last executing test programs:

2.808639323s ago: executing program 3 (id=4541):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r6)
sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2404c101)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r10 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
listen(r1, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000000)="2813fe7edfb64d566b4d9e8c952730a436f48b83f857633172dedf23af871f2b1d0d769fb39b1ddfad6897b1301a05d7835c19c95f34efe950c792ed9d39c1f29f7c2698d66f36f0155715b39228d5d4c68d343b31c0990686a62c5ed54ebe50da6241696e94dc0d695cd077a02c", 0x6e}, {&(0x7f0000000540)="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", 0xfc}, {&(0x7f0000000100)='@', 0x1}, {&(0x7f00000001c0)="696d1c61a14886f48f9a16229644827691feaf61a84b70d4a2682472b105ff4629c5ab522d089acc2994ab3eb0f457c58c27bd5e2eb5e5bd23e63202304190d99670b6dd51342bbd041c75e0615763c9aa689b06dfb3319fe32dc097f2e1f6bf6d8474be38b0e758610ebe46c1b762e7a60ee23b861ad75a3904a70d1ee9c01dc9aee4a8", 0x84}, {&(0x7f0000000340)="3b57b1ba37e575e237a85a717c3b406dc27e02ed8948bbf5c736faec9fbefc808eb80625c645a35f3ebd287bc373a9c2540b548c521abbc8e50bcb2dbb0a5bfb3e915abd0c2729de805da5d372491526300f341806a0d0b178fedc0382f532f9e0cfbaec68", 0x65}, {&(0x7f00000002c0)="46943cf6ab9c8fdcc0afa5f8666583bec4100b68f1", 0x15}, {&(0x7f0000000440)}, {&(0x7f0000000640)="01c20fb72c201f874dc9c938f9b70f9472997faf0ee1ab81e8ff293a380e0d645ac3eed79ed6b560b6c0aa42bc2cf4fe6871cbe52f8886262e44045a14ba0be1360d6571aaff6e737e1f3921abcbe9f15a710ba3c5a9462037e52251f25c921c7debf3fb15fef247876c6f42f2aa6cab4748028680026427735741d3f8745e4be0cf258ebb448df42cae57539903bef0f6c89cb0aea8e77d5a637a890a4dcd76fa286a5f53bc07249872b4779f49d5a0a24895160b7472ec430f54d27903ade8b25ac32022fe4d62a5f19e6dfc66ccd916ecdf2950cda0aaee889d0c53462da1e44d554e11eaf136e56e4a4e6a04e9b0095920aa", 0xf4}, {&(0x7f0000000480)="67f84448e39dc71a043e788e2d6d64b3690361256de9ce872c383381ae78345f78d0d0a9208416f561794cc56a5317a4b20cd35fe2b0338c4de7ce5a55b58d75f5b0a610d5cb3180247060ac979ed7bf05747bec", 0x54}, {&(0x7f0000000740)="91afe3779ad3f6146c8ad42068c0163a660013f1b68e1a57a8f582df31932695c4b78e2ef1f2423fc49d9ab5750a0e1c3f17eaf83d594b0d292286a10d26901c5a914e1111b66851b543d27ee283109e1f33d1571fff7a591082833a17ab29ed7b8e0eed0a601ec1407ce2d1239cd0005794e664fff8feb2835528ca2a2b2db30854f5d043833debac320a478b04a854188610fb61c260f82812272ac90bcfd1481b2a2c094a1647e5ddd5a36acadc220b0e764efc7fe92f9ecf2b6cee0a37a81ca75658335613792fe0250ebc20ab7a294438605d602ed5da33ea19e6cf50944a0e68191c76e251f4", 0xe9}], 0xa, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r12, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.577204914s ago: executing program 2 (id=4548):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x36, 0x0, 0x1, 0x9b2987a6}, 0x28)
syz_emit_ethernet(0x84e, &(0x7f0000002040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x818, 0x2b, 0x0, @private2, @local, {[@hopopts={0x3c, 0x101, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0x6, [0x100000001, 0x6, 0x8]}}, @generic={0x14, 0x7e4, "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"}]}], {0x0, 0x0, 0x8}}}}}}, 0x0)
r0 = socket$inet(0x2, 0x3, 0x21)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={<r1=>0x0, 0x3}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280)={r1, 0xa6, "ea8e1d48308ddd827a40f018ef7fd6d71090fdeb724cccd2e836720614886d118223f1e162485916db73cf14383bc2b40ff90feacb4cfec9ee6578916ebce30383f83f79949d4fe556dbdc4472c03d854e728fcabbcfe98bf8f7cc1ead89c501c9fdf9124cdfc5014eebd03d4c96d5f9d1f82829172209305c326045484a6773353b153e64a5e0236bad588301d4d5f61fcb056e1065f7134d2e10103045130aa5ea0570d50a"}, &(0x7f0000000380)=0xae)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20048004)

2.495980295s ago: executing program 3 (id=4549):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800003000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5, r5}, 0x10)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r5, 0x4, 0xf6, "53334eff324d0b4f5a8516b89a13619899072a9f2630d1628fd831f3c6df8f912e18892c697f90d124f41542d4795cfc2ef8d739bad3ab4cd86508c4ef9c01eaafe29990d17a6fce7c6fc9cb8eefa66609586b250ebae73c0a1deb04f47fc00ac3522c2837abf3f213d102fd7c57772549ee52c6866e4a9651e3b72a61072de30bd4970dfed9fa0a845358e86388baf6a5f56c2df8f243f93200e521843d3705fb5857afc0e61f906ca8a8769877db9239cde635e02847c7823726dadb62949016aaf2df985fd2648344dcb4c0c340d857b1921b9d84994682ccf51dbda97d169c70cbd7c4afaecaa0684f45efe3eeca7036da103b5c"}, 0xfe)
r6 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x17b}, {&(0x7f0000000000)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd46c823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a6a79dd2d20ff1637187bf9b58377bd5ae528ea9724f55170710f20afb05daee9af157462e409255943c5beacc8f0c9140b82f1a835cfd1675c0a833032324dd37a901d33d11497fcc9cb469297b1631d0e09b00497628399389129d30e098b5547c985ae9ac28c6cd154fe71cfddd82fb86bf475a11ec273", 0x149}, {&(0x7f00000012c0)="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", 0x16d}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x0)
recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0)

2.335739625s ago: executing program 2 (id=4550):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='erspan0\x00', 0x10)
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x63, @private2, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xd01}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000140)=@deltfilter={0x4e, 0x2d, 0x1, 0x70bd28, 0x1, {0x0, 0x0, 0x0, r4, {}, {}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x800)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000000001000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb"], 0x8)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003100)=@newtaction={0xef0, 0x30, 0x25, 0x0, 0x0, {}, [{0xedc, 0x1, [@m_pedit={0xed8, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x40}, {}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe200}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x401}, {}, {0x80}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x176}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x2000000}, {}, {0x0, 0xd}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x80000}, {}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {0x8000}], [{}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x5c, 0x6, "0ecfe260d8d69c94bc6316fe0615c02b3276f36a774dd7d0e030d2391a1723006aa7335ca043393d48df801e812d0f2ba7f8dca3ecc72e7b92d2f6f570a0d85e6ccf0cec55f7d020466c2230a0f726036000000000000000"}, {0xc}, {0xc}}}]}]}, 0xef0}}, 0x20004000)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
r11 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg(r11, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
write$nci(0xffffffffffffffff, &(0x7f0000000440)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x6c, "17b81da8e03f3a9261219182d7bd4e7a6e544bc0babcf37e4979959053baba5518e3eece8788fa34dfc630f1e69c396fde7065aa3e25300400abaecfa1bcb7fd4b5a5a4683e0eb5c30a294e3142d7cfce311ce5c1fe41b357e02591fbc1877e4c9bb"}, 0x65)
sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

2.302919674s ago: executing program 3 (id=4551):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800050001"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) (async)
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)

2.051459436s ago: executing program 3 (id=4556):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a8d0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8008}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x77}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000855}, 0x0)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180060200a990390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)
getsockopt$inet6_tcp_int(r4, 0x6, 0x24, 0x0, &(0x7f0000002000))

1.786633084s ago: executing program 1 (id=4562):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async)
listen(r1, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000080)={0x0, 0xea60}, 0x10) (async)
read(r3, &(0x7f0000000240)=""/60, 0x3c) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r8, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x20, r5, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x80) (async)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x43, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}})

1.58777612s ago: executing program 1 (id=4566):
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=@newtaction={0x1a8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x194, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_PARMS={0x2, 0x2, {0x300}}]}, {0x4, 0x6, "9294c48078440a5b991a1436f1c7b7965582000000000000000000000000f4ffffff38f77bf966e7e9dd1d260a681726f9b872d91cb3c263c8506e1527f6e3a9df5b99b34b6eb6e92f65d5277166882436cae2fa9b7eded73a2c2b0a69a028427a6c4f247644fed91f6b95ebff9639f5ab5ad90738ab0166e17b86523bc9f6b8dc3df6bb9c57a8ba67a8ae36cbb1559dddf37b73d7e721a269745b40c6bad48787608bfa984a684efa318c2125d933c96a50ec800a2451caca74096ae9a364e221510269c4b59c"}, {0xc}, {0xc, 0x4}}}, @m_mpls={0x140, 0x1d, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x2a}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9000}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5f}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x20008010)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000007c0)=""/26, 0x1a}], 0x5}, 0xfffffffc}], 0x2, 0x10, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0)
r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)

1.42803651s ago: executing program 2 (id=4568):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x2, 0x8, 0x8, 0x1, 0xffffffffffffffff, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', <r2=>0x0})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r2, 0x1f, 0x1, 0x8001, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3, 0x0, 0x0, 0x700}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)

1.424531577s ago: executing program 0 (id=4569):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000040))
ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000080))
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000000c0)={0x29, 0x2})
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)
r2 = getpid()
sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x134, 0x13, 0x20, 0x70bd29, 0x25dfdbff, {0x7}, [@generic="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", @nested={0xc, 0x40, 0x0, 0x1, [@typed={0x8, 0x155, 0x0, 0x0, @pid=r2}]}, @typed={0x14, 0x135, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x4048010)
getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000005, 0x1010, r1, 0xc910c000)
r3 = socket$isdn(0x22, 0x3, 0x10)
sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000400)}, {&(0x7f0000000440)="896588cb61ae52c7a869c081d4df5eaafba22e14551164fe81828d43c2aafd53a4ec2329ab5a95995f10d6e71ed828d86b265056b54b83", 0x37}, {&(0x7f0000000480)="14934ead3180e27f1d5ef37f973da405418f04b96df427fedb0d584db4f45c9d130434fbb6d16c9dd0a02cf4171cbe7094cee72981fe819a79f12a20185f06466624c7c5a905cd53d66bcf3926ff605d6716868add6b9b51a62a175c56b1a603475d9c637a54f5ae76a32e7bc03f02f13d126e61d578baea787fc7806e0baac361be098b1b", 0x85}, {&(0x7f0000000540)="8bd82a9d0d96a0d29f1bac92a4847cf1f4833c8c43f814d022df5c84ffca00c48f91f641efa80f9d9d3445c94bdba5a4a63238ca7fdd7ad8db39eca171fd31d87422a6e698e8bf252d071940a6ff0700aa1bd43bf544502d39a1ab7f7c67ad39b8c8299c274121e23770c96c502c8a7611575039640f41afbaa2df17a74da87761740da50fefcb6dd1b82299e0cf045686ddd1d2b76177d46acb5b8ca1a0e48b2b6e76fdeccd9a3c", 0xa8}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="d8f06fa000bf7a847249dd5f487c6d72030d556a5531b18be8a46fcc523a516d27c89fdd996da4f91104e0b023d83ec754ddea579c8a2419bf7029699db49255bf960b645b5499bb775560a3f70516", 0x4f}, {&(0x7f0000001680)="9dfed90df79d96308d879ea1bc2bf61048c52e7faae76d8dc6bf2e9f7dc8cf42d5", 0x21}], 0x7, &(0x7f0000001740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}, 0x24000050)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000017c0), &(0x7f0000001800)=0x4)
r4 = openat$cgroup_freezer_state(r1, &(0x7f0000001880), 0x2, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000001cc0)={&(0x7f0000001840), 0xc, &(0x7f0000001c80)={&(0x7f00000018c0)={0x390, 0x32, 0x8, 0x70bd2c, 0x25dfdbff, {0x9}, [@generic="8650f28d4d7bcb5461516a9a973d8c5f3384f4a3c3978aed593fd7d7cd2bc06e2a76d3822be5d00165cd1d770b9764a2b2af5605f6dca58a6c1a1c2936393f7fb9080dc8be336884a4a0a9f98b8f8b80dfa539506239faa503dd49db03ef16e77ae158781b6829", @generic="993c4b04114edff40527b7db404ceff880e2fc527ac42d23ccd3a3936f47bb66dcb84100c173510f2c566438303531f61f8b5e06cc81b4273a89b493fdc4918415584bbe88087ed83ab21b6db87c70bbc946b8019d049ad50eee86718cfc087ebd882bcbff5f9c04f60e888078fadfa5dc4f43995608089505806680cc1a0ed35b1608a01a4173b34272a73ec7af29ad056527705381cdb25fb2cd5f9d8eaa19c8a03dcf4565776a126c547da8562eae8706646a29c14d", @typed={0x50, 0x158, 0x0, 0x0, @binary="747e820893ccdfedd9013115aff961cb621cdd667eca8192f88c5be6c3307a879111cb3290471d20fa947dfa3292b331f8ca33ec13fcca198ee0c59cdae6e69cdac33718ea0e969f638bb568"}, @generic="0d42b024a8bdf87260b8c8dd52b320257281c81ffdc62fb81ee348372b07dc77bc8434bd2f6e75d2d2aa3442866074bd0f91b52523f48dc30500248c3162aec6f0b7990d5f885e8a59340d5a5a1366d1dc1a5d74c43eaca319c74c9314e319dcc58676b4fda8ee139f8beb1b7ca4b55c3b36ed39951ca32123acc32a56998a95b38788ce3a727112250697f2ff26d1cab274a0aeba1aff7f5ebf8767b9476a46b463bd8e99c92a9dd73130bd9e6b11cdb1eb595027a1325bc63c18d427b2549c95731ea88e6e336dfeb6bfff71de9f487f4e319d6b13903421ce90538e8e40ef6633b9e03aaa6e765fd15c83fc4ec83556931f98f16edc", @generic="f61abebd690684a54360e218ca495cb7ce71dc5798a25caff5607aaeb3d517ea24e2fa7ce95964f23bd02cc6846221a288e8e124926c033c63d9f680d1aecd77ae118c626364d3f60c977e9b0ff5ed6da9dc266daeb2d73e978e1386403acba52406da3d0fb84ca048804197e13f136082b36fcc251a9d38d886e1530c2644d4bde13b0702bb29bceb14731ed1371fe73d483faee5481ebc066009ec8edecba27752bb46ded267b70f76bca9a0710b5bc80525", @nested={0x10, 0x93, 0x0, 0x1, [@typed={0xc, 0xa2, 0x0, 0x0, @u64=0x3}]}, @generic="bbf4b7d6e7d2eb00167134ade06d04d7050f9c011ce4fd1de0efd1b078aa1b2ecb1035ccaa24f3a6ffeb1eb6000a0b02b2325e18e0b92311d6c1bddcce", @typed={0x8, 0xda, 0x0, 0x0, @fd=r4}, @generic="bbdb1a9e698c8db58cf53959f1275b"]}, 0x390}, 0x1, 0x0, 0x0, 0x2400c040}, 0x20000004)
r5 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001d00)={<r6=>0x0, @private, @private}, &(0x7f0000001d40)=0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bind$xdp(r1, &(0x7f0000001d80)={0x2c, 0xa, r6, 0x27}, 0x10)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001dc0)={{r7}, "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"})
r8 = accept4(r7, &(0x7f0000002dc0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000002e40)=0x80, 0x80000)
socket$unix(0x1, 0x5, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002ec0), r1)
sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000003180)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003140)={&(0x7f0000002f00)={0x204, r9, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x14c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ',$}(]{&!\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'freezer.state\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbc}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[/]\x04|\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfec}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!,+%#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@\'{)[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'freezer.state\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a}]}]}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x4c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x17, 0x4, "7bad1d69705a122abab1f818d41e1843e2f1cb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffb9}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4}, 0x40011)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000031c0)=0x25000)
sendmsg$nl_route(r1, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)=@ipv6_deladdr={0x3c, 0x15, 0x2, 0x70bd2c, 0x25dfdbfb, {0xa, 0x8, 0x10, 0xfe, r6}, [@IFA_LOCAL={0x14, 0x2, @private2}, @IFA_RT_PRIORITY={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x8008011)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x38, 0x7, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x200440d1}, 0x140)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000003400)=<r10=>0x0)
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000003440)=r10)
connect$netlink(r7, &(0x7f0000003480)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc)

1.422352882s ago: executing program 1 (id=4570):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x73, 0xd, 0x1, 0x8000, 0x0, 0x6, 0x0, 0x2, 0x10, 0x5, 0x80000001, 0x0, 0x7e8, 0x5, 0x1, 0x45, [0x400b5, 0x10000001]}})
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)=ANY=[@ANYBLOB="ffff00003b68d5ffc45d99705f3366b165546cae09e0a464e2af9ad74dc5589faa975d11dc88c08dff0ab4e6dce9eaafa4bb691be26c7d5438b8fb9788585e5eeb9db88c6cf39ec186aa961f33fa8a68891dacf8d561e77c243747fa0279956e0ab1b540c5102dd8e218d6f87196487dbeb9a2", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2507000000140002002001000000000000000000000000000114000300200100000000000000000000000000010800040064010102"], 0x44}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @aes128})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_freezer_state(r3, &(0x7f00000000c0), 0x2, 0x0)
r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000180), 0x12)
write$cgroup_freezer_state(r4, &(0x7f0000000200)='THAWED\x00', 0x7)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x198, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "06de"}]}], {0x14, 0x11, 0x20}}, 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fddbdf252100000024002d8008000200030000000500040010000000080003007c000000050001000700000008000300", @ANYRES32=r12], 0x40}, 0x1, 0x0, 0x0, 0x40885}, 0x4040804)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', <r13=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r8, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0xc0d0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="0200f7"], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r14=>0x0)
connect$nfc_raw(r6, &(0x7f00000001c0)={0x27, r14, 0xffffffffffffffff, 0x7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94)

1.347143997s ago: executing program 2 (id=4571):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'vlan0\x00', <r2=>0x0}) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b80100001800b0001006f626a72656600000c00044000000000000007f6140000001100010000000000000000000100000a58639c302036c415dc87835d1885e7b99c1c290bcc30d56ea64a6fe3d64e16bf2170e979cdb1588c4e56880b4076ef679bc0260953bb2b96c25564f232e35f15e4441a96be7bdba30f2dac260a54fc5a32f48c707d5734a8f9980512b7e4f8c2fb6bb8d039f9ab7090518313cd3e17a4ca6d0bc853c5e0e82ef1884a2c9436c419fd9ba9a3e3a757f95a"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6bd697e600082c8000000000000000000000ffff64010101ff0200000000000000000000000000018800020000000000"], 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x7a, &(0x7f0000001080)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@srh={0x6}, @routing]}}}}}}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="600000000206010100000000000000000700000605000100070000000900020073797a31000000001400078005001400f7ffffff08000840000000900500050002000000050004000100000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0xd0}, 0x20004000)
r5 = socket(0x8, 0x5, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r8)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000015}, 0x20044080)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, r10, 0x4, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x900c}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x521b}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x14) (async)
sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="38003337ff3d8a3c0000", @ANYRES16=r7, @ANYBLOB="00042cbd7000ffdbdf251100000008000300", @ANYRES32=r2, @ANYBLOB="0a000900bbbbbbbbbbbb000008003b0000800000080032000f000000"], 0x38}, 0x1, 0x0, 0x0, 0x4854}, 0x40)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}]}, 0x4c}}, 0x4800)
r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200a03, 0x0)
write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r11, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x0, 0xdf}, 0x8) (async)
setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f00000001c0)=0x8, 0x4)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r12)
sendmsg$FOU_CMD_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r13, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e32}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) (async)
sendmsg$FOU_CMD_ADD(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r13, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r13, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x5}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2f}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000051)

1.314060467s ago: executing program 0 (id=4572):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xd, 0x6, 0x603, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c041}, 0x4000) (async)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e869", 0x2}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x20}, 0x24002054)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000418e00000004fcff", 0x7d}], 0x1)

1.23156899s ago: executing program 4 (id=4573):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
socket$nl_crypto(0x10, 0x3, 0x15)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x13, &(0x7f0000000280)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x91}, @jmp={0x5, 0x1, 0xc, 0x5, 0x8, 0x10, 0xffffffffffffffff}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9c}], &(0x7f0000000000)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99f0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x13, &(0x7f0000000280)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x91}, @jmp={0x5, 0x1, 0xc, 0x5, 0x8, 0x10, 0xffffffffffffffff}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9c}], &(0x7f0000000000)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99f0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r8=>0x0})
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002000340e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) (async)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r16=>0x0})
r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x0, &(0x7f0000000180), &(0x7f0000000200)='GPL\x00', 0x1493, 0x6e, &(0x7f0000000340)=""/110, 0x41000, 0x34, '\x00', r16, @sched_cls=0x37, r4, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x0, 0xa, 0x9}, 0x10, 0x0, r4, 0x6, &(0x7f0000000540)=[r1, r1, 0xffffffffffffffff, r1, r17], &(0x7f0000000680)=[{0x4, 0x1, 0x8, 0xa}, {0x5, 0x3, 0x0, 0xc}, {0x3, 0x2, 0xf, 0x1}, {0x4, 0x3, 0x7, 0x4}, {0x4, 0x3, 0x4, 0x1}, {0x3, 0x2, 0xf, 0x6}], 0x10, 0x4}, 0x94)
recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0x7c}}, 0x0)

1.188567802s ago: executing program 0 (id=4574):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x9c1, 0x7, 0x2, 0xb, 0x2, 0x786b, 0xfffffff8, 0x58}, 0x20) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40) (async)
syz_80211_join_ibss(0x0, 0x0, 0x0, 0x2) (async)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f0000000040), 0x12) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x14, r4, 0x2, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008881}, 0x10) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async)
syz_emit_ethernet(0x32, &(0x7f00000002c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) (async)
recvmsg$can_raw(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000000440)=""/216, 0xd8}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/38, 0x26}], 0x8}, 0x1021) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"})

1.051667908s ago: executing program 4 (id=4575):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x10000008, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000001080)=""/4072, &(0x7f0000000000)=0xfe8)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000002000010029010000fcdbdf250214140c0000000300000000050013000100000008000200ffffffff080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44046084)

991.168563ms ago: executing program 0 (id=4576):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x5344b}]}}}]}, 0x40}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
unshare(0x20060400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80800)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendto$inet6(r7, &(0x7f0000000240)="112efc61dfb89b674a9c6721decbc84cd6c0ff31d5531af9ea135f5b", 0xfffffffffffffeed, 0x8010, 0x0, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000180))
sendmsg$inet(r3, 0x0, 0x0)
recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r10 = accept$alg(r9, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=@newnexthop={0x34, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x0, 0x1}, {0x2, 0xb}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmmsg$alg(r10, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619ba", 0x11}, {&(0x7f00000048c0)="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", 0x131}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815)
recvmmsg(r10, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000500)=""/232, 0xe8}], 0x3}, 0x3}], 0x1, 0x2100, 0x0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x29c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x108, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5ec}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3b}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc977}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x3b, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff62a6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc45}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0xffffff12, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaf5}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

960.593616ms ago: executing program 1 (id=4577):
r0 = socket(0x10, 0x400000000080803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x2, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000040), 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80}]}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@deltaction={0x18, 0x32, 0x9, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004085}, 0x24000)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

959.730718ms ago: executing program 2 (id=4578):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250000000008000700", @ANYRES32, @ANYBLOB="0800020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000700)={0xffffffffffffffff, 0x0}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x16, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28000000}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @tail_call]}, &(0x7f0000000140)='syzkaller\x00', 0x800, 0x8f, &(0x7f0000000180)=""/143, 0x41100, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x10, 0xffffffae}, 0x94)
accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @local}, 0x0, 0x80000)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x2}, 0x20)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce287128"], 0xe0}], 0x1}, 0x40040)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a00000014"], 0x340a)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4140040a}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@gettaction={0x1c, 0x32, 0x8, 0x70bd25, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040000)

915.522689ms ago: executing program 4 (id=4579):
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900"], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={<r2=>r1})
write$bt_hci(r2, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000780)=0x1585, 0x4)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9f20010018000000000000001c0000001c000000060000000300000000000007000000000d0000000b1b5a1bae450000000e0300000003000000002e2e615f00"], &(0x7f0000000200)=""/166, 0x3a, 0xa6, 0x1, 0x187b, 0x10000}, 0x28)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x0, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000002c0)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40200000000f21f61117d000000000085000000ce0000009500000000000000", @ANYRES32], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x41100, 0x21, '\x00', 0x0, @fallback=0x5, r3, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0xfffffffd, 0x0, 0x0, 0x3}, 0x10}, 0x94)

825.956965ms ago: executing program 3 (id=4580):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYBLOB="00000016ba00000000008bfb369664e341ed0000", @ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="010000000100"/28], 0x50)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000002600)}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16=r2], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r8=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r6, r8, 0x25, 0x4, @val=@iter={0x0}}, 0x20)
writev(r5, &(0x7f0000000200)=[{&(0x7f0000000000)="aa46235f7ca97c39d114d160df5742", 0xf}, {&(0x7f0000000340)='\tm0|', 0x4}], 0x2)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x4048c81}, 0x4040850)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x178, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd73}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5052d46b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2edc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6971e327}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e346a98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30efdb2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7784b331}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cd0}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf218}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1119b2fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbdc35af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39298381}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc756}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b929857}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61b96b0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x695f0ea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8bbc9ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56c1a26f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7afdd0a5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e757a86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a65684e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67bc3ee6}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x178}, 0x1, 0x0, 0x0, 0x24000001}, 0x257b42c9beca9d69)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000d00000006000a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="6a000000bf00000095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYRES8=0x0], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)={[{0x2b, 'cpuset'}, {0x2d, 'devices'}, {0x2d, 'io'}, {0x2b, 'net'}]}, 0x1a)
r11 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000440)={'veth0\x00', <r13=>0x0})
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x300, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x2}, {0xffe0, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0)

810.675122ms ago: executing program 1 (id=4581):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000))
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10)

751.469331ms ago: executing program 4 (id=4582):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x442}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0)

541.965472ms ago: executing program 4 (id=4583):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x4000014)

422.258864ms ago: executing program 1 (id=4584):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4)
connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c0004803869617465000000240002800800014000000000180002801400028008000180fffffffc08000340000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd8}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000100003040003", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB], 0x60}}, 0x8000)
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000680))
sendto(r1, &(0x7f0000000780)="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", 0x13b, 0x400c044, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@state={{0x28}, {0x800}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x18}, [0xff000000, 0xff000000, 0x0, 0xff000000], 0x4e23, 0x4e21, 0x4e24, 0x4e21, 0x6, 0x4, 0x2, 0x100000, 0x5}}}, {{@ipv6={@remote, @private1, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xff, 0xff000000], 'vxcan1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0)

340.851011ms ago: executing program 3 (id=4585):
r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@rose, @rose, @default, @null, @bcast, @remote, @rose]}, &(0x7f00000001c0)=0x48)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, <r2=>0xffffffffffffffff}, 0x4)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @default}, [@null, @null, @rose, @default, @null, @remote, @netrom, @bcast]}, &(0x7f0000000300)=0x48)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r5, 0x0, 0x0, 0x800)
poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x1402}, {r0, 0x4100}, {r1, 0x2030}, {r2, 0x1008}, {r3, 0x9001}, {r4}, {r5, 0x200}, {0xffffffffffffffff, 0x204}], 0x8, 0x2400000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020)
r6 = socket$netlink(0x10, 0x3, 0xb)
sendmmsg(r6, &(0x7f0000000800), 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', <r8=>0x0})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff0000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94)
setsockopt$sock_int(r9, 0x1, 0x14, &(0x7f0000000040), 0x50)
listen(r9, 0x0)
accept$inet6(r9, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r8, @ANYBLOB="85623659a047479727a9ed5264960d72735641d805b2108a956c7f7c2065008d98ebd9ccf9de42fa", @ANYRESOCT=r8], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4040000)

199.506321ms ago: executing program 0 (id=4586):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r3=>0x0})
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="0e08000000000000f89e08dc86dd73e16a604516d27025aaff9fa061ab5e3c0da3d19ca3d95913650b09eab0b5e513b69809f3c298ba", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', <r5=>0x0})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000000000c14eba923c5f2b26ffa4bbc738f09b0cffaf5a81185a71d3468dd612146b6a67985f4c1d4f3693354039cd9acc94c86ee19b603d633b1afa220334f7d40cbcd1097f347541f922055b4eae50cdabf697e4e634e5", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="01000000040000000500"/28], 0x50)

141.749884ms ago: executing program 4 (id=4587):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x40000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6249}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x50}}, 0x800)

70.764526ms ago: executing program 0 (id=4588):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000004000073c99d921e988f3ec00017c000004000d8062849705aba2be1000229eb0426851672c1ed6e9b384c167217e51d4ed906414df17cb54d37d0b5e77b1d87102372fc66e741164b8218080b534"], 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002500010324bd7006fdfaf5e567"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008002)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000004000073c99d921e988f3ec00017c000004000d8062849705aba2be1000229eb0426851672c1ed6e9b384c167217e51d4ed906414df17cb54d37d0b5e77b1d87102372fc66e741164b8218080b534"], 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002500010324bd7006fdfaf5e567"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) (async)

0s ago: executing program 2 (id=4589):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x2e, 0x2}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x400}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c)

kernel console output (not intermixed with test programs):

081 - 0
[  328.613844][T16465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.620001][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.631202][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.644977][T17784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3065'.
[  328.837309][T16471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.849371][T16471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.912555][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.935097][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.964967][T17798] netlink: 'syz.4.3069': attribute type 1 has an invalid length.
[  328.964967][T17797] netlink: 'syz.4.3069': attribute type 1 has an invalid length.
[  329.026009][T17798] 8021q: adding VLAN 0 to HW filter on device bond9
[  329.030826][T17799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3069'.
[  329.134290][T17811] lo: Caught tx_queue_len zero misconfig
[  329.173927][ T5827] Bluetooth: hci3: command tx timeout
[  329.410985][T17819] netlink: 'syz.3.3073': attribute type 1 has an invalid length.
[  329.420432][T17819] netlink: 'syz.3.3073': attribute type 1 has an invalid length.
[  329.477924][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  329.495616][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  329.504338][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  329.513773][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  329.522003][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  329.858346][T17821] lo speed is unknown, defaulting to 1000
[  330.019366][T17845] SET target dimension over the limit!
[  330.059749][T17845] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.067477][T17845] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.076202][T17845] bridge0: entered allmulticast mode
[  330.086277][T17845] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  330.136227][T17856] lo speed is unknown, defaulting to 1000
[  330.268192][T17867] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.275476][T17867] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.282982][T17867] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.290148][T17867] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.301215][T17867] bridge0: left allmulticast mode
[  330.334309][T17867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  330.415369][T17821] chnl_net:caif_netlink_parms(): no params data found
[  330.530459][T16465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.538822][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.573583][T17821] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.581061][T17821] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.588312][T17821] bridge_slave_0: entered allmulticast mode
[  330.600720][T17821] bridge_slave_0: entered promiscuous mode
[  330.609793][T17821] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.617008][T17821] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.624591][T17821] bridge_slave_1: entered allmulticast mode
[  330.637259][T17821] bridge_slave_1: entered promiscuous mode
[  330.664440][T17884] bond0: entered promiscuous mode
[  330.669856][T17884] bond_slave_0: entered promiscuous mode
[  330.675687][T17884] bond_slave_1: entered promiscuous mode
[  330.685109][T17884] bond0: left promiscuous mode
[  330.692706][T17884] bond_slave_0: left promiscuous mode
[  330.702311][T17884] bond_slave_1: left promiscuous mode
[  330.735512][T17821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.748286][T17821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.798632][T17821] team0: Port device team_slave_0 added
[  330.811522][T17821] team0: Port device team_slave_1 added
[  330.876673][T17821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.884787][T17821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  330.914013][T17821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.995551][T17821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.003181][T17821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.031610][T17821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.081192][T17895] syzkaller0: entered promiscuous mode
[  331.087982][T17895] syzkaller0: entered allmulticast mode
[  331.179670][T17821] hsr_slave_0: entered promiscuous mode
[  331.185991][T17821] hsr_slave_1: entered promiscuous mode
[  331.192759][T17821] debugfs: 'hsr0' already exists in 'hsr'
[  331.198502][T17821] Cannot create hsr debugfs directory
[  331.213175][T17895] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  331.262371][T17895] syzkaller0: refused to change device tx_queue_len
[  331.348691][T16470] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x61
[  331.569183][ T5144] Bluetooth: hci1: command tx timeout
[  331.882201][T17821] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  331.902019][T17821] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  331.968568][T17821] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  332.091045][T17950] __nla_validate_parse: 10 callbacks suppressed
[  332.091061][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3107'.
[  332.116845][T17821] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  332.260392][T17965] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  332.287606][T17969] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  332.364457][T17821] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.385401][T17821] 8021q: adding VLAN 0 to HW filter on device team0
[  332.401389][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3113'.
[  332.412804][T17968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3113'.
[  332.422056][T17968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  332.447530][T16471] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.454780][T16471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.488006][T17965] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  332.522302][T16471] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.529503][T16471] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.752868][T17975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3114'.
[  332.769298][T17975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3114'.
[  332.806782][T17977] xt_TPROXY: Can be used only with -p tcp or -p udp
[  333.115771][T17989] lo: entered allmulticast mode
[  333.136306][T17821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.180595][T17987] lo: left allmulticast mode
[  333.542212][T18019] netlink: 'syz.3.3126': attribute type 8 has an invalid length.
[  333.651853][ T5144] Bluetooth: hci1: command tx timeout
[  333.704693][T18026] pim6reg: entered allmulticast mode
[  333.846508][T17821] veth0_vlan: entered promiscuous mode
[  333.895508][T17821] veth1_vlan: entered promiscuous mode
[  333.929446][T18049] ip6t_REJECT: ECHOREPLY is not supported
[  334.012921][T17821] veth0_macvtap: entered promiscuous mode
[  334.026452][T17821] veth1_macvtap: entered promiscuous mode
[  334.058442][T18057] netlink: 'syz.0.3138': attribute type 1 has an invalid length.
[  334.081439][T18057] netlink: 'syz.0.3138': attribute type 2 has an invalid length.
[  334.103236][T17821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.120162][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3138'.
[  334.125280][T18064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3137'.
[  334.134129][T17821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.253090][T18064] bond7: left promiscuous mode
[  334.293001][T16460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.303190][T16460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.316313][T18082] netlink: 'syz.2.3139': attribute type 2 has an invalid length.
[  334.372009][T16462] net_ratelimit: 1 callbacks suppressed
[  334.372026][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.386213][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.425755][T18084] IPVS: length: 140 != 8
[  334.438771][T18084] pimreg3: entered allmulticast mode
[  334.461048][T16460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.480003][T16460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.558337][T18088] siw: device registration error -23
[  334.672014][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'.
[  334.672021][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'.
[  334.672036][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3146'.
[  334.723426][ T3504] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  334.742478][ T3504] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  334.770614][ T3504] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  334.810999][ T3504] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  334.878406][T16460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.897305][T16460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.003528][T16462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.022787][T16462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.326309][T18132] netlink: 'syz.4.3071': attribute type 1 has an invalid length.
[  335.560688][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  335.571861][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  335.580489][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  335.592534][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  335.600561][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  335.691464][T18138] lo speed is unknown, defaulting to 1000
[  335.731091][ T5144] Bluetooth: hci1: command tx timeout
[  335.875460][T18138] chnl_net:caif_netlink_parms(): no params data found
[  335.910156][T18117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.940342][T18126] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  335.999609][T18138] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.006871][T18138] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.014417][T18138] bridge_slave_0: entered allmulticast mode
[  336.024811][T18138] bridge_slave_0: entered promiscuous mode
[  336.033951][T18138] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.058747][T18138] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.066305][T18138] bridge_slave_1: entered allmulticast mode
[  336.074600][T18138] bridge_slave_1: entered promiscuous mode
[  336.117676][T18138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.138028][T18138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.179404][T18138] team0: Port device team_slave_0 added
[  336.188094][T18138] team0: Port device team_slave_1 added
[  336.286766][T18138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.294160][T16465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.294413][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.326934][T18138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.356774][T18138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  336.372743][T18138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  336.381350][T18138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  336.408519][T18138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  336.442098][T18173] team_slave_0: entered promiscuous mode
[  336.448113][T18173] team_slave_1: entered promiscuous mode
[  336.456200][T18173] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  336.464008][T18173] team0: Device macvlan2 is already an upper device of the team interface
[  336.473615][T18173] team_slave_0: left promiscuous mode
[  336.479071][T18173] team_slave_1: left promiscuous mode
[  336.622185][T18181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.632896][T18138] hsr_slave_0: entered promiscuous mode
[  336.646225][T18138] hsr_slave_1: entered promiscuous mode
[  336.660778][T18138] debugfs: 'hsr0' already exists in 'hsr'
[  336.670607][T18138] Cannot create hsr debugfs directory
[  336.855826][T18194] smc: net device wlan0 applied user defined pnetid SYZ0
[  337.120886][T18212] netlink: 'syz.0.3176': attribute type 1 has an invalid length.
[  337.141070][T18214] netlink: 'syz.1.3175': attribute type 11 has an invalid length.
[  337.180022][T18212] geneve2: entered promiscuous mode
[  337.185271][T18212] geneve2: entered allmulticast mode
[  337.507495][T18138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.573353][T18233] openvswitch: netlink: IP tunnel TTL not specified.
[  337.643713][T18138] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode
[  337.653888][ T5144] Bluetooth: hci2: command tx timeout
[  337.663954][T18138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.682635][  T981] IPVS: starting estimator thread 0...
[  337.789414][T18238] IPVS: using max 28 ests per chain, 67200 per kthread
[  337.803594][T18138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.817132][ T5144] Bluetooth: hci1: command tx timeout
[  337.879876][T18256] __nla_validate_parse: 9 callbacks suppressed
[  337.879892][T18256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3188'.
[  337.962619][T18251] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3189'.
[  338.001183][T18259] Cannot find set identified by id 0 to match
[  338.166789][T16465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.196891][T16465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.321169][T18268] nbd5: detected capacity change from 0 to 127
[  338.442555][T18138] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  338.445172][T18271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  338.451357][   T29] audit: type=1800 audit(1771177663.447:17): pid=18260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3188" name="memory.events" dev="tmpfs" ino=274 res=0 errno=0
[  338.483706][ T5144] block nbd5: Receive control failed (result -104)
[  338.489692][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3193'.
[  338.503397][T18138] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  338.523782][T18276] tunl0: Master is either lo or non-ether device
[  338.533267][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3193'.
[  338.539961][T18138] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  338.557416][T18138] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  338.592466][T18276] tunl0: Master is either lo or non-ether device
[  338.725266][T18286] tipc: Started in network mode
[  338.731137][T18286] tipc: Node identity ff, cluster identity 4711
[  338.746446][T18286] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  338.776923][T18138] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.797077][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3196'.
[  338.807893][T18289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3196'.
[  338.842198][T18138] 8021q: adding VLAN 0 to HW filter on device team0
[  338.864264][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.871457][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.943248][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.950434][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.111588][T18312] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  339.490660][T16465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.499046][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.517782][T18138] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.640781][T18341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3207'.
[  339.652080][T18341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3207'.
[  339.664923][T18138] veth0_vlan: entered promiscuous mode
[  339.679412][T18138] veth1_vlan: entered promiscuous mode
[  339.739828][ T5144] Bluetooth: hci2: command tx timeout
[  339.747392][T18346] bond8 (unregistering): Released all slaves
[  339.798366][T18138] veth0_macvtap: entered promiscuous mode
[  339.832315][T18138] veth1_macvtap: entered promiscuous mode
[  339.841500][T18353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3211'.
[  339.854282][T18138] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.866421][T18138] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.901453][T16470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.920571][T16470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.948796][T16470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.965796][T16470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.607239][T18381] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.182971][T18406] syzkaller0: entered promiscuous mode
[  341.188458][T18406] syzkaller0: entered allmulticast mode
[  341.412391][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.420888][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.810072][ T5144] Bluetooth: hci2: command tx timeout
[  342.585181][T18348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  342.663448][T16460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.681503][T16460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.690318][    C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  342.777104][T18417] bond0: entered promiscuous mode
[  342.782773][T18417] bond_slave_0: entered promiscuous mode
[  342.788643][T18417] bond_slave_1: entered promiscuous mode
[  342.797068][T18417] batadv0: entered promiscuous mode
[  342.803615][T18417] debugfs: 'hsr1' already exists in 'hsr'
[  342.809543][T18417] Cannot create hsr debugfs directory
[  342.815472][T18417] 8021q: adding VLAN 0 to HW filter on device hsr1
[  342.823711][T18417] bond0: left promiscuous mode
[  342.828567][T18417] bond_slave_0: left promiscuous mode
[  342.836027][T18417] bond_slave_1: left promiscuous mode
[  342.843911][T18417] batadv0: left promiscuous mode
[  342.864646][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.874408][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.947368][T18429] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.3234'.
[  342.960773][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3234'.
[  342.972903][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3234'.
[  343.115516][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'.
[  343.131084][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'.
[  343.838894][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  343.862510][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  343.870808][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  343.879132][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  343.886909][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  343.894663][ T5827] Bluetooth: hci2: command tx timeout
[  344.229713][T18489] lo speed is unknown, defaulting to 1000
[  344.612318][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  344.653417][T18489] chnl_net:caif_netlink_parms(): no params data found
[  344.740278][T18532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3262'.
[  344.855142][T18489] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.862441][T18489] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.871303][T18489] bridge_slave_0: entered allmulticast mode
[  344.881286][T18489] bridge_slave_0: entered promiscuous mode
[  344.911320][T18489] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.918474][T18489] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.938491][T18489] bridge_slave_1: entered allmulticast mode
[  344.957872][T18489] bridge_slave_1: entered promiscuous mode
[  345.030824][T18549] syzkaller0: entered promiscuous mode
[  345.042028][T18549] syzkaller0: entered allmulticast mode
[  345.043809][T18541] openvswitch: netlink: Tunnel attr 154 out of range max 16
[  345.072524][T18533] lo speed is unknown, defaulting to 1000
[  345.078368][T18540] IPv6: addrconf: prefix option has invalid lifetime
[  345.086905][T18489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.108811][T18541] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  345.170869][T18489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.248356][T18545] lo speed is unknown, defaulting to 1000
[  345.254563][T16460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.254741][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.280231][T18489] team0: Port device team_slave_0 added
[  345.316464][T18540] macvlan0: entered promiscuous mode
[  345.326266][T18540] batadv0: entered promiscuous mode
[  345.332983][T18540] debugfs: 'hsr1' already exists in 'hsr'
[  345.341747][T18540] Cannot create hsr debugfs directory
[  345.358627][T18489] team0: Port device team_slave_1 added
[  345.480026][T18489] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.492957][T18489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.520755][T18489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.538242][T18560] syzkaller0: entered promiscuous mode
[  345.552679][T18560] syzkaller0: entered allmulticast mode
[  345.561980][T18568] Cannot find set identified by id 0 to match
[  345.674699][T18489] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.691188][T18489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.717805][T18489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.913110][T18575] syzkaller0: entered promiscuous mode
[  345.919408][T18575] syzkaller0: entered allmulticast mode
[  345.979534][ T5144] Bluetooth: hci0: command tx timeout
[  346.016918][T18489] hsr_slave_0: entered promiscuous mode
[  346.024421][T18489] hsr_slave_1: entered promiscuous mode
[  346.031129][T18489] debugfs: 'hsr0' already exists in 'hsr'
[  346.036946][T18489] Cannot create hsr debugfs directory
[  346.279948][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3276'.
[  346.301243][T18598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3276'.
[  346.382875][T18598] vlan2: entered allmulticast mode
[  346.570762][T18613] netlink: 'syz.2.3281': attribute type 58 has an invalid length.
[  346.580043][T18613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3281'.
[  346.726062][T18623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3285'.
[  346.736541][T18619] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  346.844612][T18628] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 

π�,���x���b�)%�	]�3D�L̥
[  346.998268][T18489] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  347.069680][T18489] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  347.227035][T18489] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  347.256028][T18489] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  347.279565][T18636] lo speed is unknown, defaulting to 1000
[  347.357553][T18660] Bluetooth: MGMT ver 1.23
[  347.571232][T18489] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.721411][T18676] xt_TCPMSS: Only works on TCP SYN packets
[  348.014552][T18489] 8021q: adding VLAN 0 to HW filter on device team0
[  348.049578][ T5144] Bluetooth: hci0: command tx timeout
[  348.167751][T16460] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.174983][T16460] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.216687][T16460] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.223872][T16460] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.287924][T18710] __nla_validate_parse: 2 callbacks suppressed
[  348.287942][T18710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3306'.
[  348.413146][T18712] netlink: 'syz.1.3305': attribute type 6 has an invalid length.
[  348.459135][T18712] IPv6: NLM_F_CREATE should be specified when creating new route
[  348.530912][T18722] netlink: 'syz.4.3309': attribute type 2 has an invalid length.
[  348.530989][T18712] lo speed is unknown, defaulting to 1000
[  348.684515][T18731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3305'.
[  348.844455][T18727] bond3: entered promiscuous mode
[  348.996145][T18489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.019743][T18748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.087530][T18750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.204156][T18489] veth0_vlan: entered promiscuous mode
[  349.233633][T18756] netlink: 'syz.1.3315': attribute type 1 has an invalid length.
[  349.240600][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3316'.
[  349.248116][T18489] veth1_vlan: entered promiscuous mode
[  349.394734][T18489] veth0_macvtap: entered promiscuous mode
[  349.409102][T18489] veth1_macvtap: entered promiscuous mode
[  349.464513][T18768] netlink: 'syz.0.3318': attribute type 10 has an invalid length.
[  349.491272][T18768] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  349.507046][T18768] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  349.520978][T18768] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  349.541142][T18489] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.565008][T18489] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.566614][T18773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3320'.
[  349.583227][T18772] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3320'.
[  349.601095][T16460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.651622][T16460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.689565][T16460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.726321][T16460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.842763][T18781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3322'.
[  349.883735][T16460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.906400][T16460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.956902][T16470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.989076][T16470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.130558][ T5144] Bluetooth: hci0: command tx timeout
[  350.185235][T18801] syzkaller0: entered promiscuous mode
[  350.190887][T18801] syzkaller0: entered allmulticast mode
[  350.514409][T18808] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3330'.
[  350.772305][T18831] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3334'.
[  351.012902][T16465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.021674][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.978940][T18823] tun0: tun_chr_ioctl cmd 1074025672
[  351.985112][T18823] tun0: ignored: set checksum disabled
[  352.034043][T18813] lo speed is unknown, defaulting to 1000
[  352.132251][T18838] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3337'.
[  352.208001][T18838] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3337'.
[  352.210428][ T5144] Bluetooth: hci0: command tx timeout
[  352.260756][T18854] netlink: 'syz.0.3340': attribute type 1 has an invalid length.
[  352.593110][T18874] netlink: 'syz.3.3344': attribute type 1 has an invalid length.
[  352.603797][T18874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.755677][T18885] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  352.787529][T18885] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  352.796709][T18885] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  352.804726][T18887] hsr_slave_1 (unregistering): left promiscuous mode
[  352.818094][T18885] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  352.835188][T18885] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  352.873715][T18885] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  352.903634][T18885] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  352.914523][T18885] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  354.414759][T18963] __nla_validate_parse: 70 callbacks suppressed
[  354.414777][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3366'.
[  354.459137][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3366'.
[  354.701930][T18986] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received
[  354.805064][T18997] xt_hashlimit: size too large, truncated to 1048576
[  354.825660][T18998] xt_hashlimit: size too large, truncated to 1048576
[  355.047653][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3378'.
[  355.109324][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3378'.
[  355.265082][T19022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'.
[  355.322174][T19022] bond0: entered promiscuous mode
[  355.327252][T19022] bond_slave_0: entered promiscuous mode
[  355.334698][T19022] bond_slave_1: entered promiscuous mode
[  355.342766][T19022] batadv0: entered promiscuous mode
[  355.348922][T19022] debugfs: 'hsr1' already exists in 'hsr'
[  355.355008][T19022] Cannot create hsr debugfs directory
[  355.361377][T19022] 8021q: adding VLAN 0 to HW filter on device hsr1
[  355.396323][T19022] bond0: left promiscuous mode
[  355.407387][T19022] bond_slave_0: left promiscuous mode
[  355.414226][T19022] bond_slave_1: left promiscuous mode
[  355.422784][T19022] batadv0: left promiscuous mode
[  355.491405][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.499935][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.544843][T19039] tipc: Started in network mode
[  355.573773][T19039] tipc: Node identity ac1414aa, cluster identity 4711
[  355.623286][T19039] tipc: Enabled bearer <udp:s>, priority 6
[  355.664417][T19046] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  355.699592][T19043] syzkaller0: entered promiscuous mode
[  355.708210][T19043] syzkaller0: entered allmulticast mode
[  355.717497][T19039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3385'.
[  355.960250][T19059] xt_CONNSECMARK: invalid mode: 0
[  356.478537][T19090] lo speed is unknown, defaulting to 1000
[  356.511500][T19098] tipc: Started in network mode
[  356.516631][T19098] tipc: Node identity 464d983a009e, cluster identity 4711
[  356.528057][T19098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.548544][T19098] syzkaller0: entered promiscuous mode
[  356.555089][T19098] syzkaller0: entered allmulticast mode
[  356.654734][  T795] tipc: Node number set to 2886997162
[  356.671001][T19098] tipc: Resetting bearer <eth:syzkaller0>
[  356.698405][T19096] tipc: Resetting bearer <eth:syzkaller0>
[  356.751591][T19096] tipc: Disabling bearer <eth:syzkaller0>
[  356.772573][T16471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.781174][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.938134][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3404'.
[  357.009231][T19095] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.3399'.
[  357.058761][T19116] ip6erspan0: entered promiscuous mode
[  357.415621][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  357.438062][T19143] validate_nla: 33 callbacks suppressed
[  357.438079][T19143] netlink: 'syz.1.3412': attribute type 83 has an invalid length.
[  357.441144][T19140] netlink: 'syz.0.3411': attribute type 10 has an invalid length.
[  357.633688][T19140] team0: Failed to send options change via netlink (err -105)
[  357.648947][T19140] team0: Port device dummy0 added
[  357.834387][T19168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3418'.
[  357.846553][T19166] syzkaller0: entered promiscuous mode
[  357.852509][T19166] syzkaller0: entered allmulticast mode
[  358.030781][T19177] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3422'.
[  358.138582][T19184] atomic_op ffff88804e78a998 conn xmit_atomic 0000000000000000
[  358.503662][T19202] geneve2: entered promiscuous mode
[  358.530113][T19202] geneve2: entered allmulticast mode
[  358.612653][T19216] siw: device registration error -23
[  358.991863][T19244] syzkaller0: entered promiscuous mode
[  358.997585][T19244] syzkaller0: entered allmulticast mode
[  359.172768][T19252] syzkaller0: entered promiscuous mode
[  359.178461][T19252] syzkaller0: entered allmulticast mode
[  359.342886][T19263] netlink: 'syz.0.3446': attribute type 1 has an invalid length.
[  359.455174][T19272] IPv6: Can't replace route, no match found
[  359.471510][T19274] __nla_validate_parse: 6 callbacks suppressed
[  359.471526][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3449'.
[  359.488608][T19272] IPv6: Can't replace route, no match found
[  359.495971][T19274] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3449'.
[  359.506013][T19274] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3449'.
[  359.515650][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3449'.
[  360.684652][T19263] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  360.685013][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3449'.
[  360.696160][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.704643][T19272] netlink: 'syz.0.3446': attribute type 1 has an invalid length.
[  360.711429][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.885217][T19292] netlink: 'syz.1.3454': attribute type 8 has an invalid length.
[  360.907651][T19290] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3452'.
[  360.993430][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3457'.
[  360.995333][T19299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3456'.
[  361.012345][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3457'.
[  361.015252][T16465] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  361.031966][T16465] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  361.071471][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3457'.
[  361.128057][T16465] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  361.149636][T16465] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  361.408760][T19321] netlink: 'syz.4.3464': attribute type 2 has an invalid length.
[  361.446331][T19321] : entered promiscuous mode
[  361.498522][T19318] tipc: Started in network mode
[  361.506480][T19318] tipc: Node identity d2f3fc00db4e, cluster identity 4711
[  361.518521][T19327] netlink: ct family unspecified
[  361.525899][T19318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.534750][T19326] netlink: 'syz.0.3466': attribute type 1 has an invalid length.
[  361.892924][T16465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.901289][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.106672][T19310] tipc: Disabling bearer <eth:syzkaller0>
[  362.150343][T19361] netlink: 'syz.3.3475': attribute type 1 has an invalid length.
[  362.192344][T19359] vlan3: entered promiscuous mode
[  362.219434][T19359] bond0: entered promiscuous mode
[  362.230881][T19359] bond_slave_0: entered promiscuous mode
[  362.249555][T19359] bond_slave_1: entered promiscuous mode
[  362.555846][T19374] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  362.578908][T19366] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  362.761401][T19384] Cannot find set identified by id 0 to match
[  363.684593][T19423] vlan2: entered promiscuous mode
[  363.699044][T19423] bridge0: entered promiscuous mode
[  363.716126][T19418] lo speed is unknown, defaulting to 1000
[  363.723945][T19399] syzkaller0: entered promiscuous mode
[  363.735125][T19399] syzkaller0: entered allmulticast mode
[  364.029351][T19431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.071479][T19434] syzkaller0: entered promiscuous mode
[  364.110479][T19434] syzkaller0: entered allmulticast mode
[  364.140040][T19445] hsr0: entered promiscuous mode
[  364.145452][T19445] macvlan2: entered allmulticast mode
[  364.180999][T19445] hsr0: entered allmulticast mode
[  364.189350][T19445] hsr_slave_0: entered allmulticast mode
[  364.195010][T19445] hsr_slave_1: entered allmulticast mode
[  364.251088][T19446] macvlan3: entered allmulticast mode
[  364.288494][T19431] netlink: 'syz.0.3492': attribute type 83 has an invalid length.
[  364.424318][T19449] tipc: Resetting bearer <eth:syzkaller0>
[  364.517957][T19462] netlink: 'syz.3.3499': attribute type 1 has an invalid length.
[  364.533624][T19457] netlink: 'syz.2.3500': attribute type 2 has an invalid length.
[  364.588442][T19465] __nla_validate_parse: 16 callbacks suppressed
[  364.588460][T19465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3499'.
[  364.681679][T19465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3499'.
[  364.803410][T19462] 8021q: adding VLAN 0 to HW filter on device bond1
[  364.839672][T19424] tipc: Resetting bearer <eth:syzkaller0>
[  364.989746][T19424] tipc: Disabling bearer <eth:syzkaller0>
[  365.337925][T19482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3503'.
[  365.512477][T19480] syzkaller0: entered promiscuous mode
[  365.517542][T19497] netlink: 'syz.3.3507': attribute type 21 has an invalid length.
[  365.546648][T19480] syzkaller0: entered allmulticast mode
[  365.574611][T19502] xt_hashlimit: size too large, truncated to 1048576
[  365.936952][T19509] geneve2: entered promiscuous mode
[  365.952735][T19509] geneve2: entered allmulticast mode
[  365.978609][T16470] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  366.009315][T16470] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  366.042511][T19519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'.
[  366.059500][T16470] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  366.083704][T16470] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  366.104216][T19519] openvswitch: netlink: Key type 29 is not supported
[  366.130108][T19524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3512'.
[  366.199824][T19529] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3514'.
[  366.372279][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.380877][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.405111][T19522] syzkaller0: entered promiscuous mode
[  366.410841][T19522] syzkaller0: entered allmulticast mode
[  366.721944][T19558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3519'.
[  366.740341][T19553] netlink: 'syz.3.3520': attribute type 2 has an invalid length.
[  366.970382][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804338a800: rx timeout, send abort
[  367.011405][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.020108][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.223139][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3522'.
[  367.471563][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880506f2400: rx timeout, send abort
[  367.482284][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804338a800: abort rx timeout. Force session deactivation
[  367.979859][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880506f2400: abort rx timeout. Force session deactivation
[  368.553068][T19564] tipc: Started in network mode
[  368.557992][T19564] tipc: Node identity 0a6350396719, cluster identity 4711
[  368.566930][T19564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.589592][T19568] syzkaller0: entered promiscuous mode
[  368.595098][T19568] syzkaller0: entered allmulticast mode
[  368.771421][T19568] tipc: Resetting bearer <eth:syzkaller0>
[  368.808335][T19609] netlink: 'syz.3.3526': attribute type 1 has an invalid length.
[  368.842744][T19568] tipc: Disabling bearer <eth:syzkaller0>
[  368.943711][ T2284] block nbd5: Possible stuck request ffff8880267f8000: control (read@0,1024B). Runtime 30 seconds
[  368.956766][ T2284] block nbd5: Possible stuck request ffff8880267f8200: control (read@1024,1024B). Runtime 30 seconds
[  368.969562][ T2284] block nbd5: Possible stuck request ffff8880267f8400: control (read@2048,1024B). Runtime 30 seconds
[  368.975458][T19617] IPv6: sit2: Disabled Multicast RS
[  368.980839][ T2284] block nbd5: Possible stuck request ffff8880267f8600: control (read@3072,1024B). Runtime 30 seconds
[  369.109198][T19617] 
��: renamed from veth0_to_bond (while UP)
[  369.137025][T19617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3530'.
[  369.208288][T19636] openvswitch: netlink: nsh attribute has 5 unknown bytes.
[  369.610490][T19650] netlink: 'syz.3.3537': attribute type 1 has an invalid length.
[  369.657143][T19658] netlink: 'syz.0.3539': attribute type 7 has an invalid length.
[  369.665600][T19659] netlink: 'syz.0.3539': attribute type 7 has an invalid length.
[  369.680256][T19657] netlink: set zone limit has 8 unknown bytes
[  369.728848][T19663] netlink: 'syz.4.3540': attribute type 1 has an invalid length.
[  369.747033][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3540'.
[  369.884315][T19671] netlink: 'syz.2.3541': attribute type 6 has an invalid length.
[  369.926920][T19661] lo speed is unknown, defaulting to 1000
[  369.957303][T19637] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  370.101114][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'.
[  370.180440][T19685] syzkaller0: entered promiscuous mode
[  370.186265][T19685] syzkaller0: entered allmulticast mode
[  371.410986][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.419399][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.771264][ T3464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.779789][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.835861][T19671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  373.205048][T19723] Bluetooth: MGMT ver 1.23
[  373.287432][T19726] xt_hashlimit: max too large, truncated to 1048576
[  373.295380][T19726] xt_hashlimit: overflow, try lower: 13/0
[  373.344609][T19733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3554'.
[  373.555744][T19745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3559'.
[  373.867710][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3561'.
[  373.925898][T19757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3561'.
[  375.329566][    C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  376.610216][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.618464][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.535300][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.543620][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.170189][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  382.370548][T12166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.378804][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.289905][T16471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.298161][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.409823][ T1143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.418120][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.410809][T12166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.419163][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.776551][T19838] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.784271][T19838] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.809581][T19845] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3575'.
[  390.907456][T19838] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  390.926310][T19838] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  390.944816][T19838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.956165][T19838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.119908][T19836] lo speed is unknown, defaulting to 1000
[  391.203314][T16471] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.243280][T16471] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  391.259672][T12166] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.282007][T12166] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  391.299873][T19854] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3581'.
[  391.310119][T19854] netlink: ct family unspecified
[  391.344928][T12166] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.355213][T12166] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  391.378581][T12166] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.393797][T12166] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  391.445297][T19856] team0: Port device syz_tun added
[  391.462839][T19850] lo speed is unknown, defaulting to 1000
[  391.481308][T19858] team0: Port device syz_tun removed
[  391.497419][T19858] bridge_slave_0: left allmulticast mode
[  391.503461][T19858] bridge_slave_0: left promiscuous mode
[  391.512223][T19858] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.523840][T19858] bridge_slave_1: left allmulticast mode
[  391.530259][T19858] bridge_slave_1: left promiscuous mode
[  391.535944][T19858] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.548327][T19858] bond0: (slave bond_slave_0): Releasing backup interface
[  391.564108][T19858] bond0: (slave bond_slave_1): Releasing backup interface
[  391.586945][T19858] team0: Port device team_slave_0 removed
[  391.604359][T19858] team0: Port device team_slave_1 removed
[  391.611163][T19858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.618555][T19858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.631454][T19858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.639208][T19858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.647830][T19858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  391.813378][T19868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3584'.
[  391.941541][T19872] syzkaller1: entered promiscuous mode
[  391.947065][T19872] syzkaller1: entered allmulticast mode
[  391.988706][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3587'.
[  392.253465][T19889] lo speed is unknown, defaulting to 1000
[  392.384603][T19899] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3593'.
[  392.530144][T12166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.535776][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'.
[  392.538504][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.551051][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'.
[  392.622636][ T5827] Bluetooth: hci0: command 0x0405 tx timeout
[  392.767346][T19916] tls_set_device_offload_rx: netdev not found
[  392.882307][T19926] netlink: 'syz.3.3602': attribute type 1 has an invalid length.
[  392.909568][T19926] netlink: 'syz.3.3602': attribute type 2 has an invalid length.
[  392.923447][T19926] netlink: 'syz.3.3602': attribute type 27 has an invalid length.
[  393.017491][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3604'.
[  393.017830][T19929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3603'.
[  393.039416][T19930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3604'.
[  393.050114][T19934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.841744][T19979] xt_hashlimit: size too large, truncated to 1048576
[  394.127736][   T87] hid (null): invalid report_count 221651515
[  394.183472][   T87] hid-generic 0005:10CF:0080.0001: unknown main item tag 0x2
[  394.241818][   T87] hid-generic 0005:10CF:0080.0001: ignoring exceeding usage max
[  394.286116][   T87] hid-generic 0005:10CF:0080.0001: unknown main item tag 0x1
[  394.314064][   T87] hid-generic 0005:10CF:0080.0001: invalid report_count 221651515
[  394.343968][   T87] hid-generic 0005:10CF:0080.0001: item 0 4 1 9 parsing failed
[  394.365683][   T87] hid-generic 0005:10CF:0080.0001: probe with driver hid-generic failed with error -22
[  394.460876][T20016] openvswitch: netlink: Message has 4 unknown bytes.
[  394.480751][T20016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.505711][T20019] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.521653][T20019] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.551837][T20028] netlink: 'syz.3.3631': attribute type 1 has an invalid length.
[  394.562704][T20029] netlink: 'syz.3.3631': attribute type 1 has an invalid length.
[  394.597906][T20029] bond2: entered promiscuous mode
[  394.607786][T20029] bond2: entered allmulticast mode
[  394.677014][T20019] netlink: 'syz.4.3627': attribute type 16 has an invalid length.
[  394.685259][T20019] netlink: 'syz.4.3627': attribute type 17 has an invalid length.
[  394.783572][T20019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  394.828235][T20043] netlink: 'syz.0.3634': attribute type 1 has an invalid length.
[  395.690664][T20081] lo speed is unknown, defaulting to 1000
[  396.450857][T16461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.459873][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.369862][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.378203][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.012518][ T2284] block nbd5: Possible stuck request ffff8880267f8000: control (read@0,1024B). Runtime 60 seconds
[  399.023192][ T2284] block nbd5: Possible stuck request ffff8880267f8200: control (read@1024,1024B). Runtime 60 seconds
[  399.034090][ T2284] block nbd5: Possible stuck request ffff8880267f8400: control (read@2048,1024B). Runtime 60 seconds
[  399.045159][ T2284] block nbd5: Possible stuck request ffff8880267f8600: control (read@3072,1024B). Runtime 60 seconds
[  399.279453][ T5192] udevd[5192]: worker [17198] /devices/virtual/block/nbd5 is taking a long time
[  402.209908][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.218157][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.489529][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.497856][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.330431][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.338675][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.200195][T20134] __nla_validate_parse: 9 callbacks suppressed
[  408.200212][T20134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3651'.
[  408.226597][T20138] xt_HMARK: spi-set and port-set can't be combined
[  408.247350][T20134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3651'.
[  408.462063][ T9326] hid (null): invalid report_count 221651515
[  408.475529][ T9326] hid-generic 0005:10CF:0080.0002: unknown main item tag 0x2
[  408.484020][ T9326] hid-generic 0005:10CF:0080.0002: ignoring exceeding usage max
[  408.494154][ T9326] hid-generic 0005:10CF:0080.0002: unknown main item tag 0x1
[  408.494493][T20148] siw: device registration error -23
[  408.502086][ T9326] hid-generic 0005:10CF:0080.0002: invalid report_count 221651515
[  408.516179][ T9326] hid-generic 0005:10CF:0080.0002: item 0 4 1 9 parsing failed
[  408.525652][ T9326] hid-generic 0005:10CF:0080.0002: probe with driver hid-generic failed with error -22
[  408.610578][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.618931][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.634329][T20148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3653'.
[  408.965180][T20184] lo speed is unknown, defaulting to 1000
[  409.090060][T20198] netlink: 'syz.4.3672': attribute type 21 has an invalid length.
[  409.098118][T20198] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3672'.
[  409.279203][T20208] netlink: 'syz.4.3674': attribute type 16 has an invalid length.
[  409.287292][T20208] netlink: 'syz.4.3674': attribute type 17 has an invalid length.
[  409.407059][T20208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  411.210068][T20251] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3686'.
[  411.257552][T20256] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3688'.
[  411.284505][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3689'.
[  411.595710][T20281] bridge0: entered promiscuous mode
[  411.696494][T20291] tipc: Cannot configure node identity twice
[  411.725335][T20293] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  411.905138][T20304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3700'.
[  411.916007][T20306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3701'.
[  412.252755][T20326] lo speed is unknown, defaulting to 1000
[  412.458070][T20120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.466516][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.663825][T20363] x_tables: ip_tables: esp match: only valid for protocol 50
[  412.727681][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'.
[  413.053799][T20384] syzkaller0: entered promiscuous mode
[  413.062343][T20384] syzkaller0: entered allmulticast mode
[  413.225349][T20395] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  413.236420][T20395] __nla_validate_parse: 1 callbacks suppressed
[  413.236436][T20395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3724'.
[  413.406777][T20404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3724'.
[  413.502780][T20401] bond6: option arp_interval: invalid value (18446744073709551615)
[  413.510877][T20401] bond6: option arp_interval: allowed values 0 - 2147483647
[  413.524459][T20401] bond6 (unregistering): Released all slaves
[  413.544067][T20413] netlink: 'syz.4.3728': attribute type 4 has an invalid length.
[  413.545386][T20416] netlink: 'syz.4.3728': attribute type 4 has an invalid length.
[  413.615524][T20395] lo speed is unknown, defaulting to 1000
[  414.260886][ T5934] IPVS: starting estimator thread 0...
[  414.320007][T20422] syzkaller1: entered promiscuous mode
[  414.325521][T20422] syzkaller1: entered allmulticast mode
[  414.351361][T20442] IPVS: using max 27 ests per chain, 64800 per kthread
[  414.374501][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.383100][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.520950][T20454] batadv0: entered promiscuous mode
[  414.536296][T20454] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  414.653273][T20459] netlink: 'syz.1.3734': attribute type 5 has an invalid length.
[  414.683414][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'.
[  414.770298][T20458] syzkaller0: entered promiscuous mode
[  414.775822][T20458] syzkaller0: entered allmulticast mode
[  414.803182][T20469] tc_dump_action: action bad kind
[  414.966127][T20483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3741'.
[  415.306653][T20495] netlink: 'syz.4.3743': attribute type 16 has an invalid length.
[  415.322153][T20495] netlink: 'syz.4.3743': attribute type 17 has an invalid length.
[  416.276444][T20466] syzkaller0: entered promiscuous mode
[  416.282251][T20466] syzkaller0: entered allmulticast mode
[  416.404119][T20495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  416.433209][T20496] batman_adv: batadv0: Adding interface: macvlan4
[  416.439842][T20496] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.470702][T20496] batman_adv: batadv0: Not using interface macvlan4 (retrying later): interface not active
[  417.571901][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.580299][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.490451][T20542] team0: Port device dummy0 removed
[  418.518559][T20542] batman_adv: batadv0: Adding interface: dummy0
[  418.531112][T20542] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.567031][T20542] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  418.576744][T20572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3752'.
[  419.321436][T20635] gretap2: entered promiscuous mode
[  419.371507][T20635] dvmrp6: entered allmulticast mode
[  419.656934][T20646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3769'.
[  419.668493][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3770'.
[  419.919458][T20665] dvmrp1: entered allmulticast mode
[  420.106037][T20675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.130614][T16460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.139047][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.283932][T20692] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3777'.
[  420.555335][T20699] lo speed is unknown, defaulting to 1000
[  420.575665][T20702] syzkaller1: entered promiscuous mode
[  420.593086][T20702] syzkaller1: entered allmulticast mode
[  420.742192][T20707] netdevsim netdevsim3: Direct firmware load for ..� failed with error -2
[  420.770129][T20707] netdevsim netdevsim3: Falling back to sysfs fallback for: ..�
[  420.956585][T20718] lo speed is unknown, defaulting to 1000
[  421.133647][T20727] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  421.219163][ T7987] tipc: Node number set to 1188272186
[  421.473682][T20762] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 786440, id = 0
[  421.646220][ T5934] hid (null): invalid report_count 221651515
[  421.679306][ T5934] hid-generic 0005:10CF:0080.0003: unknown main item tag 0x2
[  421.717484][ T5934] hid-generic 0005:10CF:0080.0003: ignoring exceeding usage max
[  421.729512][T20769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.763250][ T5934] hid-generic 0005:10CF:0080.0003: unknown main item tag 0x1
[  421.782062][ T5934] hid-generic 0005:10CF:0080.0003: invalid report_count 221651515
[  421.794571][ T5934] hid-generic 0005:10CF:0080.0003: item 0 4 1 9 parsing failed
[  421.811114][ T5934] hid-generic 0005:10CF:0080.0003: probe with driver hid-generic failed with error -22
[  421.831024][T20779] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3795'.
[  421.870687][T20779] vlan2: entered promiscuous mode
[  421.875811][T20779] geneve1: entered promiscuous mode
[  421.988300][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3799'.
[  421.998712][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3799'.
[  422.015248][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3799'.
[  422.389437][T20811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3806'.
[  422.431518][T20813] netlink: 'syz.2.3807': attribute type 10 has an invalid length.
[  422.469573][T20813] team0: Cannot enslave team device to itself
[  422.502601][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3806'.
[  422.691193][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.699886][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.898202][T20833] xt_connbytes: Forcing CT accounting to be enabled
[  422.919118][T20833] Cannot find set identified by id 65470 to match
[  422.934357][T20831] ip6tnl3: entered allmulticast mode
[  422.999882][T20831] bond2: (slave ip6tnl3): The slave device specified does not support setting the MAC address
[  423.032025][T20831] bond2: (slave ip6tnl3): Error -95 calling set_mac_address
[  423.123423][T20840] lo speed is unknown, defaulting to 1000
[  423.137585][T20842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.651953][T20868] syzkaller1: entered allmulticast mode
[  423.680081][T20876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.708797][T20877] syzkaller0: entered promiscuous mode
[  423.743030][T20877] syzkaller0: entered allmulticast mode
[  423.835426][T20879] tipc: Resetting bearer <eth:syzkaller0>
[  423.868727][T20879] tipc: Disabling bearer <eth:syzkaller0>
[  423.876559][T20896] __nla_validate_parse: 5 callbacks suppressed
[  423.876575][T20896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3830'.
[  423.900025][T20887] netlink: 'syz.0.3830': attribute type 3 has an invalid length.
[  423.908491][T20886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3831'.
[  424.038214][T20912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3837'.
[  424.079372][T20915] syzkaller0: entered promiscuous mode
[  424.093499][T20915] syzkaller0: entered allmulticast mode
[  424.132729][T20919] No such timeout policy "syz0"
[  424.171433][T20922] x_tables: duplicate underflow at hook 3
[  424.204082][T20925] netlink: 181328 bytes leftover after parsing attributes in process `syz.1.3842'.
[  424.609683][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  425.899943][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.908363][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.831994][T20901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  427.020978][T20946] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3845'.
[  427.043059][T20949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3849'.
[  427.502047][T20975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3855'.
[  427.534653][T20975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3855'.
[  427.571812][T20975] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3855'.
[  427.621835][T20975] netlink: 'syz.1.3855': attribute type 3 has an invalid length.
[  427.635335][T20975] netlink: 'syz.1.3855': attribute type 2 has an invalid length.
[  427.651564][T20975] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3855'.
[  427.673411][T20975] netlink: 'syz.1.3855': attribute type 2 has an invalid length.
[  427.786272][T20989] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  427.946543][T21003] netlink: 'syz.2.3861': attribute type 5 has an invalid length.
[  428.451632][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.460077][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.103774][ T2284] block nbd5: Possible stuck request ffff8880267f8000: control (read@0,1024B). Runtime 90 seconds
[  429.115343][ T2284] block nbd5: Possible stuck request ffff8880267f8200: control (read@1024,1024B). Runtime 90 seconds
[  429.126447][ T2284] block nbd5: Possible stuck request ffff8880267f8400: control (read@2048,1024B). Runtime 90 seconds
[  429.137480][ T2284] block nbd5: Possible stuck request ffff8880267f8600: control (read@3072,1024B). Runtime 90 seconds
[  429.174583][T20998] geneve2: left promiscuous mode
[  429.185869][T20998] geneve2: left allmulticast mode
[  429.215346][T20998] bond2: left promiscuous mode
[  429.223402][T20998] bond2: left allmulticast mode
[  429.228477][T20998] gretap2: left promiscuous mode
[  429.249716][T20998] vlan2: left promiscuous mode
[  429.254526][T20998] geneve1: left promiscuous mode
[  429.279417][T16474] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  429.320313][T16474] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  429.347961][T16474] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  429.394745][T16474] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  429.427017][T21030] __nla_validate_parse: 2 callbacks suppressed
[  429.427036][T21030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'.
[  430.188375][T21086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3884'.
[  430.271130][T21086] bond1: entered promiscuous mode
[  430.276283][T21086] bond1: entered allmulticast mode
[  430.282509][T21086] 8021q: adding VLAN 0 to HW filter on device bond1
[  430.358804][T21103] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.366518][T21103] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.384531][T21103] bridge0: entered allmulticast mode
[  430.429717][T21103] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  430.475876][T21107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3891'.
[  430.596797][T21114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3893'.
[  430.616198][T21114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3893'.
[  430.754973][T21114] nbd: socks must be embedded in a SOCK_ITEM attr
[  430.777052][T15252] block nbd64: NBD_DISCONNECT
[  431.017537][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.025980][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.262976][ T5891] hid (null): invalid report_count 221651515
[  431.294959][ T5891] hid-generic 0005:10CF:0080.0004: unknown main item tag 0x2
[  431.301468][T21146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3901'.
[  431.333280][ T5891] hid-generic 0005:10CF:0080.0004: ignoring exceeding usage max
[  431.342515][ T5891] hid-generic 0005:10CF:0080.0004: unknown main item tag 0x1
[  431.351201][ T5891] hid-generic 0005:10CF:0080.0004: invalid report_count 221651515
[  431.359322][ T5891] hid-generic 0005:10CF:0080.0004: item 0 4 1 9 parsing failed
[  431.460468][ T5891] hid-generic 0005:10CF:0080.0004: probe with driver hid-generic failed with error -22
[  431.485146][T21153] netlink: 'syz.2.3903': attribute type 10 has an invalid length.
[  431.495745][T21153] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.506532][T21153] team0: Port device bond0 added
[  431.554694][T21157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3904'.
[  431.702909][T21166] veth3: entered promiscuous mode
[  431.728036][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3907'.
[  431.761878][T21170] netlink: 'syz.3.3909': attribute type 3 has an invalid length.
[  431.779373][T21170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  432.117989][T21175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  432.148519][T21175] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  432.192975][T21191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3915'.
[  432.286329][T21175] vlan2: left allmulticast mode
[  432.299596][T21175] ip6erspan0: left promiscuous mode
[  432.311430][T21175] vlan3: left promiscuous mode
[  432.320738][T21175] bond0: left promiscuous mode
[  432.346770][T21175] bond_slave_0: left promiscuous mode
[  432.360211][T21175] bond_slave_1: left promiscuous mode
[  432.377067][T21175] macvlan2: left allmulticast mode
[  432.386822][T21175] hsr0: left allmulticast mode
[  432.392042][T21175] hsr_slave_0: left allmulticast mode
[  432.397646][T21175] hsr_slave_1: left allmulticast mode
[  432.406400][T21175] macvlan3: left allmulticast mode
[  432.440403][T21202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3915'.
[  432.453596][T21175] veth3: left promiscuous mode
[  432.478591][T16474] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  432.488165][T16474] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.509790][T16474] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  432.518667][T16474] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.638359][T16474] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  432.674589][T16474] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.684442][T16474] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  432.694953][T16474] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  432.977510][T21228] syzkaller0: entered promiscuous mode
[  432.983385][T21228] syzkaller0: entered allmulticast mode
[  433.059953][T21238] delete_channel: no stack
[  433.064577][T21238] delete_channel: no stack
[  433.083299][T21238] syzkaller0: entered promiscuous mode
[  433.088915][T21238] syzkaller0: entered allmulticast mode
[  433.197730][T21245] : entered promiscuous mode
[  433.203102][T21248] netlink: 'syz.0.3933': attribute type 39 has an invalid length.
[  433.446861][T21262] netlink: 'syz.0.3939': attribute type 11 has an invalid length.
[  433.720286][T21278] lo speed is unknown, defaulting to 1000
[  433.967460][T21286] netlink: 'syz.0.3944': attribute type 16 has an invalid length.
[  433.980109][T21286] netlink: 'syz.0.3944': attribute type 17 has an invalid length.
[  434.067572][T21286] tipc: Resetting bearer <eth:syzkaller0>
[  434.073835][T21286] tipc: Resetting bearer <eth:syzkaller0>
[  434.209892][T20107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.218255][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.457151][T21310] __nla_validate_parse: 5 callbacks suppressed
[  434.457171][T21310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3950'.
[  434.524238][T21310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3950'.
[  434.678834][T15697] udevd[15697]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  434.708868][T15697] udevd[15697]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  435.257333][T21345] lo speed is unknown, defaulting to 1000
[  435.295820][T21347] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3953'.
[  435.554897][T21364] vlan3: entered allmulticast mode
[  435.570593][T21364] bond0: entered allmulticast mode
[  435.575749][T21364] bond_slave_0: entered allmulticast mode
[  435.622319][T21364] bond_slave_1: entered allmulticast mode
[  435.677307][T21364] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3958'.
[  435.944389][T21364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  435.975233][T21364] bond_slave_0: left allmulticast mode
[  435.993148][T21364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  436.006361][T21364] bond_slave_1: left allmulticast mode
[  436.015123][T21364] bond0 (unregistering): Released all slaves
[  436.289246][T21333] Bluetooth: hci0: command 0x0405 tx timeout
[  436.391925][T21408] netlink: 'syz.0.3966': attribute type 6 has an invalid length.
[  436.407156][T21410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3967'.
[  436.431881][T21408] netlink: 'syz.0.3966': attribute type 6 has an invalid length.
[  436.434448][T21410] syzkaller0: entered promiscuous mode
[  436.451667][T21410] syzkaller0: entered allmulticast mode
[  436.552184][T21413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3968'.
[  436.679492][T21421] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003
[  436.772151][T20120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.780523][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.842173][T21436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3973'.
[  436.929138][T21333] Bluetooth: hci5: command 0x0406 tx timeout
[  437.002711][T21448] IPVS: length: 209 != 24
[  437.292283][T21466] netlink: zone id is out of range
[  437.297763][T21466] netlink: zone id is out of range
[  437.303949][T21466] netlink: zone id is out of range
[  437.309985][T21466] netlink: zone id is out of range
[  437.315247][T21466] netlink: zone id is out of range
[  437.321463][T21466] netlink: zone id is out of range
[  437.514715][T21478] netlink: 'syz.2.3986': attribute type 4 has an invalid length.
[  437.537540][T21478] netlink: 'syz.2.3986': attribute type 4 has an invalid length.
[  438.430811][T21544] netlink: 'syz.1.3997': attribute type 1 has an invalid length.
[  438.451955][T21544] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3997'.
[  438.556583][T21549] netlink: 'syz.3.4003': attribute type 9 has an invalid length.
[  438.710735][T21555] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4005'.
[  438.764258][T21559] x_tables: duplicate entry at hook 3
[  438.772306][T21559] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4007'.
[  438.887954][T21565] geneve3: entered promiscuous mode
[  438.911224][T20122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.920510][T20122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.949357][T20122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.968198][T20122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  439.013987][T21574] netlink: 'syz.2.4011': attribute type 32 has an invalid length.
[  439.033056][T21574] bond0: entered promiscuous mode
[  439.038205][T21574] bond_slave_0: entered promiscuous mode
[  439.045033][T21574] bond_slave_1: entered promiscuous mode
[  439.051398][T21574] bond0: left promiscuous mode
[  439.056237][T21574] bond_slave_0: left promiscuous mode
[  439.062179][T21574] bond_slave_1: left promiscuous mode
[  439.975583][T20122] net_ratelimit: 37 callbacks suppressed
[  439.975601][T20122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.990303][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.502446][T21546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  441.748322][T21599] gretap0: entered promiscuous mode
[  441.920624][T21610] syzkaller1: entered promiscuous mode
[  441.926227][T21610] syzkaller1: entered allmulticast mode
[  442.105569][T21623] syzkaller0: entered promiscuous mode
[  442.119265][T21623] syzkaller0: entered allmulticast mode
[  442.259710][T21632] syzkaller0: left promiscuous mode
[  442.276188][T21632] syzkaller0: left allmulticast mode
[  442.315144][T21632] tipc: Resetting bearer <eth:syzkaller0>
[  442.343385][T21629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4026'.
[  442.408765][T21645] tipc: Enabled bearer <ib:ipvlan1>, priority 6
[  442.514878][T21653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  442.524808][   T29] audit: type=1800 audit(1771177767.517:18): pid=21653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4032" name="memory.events" dev="tmpfs" ino=978 res=0 errno=0
[  442.550683][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.559105][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.614466][T21664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4034'.
[  442.619005][   T29] audit: type=1804 audit(1771177767.557:19): pid=21653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4032" name="/newroot/188/memory.events" dev="tmpfs" ino=978 res=1 errno=0
[  442.664376][   T29] audit: type=1804 audit(1771177767.557:20): pid=21654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4032" name="/newroot/188/memory.events" dev="tmpfs" ino=978 res=1 errno=0
[  442.720753][   T29] audit: type=1800 audit(1771177767.557:21): pid=21654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4032" name="memory.events" dev="tmpfs" ino=978 res=0 errno=0
[  442.936756][T21680] bond1: invalid ARP target 0.0.0.0 specified for addition
[  442.944725][T21680] bond1: option arp_ip_target: invalid value (0)
[  442.956450][T21680] bond1 (unregistering): Released all slaves
[  443.138683][T21699] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4042'.
[  443.213157][T21701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4043'.
[  443.518202][T21711] netlink: 'syz.3.4047': attribute type 1 has an invalid length.
[  443.519842][   T87] tipc: Node number set to 4278190080
[  443.588606][T21715] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4048'.
[  443.620533][T21713] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4046'.
[  443.666305][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4046'.
[  443.880851][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4052'.
[  444.201336][T21739] netlink: 'syz.4.4055': attribute type 61 has an invalid length.
[  444.218388][T21739] netlink: 'syz.4.4055': attribute type 62 has an invalid length.
[  444.616831][T21754] lo speed is unknown, defaulting to 1000
[  444.735987][T21772] netlink: 'syz.4.4066': attribute type 10 has an invalid length.
[  444.754861][T21772] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  444.793949][  T981] hid (null): invalid report_count 221651515
[  444.802573][  T981] hid-generic 0005:10CF:0080.0005: unknown main item tag 0x2
[  444.839387][  T981] hid-generic 0005:10CF:0080.0005: ignoring exceeding usage max
[  444.883517][  T981] hid-generic 0005:10CF:0080.0005: unknown main item tag 0x1
[  444.897085][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4070'.
[  444.938798][T21780] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4070'.
[  444.953221][  T981] hid-generic 0005:10CF:0080.0005: invalid report_count 221651515
[  444.990560][  T981] hid-generic 0005:10CF:0080.0005: item 0 4 1 9 parsing failed
[  445.010207][  T981] hid-generic 0005:10CF:0080.0005: probe with driver hid-generic failed with error -22
[  445.090951][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  445.091714][    C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured!
[  445.506336][T21809] macvlan2: entered allmulticast mode
[  445.523581][T21809] hsr0: entered allmulticast mode
[  445.532615][T21809] hsr_slave_0: entered allmulticast mode
[  445.546021][T21809] hsr_slave_1: entered allmulticast mode
[  445.733330][T20107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.742608][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.845844][T21827] ip6gre1: entered promiscuous mode
[  445.856400][T21827] ip6gre1: entered allmulticast mode
[  446.203843][T21848] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  446.238188][T21847] �rj�: entered allmulticast mode
[  446.377102][T21859] syzkaller1: tun_chr_ioctl cmd 1074025677
[  446.396967][T21859] syzkaller1: linktype set to 270
[  446.634966][T21871] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  446.767220][T21879] bridge_slave_1: left allmulticast mode
[  446.780798][T21879] bridge_slave_1: left promiscuous mode
[  446.786747][T21879] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.836042][T21879] bridge_slave_0: left allmulticast mode
[  446.857880][T21879] bridge_slave_0: left promiscuous mode
[  446.870010][T21879] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.880333][T21888] netlink: 'syz.4.4099': attribute type 2 has an invalid length.
[  446.973009][T21888] hmac(sha224): entered promiscuous mode
[  446.988809][T21333] Bluetooth: hci0: link tx timeout
[  446.998791][T21333] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  447.015047][T21333] Bluetooth: hci0: link tx timeout
[  447.020275][T21333] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  447.167164][T21333] Bluetooth: hci0: link tx timeout
[  447.177427][T21333] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  447.185282][T21333] Bluetooth: hci3: command 0x0406 tx timeout
[  447.193515][T21907] Bluetooth: hci0: link tx timeout
[  447.198748][T21907] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  447.445772][T21916] lo speed is unknown, defaulting to 1000
[  447.620527][T21934] __nla_validate_parse: 51 callbacks suppressed
[  447.620543][T21934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4111'.
[  447.725835][T21943] syzkaller1: entered promiscuous mode
[  447.735799][T21943] syzkaller1: entered allmulticast mode
[  447.762838][T21940] lo speed is unknown, defaulting to 1000
[  447.845608][ T5144] Bluetooth: hci0: link tx timeout
[  447.852328][ T5144] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  448.051728][ T5144] Bluetooth: hci0: link tx timeout
[  448.057029][ T5144] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  448.181072][T21966] vlan3: entered promiscuous mode
[  448.186315][T21966] vlan3: entered allmulticast mode
[  448.209623][T21966] hsr_slave_1: entered allmulticast mode
[  448.282749][ T5144] Bluetooth: hci0: link tx timeout
[  448.287985][ T5144] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  448.295063][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.304470][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.444949][T21978] lo speed is unknown, defaulting to 1000
[  448.523176][T21990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4118'.
[  448.603351][T21993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4122'.
[  448.621315][T21986] lo speed is unknown, defaulting to 1000
[  448.997495][T21907] Bluetooth: hci0: link tx timeout
[  449.007632][T21907] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  449.038126][T21978] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  449.084331][T22007] syzkaller0: entered promiscuous mode
[  449.098891][T22007] syzkaller0: entered allmulticast mode
[  449.107154][T21907] Bluetooth: hci0: command 0x0405 tx timeout
[  449.163676][T22007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.207666][T22006] tipc: Resetting bearer <eth:syzkaller0>
[  449.258261][T22006] tipc: Disabling bearer <eth:syzkaller0>
[  449.594952][T22040] xt_TCPMSS: Only works on TCP SYN packets
[  449.601249][T22033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4133'.
[  449.678691][T22049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4138'.
[  449.769488][T22049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4138'.
[  449.983619][T22060] xt_CT: You must specify a L4 protocol and not use inversions on it
[  450.060773][T22074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4146'.
[  450.082576][T22074] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4146'.
[  450.118353][T22076] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  450.137172][T22076] bond3 (unregistering): Released all slaves
[  450.444833][T22104] netlink: 'syz.2.4153': attribute type 1 has an invalid length.
[  450.454024][T22104] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4153'.
[  450.565399][T22118] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  450.721371][T22124] macsec1: entered promiscuous mode
[  450.726780][T22124] macsec1: entered allmulticast mode
[  450.847451][T22071] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  450.855061][T16461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.863969][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.981307][T22141] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4164'.
[  451.214779][T22165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  451.486332][T22179] netlink: 'syz.1.4175': attribute type 21 has an invalid length.
[  451.540771][T22181] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.548434][T22181] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.651589][T22181] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.666429][T22181] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.916068][T22179] netlink: 'syz.1.4175': attribute type 1 has an invalid length.
[  451.973467][T16462] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  451.989782][T16462] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.019536][T16462] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  452.038698][T16462] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.062149][ T5827] Bluetooth: hci0: command 0x0405 tx timeout
[  452.068393][T22201] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  452.085443][T16462] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  452.137451][T16462] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.179308][T16462] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  452.199277][T16462] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.299595][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  453.928075][T22217] gtp0: entered allmulticast mode
[  453.945828][T22243] netlink: 'syz.3.4190': attribute type 1 has an invalid length.
[  453.961438][T22243] __nla_validate_parse: 180 callbacks suppressed
[  453.961455][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4190'.
[  453.966085][T22208] lo speed is unknown, defaulting to 1000
[  454.050832][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.059534][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.098132][T22249] bridge_slave_0: left allmulticast mode
[  454.104503][T22249] bridge_slave_0: left promiscuous mode
[  454.110827][T22249] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.134556][T22249] bridge_slave_1: left allmulticast mode
[  454.159598][T22249] bridge_slave_1: left promiscuous mode
[  454.165389][T22249] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.235904][T22249] bond0: (slave bond_slave_0): Releasing backup interface
[  454.257489][T22249] bond0: (slave bond_slave_1): Releasing backup interface
[  454.273640][T22262] Cannot find map_set index 135 as target
[  454.312499][T22249] team0: Port device team_slave_0 removed
[  454.320644][T22249] team0: Port device team_slave_1 removed
[  454.326818][T22249] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.344314][T22249] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.357749][T22249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  454.409596][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4196'.
[  454.437885][T22249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  454.535976][T22283] netlink: 'syz.2.4198': attribute type 6 has an invalid length.
[  454.586744][T22285] netlink: 'syz.2.4198': attribute type 6 has an invalid length.
[  454.620490][T22249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  454.626767][T22287] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  454.644681][T22249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  454.681162][T22289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  454.688455][T22289] IPv6: NLM_F_CREATE should be set when creating new route
[  454.698638][T22249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  454.701332][T22289] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  454.820456][T21907] block nbd7: Receive control failed (result -32)
[  455.012801][T22303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4207'.
[  455.027173][T20122] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  455.085359][T22305] sctp: [Deprecated]: syz.3.4206 (pid 22305) Use of struct sctp_assoc_value in delayed_ack socket option.
[  455.085359][T22305] Use struct sctp_sack_info instead
[  455.155694][T22305] sysfs: cannot create duplicate filename '/class/ieee80211/

π�,���x���b�)%�	]�3D�L̥�!!b���.�>�nS��#^��'
[  455.168734][T22305] CPU: 1 UID: 0 PID: 22305 Comm: syz.3.4206 Not tainted syzkaller #0 PREEMPT(full) 
[  455.168760][T22305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  455.168778][T22305] Call Trace:
[  455.168786][T22305]  <TASK>
[  455.168794][T22305]  dump_stack_lvl+0xe8/0x150
[  455.168825][T22305]  sysfs_warn_dup+0x8e/0xa0
[  455.168850][T22305]  sysfs_do_create_link_sd+0xc0/0x110
[  455.168874][T22305]  device_add_class_symlinks+0x1cf/0x240
[  455.168899][T22305]  device_add+0x475/0xb70
[  455.168927][T22305]  wiphy_register+0x1d73/0x2d50
[  455.168964][T22305]  ? __pfx_wiphy_register+0x10/0x10
[  455.168985][T22305]  ? __pfx_netdev_run_todo+0x10/0x10
[  455.169009][T22305]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  455.169042][T22305]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  455.169071][T22305]  ieee80211_register_hw+0x3571/0x4220
[  455.169108][T22305]  ? ieee80211_register_hw+0x13e1/0x4220
[  455.169138][T22305]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  455.169181][T22305]  ? __hrtimer_setup+0x181/0x200
[  455.169203][T22305]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  455.169228][T22305]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  455.169289][T22305]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  455.169306][T22305]  ? kstrndup+0xbf/0x160
[  455.169334][T22305]  hwsim_new_radio_nl+0xf35/0x1bd0
[  455.169377][T22305]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  455.169416][T22305]  ? rcu_is_watching+0x15/0xb0
[  455.169443][T22305]  ? __nla_parse+0x40/0x60
[  455.169467][T22305]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  455.169502][T22305]  genl_family_rcv_msg_doit+0x22a/0x330
[  455.169536][T22305]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  455.169576][T22305]  ? bpf_lsm_capable+0x9/0x20
[  455.169595][T22305]  ? security_capable+0x7e/0x2c0
[  455.169628][T22305]  genl_rcv_msg+0x61c/0x7a0
[  455.169660][T22305]  ? __pfx_genl_rcv_msg+0x10/0x10
[  455.169683][T22305]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  455.169721][T22305]  netlink_rcv_skb+0x232/0x4b0
[  455.169742][T22305]  ? __pfx_genl_rcv_msg+0x10/0x10
[  455.169768][T22305]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  455.169785][T22305]  ? genl_rcv+0x19/0x40
[  455.169828][T22305]  ? down_read+0x272/0x2e0
[  455.169853][T22305]  ? genl_rcv+0xd/0x40
[  455.169876][T22305]  genl_rcv+0x28/0x40
[  455.169897][T22305]  netlink_unicast+0x80f/0x9b0
[  455.169935][T22305]  ? __pfx_netlink_unicast+0x10/0x10
[  455.169965][T22305]  ? netlink_sendmsg+0x650/0xb40
[  455.169982][T22305]  ? skb_put+0x11b/0x210
[  455.170009][T22305]  netlink_sendmsg+0x813/0xb40
[  455.170038][T22305]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.170063][T22305]  ? aa_sock_msg_perm+0xf1/0x1b0
[  455.170091][T22305]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  455.170119][T22305]  ? __pfx_netlink_sendmsg+0x10/0x10
[  455.170138][T22305]  ____sys_sendmsg+0xa68/0xad0
[  455.170160][T22305]  ? __might_fault+0xaf/0x130
[  455.170187][T22305]  ? __pfx_____sys_sendmsg+0x10/0x10
[  455.170216][T22305]  ? import_iovec+0x73/0xa0
[  455.170237][T22305]  ___sys_sendmsg+0x2a5/0x360
[  455.170259][T22305]  ? __lock_acquire+0x6b5/0x2cf0
[  455.170288][T22305]  ? __pfx____sys_sendmsg+0x10/0x10
[  455.170320][T22305]  ? futex_wake+0x4ac/0x580
[  455.170374][T22305]  ? __fget_files+0x2a/0x420
[  455.170394][T22305]  ? __fget_files+0x3a0/0x420
[  455.170423][T22305]  __x64_sys_sendmsg+0x1bd/0x2a0
[  455.170443][T22305]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  455.170474][T22305]  ? rcu_is_watching+0x15/0xb0
[  455.170503][T22305]  do_syscall_64+0x14d/0xf80
[  455.170528][T22305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.170546][T22305]  ? clear_bhb_loop+0x40/0x90
[  455.170569][T22305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.170597][T22305] RIP: 0033:0x7fb71419bf79
[  455.170615][T22305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.170633][T22305] RSP: 002b:00007fb71503c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  455.170654][T22305] RAX: ffffffffffffffda RBX: 00007fb714415fa0 RCX: 00007fb71419bf79
[  455.170669][T22305] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  455.170682][T22305] RBP: 00007fb7142327e0 R08: 0000000000000000 R09: 0000000000000000
[  455.170692][T22305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.170703][T22305] R13: 00007fb714416038 R14: 00007fb714415fa0 R15: 00007fffae7af598
[  455.170737][T22305]  </TASK>
[  455.692065][T22311] lo speed is unknown, defaulting to 1000
[  455.727173][T22319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4211'.
[  456.060659][T22342] netlink: 'syz.3.4216': attribute type 11 has an invalid length.
[  456.366984][T22357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4221'.
[  456.422131][T22361] xt_TCPMSS: Only works on TCP SYN packets
[  456.425896][T22363] x_tables: ip_tables: osf match: only valid for protocol 6
[  456.428820][T22361] pim6reg: left allmulticast mode
[  456.596192][T22377] net_ratelimit: 29 callbacks suppressed
[  456.596207][T22377] netlink: zone id is out of range
[  456.616537][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.625548][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.662603][T22377] netlink: zone id is out of range
[  456.668034][T22377] netlink: zone id is out of range
[  456.682633][T22377] netlink: zone id is out of range
[  456.694601][T22377] netlink: zone id is out of range
[  456.702755][T22377] netlink: zone id is out of range
[  456.723202][T22377] netlink: zone id is out of range
[  456.743180][T22377] netlink: zone id is out of range
[  456.819855][T22398] netlink: 'syz.4.4231': attribute type 1 has an invalid length.
[  456.844895][T22398] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4231'.
[  456.877176][T22403] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4234'.
[  456.926195][ T9317] IPVS: starting estimator thread 0...
[  456.982331][T22414] bond3: option mode: invalid value (254)
[  456.989694][T22414] bond3 (unregistering): Released all slaves
[  457.035811][T22410] IPVS: using max 33 ests per chain, 79200 per kthread
[  457.219255][T22428] netlink: 'syz.3.4240': attribute type 29 has an invalid length.
[  459.170037][ T2284] block nbd5: Possible stuck request ffff8880267f8000: control (read@0,1024B). Runtime 120 seconds
[  459.180938][ T2284] block nbd5: Possible stuck request ffff8880267f8200: control (read@1024,1024B). Runtime 120 seconds
[  459.192152][ T2284] block nbd5: Possible stuck request ffff8880267f8400: control (read@2048,1024B). Runtime 120 seconds
[  459.204057][ T2284] block nbd5: Possible stuck request ffff8880267f8600: control (read@3072,1024B). Runtime 120 seconds
[  459.576454][T22374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  459.752109][T22480] nbd: must specify at least one socket
[  459.822624][T22482] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4249'.
[  459.837421][T22487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4252'.
[  459.909421][T22494] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4251'.
[  459.918470][T22494] netlink: 170 bytes leftover after parsing attributes in process `syz.2.4251'.
[  460.162082][T22511] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4256'.
[  460.176258][T22519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4259'.
[  460.224874][T22519] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.240815][T22519] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.260655][T22519] bridge_slave_0: entered allmulticast mode
[  460.277012][T22519] bridge_slave_0: entered promiscuous mode
[  460.315563][T22530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4261'.
[  460.360284][T22531] erspan1: entered promiscuous mode
[  460.366198][T22531] erspan1: entered allmulticast mode
[  460.445163][T22530] 8021q: adding VLAN 0 to HW filter on device bond1
[  460.482276][T22543] netlink: 'syz.1.4264': attribute type 1 has an invalid length.
[  460.494043][T22530] netlink: 'syz.0.4261': attribute type 1 has an invalid length.
[  460.566272][T22540] sctp: [Deprecated]: syz.0.4261 (pid 22540) Use of struct sctp_assoc_value in delayed_ack socket option.
[  460.566272][T22540] Use struct sctp_sack_info instead
[  461.032363][T22574] bond2: Unable to set up delay as MII monitoring is disabled
[  461.193426][T22574] bond2 (unregistering): Released all slaves
[  461.277667][T22581] lo speed is unknown, defaulting to 1000
[  461.468145][T22593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4277'.
[  461.574762][T22583] lo speed is unknown, defaulting to 1000
[  461.646632][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4280'.
[  461.707770][T22594] gretap1: entered allmulticast mode
[  461.720652][T22606] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4280'.
[  461.731024][T16474] net_ratelimit: 14 callbacks suppressed
[  461.731041][T16474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.745529][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.893872][T20122] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  461.916669][T20122] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  461.916768][T22608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.932450][T20122] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  461.979017][T20122] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  462.033000][T22614] xfrm2: entered allmulticast mode
[  462.243865][T22618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  462.263104][T22618] syzkaller0: entered promiscuous mode
[  462.268612][T22618] syzkaller0: entered allmulticast mode
[  462.360664][T22633] IPVS: set_ctl: invalid protocol: 50 172.20.20.43:20002
[  462.447840][T22645] bridge7: the hash_elasticity option has been deprecated and is always 16
[  462.485808][T22645] bridge7: entered allmulticast mode
[  462.534432][ T5827] Bluetooth: hci2: command 0x0406 tx timeout
[  462.667787][T22617] tipc: Resetting bearer <eth:syzkaller0>
[  462.760460][T22617] tipc: Disabling bearer <eth:syzkaller0>
[  463.727768][T22684] netlink: 'syz.0.4301': attribute type 5 has an invalid length.
[  463.796921][T22656] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode
[  463.860003][T22684] ip6erspan0: entered promiscuous mode
[  463.922662][T16462] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  463.944455][T16462] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  463.996264][T16462] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  464.009120][T16462] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  464.052459][T21907] Bluetooth: hci0: command 0x0405 tx timeout
[  464.060378][T22690] ipvlan1: entered allmulticast mode
[  464.065692][T22690] veth0_vlan: entered allmulticast mode
[  465.228081][T22745] lo speed is unknown, defaulting to 1000
[  465.286005][T22759] __nla_validate_parse: 14 callbacks suppressed
[  465.286021][T22759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4324'.
[  465.471553][T22776] netlink: 'syz.4.4326': attribute type 31 has an invalid length.
[  466.097252][T22798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'.
[  466.115793][T22798] batman_adv: batadv0: Removing interface: dummy0
[  466.131638][T22798] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  466.337512][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4336'.
[  466.348415][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4336'.
[  466.549883][T22825] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4339'.
[  466.785635][T22834] openvswitch: netlink: Invalid VLAN frame
[  467.033468][T16462] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.079745][T16462] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.094869][T22850] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4345'.
[  467.126486][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  467.164777][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  467.183058][T22864] netlink: 'syz.0.4348': attribute type 1 has an invalid length.
[  467.193747][T16462] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.219889][T16462] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  467.236185][T22867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4348'.
[  467.289666][T22864] 8021q: adding VLAN 0 to HW filter on device bond2
[  467.334740][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  467.356970][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  467.414394][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  467.486933][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  467.494848][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.503531][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.510332][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  467.524403][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  467.545124][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  467.556799][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  467.568818][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan12
[  467.583488][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan13
[  467.596900][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan14
[  467.609210][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan15
[  467.622864][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan16
[  467.635299][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan17
[  467.647267][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan18
[  467.660364][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan19
[  467.672684][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan20
[  467.684805][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan21
[  467.696534][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan22
[  467.708307][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan23
[  467.720739][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan24
[  467.733278][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan25
[  467.745085][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan26
[  467.757077][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan27
[  467.770896][T22849] 8021q: adding VLAN 0 to HW filter on device macvlan28
[  467.820451][T22898] openvswitch: netlink: Flow key attr not present in new flow.
[  468.208674][T22909] syzkaller0: entered promiscuous mode
[  468.216685][T22909] syzkaller0: entered allmulticast mode
[  468.226281][T22909] 0: reclassify loop, rule prio 0, protocol 800
[  468.382264][T22913] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4360'.
[  468.432621][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880309b2000: rx timeout, send abort
[  468.441709][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880309b2000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  468.476661][T22918] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4359'.
[  468.561425][T22924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4362'.
[  468.578622][T22928] netlink: 'syz.0.4362': attribute type 15 has an invalid length.
[  469.378511][T22956] syzkaller0: entered promiscuous mode
[  469.390043][T22956] syzkaller0: entered allmulticast mode
[  469.515902][T22972] lo speed is unknown, defaulting to 1000
[  469.643091][T22986] netlink: 'syz.4.4372': attribute type 1 has an invalid length.
[  470.077779][T22990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.141270][T22990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.291531][T22990] geneve2: left promiscuous mode
[  470.296530][T22990] geneve2: left allmulticast mode
[  470.314235][T22990] tipc: Resetting bearer <eth:syzkaller0>
[  470.328567][T22990] ip6gre1: left promiscuous mode
[  470.334924][T22990] ip6gre1: left allmulticast mode
[  470.342589][T22990] �rj�: left allmulticast mode
[  470.356957][T22990] xfrm2: left allmulticast mode
[  470.366569][T22990] bridge7: left allmulticast mode
[  470.372994][T22990] ip6erspan0: left promiscuous mode
[  470.383072][T16462] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  470.399744][T16462] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  470.471543][T23030] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  470.492155][T23030] bond3 (unregistering): Released all slaves
[  470.623684][T16462] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  470.665237][T23046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4382'.
[  470.682501][T23049] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4383'.
[  470.767594][T16462] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  470.878506][T23060] netlink: 'syz.4.4387': attribute type 2 has an invalid length.
[  471.049415][T23075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4389'.
[  471.171123][T23076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4389'.
[  471.247654][T23087] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[  471.292706][T23070] lo: entered allmulticast mode
[  471.356720][T23070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  471.397288][T23087] pim6reg: entered allmulticast mode
[  471.604141][T23106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4397'.
[  471.686266][T23110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4399'.
[  471.866578][T23125] netlink: 'syz.2.4402': attribute type 21 has an invalid length.
[  471.872657][T23123] lo speed is unknown, defaulting to 1000
[  471.886202][T23125] IPv6: NLM_F_CREATE should be specified when creating new route
[  471.906090][T23125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  471.913407][T23125] IPv6: NLM_F_CREATE should be set when creating new route
[  471.920722][T23125] IPv6: NLM_F_CREATE should be set when creating new route
[  471.927949][T23125] IPv6: NLM_F_CREATE should be set when creating new route
[  472.317412][T23147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4406'.
[  472.344019][T23148] netlink: 'syz.1.4405': attribute type 1 has an invalid length.
[  472.467683][T23148] bond0: entered promiscuous mode
[  472.473918][T23148] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.511497][T23156] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  472.530630][T16462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.537964][T23156] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  472.539099][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.550083][T23156] bond0: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  472.590285][T23157] netlink: 'syz.2.4407': attribute type 1 has an invalid length.
[  472.615195][T23169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4409'.
[  473.056586][T23180] IPVS: length: 251 != 8
[  473.151779][T23186] netlink: 'syz.0.4413': attribute type 1 has an invalid length.
[  473.290936][T23193] syzkaller0: entered promiscuous mode
[  473.296446][T23193] syzkaller0: entered allmulticast mode
[  473.303077][T23193] tipc: Resetting bearer <eth:syzkaller0>
[  473.357453][T23198] netlink: 'syz.4.4417': attribute type 1 has an invalid length.
[  473.668147][T23235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4424'.
[  473.683921][T23235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4424'.
[  473.795441][T23225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  473.889771][T16460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.898125][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.521577][T23288] netlink: 'syz.4.4435': attribute type 1 has an invalid length.
[  474.614164][T23288] bond3 (unregistering): Released all slaves
[  474.795940][T23304] lo speed is unknown, defaulting to 1000
[  475.045496][T23313] lo speed is unknown, defaulting to 1000
[  475.326200][T23338] nbd: couldn't find a device at index 0
[  475.523128][T23359] netlink: 'syz.1.4450': attribute type 1 has an invalid length.
[  475.615678][T23361] 8021q: adding VLAN 0 to HW filter on device bond6
[  475.858123][T23361] __nla_validate_parse: 11 callbacks suppressed
[  475.858141][T23361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4450'.
[  475.902060][T23359] 8021q: adding VLAN 0 to HW filter on device bond6
[  475.903668][T23361] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4450'.
[  475.958628][T23359] bond6: (slave geneve3): making interface the new active one
[  475.970506][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4455'.
[  476.010601][T23359] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  476.075049][T23351] lo: left allmulticast mode
[  476.150788][T23351] mac80211_hwsim hwsim33 wlan0: left promiscuous mode
[  476.160486][T23351] bond3: left promiscuous mode
[  476.166018][T23351] vlan2: left promiscuous mode
[  476.172743][T23351] bridge0: left promiscuous mode
[  476.192230][T23351] gretap1: left allmulticast mode
[  476.233987][T23351] bond0: left promiscuous mode
[  476.289861][T16461] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.307130][T16461] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  476.353543][T23361] geneve4: entered promiscuous mode
[  476.367027][T23361] geneve4: entered allmulticast mode
[  476.386823][T23400] netlink: 'syz.0.4458': attribute type 2 has an invalid length.
[  476.616104][T23409] xt_hashlimit: size too large, truncated to 1048576
[  476.660392][T16461] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.678308][T16461] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  476.976017][T16461] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  477.020339][T16461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  477.072273][T23418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  477.094347][T23424] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4462'.
[  477.114148][T23396] erspan0: entered promiscuous mode
[  477.196798][T23396] 8021q: adding VLAN 0 to HW filter on device team0
[  477.218043][T23396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  477.267157][T23402] lo speed is unknown, defaulting to 1000
[  477.280172][T23437] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  477.322337][T23418] tipc: Disabling bearer <eth:syzkaller0>
[  477.730065][T20122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.738442][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.787141][T23482] xt_hashlimit: size too large, truncated to 1048576
[  478.090526][T20122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.099442][T20122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.126309][T23480] lo speed is unknown, defaulting to 1000
[  478.292067][T23506] netlink: 'syz.1.4474': attribute type 1 has an invalid length.
[  478.411076][T23511] batman_adv: batadv0: Adding interface: dummy0
[  478.417365][T23511] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.466340][T23511] batman_adv: batadv0: Interface activated: dummy0
[  478.625906][T23521] batadv0: mtu less than device minimum
[  478.643375][T23521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  478.655122][T23521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  478.666832][T23521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  478.678484][T23521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  478.690202][T23521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  478.701839][T23521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  478.713460][T23521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  478.772789][T23525] netlink: 'syz.1.4477': attribute type 62 has an invalid length.
[  479.270460][T23544] lo speed is unknown, defaulting to 1000
[  479.409753][ T5827] Bluetooth: hci2: command 0x0406 tx timeout
[  479.495061][T23575] netlink: 'syz.0.4488': attribute type 1 has an invalid length.
[  479.549134][T23569] netlink: 'syz.1.4487': attribute type 3 has an invalid length.
[  479.620508][T23572] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4490'.
[  479.626810][T23575] gretap1: entered allmulticast mode
[  479.647154][T23575] bond3: (slave gretap1): making interface the new active one
[  479.657626][T23575] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  479.671702][T23583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4491'.
[  479.682139][T23583] netlink: 'syz.1.4491': attribute type 61 has an invalid length.
[  479.978869][T23610] netlink: 'syz.2.4500': attribute type 11 has an invalid length.
[  479.990878][T23606] vlan2: entered allmulticast mode
[  479.996028][T23606] bond0: entered allmulticast mode
[  480.002504][T23606] bond_slave_0: entered allmulticast mode
[  480.008308][T23606] bond_slave_1: entered allmulticast mode
[  480.014578][T23607] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4499'.
[  480.035723][T23617] sctp: [Deprecated]: syz.3.4501 (pid 23617) Use of int in max_burst socket option.
[  480.035723][T23617] Use struct sctp_assoc_value instead
[  480.068499][T23606] netlink: 211344 bytes leftover after parsing attributes in process `syz.0.4499'.
[  480.088235][T23607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  480.098000][T23607] bond_slave_0: left allmulticast mode
[  480.105619][T23607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  480.115170][T23607] bond_slave_1: left allmulticast mode
[  480.131872][T23607] bond0 (unregistering): Released all slaves
[  480.269426][T23626] syzkaller0: entered promiscuous mode
[  480.275243][T23626] syzkaller0: entered allmulticast mode
[  480.432374][T23639] batadv_slave_1: entered promiscuous mode
[  480.453849][T23640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4507'.
[  480.456692][T23643] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4507'.
[  480.501130][T23636] lo speed is unknown, defaulting to 1000
[  480.503173][T23645] xt_l2tp: wrong L2TP version: 0
[  480.527900][T23646] xt_l2tp: wrong L2TP version: 0
[  480.528399][T23642] netlink: 'syz.0.4506': attribute type 39 has an invalid length.
[  480.630567][T23640] netlink: 'syz.1.4507': attribute type 30 has an invalid length.
[  480.681502][T23654] netlink: 'syz.4.4511': attribute type 8 has an invalid length.
[  480.967239][T23672] syzkaller0: entered promiscuous mode
[  480.974841][T23672] syzkaller0: entered allmulticast mode
[  481.331048][T23638] batadv_slave_1: left promiscuous mode
[  481.524022][T23711] __nla_validate_parse: 5 callbacks suppressed
[  481.524040][T23711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4524'.
[  481.671086][T23717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4526'.
[  481.770629][T23719] netlink: 'syz.4.4524': attribute type 10 has an invalid length.
[  481.919998][T23719] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4524'.
[  482.344499][T23735] sctp: [Deprecated]: syz.2.4531 (pid 23735) Use of int in max_burst socket option deprecated.
[  482.344499][T23735] Use struct sctp_assoc_value instead
[  482.444087][T23738] netlink: 'syz.3.4532': attribute type 7 has an invalid length.
[  482.489819][T23738] netlink: 'syz.3.4532': attribute type 8 has an invalid length.
[  482.555900][T23745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4534'.
[  483.222794][T23766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4539'.
[  483.271349][T23765] sch_fq: defrate 4294967293 ignored.
[  483.386211][T23774] netlink: 'syz.3.4541': attribute type 11 has an invalid length.
[  483.489649][T20122] net_ratelimit: 14 callbacks suppressed
[  483.489666][T20122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.503916][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.532319][T23790] netlink: 776 bytes leftover after parsing attributes in process `syz.0.4547'.
[  483.770974][T23803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4550'.
[  483.794668][T23805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4551'.
[  484.047051][T23831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4556'.
[  484.068167][T23832] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4557'.
[  484.232647][T23845] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  484.335014][T23850] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  484.355659][T23850] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[  484.389088][T23850] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[  484.673192][T23842] netlink: 'syz.3.4556': attribute type 2 has an invalid length.
[  484.747375][T23842] : entered promiscuous mode
[  484.773524][T23865] netlink: 'syz.3.4556': attribute type 2 has an invalid length.
[  484.864075][T23877] bond2: option tlb_dynamic_lb: invalid value (5)
[  484.894155][T23877] bond2 (unregistering): Released all slaves
[  484.988379][T23865] : left promiscuous mode
[  485.372592][T23922] netlink: 'syz.4.4582': attribute type 11 has an invalid length.
[  485.410117][T20122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.418475][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.794962][T23927] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  485.905271][T23937] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  485.921372][T23933] sock: sock_set_timeout: `syz.3.4585' (pid 23933) tries to set negative timeout
[  485.936174][T23938] lo speed is unknown, defaulting to 1000
[  486.006262][T23930] lo speed is unknown, defaulting to 1000
[  486.048999][    C0] ------------[ cut here ]------------
[  486.054852][    C0] ODEBUG: free active (active state 0) object: ffff888027c71890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560
[  486.067820][    C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: syz.2.4589/23944
[  486.078560][    C0] Modules linked in:
[  486.082846][    C0] CPU: 0 UID: 0 PID: 23944 Comm: syz.2.4589 Not tainted syzkaller #0 PREEMPT(full) 
[  486.092265][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  486.102464][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  486.108824][    C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  486.128510][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  486.134633][    C0] RAX: ffffffff8a888d00 RBX: ffffffff9a414578 RCX: 0000000000000000
[  486.142673][    C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570
[  486.150706][    C0] RBP: ffffffff8bcf4a00 R08: ffff888027c71890 R09: ffffffff8bcf5d20
[  486.158696][    C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff888027c71a00
[  486.166744][    C0] R13: ffffffff901b4570 R14: ffff888027c71000 R15: ffff888027c71890
[  486.174773][    C0] FS:  00007f16bb1f66c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000
[  486.183772][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  486.190397][    C0] CR2: 0000200000001bc0 CR3: 0000000065042000 CR4: 00000000003526f0
[  486.198386][    C0] Call Trace:
[  486.201731][    C0]  <IRQ>
[  486.204581][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  486.210310][    C0]  kfree+0x13a/0x610
[  486.214215][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  486.219406][    C0]  rose_timer_expiry+0x4cb/0x600
[  486.224340][    C0]  ? call_timer_fn+0x178/0x5a0
[  486.229112][    C0]  call_timer_fn+0x192/0x5a0
[  486.233698][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  486.239196][    C0]  ? call_timer_fn+0xd4/0x5a0
[  486.243866][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  486.248992][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.254183][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  486.259645][    C0]  __run_timer_base+0x652/0x8b0
[  486.264482][    C0]  ? ktime_get+0x45/0x200
[  486.268799][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  486.274173][    C0]  ? sched_clock_cpu+0x74/0x440
[  486.279028][    C0]  run_timer_softirq+0xb7/0x170
[  486.283863][    C0]  handle_softirqs+0x22a/0x7c0
[  486.288603][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  486.293369][    C0]  __irq_exit_rcu+0x5f/0x150
[  486.297938][    C0]  irq_exit_rcu+0x9/0x30
[  486.302173][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  486.307785][    C0]  </IRQ>
[  486.310713][    C0]  <TASK>
[  486.313623][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  486.319598][    C0] RIP: 0010:aa_sk_perm+0xca/0x960
[  486.324611][    C0] Code: 62 fd 81 e3 00 ff ff 00 0f 85 e5 06 00 00 e8 0d 0c 62 fd e8 38 19 3c 07 65 48 8b 1d 38 d1 b4 0e 48 81 c3 c0 08 00 00 48 89 d8 <48> c1 e8 03 48 89 44 24 38 42 80 3c 38 00 74 08 48 89 df e8 8e 32
[  486.344217][    C0] RSP: 0018:ffffc9000d34f8a0 EFLAGS: 00000282
[  486.350279][    C0] RAX: ffff888026b36380 RBX: ffff888026b36380 RCX: ffff888026b35ac0
[  486.358227][    C0] RDX: ffffc9001b7b8000 RSI: 000000000000002c RDI: 000000000000002d
[  486.366221][    C0] RBP: ffffc9000d34f9a0 R08: ffff888026b35ac0 R09: 0000000000000003
[  486.374209][    C0] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff92001a69f20
[  486.382185][    C0] R13: 1ffff92001a69f48 R14: ffffc9000d34fde0 R15: dffffc0000000000
[  486.390177][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  486.395101][    C0]  ? __pfx_aa_sk_perm+0x10/0x10
[  486.399950][    C0]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  486.406355][    C0]  ? aa_sock_msg_perm+0xf1/0x1b0
[  486.411296][    C0]  security_socket_sendmsg+0xc0/0x280
[  486.416648][    C0]  ____sys_sendmsg+0x584/0xad0
[  486.421410][    C0]  ? __might_fault+0xaf/0x130
[  486.426070][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  486.431353][    C0]  ? import_iovec+0x73/0xa0
[  486.435833][    C0]  ___sys_sendmsg+0x2a5/0x360
[  486.440514][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  486.445432][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  486.450624][    C0]  ? futex_wait+0x29a/0x380
[  486.455120][    C0]  ? __fget_files+0x2a/0x420
[  486.459709][    C0]  ? __fget_files+0x3a0/0x420
[  486.464388][    C0]  __x64_sys_sendmsg+0x1bd/0x2a0
[  486.469329][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  486.474781][    C0]  ? rcu_is_watching+0x15/0xb0
[  486.479550][    C0]  do_syscall_64+0x14d/0xf80
[  486.484132][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.490186][    C0]  ? trace_irq_disable+0x37/0x100
[  486.495190][    C0]  ? clear_bhb_loop+0x40/0x90
[  486.499860][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.505727][    C0] RIP: 0033:0x7f16bcf9bf79
[  486.510135][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  486.529738][    C0] RSP: 002b:00007f16bb1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  486.538138][    C0] RAX: ffffffffffffffda RBX: 00007f16bd215fa0 RCX: 00007f16bcf9bf79
[  486.546116][    C0] RDX: 0000000000000000 RSI: 0000200000001bc0 RDI: 0000000000000005
[  486.554088][    C0] RBP: 00007f16bd0327e0 R08: 0000000000000000 R09: 0000000000000000
[  486.562055][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  486.570022][    C0] R13: 00007f16bd216038 R14: 00007f16bd215fa0 R15: 00007ffcf6cba798
[  486.577993][    C0]  </TASK>
[  486.581019][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  486.588313][    C0] CPU: 0 UID: 0 PID: 23944 Comm: syz.2.4589 Not tainted syzkaller #0 PREEMPT(full) 
[  486.597766][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  486.607797][    C0] Call Trace:
[  486.611056][    C0]  <IRQ>
[  486.613878][    C0]  vpanic+0x1e0/0x670
[  486.617840][    C0]  panic+0xc5/0xd0
[  486.621539][    C0]  ? __pfx_panic+0x10/0x10
[  486.625943][    C0]  __warn+0x315/0x4a0
[  486.629904][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  486.635601][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  486.641308][    C0]  __report_bug+0x29a/0x540
[  486.645828][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  486.651180][    C0]  ? debug_check_no_obj_freed+0x405/0x550
[  486.656882][    C0]  ? __pfx___report_bug+0x10/0x10
[  486.661885][    C0]  ? kfree+0x1c1/0x610
[  486.665932][    C0]  ? rose_timer_expiry+0x4c3/0x600
[  486.671023][    C0]  ? call_timer_fn+0x192/0x5a0
[  486.675762][    C0]  ? __run_timer_base+0x652/0x8b0
[  486.680759][    C0]  ? run_timer_softirq+0xb7/0x170
[  486.685755][    C0]  ? handle_softirqs+0x22a/0x7c0
[  486.690665][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  486.695403][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  486.701189][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  486.707318][    C0]  ? aa_sk_perm+0xca/0x960
[  486.711709][    C0]  ? security_socket_sendmsg+0xc0/0x280
[  486.717229][    C0]  ? ____sys_sendmsg+0x584/0xad0
[  486.722145][    C0]  report_bug_entry+0x19a/0x290
[  486.726975][    C0]  ? debug_check_no_obj_freed+0x44a/0x550
[  486.732670][    C0]  ? debug_check_no_obj_freed+0x44f/0x550
[  486.738365][    C0]  handle_bug+0xca/0x200
[  486.742591][    C0]  exc_invalid_op+0x1a/0x50
[  486.747120][    C0]  asm_exc_invalid_op+0x1a/0x20
[  486.751946][    C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550
[  486.758258][    C0] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc
[  486.777840][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  486.783887][    C0] RAX: ffffffff8a888d00 RBX: ffffffff9a414578 RCX: 0000000000000000
[  486.791837][    C0] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570
[  486.799790][    C0] RBP: ffffffff8bcf4a00 R08: ffff888027c71890 R09: ffffffff8bcf5d20
[  486.807738][    C0] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff888027c71a00
[  486.815771][    C0] R13: ffffffff901b4570 R14: ffff888027c71000 R15: ffff888027c71890
[  486.823746][    C0]  ? __pfx_timer_debug_hint+0x10/0x10
[  486.829101][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  486.834724][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  486.840337][    C0]  kfree+0x13a/0x610
[  486.844208][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  486.849307][    C0]  rose_timer_expiry+0x4cb/0x600
[  486.854242][    C0]  ? call_timer_fn+0x178/0x5a0
[  486.858990][    C0]  call_timer_fn+0x192/0x5a0
[  486.863609][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  486.869047][    C0]  ? call_timer_fn+0xd4/0x5a0
[  486.873705][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  486.878801][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.883992][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  486.889435][    C0]  __run_timer_base+0x652/0x8b0
[  486.894270][    C0]  ? ktime_get+0x45/0x200
[  486.898588][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  486.903941][    C0]  ? sched_clock_cpu+0x74/0x440
[  486.908772][    C0]  run_timer_softirq+0xb7/0x170
[  486.913601][    C0]  handle_softirqs+0x22a/0x7c0
[  486.918385][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  486.923129][    C0]  __irq_exit_rcu+0x5f/0x150
[  486.927699][    C0]  irq_exit_rcu+0x9/0x30
[  486.931918][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  486.937534][    C0]  </IRQ>
[  486.940443][    C0]  <TASK>
[  486.943354][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  486.949311][    C0] RIP: 0010:aa_sk_perm+0xca/0x960
[  486.954320][    C0] Code: 62 fd 81 e3 00 ff ff 00 0f 85 e5 06 00 00 e8 0d 0c 62 fd e8 38 19 3c 07 65 48 8b 1d 38 d1 b4 0e 48 81 c3 c0 08 00 00 48 89 d8 <48> c1 e8 03 48 89 44 24 38 42 80 3c 38 00 74 08 48 89 df e8 8e 32
[  486.973902][    C0] RSP: 0018:ffffc9000d34f8a0 EFLAGS: 00000282
[  486.979952][    C0] RAX: ffff888026b36380 RBX: ffff888026b36380 RCX: ffff888026b35ac0
[  486.987900][    C0] RDX: ffffc9001b7b8000 RSI: 000000000000002c RDI: 000000000000002d
[  486.995846][    C0] RBP: ffffc9000d34f9a0 R08: ffff888026b35ac0 R09: 0000000000000003
[  487.003794][    C0] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff92001a69f20
[  487.011741][    C0] R13: 1ffff92001a69f48 R14: ffffc9000d34fde0 R15: dffffc0000000000
[  487.019722][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  487.024651][    C0]  ? __pfx_aa_sk_perm+0x10/0x10
[  487.029491][    C0]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  487.035897][    C0]  ? aa_sock_msg_perm+0xf1/0x1b0
[  487.040818][    C0]  security_socket_sendmsg+0xc0/0x280
[  487.046170][    C0]  ____sys_sendmsg+0x584/0xad0
[  487.050911][    C0]  ? __might_fault+0xaf/0x130
[  487.055598][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  487.060891][    C0]  ? import_iovec+0x73/0xa0
[  487.065377][    C0]  ___sys_sendmsg+0x2a5/0x360
[  487.070033][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  487.074949][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  487.080129][    C0]  ? futex_wait+0x29a/0x380
[  487.084623][    C0]  ? __fget_files+0x2a/0x420
[  487.089203][    C0]  ? __fget_files+0x3a0/0x420
[  487.093866][    C0]  __x64_sys_sendmsg+0x1bd/0x2a0
[  487.098782][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  487.104221][    C0]  ? rcu_is_watching+0x15/0xb0
[  487.108978][    C0]  do_syscall_64+0x14d/0xf80
[  487.113555][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.119614][    C0]  ? trace_irq_disable+0x37/0x100
[  487.124628][    C0]  ? clear_bhb_loop+0x40/0x90
[  487.129287][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.135180][    C0] RIP: 0033:0x7f16bcf9bf79
[  487.139573][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.159163][    C0] RSP: 002b:00007f16bb1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  487.167566][    C0] RAX: ffffffffffffffda RBX: 00007f16bd215fa0 RCX: 00007f16bcf9bf79
[  487.175524][    C0] RDX: 0000000000000000 RSI: 0000200000001bc0 RDI: 0000000000000005
[  487.183470][    C0] RBP: 00007f16bd0327e0 R08: 0000000000000000 R09: 0000000000000000
[  487.191515][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  487.199484][    C0] R13: 00007f16bd216038 R14: 00007f16bd215fa0 R15: 00007ffcf6cba798
[  487.207463][    C0]  </TASK>
[  487.210848][    C0] Kernel Offset: disabled
[  487.215153][    C0] Rebooting in 86400 seconds..