T16282]  ? __fget_files+0x2a/0x420
[  208.950470][T16282]  ? __fget_files+0x3a0/0x420
[  208.950481][T16282]  __x64_sys_sendmsg+0x19b/0x260
[  208.950493][T16282]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.950512][T16282]  ? do_syscall_64+0xbe/0x3b0
[  208.950526][T16282]  do_syscall_64+0xfa/0x3b0
[  208.950537][T16282]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.950548][T16282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.950559][T16282]  ? exc_page_fault+0x9f/0xf0
[  208.950575][T16282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.950616][T16282] RIP: 0033:0x7fc92cf8e9a9
[  208.950630][T16282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.950642][T16282] RSP: 002b:00007fc92de7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.950658][T16282] RAX: ffffffffffffffda RBX: 00007fc92d1b5fa0 RCX: 00007fc92cf8e9a9
[  208.950669][T16282] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  208.950677][T16282] RBP: 00007fc92d010d69 R08: 0000000000000000 R09: 0000000000000000
[  208.950684][T16282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.950688][T16282] R13: 0000000000000000 R14: 00007fc92d1b5fa0 R15: 00007ffd0dc4c578
[  208.950701][T16282]  </TASK>
[  209.146147][T16286] batadv_slave_0: entered promiscuous mode
[  209.373770][ T5301] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  209.376209][ T5301] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  209.381542][ T5301] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  209.766633][T16349] : entered promiscuous mode
[  210.459705][T16385] validate_nla: 26 callbacks suppressed
[  210.459715][T16385] netlink: 'syz.1.3541': attribute type 1 has an invalid length.
[  210.472829][T16385] netlink: 'syz.1.3541': attribute type 3 has an invalid length.
[  210.808167][T16402] netlink: 'syz.1.3548': attribute type 4 has an invalid length.
[  210.832304][T16404] netlink: 'syz.1.3549': attribute type 4 has an invalid length.
[  211.046039][T16412] netlink: 'syz.1.3553': attribute type 32 has an invalid length.
[  211.126447][T16413] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  211.165651][T16423] netlink: 'syz.1.3554': attribute type 1 has an invalid length.
[  211.168140][T16423] netlink: 'syz.1.3554': attribute type 3 has an invalid length.
[  211.235503][T16428] netlink: 'syz.1.3556': attribute type 1 has an invalid length.
[  211.238051][T16428] netlink: 'syz.1.3556': attribute type 3 has an invalid length.
[  211.261382][T16430] set match dimension is over the limit!
[  211.265687][T16430] sctp: [Deprecated]: syz.1.3557 (pid 16430) Use of struct sctp_assoc_value in delayed_ack socket option.
[  211.265687][T16430] Use struct sctp_sack_info instead
[  211.345260][T16440] netlink: 'syz.2.3561': attribute type 1 has an invalid length.
[  212.325126][T16467] lo speed is unknown, defaulting to 1000
[  212.454784][T16469] delete_channel: no stack
[  212.491133][T16478] __nla_validate_parse: 87 callbacks suppressed
[  212.491143][T16478] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3576'.
[  212.531240][T16482] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.3578'.
[  212.534150][T16484] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3579'.
[  212.622974][T16491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3582'.
[  212.694251][T16491] 8021q: adding VLAN 0 to HW filter on device bond5
[  212.739906][T16499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3583'.
[  212.743712][T16499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3583'.
[  212.786857][T16502] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.816517][T16502] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.856604][T16502] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.915706][T16502] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.968143][T16502] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.975167][T16502] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.982018][T16502] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.988899][T16502] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.017179][T16504] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  213.020921][T16504] CPU: 1 UID: 0 PID: 16504 Comm: syz.2.3585 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  213.020933][T16504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.020938][T16504] Call Trace:
[  213.020942][T16504]  <TASK>
[  213.020946][T16504]  dump_stack_lvl+0x189/0x250
[  213.020961][T16504]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.020972][T16504]  ? __pfx__printk+0x10/0x10
[  213.020983][T16504]  ? kernfs_path_from_node+0x2c/0x260
[  213.020992][T16504]  ? kernfs_path_from_node+0x2c/0x260
[  213.020999][T16504]  ? kernfs_path_from_node+0x2c/0x260
[  213.021007][T16504]  ? kernfs_path_from_node+0x22c/0x260
[  213.021014][T16504]  ? kernfs_path_from_node+0x2c/0x260
[  213.021023][T16504]  sysfs_warn_dup+0x8e/0xa0
[  213.021035][T16504]  sysfs_do_create_link_sd+0xc0/0x110
[  213.021044][T16504]  device_add_class_symlinks+0x1cf/0x240
[  213.021057][T16504]  device_add+0x475/0xb50
[  213.021069][T16504]  wiphy_register+0x199a/0x26b0
[  213.021086][T16504]  ? __pfx_wiphy_register+0x10/0x10
[  213.021096][T16504]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  213.021111][T16504]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  213.021123][T16504]  ieee80211_register_hw+0x33e1/0x4120
[  213.021141][T16504]  ? ieee80211_register_hw+0x1451/0x4120
[  213.021156][T16504]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  213.021173][T16504]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.021188][T16504]  ? __hrtimer_setup+0x187/0x210
[  213.021196][T16504]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  213.021210][T16504]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  213.021234][T16504]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  213.021244][T16504]  ? trace_kmalloc+0x1f/0xd0
[  213.021253][T16504]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  213.021262][T16504]  ? kstrndup+0xbf/0x160
[  213.021274][T16504]  hwsim_new_radio_nl+0xea4/0x1b10
[  213.021286][T16504]  ? __pfx___nla_validate_parse+0x10/0x10
[  213.021302][T16504]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  213.021318][T16504]  ? __nla_parse+0x40/0x60
[  213.021329][T16504]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  213.021342][T16504]  genl_family_rcv_msg_doit+0x215/0x300
[  213.021353][T16504]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  213.021366][T16504]  ? bpf_lsm_capable+0x9/0x20
[  213.021375][T16504]  ? security_capable+0x7e/0x2e0
[  213.021386][T16504]  genl_rcv_msg+0x60e/0x790
[  213.021397][T16504]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.021404][T16504]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  213.021420][T16504]  netlink_rcv_skb+0x208/0x470
[  213.021431][T16504]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.021439][T16504]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  213.021456][T16504]  ? down_read+0x1ad/0x2e0
[  213.021467][T16504]  genl_rcv+0x28/0x40
[  213.021473][T16504]  netlink_unicast+0x75c/0x8e0
[  213.021487][T16504]  netlink_sendmsg+0x805/0xb30
[  213.021501][T16504]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.021512][T16504]  ? aa_sock_msg_perm+0x94/0x160
[  213.021521][T16504]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  213.021529][T16504]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.021561][T16504]  __sock_sendmsg+0x21c/0x270
[  213.021574][T16504]  ____sys_sendmsg+0x505/0x830
[  213.021588][T16504]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.021604][T16504]  ? import_iovec+0x74/0xa0
[  213.021617][T16504]  ___sys_sendmsg+0x21f/0x2a0
[  213.021629][T16504]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.021657][T16504]  ? __fget_files+0x2a/0x420
[  213.021665][T16504]  ? __fget_files+0x3a0/0x420
[  213.021676][T16504]  __x64_sys_sendmsg+0x19b/0x260
[  213.021688][T16504]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  213.021703][T16504]  ? rcu_is_watching+0x15/0xb0
[  213.021714][T16504]  ? do_syscall_64+0xbe/0x3b0
[  213.021724][T16504]  do_syscall_64+0xfa/0x3b0
[  213.021731][T16504]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.021738][T16504]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.021746][T16504]  ? exc_page_fault+0x9f/0xf0
[  213.021754][T16504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.021761][T16504] RIP: 0033:0x7fc92cf8e9a9
[  213.021769][T16504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.021775][T16504] RSP: 002b:00007fc92de7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.021784][T16504] RAX: ffffffffffffffda RBX: 00007fc92d1b5fa0 RCX: 00007fc92cf8e9a9
[  213.021790][T16504] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  213.021795][T16504] RBP: 00007fc92d010d69 R08: 0000000000000000 R09: 0000000000000000
[  213.021799][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.021804][T16504] R13: 0000000000000000 R14: 00007fc92d1b5fa0 R15: 00007ffd0dc4c578
[  213.021816][T16504]  </TASK>
[  213.197863][T16506] netlink: 4676 bytes leftover after parsing attributes in process `syz.0.3586'.
[  213.200797][T16506] openvswitch: netlink: Flow key attr not present in new flow.
[  213.281758][T16517] pim6reg1: entered promiscuous mode
[  213.284458][T16517] pim6reg1: entered allmulticast mode
[  213.464979][T16529] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3594'.
[  213.564732][T16537] netlink: 4676 bytes leftover after parsing attributes in process `syz.1.3598'.
[  213.566460][T16539] bridge0: port 1(erspan0) entered blocking state
[  213.567795][T16537] openvswitch: netlink: Flow key attr not present in new flow.
[  213.569812][T16539] bridge0: port 1(erspan0) entered disabled state
[  213.576627][T16539] erspan0: entered allmulticast mode
[  213.579119][T16539] erspan0: entered promiscuous mode
[  213.634399][T16539] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3599'.
[  213.865208][T16577] openvswitch: netlink: Flow key attr not present in new flow.
[  214.271992][T16610] 8021q: adding VLAN 0 to HW filter on device team0
[  214.277692][T16610] tipc: Resetting bearer <eth:team0>
[  214.280915][T16610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  214.304424][T16610] lo speed is unknown, defaulting to 1000
[  214.349074][T16611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.411658][T16610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.473961][T16621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  215.406999][T16636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.465998][T16636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.767860][T16644] validate_nla: 17 callbacks suppressed
[  215.767870][T16644] netlink: 'syz.0.3637': attribute type 1 has an invalid length.
[  215.772232][T16644] netlink: 'syz.0.3637': attribute type 3 has an invalid length.
[  216.131387][T16675] netlink: 'syz.0.3643': attribute type 1 has an invalid length.
[  216.195970][T16679] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  216.210549][T16679] openvswitch: netlink: Message has 1 unknown bytes.
[  216.223385][T16678] netlink: 'syz.2.3650': attribute type 1 has an invalid length.
[  216.236654][T16681] netlink: 'syz.1.3651': attribute type 8 has an invalid length.
[  216.252781][ T5845] Bluetooth: hci2: link tx timeout
[  216.254417][ T5845] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  216.457615][T16691] xt_socket: unknown flags 0xd0
[  216.621307][T16707] openvswitch: netlink: Missing key (keys=40, expected=80)
[  216.624047][T16707] netlink: 'syz.2.3662': attribute type 1 has an invalid length.
[  216.651844][T16707] 8021q: adding VLAN 0 to HW filter on device bond6
[  216.677856][T16707] 8021q: adding VLAN 0 to HW filter on device bond6
[  216.680235][T16707] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  216.689254][T16707] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  216.768422][T16705] sctp: [Deprecated]: syz.1.3661 (pid 16705) Use of int in max_burst socket option.
[  216.768422][T16705] Use struct sctp_assoc_value instead
[  216.788423][T16717] netlink: 'syz.2.3663': attribute type 1 has an invalid length.
[  216.872478][T16722] netlink: 'syz.0.3665': attribute type 4 has an invalid length.
[  216.917984][T16728] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  216.930237][T16728] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  216.952259][T16732] IPVS: dh: FWM 3 0x00000003 - no destination available
[  216.979756][T16736] macvlan1: entered promiscuous mode
[  216.981520][T16736] macvlan1: entered allmulticast mode
[  216.985482][T16736] bond8: (slave macvlan1): Error -98 calling set_mac_address
[  217.003181][T16732] lo speed is unknown, defaulting to 1000
[  217.052451][T16743] openvswitch: netlink: Flow key attr not present in new flow.
[  217.119152][T16747] netlink: 'syz.1.3674': attribute type 1 has an invalid length.
[  217.267619][T16760] 8021q: adding VLAN 0 to HW filter on device bond7
[  217.271869][T16760] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  217.376050][T16778] openvswitch: netlink: Flow key attr not present in new flow.
[  217.384518][T16774] sctp: [Deprecated]: syz.0.3684 (pid 16774) Use of int in max_burst socket option.
[  217.384518][T16774] Use struct sctp_assoc_value instead
[  217.416286][T16782] netlink: 'syz.0.3686': attribute type 1 has an invalid length.
[  217.521767][T16792] __nla_validate_parse: 34 callbacks suppressed
[  217.521777][T16792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3691'.
[  217.583489][T16801] netlink: 4676 bytes leftover after parsing attributes in process `syz.2.3694'.
[  217.629529][T16806] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3697'.
[  217.632519][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3697'.
[  217.640976][T16806] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3697'.
[  217.644347][T16807] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3695'.
[  217.647559][T16806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3697'.
[  217.650777][T16806] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3697'.
[  217.702796][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3699'.
[  217.705830][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3699'.
[  217.712164][T16811] syzkaller1: entered promiscuous mode
[  217.716779][T16811] syzkaller1: entered allmulticast mode
[  217.851419][T16824] x_tables: unsorted underflow at hook 2
[  218.103175][T16842] syzkaller1: entered promiscuous mode
[  218.105115][T16842] syzkaller1: entered allmulticast mode
[  218.312819][ T5223] Bluetooth: hci2: command 0x0406 tx timeout
[  218.545337][T16898] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  219.017995][T16908] tipc: Resetting bearer <eth:team0>
[  219.470770][T16945] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  219.586567][T16958] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  219.591183][T16958] CPU: 1 UID: 0 PID: 16958 Comm: syz.1.3757 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  219.591196][T16958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  219.591202][T16958] Call Trace:
[  219.591206][T16958]  <TASK>
[  219.591210][T16958]  dump_stack_lvl+0x189/0x250
[  219.591225][T16958]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.591235][T16958]  ? __pfx__printk+0x10/0x10
[  219.591246][T16958]  ? kernfs_path_from_node+0x2c/0x260
[  219.591254][T16958]  ? kernfs_path_from_node+0x2c/0x260
[  219.591262][T16958]  ? kernfs_path_from_node+0x2c/0x260
[  219.591271][T16958]  ? kernfs_path_from_node+0x22c/0x260
[  219.591278][T16958]  ? kernfs_path_from_node+0x2c/0x260
[  219.591286][T16958]  sysfs_warn_dup+0x8e/0xa0
[  219.591299][T16958]  sysfs_do_create_link_sd+0xc0/0x110
[  219.591307][T16958]  device_add_class_symlinks+0x1cf/0x240
[  219.591321][T16958]  device_add+0x475/0xb50
[  219.591333][T16958]  wiphy_register+0x199a/0x26b0
[  219.591354][T16958]  ? __pfx_wiphy_register+0x10/0x10
[  219.591363][T16958]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  219.591377][T16958]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  219.591390][T16958]  ieee80211_register_hw+0x33e1/0x4120
[  219.591409][T16958]  ? ieee80211_register_hw+0x1451/0x4120
[  219.591424][T16958]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  219.591437][T16958]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.591453][T16958]  ? __hrtimer_setup+0x187/0x210
[  219.591461][T16958]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  219.591498][T16958]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  219.591523][T16958]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  219.591533][T16958]  ? trace_kmalloc+0x1f/0xd0
[  219.591543][T16958]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  219.591553][T16958]  ? kstrndup+0xbf/0x160
[  219.591566][T16958]  hwsim_new_radio_nl+0xea4/0x1b10
[  219.591578][T16958]  ? __pfx___nla_validate_parse+0x10/0x10
[  219.591595][T16958]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  219.591611][T16958]  ? __nla_parse+0x40/0x60
[  219.591622][T16958]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  219.591635][T16958]  genl_family_rcv_msg_doit+0x215/0x300
[  219.591645][T16958]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  219.591659][T16958]  ? bpf_lsm_capable+0x9/0x20
[  219.591668][T16958]  ? security_capable+0x7e/0x2e0
[  219.591679][T16958]  genl_rcv_msg+0x60e/0x790
[  219.591707][T16958]  ? __pfx_genl_rcv_msg+0x10/0x10
[  219.591715][T16958]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  219.591732][T16958]  netlink_rcv_skb+0x208/0x470
[  219.591743][T16958]  ? __pfx_genl_rcv_msg+0x10/0x10
[  219.591752][T16958]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  219.591769][T16958]  ? down_read+0x1ad/0x2e0
[  219.591779][T16958]  genl_rcv+0x28/0x40
[  219.591786][T16958]  netlink_unicast+0x75c/0x8e0
[  219.591800][T16958]  netlink_sendmsg+0x805/0xb30
[  219.591814][T16958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.591825][T16958]  ? aa_sock_msg_perm+0x94/0x160
[  219.591835][T16958]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  219.591843][T16958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.591853][T16958]  __sock_sendmsg+0x21c/0x270
[  219.591863][T16958]  ____sys_sendmsg+0x505/0x830
[  219.591876][T16958]  ? __pfx_____sys_sendmsg+0x10/0x10
[  219.591906][T16958]  ? import_iovec+0x74/0xa0
[  219.591920][T16958]  ___sys_sendmsg+0x21f/0x2a0
[  219.591932][T16958]  ? __pfx____sys_sendmsg+0x10/0x10
[  219.591958][T16958]  ? __fget_files+0x2a/0x420
[  219.591965][T16958]  ? __fget_files+0x3a0/0x420
[  219.591976][T16958]  __x64_sys_sendmsg+0x19b/0x260
[  219.591988][T16958]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  219.592004][T16958]  ? rcu_is_watching+0x15/0xb0
[  219.592015][T16958]  ? do_syscall_64+0xbe/0x3b0
[  219.592026][T16958]  do_syscall_64+0xfa/0x3b0
[  219.592033][T16958]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.592040][T16958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.592048][T16958]  ? exc_page_fault+0x9f/0xf0
[  219.592056][T16958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.592063][T16958] RIP: 0033:0x7fcbf678e9a9
[  219.592072][T16958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.592079][T16958] RSP: 002b:00007fcbf766d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.592087][T16958] RAX: ffffffffffffffda RBX: 00007fcbf69b5fa0 RCX: 00007fcbf678e9a9
[  219.592093][T16958] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  219.592098][T16958] RBP: 00007fcbf6810d69 R08: 0000000000000000 R09: 0000000000000000
[  219.592103][T16958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.592108][T16958] R13: 0000000000000000 R14: 00007fcbf69b5fa0 R15: 00007ffebdb106b8
[  219.592120][T16958]  </TASK>
[  219.832392][T16965] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  219.956818][T16965] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  219.962137][T16965] bond4: (slave bridge5): Releasing active interface
[  219.966419][T16965] bond6: (slave gretap2): Releasing active interface
[  220.238387][T17014] xt_HMARK: spi-set and port-set can't be combined
[  220.375632][T17026] bridge0: entered promiscuous mode
[  220.535326][T17032] net_ratelimit: 6 callbacks suppressed
[  220.535336][T17032] openvswitch: netlink: Flow actions attr not present in new flow.
[  220.805164][T17077] validate_nla: 27 callbacks suppressed
[  220.805247][T17077] netlink: 'syz.0.3799': attribute type 1 has an invalid length.
[  220.810283][T17077] netlink: 'syz.0.3799': attribute type 3 has an invalid length.
[  220.990692][T17091] syz_tun: entered allmulticast mode
[  221.062176][T17100] netlink: 'syz.0.3810': attribute type 1 has an invalid length.
[  221.066958][T17100] netlink: 'syz.0.3810': attribute type 3 has an invalid length.
[  221.098738][T17104] x_tables: ip6_tables: mh match: only valid for protocol 135
[  221.145498][T17112] netlink: 'syz.1.3814': attribute type 4 has an invalid length.
[  222.011745][T17138] netlink: 'syz.0.3823': attribute type 1 has an invalid length.
[  222.017247][T17138] netlink: 'syz.0.3823': attribute type 3 has an invalid length.
[  222.305426][T17152] netlink: 'syz.1.3829': attribute type 1 has an invalid length.
[  222.358209][T17156] netlink: 'syz.2.3831': attribute type 1 has an invalid length.
[  222.360779][T17156] netlink: 'syz.2.3831': attribute type 3 has an invalid length.
[  222.399721][T17163] x_tables: duplicate underflow at hook 1
[  222.534236][T17181] __nla_validate_parse: 47 callbacks suppressed
[  222.534246][T17181] netlink: 4676 bytes leftover after parsing attributes in process `syz.2.3840'.
[  222.539335][T17181] openvswitch: netlink: Flow key attr not present in new flow.
[  222.704618][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3846'.
[  222.757504][T17208] lo speed is unknown, defaulting to 1000
[  223.101485][T17226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3855'.
[  223.108590][T17226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3855'.
[  223.122927][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3854'.
[  223.126392][T17228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3854'.
[  223.147793][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3856'.
[  223.230488][T17231] ip6_vti0: mtu less than device minimum
[  223.328763][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3861'.
[  223.331803][T17246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3861'.
[  223.354591][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3862'.
[  223.646561][T17277] openvswitch: netlink: Flow key attr not present in new flow.
[  223.907913][   T55] block nbd0: Receive control failed (result -32)
[  223.935692][T17299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  224.130664][T17312] bond7: entered promiscuous mode
[  224.132491][T17312] bond7: entered allmulticast mode
[  224.135652][T17312] 8021q: adding VLAN 0 to HW filter on device bond7
[  224.198774][T17320] lo speed is unknown, defaulting to 1000
[  224.871820][T17373] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  224.879375][T17373] CPU: 1 UID: 0 PID: 17373 Comm: syz.0.3908 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  224.879388][T17373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.879393][T17373] Call Trace:
[  224.879398][T17373]  <TASK>
[  224.879402][T17373]  dump_stack_lvl+0x189/0x250
[  224.879438][T17373]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.879449][T17373]  ? __pfx__printk+0x10/0x10
[  224.879460][T17373]  ? kernfs_path_from_node+0x2c/0x260
[  224.879468][T17373]  ? kernfs_path_from_node+0x2c/0x260
[  224.879474][T17373]  ? kernfs_path_from_node+0x2c/0x260
[  224.879483][T17373]  ? kernfs_path_from_node+0x22c/0x260
[  224.879490][T17373]  ? kernfs_path_from_node+0x2c/0x260
[  224.879499][T17373]  sysfs_warn_dup+0x8e/0xa0
[  224.879511][T17373]  sysfs_do_create_link_sd+0xc0/0x110
[  224.879519][T17373]  device_add_class_symlinks+0x1cf/0x240
[  224.879534][T17373]  device_add+0x475/0xb50
[  224.879546][T17373]  wiphy_register+0x199a/0x26b0
[  224.879564][T17373]  ? __pfx_wiphy_register+0x10/0x10
[  224.879573][T17373]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  224.879587][T17373]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  224.879601][T17373]  ieee80211_register_hw+0x33e1/0x4120
[  224.879619][T17373]  ? ieee80211_register_hw+0x1451/0x4120
[  224.879634][T17373]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  224.879647][T17373]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  224.879663][T17373]  ? __hrtimer_setup+0x187/0x210
[  224.879672][T17373]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  224.879685][T17373]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  224.879707][T17373]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  224.879718][T17373]  ? trace_kmalloc+0x1f/0xd0
[  224.879727][T17373]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  224.879738][T17373]  ? kstrndup+0xbf/0x160
[  224.879750][T17373]  hwsim_new_radio_nl+0xea4/0x1b10
[  224.879761][T17373]  ? __pfx___nla_validate_parse+0x10/0x10
[  224.879777][T17373]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  224.879792][T17373]  ? __nla_parse+0x40/0x60
[  224.879803][T17373]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  224.879815][T17373]  genl_family_rcv_msg_doit+0x215/0x300
[  224.879826][T17373]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  224.879840][T17373]  ? bpf_lsm_capable+0x9/0x20
[  224.879849][T17373]  ? security_capable+0x7e/0x2e0
[  224.879860][T17373]  genl_rcv_msg+0x60e/0x790
[  224.879870][T17373]  ? __pfx_genl_rcv_msg+0x10/0x10
[  224.879877][T17373]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  224.879893][T17373]  netlink_rcv_skb+0x208/0x470
[  224.879904][T17373]  ? __pfx_genl_rcv_msg+0x10/0x10
[  224.879912][T17373]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  224.879929][T17373]  ? down_read+0x1ad/0x2e0
[  224.879939][T17373]  genl_rcv+0x28/0x40
[  224.879946][T17373]  netlink_unicast+0x75c/0x8e0
[  224.879960][T17373]  netlink_sendmsg+0x805/0xb30
[  224.879973][T17373]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.879985][T17373]  ? aa_sock_msg_perm+0x94/0x160
[  224.879993][T17373]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  224.880001][T17373]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.880011][T17373]  __sock_sendmsg+0x21c/0x270
[  224.880028][T17373]  ____sys_sendmsg+0x505/0x830
[  224.880041][T17373]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.880056][T17373]  ? import_iovec+0x74/0xa0
[  224.880067][T17373]  ___sys_sendmsg+0x21f/0x2a0
[  224.880080][T17373]  ? __pfx____sys_sendmsg+0x10/0x10
[  224.880108][T17373]  ? __fget_files+0x2a/0x420
[  224.880115][T17373]  ? __fget_files+0x3a0/0x420
[  224.880127][T17373]  __x64_sys_sendmsg+0x19b/0x260
[  224.880140][T17373]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  224.880159][T17373]  ? do_syscall_64+0xbe/0x3b0
[  224.880172][T17373]  do_syscall_64+0xfa/0x3b0
[  224.880180][T17373]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.880188][T17373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.880196][T17373]  ? exc_page_fault+0x9f/0xf0
[  224.880204][T17373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.880212][T17373] RIP: 0033:0x7fa11b18e9a9
[  224.880220][T17373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.880227][T17373] RSP: 002b:00007fa11bf33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.880237][T17373] RAX: ffffffffffffffda RBX: 00007fa11b3b5fa0 RCX: 00007fa11b18e9a9
[  224.880243][T17373] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  224.880248][T17373] RBP: 00007fa11b210d69 R08: 0000000000000000 R09: 0000000000000000
[  224.880253][T17373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.880258][T17373] R13: 0000000000000000 R14: 00007fa11b3b5fa0 R15: 00007ffe4c1aee18
[  224.880271][T17373]  </TASK>
[  225.122474][T17383] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  225.793574][T17426] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.839262][T17426] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.897896][T17426] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.979990][T17426] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.024690][T17430] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  226.030754][T17434] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  226.085113][T17426] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.094520][T17426] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.101350][T17426] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.112461][T17426] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.327011][T17464] validate_nla: 17 callbacks suppressed
[  226.327021][T17464] netlink: 'syz.0.3938': attribute type 4 has an invalid length.
[  226.470937][T17481] netlink: 'syz.0.3943': attribute type 4 has an invalid length.
[  226.484038][  T974] lo speed is unknown, defaulting to 1000
[  226.491223][  T974] syz0: Port: 1 Link DOWN
[  226.495227][  T974] lo speed is unknown, defaulting to 1000
[  226.624262][T17499] sctp: [Deprecated]: syz.1.3950 (pid 17499) Use of struct sctp_assoc_value in delayed_ack socket option.
[  226.624262][T17499] Use struct sctp_sack_info instead
[  226.917422][T17530] netlink: 'syz.1.3961': attribute type 1 has an invalid length.
[  226.919939][T17530] netlink: 'syz.1.3961': attribute type 3 has an invalid length.
[  226.930845][T17534] batman_adv: batadv0: Adding interface: gretap3
[  226.933220][T17534] batman_adv: batadv0: The MTU of interface gretap3 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  226.941172][T17534] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active
[  226.959464][T17536] netlink: 'syz.1.3963': attribute type 4 has an invalid length.
[  227.112834][T17554] netlink: 'syz.0.3971': attribute type 1 has an invalid length.
[  227.115494][T17554] netlink: 'syz.0.3971': attribute type 3 has an invalid length.
[  227.462701][T17559] netlink: 'syz.2.3973': attribute type 4 has an invalid length.
[  227.775257][T17576] __nla_validate_parse: 54 callbacks suppressed
[  227.775271][T17576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3980'.
[  227.780321][T17576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3980'.
[  227.783451][T17576] netlink: 'syz.2.3980': attribute type 4 has an invalid length.
[  227.808667][T17578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3981'.
[  227.851986][T17578] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3981'.
[  227.899225][T17586] netlink: 4676 bytes leftover after parsing attributes in process `syz.2.3984'.
[  227.902081][T17586] openvswitch: netlink: Flow key attr not present in new flow.
[  228.064114][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3990'.
[  228.073336][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3990'.
[  228.076222][T17603] netlink: 'syz.2.3990': attribute type 4 has an invalid length.
[  228.098598][T17606] lo speed is unknown, defaulting to 1000
[  228.100942][T17607] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3992'.
[  228.106788][T17609] netlink: 4676 bytes leftover after parsing attributes in process `syz.2.3994'.
[  228.109816][T17609] openvswitch: netlink: Flow key attr not present in new flow.
[  228.199463][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3995'.
[  228.221241][T17620] syzkaller1: entered promiscuous mode
[  228.223653][T17620] syzkaller1: entered allmulticast mode
[  229.604149][T17704] openvswitch: netlink: Flow key attr not present in new flow.
[  229.775755][T17721] syzkaller0: left promiscuous mode
[  229.777819][T17721] syzkaller0: left allmulticast mode
[  229.807591][T17722] Dead loop on virtual device ip6_vti0, fix it urgently!
[  229.810437][T17722] Dead loop on virtual device ip6_vti0, fix it urgently!
[  230.375083][   T33] audit: type=1800 audit(1753202994.116:4): pid=17731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4034" name="memory.events" dev="tmpfs" ino=6944 res=0 errno=0
[  230.388765][   T33] audit: type=1804 audit(1753202994.126:5): pid=17731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4034" name="/newroot/1360/memory.events" dev="tmpfs" ino=6944 res=1 errno=0
[  230.678456][T17734] netlink: set zone limit has 8 unknown bytes
[  230.964710][T17755] bridge1: entered allmulticast mode
[  230.991544][T17752] bridge1: left allmulticast mode
[  231.926270][T17771] validate_nla: 10 callbacks suppressed
[  231.926280][T17771] netlink: 'syz.0.4046': attribute type 4 has an invalid length.
[  232.154181][T17790] x_tables: duplicate underflow at hook 1
[  232.454600][T17730] Set syz1 is full, maxelem 65536 reached
[  232.500126][T17810] netlink: 'syz.2.4058': attribute type 1 has an invalid length.
[  233.601528][T17844] __nla_validate_parse: 26 callbacks suppressed
[  233.601539][T17844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4069'.
[  233.700748][T17854] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  233.720066][T17852] netlink: 'syz.0.4072': attribute type 1 has an invalid length.
[  233.723572][T17852] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4072'.
[  233.747911][T17858] netlink: 'syz.2.4076': attribute type 1 has an invalid length.
[  233.750772][T17858] netlink: 'syz.2.4076': attribute type 3 has an invalid length.
[  233.759948][T17858] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4076'.
[  233.787037][T17863] netlink: 'syz.0.4078': attribute type 1 has an invalid length.
[  233.790812][T17863] netlink: 'syz.0.4078': attribute type 3 has an invalid length.
[  233.800941][T17863] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4078'.
[  233.868374][T17875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4081'.
[  233.871421][T17875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4081'.
[  233.874444][T17875] netlink: 'syz.0.4081': attribute type 4 has an invalid length.
[  233.966807][T17881] netlink: 'syz.2.4083': attribute type 1 has an invalid length.
[  234.098388][T17895] netlink: 'syz.0.4087': attribute type 1 has an invalid length.
[  234.100878][T17895] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4087'.
[  234.175073][T17901] syz.2.4089: vmalloc error: size 4722688, failed to allocated page array size 9224, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  234.180680][T17901] CPU: 0 UID: 0 PID: 17901 Comm: syz.2.4089 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  234.180692][T17901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.180697][T17901] Call Trace:
[  234.180701][T17901]  <TASK>
[  234.180705][T17901]  dump_stack_lvl+0x189/0x250
[  234.180719][T17901]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.180728][T17901]  ? __pfx__printk+0x10/0x10
[  234.180738][T17901]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  234.180748][T17901]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  234.180757][T17901]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  234.180767][T17901]  warn_alloc+0x214/0x310
[  234.180777][T17901]  ? __pfx_warn_alloc+0x10/0x10
[  234.180788][T17901]  ? __get_vm_area_node+0x28f/0x300
[  234.180798][T17901]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  234.180808][T17901]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  234.180829][T17901]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  234.180840][T17901]  ? __pfx_aa_get_newest_label+0x10/0x10
[  234.180851][T17901]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  234.180858][T17901]  __vmalloc_noprof+0xb1/0xf0
[  234.180868][T17901]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  234.180877][T17901]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  234.180886][T17901]  bpf_prog_alloc+0x3c/0x1a0
[  234.180894][T17901]  bpf_prog_load+0x735/0x1930
[  234.180905][T17901]  ? __pfx_bpf_prog_load+0x10/0x10
[  234.180921][T17901]  ? bpf_lsm_bpf+0x9/0x20
[  234.180929][T17901]  ? security_bpf+0x7e/0x300
[  234.180937][T17901]  __sys_bpf+0x5f1/0x860
[  234.180954][T17901]  ? __pfx___sys_bpf+0x10/0x10
[  234.180970][T17901]  ? exc_page_fault+0x76/0xf0
[  234.180983][T17901]  __x64_sys_bpf+0x7c/0x90
[  234.180993][T17901]  do_syscall_64+0xfa/0x3b0
[  234.181000][T17901]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.181007][T17901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.181015][T17901]  ? exc_page_fault+0x9f/0xf0
[  234.181023][T17901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.181030][T17901] RIP: 0033:0x7fc92cf8e9a9
[  234.181037][T17901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.181044][T17901] RSP: 002b:00007fc92de5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  234.181052][T17901] RAX: ffffffffffffffda RBX: 00007fc92d1b6080 RCX: 00007fc92cf8e9a9
[  234.181058][T17901] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005
[  234.181063][T17901] RBP: 00007fc92d010d69 R08: 0000000000000000 R09: 0000000000000000
[  234.181067][T17901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.181072][T17901] R13: 0000000000000001 R14: 00007fc92d1b6080 R15: 00007ffd0dc4c578
[  234.181083][T17901]  </TASK>
[  234.181086][T17901] Mem-Info:
[  234.267955][T17901] active_anon:12634 inactive_anon:0 isolated_anon:0
[  234.267955][T17901]  active_file:1355 inactive_file:38277 isolated_file:0
[  234.267955][T17901]  unevictable:1768 dirty:281 writeback:0
[  234.267955][T17901]  slab_reclaimable:10407 slab_unreclaimable:98851
[  234.267955][T17901]  mapped:18262 shmem:2472 pagetables:914
[  234.267955][T17901]  sec_pagetables:0 bounce:0
[  234.267955][T17901]  kernel_misc_reclaimable:0
[  234.267955][T17901]  free:242903 free_pcp:20653 free_cma:0
[  234.281776][T17901] Node 0 active_anon:20388kB inactive_anon:0kB active_file:3988kB inactive_file:10260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47380kB dirty:608kB writeback:0kB shmem:5220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7292kB pagetables:2048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  234.292209][T17901] Node 1 active_anon:30148kB inactive_anon:0kB active_file:1432kB inactive_file:142848kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25668kB dirty:516kB writeback:0kB shmem:4668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4848kB pagetables:1608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  234.302412][T17901] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  234.311258][T17901] lowmem_reserve[]: 0 812 812 812 812
[  234.313060][T17901] Node 0 DMA32 free:338588kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20388kB inactive_anon:0kB active_file:3988kB inactive_file:10260kB unevictable:3536kB writepending:608kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:25820kB local_pcp:7604kB free_cma:0kB
[  234.322814][T17901] lowmem_reserve[]: 0 0 0 0 0
[  234.324347][T17901] Node 1 DMA32 free:442476kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16132kB local_pcp:8076kB free_cma:0kB
[  234.334017][T17901] lowmem_reserve[]: 0 0 854 854 854
[  234.335698][T17901] Node 1 Normal free:175188kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30148kB inactive_anon:0kB active_file:1432kB inactive_file:142848kB unevictable:3536kB writepending:516kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:40660kB local_pcp:17256kB free_cma:0kB
[  234.345605][T17901] lowmem_reserve[]: 0 0 0 0 0
[  234.347214][T17901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  234.351692][T17901] Node 0 DMA32: 749*4kB (UM) 160*8kB (UE) 461*16kB (UE) 183*32kB (UME) 251*64kB (UME) 141*128kB (UM) 53*256kB (UM) 14*512kB (UM) 8*1024kB (UME) 8*2048kB (UM) 59*4096kB (UM) = 338596kB
[  234.359194][T17901] Node 1 DMA32: 3*4kB (U) 6*8kB (UM) 3*16kB (UM) 4*32kB (UM) 4*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 4*2048kB (UM) 104*4096kB (UM) = 442476kB
[  234.365466][T17901] Node 1 Normal: 954*4kB (U) 573*8kB (UME) 279*16kB (UME) 238*32kB (UME) 266*64kB (UME) 188*128kB (UME) 58*256kB (UME) 17*512kB (UM) 28*1024kB (UME) 12*2048kB (UE) 9*4096kB (UM) = 175232kB
[  234.371659][T17901] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.374753][T17901] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  234.377605][T17901] 42104 total pagecache pages
[  234.379130][T17901] 0 pages in swap cache
[  234.380428][T17901] Free swap  = 124996kB
[  234.382013][T17901] Total swap = 124996kB
[  234.383640][T17901] 786301 pages RAM
[  234.384862][T17901] 0 pages HighMem/MovableOnly
[  234.386350][T17901] 241058 pages reserved
[  234.387644][T17901] 0 pages cma reserved
[  234.552777][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4093'.
[  234.592798][T17917] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4094'.
[  234.597639][T17917] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4094'.
[  234.858044][T17938] x_tables: duplicate underflow at hook 2
[  234.883840][T17942] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  235.138872][T17961] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  235.141712][T17961] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  235.144809][T17961] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  235.148043][T17961] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  235.154496][T17963] lo speed is unknown, defaulting to 1000
[  235.307978][T17977] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  235.311947][T17977] CPU: 1 UID: 0 PID: 17977 Comm: syz.2.4120 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  235.311959][T17977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  235.311965][T17977] Call Trace:
[  235.311969][T17977]  <TASK>
[  235.311973][T17977]  dump_stack_lvl+0x189/0x250
[  235.311988][T17977]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.311998][T17977]  ? __pfx__printk+0x10/0x10
[  235.312009][T17977]  ? kernfs_path_from_node+0x2c/0x260
[  235.312018][T17977]  ? kernfs_path_from_node+0x2c/0x260
[  235.312027][T17977]  ? kernfs_path_from_node+0x2c/0x260
[  235.312039][T17977]  ? kernfs_path_from_node+0x22c/0x260
[  235.312048][T17977]  ? kernfs_path_from_node+0x2c/0x260
[  235.312061][T17977]  sysfs_warn_dup+0x8e/0xa0
[  235.312080][T17977]  sysfs_do_create_link_sd+0xc0/0x110
[  235.312095][T17977]  device_add_class_symlinks+0x1cf/0x240
[  235.312118][T17977]  device_add+0x475/0xb50
[  235.312140][T17977]  wiphy_register+0x199a/0x26b0
[  235.312174][T17977]  ? __pfx_wiphy_register+0x10/0x10
[  235.312184][T17977]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  235.312198][T17977]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  235.312212][T17977]  ieee80211_register_hw+0x33e1/0x4120
[  235.312231][T17977]  ? ieee80211_register_hw+0x1451/0x4120
[  235.312245][T17977]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  235.312258][T17977]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  235.312273][T17977]  ? __hrtimer_setup+0x187/0x210
[  235.312283][T17977]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  235.312296][T17977]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  235.312340][T17977]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  235.312352][T17977]  ? trace_kmalloc+0x1f/0xd0
[  235.312362][T17977]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  235.312372][T17977]  ? kstrndup+0xbf/0x160
[  235.312385][T17977]  hwsim_new_radio_nl+0xea4/0x1b10
[  235.312398][T17977]  ? __pfx___nla_validate_parse+0x10/0x10
[  235.312414][T17977]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  235.312431][T17977]  ? __nla_parse+0x40/0x60
[  235.312441][T17977]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  235.312454][T17977]  genl_family_rcv_msg_doit+0x215/0x300
[  235.312465][T17977]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  235.312479][T17977]  ? bpf_lsm_capable+0x9/0x20
[  235.312488][T17977]  ? security_capable+0x7e/0x2e0
[  235.312499][T17977]  genl_rcv_msg+0x60e/0x790
[  235.312509][T17977]  ? __pfx_genl_rcv_msg+0x10/0x10
[  235.312517][T17977]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  235.312533][T17977]  netlink_rcv_skb+0x208/0x470
[  235.312543][T17977]  ? __pfx_genl_rcv_msg+0x10/0x10
[  235.312568][T17977]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  235.312586][T17977]  ? down_read+0x1ad/0x2e0
[  235.312595][T17977]  genl_rcv+0x28/0x40
[  235.312602][T17977]  netlink_unicast+0x75c/0x8e0
[  235.312616][T17977]  netlink_sendmsg+0x805/0xb30
[  235.312630][T17977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.312641][T17977]  ? aa_sock_msg_perm+0x94/0x160
[  235.312650][T17977]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  235.312658][T17977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  235.312668][T17977]  __sock_sendmsg+0x21c/0x270
[  235.312680][T17977]  ____sys_sendmsg+0x505/0x830
[  235.312710][T17977]  ? __pfx_____sys_sendmsg+0x10/0x10
[  235.312725][T17977]  ? import_iovec+0x74/0xa0
[  235.312736][T17977]  ___sys_sendmsg+0x21f/0x2a0
[  235.312749][T17977]  ? __pfx____sys_sendmsg+0x10/0x10
[  235.312775][T17977]  ? __fget_files+0x2a/0x420
[  235.312782][T17977]  ? __fget_files+0x3a0/0x420
[  235.312793][T17977]  __x64_sys_sendmsg+0x19b/0x260
[  235.312805][T17977]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  235.312821][T17977]  ? rcu_is_watching+0x15/0xb0
[  235.312832][T17977]  ? do_syscall_64+0xbe/0x3b0
[  235.312842][T17977]  do_syscall_64+0xfa/0x3b0
[  235.312850][T17977]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.312857][T17977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.312864][T17977]  ? exc_page_fault+0x9f/0xf0
[  235.312873][T17977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.312880][T17977] RIP: 0033:0x7fc92cf8e9a9
[  235.312887][T17977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.312894][T17977] RSP: 002b:00007fc92de7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  235.312903][T17977] RAX: ffffffffffffffda RBX: 00007fc92d1b5fa0 RCX: 00007fc92cf8e9a9
[  235.312909][T17977] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  235.312914][T17977] RBP: 00007fc92d010d69 R08: 0000000000000000 R09: 0000000000000000
[  235.312920][T17977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.312925][T17977] R13: 0000000000000000 R14: 00007fc92d1b5fa0 R15: 00007ffd0dc4c578
[  235.312938][T17977]  </TASK>
[  235.454656][T17978] xt_TCPMSS: Only works on TCP SYN packets
[  235.592388][T17988] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96
[  236.622505][T18014] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  236.639651][T18013] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  236.760708][T18029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.770208][T18031] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  236.805520][T18029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.836954][T18029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.862112][T18036] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  236.895943][T18029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.967032][T18029] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.977292][T18029] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.984361][T18029] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.991510][T18029] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.343224][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  237.504150][ T5223] Bluetooth: hci2: command 0x0406 tx timeout
[  237.936910][T18083] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  237.995724][T18088] bridge_slave_0: default FDB implementation only supports local addresses
[  238.085078][T18106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  238.416431][T18145] validate_nla: 9 callbacks suppressed
[  238.416441][T18145] netlink: 'syz.0.4181': attribute type 2 has an invalid length.
[  238.465119][T18145] netlink: 'syz.0.4181': attribute type 16 has an invalid length.
[  238.467664][T18145] netlink: 'syz.0.4181': attribute type 17 has an invalid length.
[  238.594264][T18145] batman_adv: batadv0: Interface deactivated: macvlan0
[  238.625600][T18145] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.628620][T18145] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.631443][T18145] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.634387][T18145] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.672500][T18154] __nla_validate_parse: 25 callbacks suppressed
[  238.672515][T18154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4183'.
[  238.679459][T18154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4183'.
[  238.685579][T18154] netlink: 'syz.0.4183': attribute type 4 has an invalid length.
[  238.817311][T18160] lo speed is unknown, defaulting to 1000
[  238.975714][T18165] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  238.979486][T18165] CPU: 1 UID: 0 PID: 18165 Comm: syz.1.4187 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  238.979498][T18165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.979503][T18165] Call Trace:
[  238.979507][T18165]  <TASK>
[  238.979511][T18165]  dump_stack_lvl+0x189/0x250
[  238.979526][T18165]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.979536][T18165]  ? __pfx__printk+0x10/0x10
[  238.979547][T18165]  ? kernfs_path_from_node+0x2c/0x260
[  238.979555][T18165]  ? kernfs_path_from_node+0x2c/0x260
[  238.979562][T18165]  ? kernfs_path_from_node+0x2c/0x260
[  238.979570][T18165]  ? kernfs_path_from_node+0x22c/0x260
[  238.979577][T18165]  ? kernfs_path_from_node+0x2c/0x260
[  238.979586][T18165]  sysfs_warn_dup+0x8e/0xa0
[  238.979599][T18165]  sysfs_do_create_link_sd+0xc0/0x110
[  238.979607][T18165]  device_add_class_symlinks+0x1cf/0x240
[  238.979619][T18165]  device_add+0x475/0xb50
[  238.979631][T18165]  wiphy_register+0x199a/0x26b0
[  238.979648][T18165]  ? __pfx_wiphy_register+0x10/0x10
[  238.979657][T18165]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  238.979671][T18165]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  238.979684][T18165]  ieee80211_register_hw+0x33e1/0x4120
[  238.979703][T18165]  ? ieee80211_register_hw+0x1451/0x4120
[  238.979717][T18165]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  238.979729][T18165]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  238.979744][T18165]  ? __hrtimer_setup+0x187/0x210
[  238.979752][T18165]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  238.979766][T18165]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  238.979789][T18165]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  238.979799][T18165]  ? trace_kmalloc+0x1f/0xd0
[  238.979808][T18165]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  238.979818][T18165]  ? kstrndup+0xbf/0x160
[  238.979831][T18165]  hwsim_new_radio_nl+0xea4/0x1b10
[  238.979843][T18165]  ? __pfx___nla_validate_parse+0x10/0x10
[  238.979865][T18165]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  238.979877][T18165]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  238.979890][T18165]  ? __nla_parse+0x40/0x60
[  238.979901][T18165]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  238.979914][T18165]  genl_family_rcv_msg_doit+0x215/0x300
[  238.979926][T18165]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  238.979940][T18165]  ? bpf_lsm_capable+0x9/0x20
[  238.979950][T18165]  ? security_capable+0x7e/0x2e0
[  238.979962][T18165]  genl_rcv_msg+0x60e/0x790
[  238.979973][T18165]  ? __pfx_genl_rcv_msg+0x10/0x10
[  238.979980][T18165]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  238.979996][T18165]  netlink_rcv_skb+0x208/0x470
[  238.980006][T18165]  ? __pfx_genl_rcv_msg+0x10/0x10
[  238.980015][T18165]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  238.980033][T18165]  ? down_read+0x1ad/0x2e0
[  238.980043][T18165]  genl_rcv+0x28/0x40
[  238.980051][T18165]  netlink_unicast+0x75c/0x8e0
[  238.980065][T18165]  netlink_sendmsg+0x805/0xb30
[  238.980079][T18165]  ? __pfx_netlink_sendmsg+0x10/0x10
[  238.980090][T18165]  ? aa_sock_msg_perm+0x94/0x160
[  238.980100][T18165]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  238.980108][T18165]  ? __pfx_netlink_sendmsg+0x10/0x10
[  238.980118][T18165]  __sock_sendmsg+0x21c/0x270
[  238.980128][T18165]  ____sys_sendmsg+0x505/0x830
[  238.980141][T18165]  ? __pfx_____sys_sendmsg+0x10/0x10
[  238.980155][T18165]  ? import_iovec+0x74/0xa0
[  238.980167][T18165]  ___sys_sendmsg+0x21f/0x2a0
[  238.980179][T18165]  ? __pfx____sys_sendmsg+0x10/0x10
[  238.980205][T18165]  ? __fget_files+0x2a/0x420
[  238.980211][T18165]  ? __fget_files+0x3a0/0x420
[  238.980223][T18165]  __x64_sys_sendmsg+0x19b/0x260
[  238.980234][T18165]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  238.980249][T18165]  ? rcu_is_watching+0x15/0xb0
[  238.980261][T18165]  ? do_syscall_64+0xbe/0x3b0
[  238.980271][T18165]  do_syscall_64+0xfa/0x3b0
[  238.980304][T18165]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.980313][T18165]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.980321][T18165]  ? exc_page_fault+0x9f/0xf0
[  238.980330][T18165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.980338][T18165] RIP: 0033:0x7fcbf678e9a9
[  238.980347][T18165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.980354][T18165] RSP: 002b:00007fcbf766d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  238.980364][T18165] RAX: ffffffffffffffda RBX: 00007fcbf69b5fa0 RCX: 00007fcbf678e9a9
[  238.980370][T18165] RDX: 0000000000000320 RSI: 0000200000000040 RDI: 0000000000000004
[  238.980375][T18165] RBP: 00007fcbf6810d69 R08: 0000000000000000 R09: 0000000000000000
[  238.980380][T18165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.980384][T18165] R13: 0000000000000000 R14: 00007fcbf69b5fa0 R15: 00007ffebdb106b8
[  238.980397][T18165]  </TASK>
[  239.178481][T18169] IPVS: length: 164 != 8
[  239.555576][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'.
[  239.891598][T18187] netlink: 'syz.0.4194': attribute type 1 has an invalid length.
[  239.895191][T18187] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4194'.
[  239.992082][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4198'.
[  239.997091][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4198'.
[  240.025709][T18197] netlink: 'syz.0.4199': attribute type 1 has an invalid length.
[  240.028553][T18197] netlink: 'syz.0.4199': attribute type 3 has an invalid length.
[  240.031793][T18197] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4199'.
[  240.201704][T18212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4206'.
[  240.267901][T18221] netlink: 'syz.1.4210': attribute type 1 has an invalid length.
[  240.268759][T18222] netlink: 'syz.0.4211': attribute type 1 has an invalid length.
[  240.270452][T18221] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4210'.
[  240.276031][T18222] netlink: 'syz.0.4211': attribute type 3 has an invalid length.
[  240.280662][T18222] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4211'.
[  240.418956][T18236] lo speed is unknown, defaulting to 1000
[  240.492394][T18249] : entered promiscuous mode
[  241.630236][T18310] syzkaller0: entered promiscuous mode
[  241.632138][T18310] syzkaller0: entered allmulticast mode
[  242.840321][T18339] lo speed is unknown, defaulting to 1000
[  243.015607][T18349] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  243.041873][T18349] syzkaller0: entered promiscuous mode
[  243.043801][T18349] syzkaller0: entered allmulticast mode
[  243.445096][T18375] validate_nla: 10 callbacks suppressed
[  243.445108][T18375] netlink: 'syz.1.4262': attribute type 1 has an invalid length.
[  243.449615][T18375] netlink: 'syz.1.4262': attribute type 3 has an invalid length.
[  243.731756][T18393] netlink: 'syz.1.4271': attribute type 29 has an invalid length.
[  244.161570][T18418] __nla_validate_parse: 21 callbacks suppressed
[  244.161581][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4279'.
[  244.357687][T18427] netlink: 'syz.2.4282': attribute type 1 has an invalid length.
[  244.518114][T18394] delete_channel: no stack
[  244.558097][T18442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4287'.
[  244.562319][T18442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4287'.
[  244.574552][T18442] netlink: 'syz.0.4287': attribute type 4 has an invalid length.
[  244.676126][T18453] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4291'.
[  244.726331][T18457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4293'.
[  244.838037][T18466] dvmrp0: entered allmulticast mode
[  244.859395][T18468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4296'.
[  244.937329][T18478] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4297'.
[  244.940250][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4297'.
[  244.946131][T18478] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4297'.
[  244.949015][T18478] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4297'.
[  245.528362][T18490] netlink: 'syz.0.4304': attribute type 1 has an invalid length.
[  245.530934][T18490] netlink: 'syz.0.4304': attribute type 3 has an invalid length.
[  245.827915][T18515] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  245.897194][T18527] netlink: 'syz.2.4317': attribute type 4 has an invalid length.
[  245.956391][T18535] syzkaller0: entered promiscuous mode
[  245.958503][T18535] syzkaller0: entered allmulticast mode
[  246.078162][T18546] netlink: 'syz.2.4325': attribute type 16 has an invalid length.
[  246.112388][T18551] netlink: 'syz.2.4327': attribute type 1 has an invalid length.
[  246.149289][T18551] bond9: entered promiscuous mode
[  246.151415][T18551] bond9: entered allmulticast mode
[  246.444738][T18570] block nbd1: server does not support multiple connections per device.
[  246.448316][T18570] block nbd1: shutting down sockets
[  246.579934][T18585] C: entered allmulticast mode
[  246.590758][T18583] dvmrp8: entered allmulticast mode
[  246.807904][T18587] C: left allmulticast mode
[  247.006229][T18616] lo speed is unknown, defaulting to 1000
[  247.332932][T18636] netlink: 'syz.0.4356': attribute type 11 has an invalid length.
[  247.414627][T18640] pim6reg0: tun_chr_ioctl cmd 2148553947
[  247.515701][T18649] vlan2: entered promiscuous mode
[  247.517345][T18649] bridge0: entered promiscuous mode
[  247.519019][T18649] vlan2: entered allmulticast mode
[  247.521096][T18649] bridge0: entered allmulticast mode
[  247.817691][T18693] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.863709][T18693] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.895375][T18693] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.946660][T18693] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.999064][T18693] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.013007][T18693] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  248.021256][T18713] x_tables: duplicate underflow at hook 1
[  248.026259][T18693] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  248.036539][T18693] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.099210][T18715] wg2: entered promiscuous mode
[  248.100927][T18715] wg2: entered allmulticast mode
[  249.039238][T18757] validate_nla: 12 callbacks suppressed
[  249.039247][T18757] netlink: 'syz.1.4404': attribute type 1 has an invalid length.
[  249.055689][T18757] 8021q: adding VLAN 0 to HW filter on device bond8
[  249.068734][T18757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.071129][T18757] IPv6: NLM_F_CREATE should be set when creating new route
[  249.073742][T18757] IPv6: NLM_F_CREATE should be set when creating new route
[  249.076406][T18757] IPv6: NLM_F_CREATE should be set when creating new route
[  249.087367][T18757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.441883][T18774] netlink: 'syz.0.4409': attribute type 1 has an invalid length.
[  249.445214][T18774] netlink: 'syz.0.4409': attribute type 3 has an invalid length.
[  249.447691][T18774] __nla_validate_parse: 30 callbacks suppressed
[  249.447698][T18774] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4409'.
[  249.457386][T18775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.459840][T18775] IPv6: NLM_F_CREATE should be set when creating new route
[  249.462241][T18775] IPv6: NLM_F_CREATE should be set when creating new route
[  249.486325][T18778] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  249.664906][T18794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4416'.
[  249.668715][T18794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4416'.
[  249.671697][T18794] netlink: 'syz.1.4416': attribute type 4 has an invalid length.
[  249.904460][T18817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4424'.
[  249.907256][T18817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4424'.
[  249.910083][T18817] netlink: 'syz.0.4424': attribute type 4 has an invalid length.
[  249.936437][T18819] netlink: 'syz.0.4425': attribute type 10 has an invalid length.
[  249.939032][T18819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4425'.
[  249.941996][T18819] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  249.947859][T18765] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  249.951348][T18819] : renamed from bond_slave_0
[  250.077021][T18835] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:19999
[  250.248220][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4437'.
[  250.251669][T18847] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  250.403759][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4440'.
[  250.406540][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4440'.
[  250.409410][T18860] netlink: 'syz.0.4440': attribute type 4 has an invalid length.
[  250.489523][T18861] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  250.687085][T18878] netlink: 'syz.1.4445': attribute type 9 has an invalid length.
[  250.739093][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.741661][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.752456][T18881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4446'.
[  250.778089][T18883] netlink: 'syz.0.4447': attribute type 4 has an invalid length.
[  250.860856][T18885] tipc: Enabling of bearer <et:g> rejected, media not registered
[  251.120853][T18911] netlink: 'syz.0.4461': attribute type 1 has an invalid length.
[  251.288923][T18939] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  252.397344][T18993] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.468595][T18993] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.525438][T18993] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.565906][T18993] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.647362][T18993] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.654614][T18993] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.661672][T18993] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.670574][T18993] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.925078][T19013] 8021q: VLANs not supported on xfrm0
[  252.971169][T19024] syz_tun (unregistering): left allmulticast mode
[  252.979362][T19031] 0{X: renamed from gretap0
[  252.983189][T19031] 0{X: entered allmulticast mode
[  252.985389][T19031] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  254.092322][T19150] validate_nla: 10 callbacks suppressed
[  254.092332][T19150] netlink: 'syz.0.4553': attribute type 4 has an invalid length.
[  254.238384][T19159] netlink: 'syz.0.4557': attribute type 4 has an invalid length.
[  254.293899][T19171] batman_adv: batadv0: Removing interface: macvlan0
[  254.298569][T19171] batman_adv: batadv0: Removing interface: gretap3
[  254.327558][T19173] netlink: 'syz.1.4561': attribute type 1 has an invalid length.
[  254.381553][T19179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.404025][T19180] syzkaller1: entered promiscuous mode
[  254.405861][T19180] syzkaller1: entered allmulticast mode
[  254.441726][T19185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  254.785452][   T33] audit: type=1107 audit(1753203018.526:6): pid=19191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB'
[  254.856525][T19195] __nla_validate_parse: 32 callbacks suppressed
[  254.856535][T19195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4568'.
[  254.880809][T19197] netlink: 'syz.2.4569': attribute type 9 has an invalid length.
[  254.884634][T19198] netlink: 'syz.2.4569': attribute type 9 has an invalid length.
[  260.382811][    C0] ==================================================================
[  260.385500][    C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  260.388084][    C0] Read of size 2 at addr ffff88803188342a by task swapper/0/0
[  260.391104][    C0] 
[  260.392241][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  260.392251][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.392256][    C0] Call Trace:
[  260.392259][    C0]  <IRQ>
[  260.392264][    C0]  dump_stack_lvl+0x189/0x250
[  260.392275][    C0]  ? rcu_is_watching+0x15/0xb0
[  260.392284][    C0]  ? __kasan_check_byte+0x12/0x40
[  260.392294][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.392301][    C0]  ? rcu_is_watching+0x15/0xb0
[  260.392308][    C0]  ? lock_release+0x4b/0x3e0
[  260.392317][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  260.392326][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  260.392334][    C0]  print_report+0xca/0x230
[  260.392340][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  260.392348][    C0]  kasan_report+0x118/0x150
[  260.392357][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  260.392366][    C0]  rose_timer_expiry+0x471/0x4b0
[  260.392374][    C0]  call_timer_fn+0x17e/0x5f0
[  260.392381][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  260.392388][    C0]  ? call_timer_fn+0xbe/0x5f0
[  260.392394][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  260.392402][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  260.392412][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.392420][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  260.392427][    C0]  __run_timer_base+0x61a/0x860
[  260.392437][    C0]  ? ktime_get+0x3e/0x1f0
[  260.392447][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  260.392455][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  260.392467][    C0]  run_timer_softirq+0xb7/0x180
[  260.392476][    C0]  handle_softirqs+0x286/0x870
[  260.392485][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  260.392493][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  260.392501][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  260.392512][    C0]  __irq_exit_rcu+0xca/0x1f0
[  260.392518][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  260.392527][    C0]  irq_exit_rcu+0x9/0x30
[  260.392534][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  260.392540][    C0]  </IRQ>
[  260.392543][    C0]  <TASK>
[  260.392560][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  260.392571][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  260.392579][    C0] Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 ad 1a 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  260.392585][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  260.392592][    C0] RAX: d6f2ce74d7ffd700 RBX: ffffffff81976a48 RCX: d6f2ce74d7ffd700
[  260.392598][    C0] RDX: 0000000000000001 RSI: ffffffff8d996116 RDI: ffffffff8be28c00
[  260.392603][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  260.392608][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa1d6f0
[  260.392613][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  260.392618][    C0]  ? do_idle+0x1e8/0x510
[  260.392628][    C0]  default_idle+0x13/0x20
[  260.392635][    C0]  default_idle_call+0x74/0xb0
[  260.392642][    C0]  do_idle+0x1e8/0x510
[  260.392651][    C0]  ? __pfx_do_idle+0x10/0x10
[  260.392660][    C0]  cpu_startup_entry+0x44/0x60
[  260.392670][    C0]  rest_init+0x2de/0x300
[  260.392677][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  260.392686][    C0]  start_kernel+0x47d/0x500
[  260.392696][    C0]  x86_64_start_reservations+0x24/0x30
[  260.392706][    C0]  x86_64_start_kernel+0x143/0x1c0
[  260.392716][    C0]  common_startup_64+0x13e/0x147
[  260.392728][    C0]  </TASK>
[  260.392731][    C0] 
[  260.526015][    C0] Allocated by task 18837:
[  260.527695][    C0]  kasan_save_track+0x3e/0x80
[  260.529194][    C0]  __kasan_kmalloc+0x93/0xb0
[  260.530998][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  260.533251][    C0]  tomoyo_find_next_domain+0xdc/0x1aa0
[  260.535015][    C0]  tomoyo_bprm_check_security+0x11c/0x180
[  260.536883][    C0]  security_bprm_check+0x89/0x270
[  260.538547][    C0]  bprm_execve+0x8ee/0x1450
[  260.539985][    C0]  kernel_execve+0x8f0/0x9f0
[  260.541458][    C0]  call_usermodehelper_exec_async+0x210/0x360
[  260.543422][    C0]  ret_from_fork+0x3fc/0x770
[  260.544950][    C0]  ret_from_fork_asm+0x1a/0x30
[  260.546525][    C0] 
[  260.547304][    C0] Freed by task 18837:
[  260.548653][    C0]  kasan_save_track+0x3e/0x80
[  260.550218][    C0]  kasan_save_free_info+0x46/0x50
[  260.551877][    C0]  __kasan_slab_free+0x62/0x70
[  260.553456][    C0]  kfree+0x18e/0x440
[  260.554758][    C0]  tomoyo_find_next_domain+0x173e/0x1aa0
[  260.556599][    C0]  tomoyo_bprm_check_security+0x11c/0x180
[  260.558474][    C0]  security_bprm_check+0x89/0x270
[  260.560154][    C0]  bprm_execve+0x8ee/0x1450
[  260.561654][    C0]  kernel_execve+0x8f0/0x9f0
[  260.563172][    C0]  call_usermodehelper_exec_async+0x210/0x360
[  260.565144][    C0]  ret_from_fork+0x3fc/0x770
[  260.566630][    C0]  ret_from_fork_asm+0x1a/0x30
[  260.568219][    C0] 
[  260.569005][    C0] The buggy address belongs to the object at ffff888031883400
[  260.569005][    C0]  which belongs to the cache kmalloc-512 of size 512
[  260.573310][    C0] The buggy address is located 42 bytes inside of
[  260.573310][    C0]  freed 512-byte region [ffff888031883400, ffff888031883600)
[  260.577635][    C0] 
[  260.578450][    C0] The buggy address belongs to the physical page:
[  260.580535][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031883400 pfn:0x31880
[  260.583786][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  260.586529][    C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  260.589257][    C0] page_type: f5(slab)
[  260.590569][    C0] raw: 00fff00000000240 ffff88801a441c80 ffffea0000c89f10 ffffea0000c5c710
[  260.593349][    C0] raw: ffff888031883400 000000000010000f 00000000f5000000 0000000000000000
[  260.596122][    C0] head: 00fff00000000240 ffff88801a441c80 ffffea0000c89f10 ffffea0000c5c710
[  260.598903][    C0] head: ffff888031883400 000000000010000f 00000000f5000000 0000000000000000
[  260.601699][    C0] head: 00fff00000000002 ffffea0000c62001 00000000ffffffff 00000000ffffffff
[  260.604494][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  260.607311][    C0] page dumped because: kasan: bad access detected
[  260.609402][    C0] page_owner tracks the page as allocated
[  260.611279][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9, tgid 9 (kworker/0:0), ts 54414711371, free_ts 0
[  260.616957][    C0]  post_alloc_hook+0x240/0x2a0
[  260.618532][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  260.620351][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  260.622214][    C0]  alloc_pages_mpol+0x232/0x4a0
[  260.623765][    C0]  allocate_slab+0x8a/0x3b0
[  260.625263][    C0]  ___slab_alloc+0xbfc/0x1480
[  260.626771][    C0]  __kmalloc_noprof+0x305/0x4f0
[  260.628312][    C0]  switchdev_deferred_enqueue+0x2d/0x240
[  260.630143][    C0]  br_switchdev_mdb_notify+0x25e/0x410
[  260.631929][    C0]  __br_mdb_notify+0x73/0x970
[  260.633482][    C0]  __br_multicast_add_group+0x84f/0xa30
[  260.635291][    C0]  br_multicast_rcv+0x3a5f/0x74b0
[  260.636938][    C0]  br_dev_xmit+0xaf7/0x1840
[  260.638444][    C0]  dev_hard_start_xmit+0x2d7/0x830
[  260.640122][    C0]  __dev_queue_xmit+0x1adf/0x3a70
[  260.641782][    C0]  ip6_finish_output2+0x11bc/0x16a0
[  260.643498][    C0] page_owner free stack trace missing
[  260.645257][    C0] 
[  260.646079][    C0] Memory state around the buggy address:
[  260.647907][    C0]  ffff888031883300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  260.650494][    C0]  ffff888031883380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  260.653083][    C0] >ffff888031883400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  260.655672][    C0]                                   ^
[  260.657426][    C0]  ffff888031883480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  260.660029][    C0]  ffff888031883500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  260.662651][    C0] ==================================================================
[  260.665330][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  260.667652][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  260.671476][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.674654][    C0] Call Trace:
[  260.675715][    C0]  <IRQ>
[  260.676630][    C0]  dump_stack_lvl+0x99/0x250
[  260.678100][    C0]  ? __asan_memcpy+0x40/0x70
[  260.679582][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.681300][    C0]  ? __pfx__printk+0x10/0x10
[  260.682822][    C0]  panic+0x2db/0x790
[  260.684123][    C0]  ? __pfx_panic+0x10/0x10
[  260.685598][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  260.687527][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  260.689469][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  260.691519][    C0]  ? print_memory_metadata+0x314/0x400
[  260.693252][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  260.694939][    C0]  check_panic_on_warn+0x89/0xb0
[  260.696567][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  260.698254][    C0]  end_report+0x78/0x160
[  260.699633][    C0]  kasan_report+0x129/0x150
[  260.701143][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  260.702738][    C0]  rose_timer_expiry+0x471/0x4b0
[  260.704303][    C0]  call_timer_fn+0x17e/0x5f0
[  260.705916][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  260.707741][    C0]  ? call_timer_fn+0xbe/0x5f0
[  260.709302][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  260.711006][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  260.712743][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.714433][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  260.716218][    C0]  __run_timer_base+0x61a/0x860
[  260.717827][    C0]  ? ktime_get+0x3e/0x1f0
[  260.719285][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  260.721045][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  260.723127][    C0]  run_timer_softirq+0xb7/0x180
[  260.724735][    C0]  handle_softirqs+0x286/0x870
[  260.726323][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  260.727854][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  260.729567][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  260.731269][    C0]  __irq_exit_rcu+0xca/0x1f0
[  260.732799][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  260.734498][    C0]  irq_exit_rcu+0x9/0x30
[  260.735853][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  260.737673][    C0]  </IRQ>
[  260.738681][    C0]  <TASK>
[  260.739683][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  260.741650][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  260.743533][    C0] Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 ad 1a 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  260.749749][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  260.751746][    C0] RAX: d6f2ce74d7ffd700 RBX: ffffffff81976a48 RCX: d6f2ce74d7ffd700
[  260.754328][    C0] RDX: 0000000000000001 RSI: ffffffff8d996116 RDI: ffffffff8be28c00
[  260.756907][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  260.759504][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa1d6f0
[  260.762097][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  260.764667][    C0]  ? do_idle+0x1e8/0x510
[  260.766076][    C0]  default_idle+0x13/0x20
[  260.767503][    C0]  default_idle_call+0x74/0xb0
[  260.769116][    C0]  do_idle+0x1e8/0x510
[  260.770477][    C0]  ? __pfx_do_idle+0x10/0x10
[  260.772017][    C0]  cpu_startup_entry+0x44/0x60
[  260.773598][    C0]  rest_init+0x2de/0x300
[  260.774993][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  260.776815][    C0]  start_kernel+0x47d/0x500
[  260.778327][    C0]  x86_64_start_reservations+0x24/0x30
[  260.780127][    C0]  x86_64_start_kernel+0x143/0x1c0
[  260.781809][    C0]  common_startup_64+0x13e/0x147
[  260.783452][    C0]  </TASK>
[  260.785258][    C0] Kernel Offset: disabled
[  260.786683][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:50:24  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000007470
R8 =ffff8881085c0237 R9 =1ffff110210b8046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18d0 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005639f3436680 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000041 000000362f616973
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=2f74656e2f35316d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=f9a40377eca2f300 RBX=ffffffff81976a48 RCX=f9a40377eca2f300 RDX=0000000000000001
RSI=ffffffff8d996116 RDI=ffffffff8be28c00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110201d2000
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005639f3435600 CR3=0000000109772000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000400000070 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000041 000000362f616973
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=2f74656e2f35316d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
