last executing test programs:

7m22.733665209s ago: executing program 1 (id=302):
r0 = socket$inet(0x2, 0x802, 0x1)
write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x4011)
socket$packet(0x11, 0x3, 0x300)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x6ee, @local, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000300)="83", 0x1}], 0x1}}], 0x1, 0x240048d1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x81)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=@newtaction={0x14, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x40c1)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r7, 0x313}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x20000000000000d4, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$netlink(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000600)={0x1f4, 0x16, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x1e, 0xc3, 0x0, 0x0, @binary="0fff328422b043d5fdca257d45e6c877a92cdd13856e279d992c"}, @generic="3225403610f88784062ef190dfb7327682b038b5af8b7600ae4940b9d7d4feaa5547b3bd322b8d4ae470cd024c634446f06eb265d1c6c0a7539d2da5e2d0f4f4036b621ab9414adb4f67d282e565f4cd7c560627120d5b891d04ec28eedc416596b71669c1af5e698f18de7bc11dc64df95751194bacb0be2cc4944201cc8ae38f913d0d615ef7ae87c36935c179f5252e29700307a7e55b72ebfd", @typed={0x69, 0xa6, 0x0, 0x0, @binary="b22794f3e469daeb75b42420fee2169cf5b35d9184b7e9430aa32bab330511593ac27e152f64ecd68dcd9e890351e3ff739af56ba4ca0dd5861b0efa9d1dc5368043a4b0d5f18d8db5f8205acc7dc0b82fcab678e6ef2aee52ed0b17d9b80e7dc18122eca9"}, @nested={0x9a, 0x11f, 0x0, 0x1, [@generic="9011318c0fa643738b8e8bff664c3ecbbd0e2d4f053a930737f3c140b575c91e5ac3869cff1472a9b90098f6fdaecb8075a244534881c1c042882f5519d25dbe00b1c7ad1631d06e76f17ee30804c3", @typed={0x8, 0xd4, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x8b}, @generic="bf45126fc5a1e279075bd824f01e040921d6e74d442ff3c8b46958729b27419ceb98d34c85443afb513e18103cfd68655f001bdcc649a3c997c097"]}, @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@empty}, @typed={0xc, 0x83, 0x0, 0x0, @u64=0x7}]}, 0x1f4}], 0x1, &(0x7f0000000600), 0x0, 0x40800}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00'})

7m22.533519933s ago: executing program 1 (id=304):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x150, 0x65, 0x0, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x120, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffff, 0xfff1}}, @TCA_ROUTE4_ACT={0x114, 0x6, [@m_csum={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x50, 0x1a, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x19, 0x6, "3c4d628f307b84d62ea02c2a83d6801f55d9f79db5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_bpf={0x5c, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "23e2e8fc6355c11f988ad547fc4f6dd395000000000000000000000000000000e1e11e5688e32cc36e669f518f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x34, 0x1c, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x150}}, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000000))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000980)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000bc0)='\b\x00', 0x2}, {&(0x7f0000000400)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x2, &(0x7f0000000180)=[@ip_ttl={{0x14}}], 0x18}, 0x4004800)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008060000", @ANYRES64=r5], 0xfdef)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

7m22.053604425s ago: executing program 1 (id=309):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x5b26, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x2, 0x9, 0x101, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000340)=[{0x2, 0x1, 0x3, 0x2}, {0x4, 0x3, 0x6}, {0x1, 0x4, 0x7, 0x8}, {0x1, 0x2, 0x8, 0x9}, {0x4, 0x3, 0x6, 0xb}, {0x3, 0x5, 0x9, 0x3}, {0x0, 0x2, 0x2, 0x2}, {0x0, 0x3, 0x6, 0xa}, {0x5, 0x5, 0xa, 0x9}], 0x10, 0x30651b3}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000004c0)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xcc, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000007f00000000000000da41000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000004e00000000000000b70200000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

7m21.919491205s ago: executing program 1 (id=311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0xd4, 0x2, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xd4}}, 0x4041)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
getuid()
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='hsr0\x00')
r4 = socket(0x1d, 0x2, 0x6)
r5 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r6})
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000))
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x801, {0x0, 0x1, 0x2}}, 0x18)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x20, 0x70bd2b, 0x25dfdbff, {0xa, 0x14, 0x80, 0x15, 0x2, 0x3, 0xfd, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006)

7m21.463556394s ago: executing program 1 (id=315):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000040)='wlan0\x00'})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={<r1=>r0, &(0x7f0000000100)='wlan0\x00', 0x400, &(0x7f0000000140)={@align=0x6, {0x1, 0x0, 0x3, 0x7}}, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x800})
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@delsa={0x30, 0x11, 0x10, 0x70bd25, 0x25dfdbfe, {@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x4d4, 0xa, 0x32}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x40)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c00080008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)

7m21.256817526s ago: executing program 1 (id=320):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x1, @remote, 0x1000}], 0x1c)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x6, 0x9f, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x105, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x0, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r7}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000180)="8273ae77fb03c8f2d1c05a103ed5abd69f212f10c763e52f7bfa8e5ba796d946217915ee9791b465564350354b7da84ed76a2793dc2bf9ba12d2f16db157b988e0a1c119bbec59603b0dd5187438cdb59f617489a0c24695ed6d94557fd50501b75b0739c20874e804", &(0x7f0000000200)=""/89, &(0x7f00000002c0)="776f376530731606", &(0x7f0000000340)="6dffd7565a178445fbd26c1338d7d39668be020ad619fb08573f54e20042cfb87e0a8fe68ac7fc3fd74d23e608c20fa7bca4096c421603644a720ae1cc2c0500a2fb858479c65251c06753359e255c380eb8e5936b557047a652ec42251b0b941646e1be6ce894b8f333be259888efe513ccc07e350bf74cbe02ecba668ff2876b1251ff8fe6827cf0bccc8cad2c0ab30a0ac43259b73081a17a1a300f064a52d8806baaf25714baec4ae809", 0x1d36e6f4, r7}, 0x38)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc01000000000000000000000000000000000000040000"], 0xfc}}, 0x0)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0x1078c)
r9 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$F2FS_IOC_GET_PIN_FILE(r10, 0x8004f50e, &(0x7f0000000140))

7m5.89002821s ago: executing program 32 (id=320):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x1, @remote, 0x1000}], 0x1c)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x6, 0x9f, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x105, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x0, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r7}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000180)="8273ae77fb03c8f2d1c05a103ed5abd69f212f10c763e52f7bfa8e5ba796d946217915ee9791b465564350354b7da84ed76a2793dc2bf9ba12d2f16db157b988e0a1c119bbec59603b0dd5187438cdb59f617489a0c24695ed6d94557fd50501b75b0739c20874e804", &(0x7f0000000200)=""/89, &(0x7f00000002c0)="776f376530731606", &(0x7f0000000340)="6dffd7565a178445fbd26c1338d7d39668be020ad619fb08573f54e20042cfb87e0a8fe68ac7fc3fd74d23e608c20fa7bca4096c421603644a720ae1cc2c0500a2fb858479c65251c06753359e255c380eb8e5936b557047a652ec42251b0b941646e1be6ce894b8f333be259888efe513ccc07e350bf74cbe02ecba668ff2876b1251ff8fe6827cf0bccc8cad2c0ab30a0ac43259b73081a17a1a300f064a52d8806baaf25714baec4ae809", 0x1d36e6f4, r7}, 0x38)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc01000000000000000000000000000000000000040000"], 0xfc}}, 0x0)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0x1078c)
r9 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$F2FS_IOC_GET_PIN_FILE(r10, 0x8004f50e, &(0x7f0000000140))

2.728796458s ago: executing program 5 (id=3864):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010102, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000000070000000000013c040000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.42909568s ago: executing program 5 (id=3869):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000011a40f1189edca765a17854f73b3e28581ddeefe70c42b228c6a35e9d1cbb1e0b7dccb6d871cb5ffaad933d6243ba358ad0aca8c7815e0b896738cfab57b8c0cc95d1a8ea9554d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2efd, 0x0, 0xffffffffffffff3c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ppoll(&(0x7f00000033c0), 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010800000000000000000300fffd140007800800df590000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a3000000000150003006861730a3a69702c556f0000"], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRESDEC=r7], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x6, [@const={0x6, 0x0, 0x0, 0xa, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0xc, 0x3}, {0x3}, {0xc, 0x1}, {0x2, 0x5}]}, @ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x5f, 0x0, 0x0, 0x2e]}}, &(0x7f0000000540)=""/198, 0x76, 0xc6, 0x1, 0x24}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x20000, 0x8, 0x8000, 0x80004, r0, 0x2, '\x00', 0x0, r10, 0xffffffff, 0x2}, 0x50)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, r12, 0x1, 0x70bd28, 0x25ffdbfd, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140)

2.112101415s ago: executing program 4 (id=3871):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

2.100339182s ago: executing program 2 (id=3872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x62f, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x800)
ioctl$sock_ifreq(r1, 0x8932, &(0x7f0000002700)={'dummy0\x00', @ifru_ivalue})

1.893224421s ago: executing program 2 (id=3873):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
write$ppp(r0, &(0x7f0000000040)="b3dc9836a97392a4d5ef2b36212bdb6d5f1956f54f23d45b72e8e0750ffba6462afe04b6e2f07b474fe26b07b20a67e8884fed1770a5f71701aebe2de5adfe72075145400d2303159d43dd6b0712069fb30938fd8a6b356650fbe64315e8df5ceb367509452b1f4ce669ed2f57a83e1077e122414a3b99438ede1a39685b05793d52d10ce948576d6d1ca4dc8f32d7e6a136063318741e4dcdbaf2affc75a38992072def4dba21abea8694f8425b696ce789b23309782c968267642a1d4c6ab404ea114c6137ce1e96351c022769013b17a7b4f650de379b3875caf584881f5b0dfabb", 0xe3)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x20, 0x301, 0x70bd25, 0x25dfdbf6, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000804)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000500)=0xffff0080)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

1.870541123s ago: executing program 4 (id=3874):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000ed00002000000000000400000001000000feffffff0000000000000000000000004d56b50834cfbad924066112ea70943f39b074585f10728c54d09bb4ddf91bfe1bd4d96ae9c0687b76f90f"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x10000}, 0x28)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r3, 0x0)
unshare(0x22020600)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
openat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r5, r1, 0x0, 0x4)

1.712868436s ago: executing program 4 (id=3875):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="0d000500010001", 0x7)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711262000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x0, 0x1, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00], 'macvtap0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x2b, 0x5, 0x0, 0x25}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0xfffffffe, 0x2, 0x1, 0x7}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c00180006ac0f0001ac0f001e095ce973d093c26addfe144d11777f13cc41c06a34acf0762535ec8cd20610a95b817fe3b4b5e667ce80e40bb7f8f8c6f491435d05f2843d93e5f61a5a47754d"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1.665917463s ago: executing program 2 (id=3876):
bind$alg(0xffffffffffffffff, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98)
vmsplice(r2, &(0x7f0000000440)=[{0x0}], 0x1, 0xf)
splice(r1, 0x0, r2, 0x0, 0xc, 0x4)
write(r0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

1.500877757s ago: executing program 5 (id=3878):
r0 = socket(0x28, 0x2, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_IV'}]}}}]}, 0x44}}, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50)
socketpair(0x24, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r3, 0x1}, 0x20) (async)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20000000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90) (async)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async)
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000500)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fa4eb2f71ebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000001e0106"], 0x184}}, 0x0)

1.398894494s ago: executing program 4 (id=3881):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001dc0), 0x80800, 0x0)
close(r1) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$inet6(0xa, 0x80003, 0x1)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r4, 0x25, 0x0, @val=@netkit}, 0x1c) (async)
syz_emit_ethernet(0x6a, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa008100000086dd60f53a0400303a0020010000000000000000000000000000ff0200000000000000000000000000010201907800000500605083590000330000000000000000ca9ab5b2000000000000000001ff00"/106], 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000100000000000000010007000000", @ANYRES32=r7, @ANYBLOB="81020000000000000c001a800400048004"], 0x2c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c000000080a010100000000000000000200000609000294903d55355a60c39fbf0d5b0073797a32000000000900f36373797a300000000014000000da00010000000016000000000300000a"], 0x80}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) (async)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, 0x0, 0x0)
r10 = socket$inet(0x2, 0x5, 0x1)
setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async)
sendmmsg$inet(r10, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}], 0x2, 0x2090) (async)
sendto$inet(r10, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async)
write$cgroup_pid(r8, &(0x7f0000000140), 0x12)

1.356200873s ago: executing program 5 (id=3882):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000004580)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0xff, 0xffffff00, 'team0\x00', 'veth0\x00', {}, {0xff}, 0x11, 0x2, 0x8ec61fc4e1c84de5}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x5, 0xa, [0x2, 0xc, 0x3e, 0x2a, 0x24, 0x18, 0x3d, 0x38, 0xc, 0xf, 0x33, 0x2d, 0x0, 0x29, 0x3f, 0x27], 0x2, 0x2, 0x9}}}, {{@ip={@empty, @empty, 0xff000000, 0xff, 'ip6gretap0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x21, 0x2, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x1, 0x5, 0x3, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newlink={0x74, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xef}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x74}}, 0x8000)

1.280882597s ago: executing program 0 (id=3884):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10140, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4080) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'xfrm0\x00', 0x1000}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', <r3=>0x0, 0x10, 0x8, 0x9232, 0xffff, {{0x1d, 0x4, 0x1, 0x24, 0x74, 0x65, 0x0, 0x4, 0x2f, 0x0, @remote, @private=0xa010102, {[@noop, @generic={0x0, 0x10, "096365554a02bb520e4f5d8b2b08"}, @timestamp_prespec={0x44, 0x1c, 0xf7, 0x3, 0x1, [{@rand_addr=0x64010101, 0x823}, {@rand_addr=0x64010100, 0x2}, {@broadcast, 0xffffff20}]}, @generic={0x7, 0x9, "f8f0a7ccd181e5"}, @cipso={0x86, 0x2a, 0x0, [{0x1, 0x9, "05335f8d24f6a5"}, {0x1, 0xe, "7268687e7d07ff01492d153a"}, {0x6, 0xd, "50934ecf2b361537ef2328"}]}]}}}}})
setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x6, 0x1, @vifc_lcl_ifindex=r3, @private=0xa010102}, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa8, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa8}}, 0x24008000) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001c40)=<r5=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000020c0)=<r6=>0x0)
sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000003280)=[{&(0x7f0000000540)={0x27, r4, 0xffffffffffffffff, 0x0, 0x9, 0x0, "d842419c0f4b1f73014852f0e9bf78e34f67b57fa807ddac00f770f06a0b8c60e5a237fbdc8c516769e4fe5c27584d8b0fe83591ddf7a09cf17bb0ef77f8b0", 0xc}, 0x60, &(0x7f0000001b80)=[{&(0x7f00000005c0)="c143c5ad9294dc0152cae87f16c94f02893fc00175bd244d1530648611d0029b44ce7bf160ad43af0461c7b5e1284cfe87ec0f89492a8bce76", 0x39}, {&(0x7f0000000600)="4504a3691c154c1aa5c67fffd694942ae83e2dfda6bb4a4306d72ee6f58a00b05bb65bf2105ca0aed0d7e56d4284762ad4e858919416fce761aa13417730d672df511badf3fdb86c7b1e3271052afba92567365d32ce758f1dad2108de48e9dbd1033b0e45285681dc14e37993a00b0feb604727516dd69fd96ac34f1ab2d3d45bdeedea485860b5246736da225d915123d873c3cc742f42c5ac43dd8bac253521e4b5da197ac74f76ff", 0xaa}, {&(0x7f00000006c0)="b503dc8e9a947f1fa66741617f1a9f39c9dfad23d7b1286bd41700c66f2233abad", 0x21}, {&(0x7f0000000700)="ff7a8d83439a3d6928b7cd78f260589f73e57d57e8ddcd06d370313e4ff098821ef868adbd669fb8b1af7f94b0d3d2668faab677460d761fb48fbe430199f634bab6bb837e6ed33e45b29e1a53d99ec1fe80425cf4b3d97499d5dbba6107ceb9a5e2faa3cb49e8f7d822e17706ccef763b0e1d99caa56bfa8ab6c8ca1dc6d9565e89fddcc904125f38c055eda2097c81ea8b4b52d9985a5678c99b619cad7b8d1947d92a3e6aaa3ae6da5b7d7c68f8ed9c7db21ff64b1c2f26686675832ebe9abecf3051a584225b6964d09733af234180091e485332de51ae403a624201e43ed49f", 0xe2}, {&(0x7f0000000800)="2f26e1db67231f6adb28fd68ce79da1cf5698d3ade456cc5744c48a12619e15426fe519fb163cfbaf84a67e448cc7d6c031320b98f6c4d20fa3e059f6b566ec2f4692eeb76a82c1bdc4200eb03f6c5d416b42ac79ae41072a7746e580b5aa6ee3ebdde4eb34deb0815bbdbe9f378fe492c01681a4705", 0x76}, {&(0x7f0000000880)="ef68110009821cf5299698e6ea0c1fe8199ebc4026c91ebdaa963a8727433fbbad17c339960aa853ef9685582d48ddc80cdefac7a61329e3aad9df3897ea81ccf1baafe731079d1c9f32845fbf25614d0932e80c5736cbed3a821f531de0f4a63de0462e11c91cdeadc64268e0974cf60d10b66cc22e0a1200418dda69fb92ddd48b77de3becbee3508c72b71f824c1ed3e77ae3e45c4ff70b3ac454fac42a79c68945901fe6b1bccfd45089f8f84099d02a368c6f7141094b66887ad3c1600c1b23dba71440adafc8bf64971b1872551b22bb", 0xd3}, {&(0x7f0000000980)="35116a69f73a985d2ff76bdc956a229c2c1677344567d4aef020ca4b2080772ebeef052c01815efb16fbf7ba557776bb998696291fe8bff7c95b72634d8f58f15feafbfd07c9243afdb76a379725ede42fbd755c45b91cd71611223dc27ab0dc181f73a325449c2ee1d4fdc695b54b2482fd22ef8b7d53ebc4208eef3af24426bb76903807601a202d3007ae14e3af2380b4e413a500cb23ade41d78ef64c7db6e88d8377d0b32fe5e264c6c9ab4488b321d713901e3c80b050e5ebe17c33114851839c8550e18bc30c8abed2e540d23", 0xd0}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="5018593cf886181073a1f9d55f64c8c80611e8d5e77de43c2a8b26475724ff8ff5f79b21644109d3365c590b42306c389748aa71e441bdfb094dcd2cdfff11c281d1ef4f35a67114ea08dbfbc6c28d520c19980c1a945e4c62fc2faf74e6e0c37a753aed49433a27a81e257210c680edb238b3afe1003faca491cb447756a80212b622b2afeb61eaac0205190ba0494b63cb881e1dbd48fb02c3d2ff609c91fa4b620839d3eb2484b0c72e1c61f563d24207d87b964485bb6fea901d53c909b57b10dacce679d92d", 0xc8}], 0x9, 0x0, 0x0, 0x8000894}, {&(0x7f0000001c80)={0x27, r5, 0xffffffffffffffff, 0x6, 0x0, 0xb, "48b4abcc5a8515a27f708e5361f8a53681c8ae5f2d38574846f4f4f87c154ef8e189e4b953d2dbb21b9d27987be996119f1ba23d4cf073b8380bff842c7806"}, 0x60, &(0x7f0000001f40)=[{&(0x7f0000001d00)="c4808738f27d2402c2c86d7c905935867d9cf504328d2f246c64d63c10010a92538cc8e7fd4355396a5dd1b8", 0x2c}, {&(0x7f0000001d40)="9932124f458d0b8f5af3d2640d828421bfcdc04a0b2d379124b1323b45ca09d7be005c574ed8d24f17b28acfbd3f8b9976783c150e3996655c7912d336463262f8a8aece451c25ac03e89b6e43c77a99f9373e08cdb2c1c9b9518f2b3a0f521898a03272b7c1109bb59746b16a2da8aea64f5bba5dbd2ad07523ec13228cbffd19f150473450aac24451420ba10341bd9b47c03093094abe7f316bb684247ea43088b08c13cc56c02660b972545db56dbfe3563ca5a86e1e38357c271a170ba742a2afb0ff1850d439f77e24bbfd54a022897788c1f47011afc61393ecb13f778769bc07a049", 0xe6}, {&(0x7f0000001e40)="d7222c3645976a1d5c6419d9415c18556bc488d6cc06f8a6b3b7ced2ba", 0x1d}, {&(0x7f0000001e80)="44ac8e3df1071b910a17540d4196585d87d3d275cf0456110e0367bb1f18406d1f78f4c898d7236fca1bf1b69b3ace7ec72670af80ba00d463c1805036e2b48ace8ad95324f96a16a88aae0df2c1b7774860f21646da31bcace62a69b75fc3cfd25c307585731ea0b6bdf0bbb3c4d36eb5f7e34364790bb6df2246dfe16df2fe9284e177f4cec7d6948795cdf0c0945361a50c14577e5198672d3a0ac044c7341d75709b1727a1afaf60fe1b7d49e4", 0xaf}], 0x4, &(0x7f0000001f80)={0x110, 0x1, 0x8, "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"}, 0x110, 0x14}, {&(0x7f0000002100)={0x27, r6, 0xffffffffffffffff, 0x1, 0x8c, 0x8, "bc562831a5bd26346238b566de800297f08e86ef59b839eb4a6fb6537f22d6ef5a1b7836d9ad70302a46cfef2eb9b4b89446c1114d9a56974c9c919ef883cc", 0x30}, 0x60, &(0x7f0000003180)=[{&(0x7f0000002180)="be5761f32462c3391d8debba05259861815b20cafe6c733088aa31000b2ffe64b0353b60cb77de3550419c9db47d0511d271dfa37e1d213d78f17aa801e3b31170e1b6a3edf5d73ad2a2cbfc3beec4a7035c81a2ad693435ddcfd253447345676229d199f7ebb8df20146d6ff93370c073aa140cdde0e730aec0ad256f01dab34c8f59d075f4be34f30cd077ffd2deca84ff87b572c6765148e5b2d1aab6cf12260aa157f4edcc5a3d7afac1585db865ec2ffd7b39737ec30ae639d8678723c331ee2dd9cb98ccbde5c8e31198b4815bcae63471112721a70372008042b23f5072220e9b5f5b2a00c150a7ce87abdf158ef7ddf3104a65316f4923340b757a32c0f1453fd78399ef9fb2515e648c450c4eec24dff87fe642c5a9ed0293808d6a8367572f8a95d1fc182cca6f30ab93e2be007728f16778d55f625bb2d444d87c26c2483d163adff53aa90c0c3e3d3cec568ce3ec30e27bfa083043d7bb5b1207726297653f11ebe6c02a22337fedf1d9f37d48ba393a34dfeab3b29667c96f8a428f555fb84b55829948bf2a1c61597bfccf045adf17ef3d91242ccd850b9b6bcc5f85803a27e9454f3768a6c6db364558f076b3bdb01476b105ea7f242510ab02b0acec4b23470db5837010486374ef4e2f07f1227a18baeda509c533b074ac74ca6218a4fef6fca3f5fb7070736a57f337921aefc5cadd24ee206fbafcd779bfa88b445d7cd6f9d2df83704e0d61a12b7c476e717c40c02301eb07c5420d47a43f7baace5237202d1019a45512a36359de83d0666342422c43729a5e5e65479b5247393a3e01cf6cacffed50cdc8a404eb78332f75a8e241be43e3a574c1fb44b780084ef31c9888f4ea49fc54bc9462922d96d1b3417390f12a2d627e51a20e2edd133118708421875066136cda42fb2232d37cd988ce7413f0c10dcf73ca5cb372f250b652c1df5d2067bc4ab39fc84e0232ea6f5cc614228aad190b42986e2a896d9e758f358a1e75e3b395e5835617bc8acd3253f5cd63a9e0122216c07ea7007ce6e0af0cc7bd1d0998117af9abfc7fd4de1a4f3ee156c6a52640859161948f8607bc1f08571faf78cc7362c4a8bc23c5b7db3fe1e00cb8ebf771d1928f585513073d3a2688071284bb469ed82ed9b08cd2f0f93b932e905b56956315866879e32b91630492d312f9463e73f33f784557849f6f711890e10a62cbff88964a2b4fb6c8654794931da86fea8010e8689779873536e14175f67eca89bf40fbbac2b72ba3af5a9f5b605ad9f66110a28657cf7ba9edcfe77d3925aaece801054460490e5ccfc27880202ffe4abcca563fa0a3d4cbb05bf12334dcc2cf5125015fb34143d5551df037560a9a0ae53516b7e4c3a8d2557ae83db4dcad231f2813ab7675d522b5ec3e8c8dc5426b9e13908302df94d51d4030f38ba214347d4758317dbafcc75f9f764afc8d815d85de81d7474c361c32d00d429ed49edc1f647455a86ee9fee9f465501d014e6b601fc2964a788d20f827cc92cd463430f313a290f1548ac9ec9d308e9e01cfc1ec564d188369a8f66f88f2b343ccf61db7339ccbbca2d35a9942509c002f18c46c2b04ddb99cccf7888949809ae2eb7c31254f631365cbbf5564f15a1a4c916eed181e7f8a291b6ee6dc9e12f5bfb93e3efc62e9c0910e7d795a7be66b8af27290eded7d778fbeb63e1081bc63c5a3c0460081d647ef96f063384fdc6d31317f63b4b72ff584f58548e50e1b65b989ecacf464f4ca15dc1857760139a3c74988651b4b467ef34e5ef129002f4d9b95b535fac602755395e696fd9d515a48ecc8d345955a646729598d73c201f71698c3f6f4080b45e6c2c652bdee832552698460757b31df76a13cf4b7570e302f24642bdfc6c21330583d2cbfe5e99b6558af299f0f2265cf6fda08cef3f733c54154524debdc9f8a25c7fec6a7a12c0f4059e160efbf91737e133b7a4f0987f7a0e957fb845af1c0da061d11905c045629895460fe00f0e656c5fae89281b671e1f48373819862b5ba7e7278b0b00c3cfd2d327d74a84044317eee92ea5cf1cd55f2fb273818cd2e5824fed3a49f64d3af24d12e69194fcf24ccd1a5ae465a38bbf0bf5f6e7ae72128a5dfe8416f763eafeafc4f7bbcc345bfc9e73ef33b5e4eb332896b5fab8f8c4f1e2169aa215e4ce5517f8c3a67a5491e46418821d22e1d173eedd4a5499ca73c7e767eaa180b92217ef90cabedcfedb817403afaa35fd37589ac7420f2a7b59856293243e5d3729ac277bb62c9a1a705757d5db3718bb099d6f782d08ddd6197ce7a7e18f084b522c732d4253328d6a757980c084675caec5fbd56b5982e7a726808a0cb6c0ad66301081992ced27ee1d22ee9a35da239871d9cf7f0f0557baf42622a7630838533cd4bd08c04010aab2a07642cf37d0259b560ce48314b149fcbc03e2eeb8b0992c11d0005f1b59925e1ad47533f825050e14a20927c7e1b8e7931c2ffc992eba6a809dedef8a3028f0e817efb372e2f7dede75f383c4dd2c2392463255ec550c1442076e8d73b4e438e2fa2250ee6010c2c51016382563c39827f91648e03609c7bf3a5049bcd912d856484990fd1957ece735e017503ab06108e42749e6ba95bdaa4f7ba9fe5f5138a802a6191806928d0bc3ebed71c378e9c721bae0db978786c1c8ddd34f406bb25413c800f061d7918bb3be06a19ea9df915878f2e98df4e4dd43988950fcfb7661f60affb9c2e3a8fe0cfdca6fe2abb0d9213d23ec3fbe8b0bcac1a56bfc455b8105622aaf6c5d9861b37ac2b8f27d2aaf1af065803bd5b3b15508ed9a5ca28db451047b6e32cf2e9bda15af6b28fa042f23da35895abd9a54148218262d5e08961c344b63b74e0291c8a7641ae5e810287322e07732c5cb06b5c0779817f50b0cb0fc0162c1a42bc6c588fb60593724161d3428ae19626dd5bba1ab3517b090b272ed8bfc7be515bda611febbcf6370d6ea6f3104e81807b1dee1ac4bbc275ee4e827dd2ec1fdbe54503a3492b351334f32b4bbfdd66baa85df6a664213b7ed02593eddd2bd1b76641c1d679dc318531a3ec558ba2279b72256629af58d201dd340f2aef020d68fbc1f52c2f4ba826e1986345826e37f0b24b42987d4e04a0396b45845eef5dd2e0328d39f7b75792d0372846a65f188c0c5a406ad402367f6ab6faf57c22ef1c1992cbe8bc541732307c107c528c462dfa03506f2d749362ce2c969b46911dc8769d323976fd121742b3d8f4c73b6e412cfaa88e784c59888867b325ab0acde1bd7fb38d538e214a11effafb4b1fbfdc60bc714a444f2a751f89b512c4da317770feed3799cee0f53acd27f86bab6d675a39b95ac3ed4c05b88b69dd223fcb6e67da552b68977dfb9a5174e04223ae63fb5c2edade976fc343d7193932c1ea930caac078fda15abdfd628a22f13dc74caa0b465da40b09b7eab63dfc272120f60ed126dc2c5b5fe29020a8ad95995ee80cf27b9411255f32a70bfaf4c6ec9707acf1091ab5b5dca113551a533ed767caee6d10c12efe727cd40cb7384dc3d83047483bab84bf9f2f94f146288e5c713cf1531b61f78c0b7d52902b0c1880c7d50ecadff66e5830a1f5e1ffd55e4279cd8523b788f83b53ca2898d682ea8c15f45d63a7d41da01e0479376d0b28686508f60d0d8d321db6fc902137b1de7812a99a011767fcd4ef6d685c2c0da870b4d7b9b91f70996eae6957fe12dd33df8c9783e5b0fa08226e4e8ceab971504e9c7cdac4e2cface8e72ec7a9128b0d5d666ad054ece4e07209b025161aa31ac8e7c7eec7c573ca78aa65e42c3a4ae9b08e23270c2b31199a42162690aa4d4aa8a19b13fdeceb98eed04d31129d7b9ab474432e1096c5c046399425d257b9d22da74064a3976e3bf033acc7a742f77e0f8ecd0cb043899e5f83a420c16243da755f4b55ae71ea0357c07d64a31c362b9cc46cfee67f4aac9fb2ec16b5d6ae7b5070792051635d4473f96a0c3a665dc4bb145a00125caf4050ce230151df7ce20219224f9dce7cd6541f89bb732dea2e18857f9bc2f5c9e24a50e679a19e893e24a50caceb7145dc9037be99fef7739fc5392a74ecf2966eac86f11d2ff2da19a121b8922b73294762abf7b53f10657b1d3059fb8e52355dcd33f91dc2a55eaacc3ac627419e30340ae72839db28de7e4c4058c6dbfe5f42aa6de5330c24a5f55717e95de066ef1f659ffba28f6dcc8d161708766928548215ea6a9fa6f2e09e481870a05deb745c2f0a7c6b3f0b897bbcc0b3ea251c940f96ad310f51c93434465c39d9520de795a8176d5a5dbd8964fb6b6e1d7b8b9d46623a519d0c51b1cf8985d15f797a91700cd25af810aa9c9a13571d6a2a6b181221150cbf268ea5342b8503c710d48baeb3cca330b8892c40bb33616a8a48533b7583b37b019cbb46a05577d3b623ed55edc7a277a4aeb70905fab3d68ce1e09d0d322ca099d356b51992be4e2c74ebd2c276ae8af3b2dd672e957e1c390091c96566252f234b38cee1262766081b845214cac31a557383d6bd75d4c73fa89b0524784f8566e9d14f3223f911e54c98cef114c5e346e9578582ee9bce0ddb6e128eb42ce65b00be1b2992f1cc5838d53d6a44b214b131003d04b3e8c58c42cbe766e02f9286e226526384ae7baf99e60cb9fc925d499bb3e4c369834504842782d8be3dfe04ab083105977e6c0967238c16b06b633b88eb6644cdb3e1f53f3ad8aaa0f72c50ca7cc94153bcc10298a70946cedcb3021e0cb5c3f991b30b9a72ea3157ed6492fc64a1a0068910dc754caafcf2e7579737c8580b0c535d5301d08d08dadd574d532a077a7f1b043ae9265396773f6706f69811c97393d1abdbb43ba0e578ff697094e08051e51cebb5d6e5e8ef21995c0e7a515360c1e95cd1fecfa3fa4365b9deb2a87cc922bf3984842b3de2124e7dda8896885d98e5047cba4554e331f4d62003f8a63a81c7423622d1bd85696cf6c07cdc4b838d7f1e8e96a370636274b90fdccd77cbdb2a63bd77d6ce8f190bbb64607292bb4a89790fdb917a9f2f9f82ef910bfcacc764abf4a38c22d361cc6cd1381e480e0de8955ee93976814f12551b27337fb56e11cd6a9c69e2260c3738da453989f53de2dd96a73db777dd2e7d36535311fcd2e4c1f22f1a029fb24a221b605f0d0e23059b79bbafe44d90f4a8490752dddc6ccdd8e471dc5f62d3ee01e9ee3d5f97ea457052fc4869a33766f5ab2bc497cd3aa4a5368968084316318996b14f14e1bb70653ef04c699c6a233618541ba6cb34780c4a27eb964572e71370e7b7a230a0afa11922925e6a82ab22d38fa12947abc45aef4e7cbb036d25a6b387318e2557bac7d3008837e3b48db72f8f5d0272ea959ba3e0aa6d347eb7e83ce599434c931ad2fec39b4e1e1580f48cb493968ccd30d512ddcda53f827589d97413fa977bd43f1a0631404eb9bccd2aed62b13adb66216a9b537d2895014356592ce7687afa539851024912b992195e2ca8bd3870ed7bc4a3613a4ad526c9311b16bc9542d768e87507d93f9eb7f52b4d66f78b7a2d6cbf05d25f50b0cb7d94b04b1f91bd620c13bc1c7c578f23b87eb330901c58ecde185b4216455639840261eebd2980453e1721bbc0f5a8a92ded3851569df198e5b1e9ec3f51f3025afe705f27fa288779dcd830c6749cbf3b3e786137bd35da99c86db90a9dd189a1bae55914bc1956a00f2bef623402d7953b9308837441426f9eb9e878597d119b3280e2bec45c466799", 0x1000}], 0x1, &(0x7f00000031c0)={0xb0, 0x117, 0xfffffffb, "572a007e606d925a7c233df02e71d1ad905731b0d73459968cd21b4e7b5fbd0b62ebc4b7aabab07d4a0638e63eb9f9f4b70d0bb6e09d4f102023d1f7c292ddb7ca6e2092631d75f77ad1bf6407c2eafc57561d0169e957165b3c18c384faedcb0b7597db3a0c0a882e49967404740f8b56f87c53af6206e7a4c82f008da28bcca87c9f42888ec7fefdb73d25cdfe3683865513b9f373d470d85573eb900d42"}, 0xb0, 0x4004800}], 0x3, 0x40801) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003380), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000003500)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000034c0)={&(0x7f00000033c0)={0xf0, r8, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc9, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @gcr_ga={0xbd, 0x6, @device_b}, @random_vendor={0xdd, 0x93, "65ea1d4c849cf3ccc0fb0c13351dfcdb0c1dbe6140a53526910bea23a76c3872df0ca709abd0d4559dd5627b403498858cf6b9661d8add64dc7b66bc3fa7e41102ab0d684b313898fcd924fc5d84df72318b6e36af3e593908d13db6e695f7d9347691fad04f6b957a27a976a5e9b0a65c41d0af977b88f6231eabc6b1fc1ba8262aa6757596bb79fb26e8905d8f1a3d058cef"}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x4001)
r9 = accept4(r2, &(0x7f0000003540)=@l2={0x1f, 0x0, @fixed}, &(0x7f00000035c0)=0x80, 0x80800)
sendmsg$AUDIT_MAKE_EQUIV(r9, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x28, 0x3f7, 0x100, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x20008090) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f00000037c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x3c, r8, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x6}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xf4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x10001}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xc2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080)
setsockopt$MISDN_TIME_STAMP(r9, 0x0, 0x1, &(0x7f0000003800)=0x1, 0x4) (async)
sendmmsg$sock(r7, &(0x7f00000044c0)=[{{&(0x7f0000003840)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x80, &(0x7f0000003c80)=[{&(0x7f00000038c0)="cdb2e9cc0d08d141aa69a7e721c7ebf85ce869e86cba3a86f9bb15323903e88c09ead8e5a2fea252e5e1057ffd66f7d9ac476c0c44862bd7352b03bf7ac9c76a816a5c80bd531f1ee8adc463d8a2480f80b9286a05af6e7945f9d8a7c5f3889d580b70a8ca731a221ec48713ac72f8ea21e2d73d3ea690e6e5283c9f29ac716d998989c4e1356841f2cf6cea93bc64e663e7368c7086183d6199132582cb455a470ddfe734b0", 0xa6}, {&(0x7f0000003980)="eec9c4b77fe730524f8f35bb284e7ee40fe074bd305f353cb5d07d91f54da26dd9b817bc077954f1ef3c2305bf562be73d483828f63b79b8b4db655a0fbb39b121274dc338a8c4298778a8e129587847d9c70fe6bf490f16956b83b94fa3f92135cd8d78503112d43528147a8414343bd3a09dfa150bbcd303f8b500e07b5970947e462ee774c78600bfec0daa343274a2fc22dc57", 0x95}, {&(0x7f0000003a40)="bb282a961cad478ab0b4cd5636066d121509322ea38a48fa0a403d0970838eeb578480d652d8e3f22bd08a", 0x2b}, {&(0x7f0000003a80)="aa75d2c1b61289bf9889f59873338cfc3cb100904d91b999b72370d687ea6ede7a0b8c1d64b0cca4af79e761838ab9fe3a674b8cfad765e99561df6eb886713113625e49cdf78eb72f4c011de935109cb45aa9cb4b3d370d6c2b1e4e6f99a62ef6f23f9af8d29dca", 0x68}, {&(0x7f0000003b00)="4fb71b62c52b63ed54d8189ab4b7cc2cb36c73d76d7403011429ee8d6f117ceae3eecdd6001aee82c7393a20678247b9ebea07d0c9c647974d3dd5fd389d3f086666d01c02c815ef68aa", 0x4a}, {&(0x7f0000003b80)="5ba33e8605dea27e5502be375dfa94a8ecda6117e63f5b9573490bc33d7ed5f4f2515d5e15f676d74cdcb44d8f3e32aec9d8129d15ec60dcd420fce2173b00e534b2a2f16105f569df76543ff03a10d8d19e085d0a8e29a172954db863b5b4dba5798e7596da2a66a9831e0dd4d4bd90cfe226305051b2d95fe5670cdbb7cfeb8c5d3d4b3925d3c97ef490b692aa46df2f8e3a8633ab0f0f8a1ed307144111b1d6f4d415c95c2dfbbd9631e709f1cd1ef39468be781b0b13c8807b037b2e3adebcf0a034e37480482813997ac55f30d71650df5235", 0xd5}], 0x6, &(0x7f0000003d00)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}], 0x48}}, {{&(0x7f0000003d80)=@nfc={0x27, r4, 0x1, 0x6}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003e00)="71f4b851136e690bebbc99eb76affb191c3609de24916db5ce590e02aedb1ee71fbffac1b3a467d64e3bcc186d45d43f85eee1483806dee22cd0fea5a015651e72b10948115c9b5035", 0x49}, {&(0x7f0000003e80)="40eb7710b23de36e093fd0b66949651d4e8cf103f12772543ac50deae7504876b051ee4c159264ac49a3f182051b7f97f48786581feb74ef9a3b7e4218e6979d7b54aaa961b4d578108ce48229d15a5fc5c8", 0x52}, {&(0x7f0000003f00)="845ce08a1a9e01aa3acc8c474956596aacbe267e79c28b8541636af0a8e6f9861e549de0b448d2ea58a45124bf9c72bab0749f94512b48c639f6be97d9a769cb9514cbb1e0d790214c061d2fe4ab0a6860fc34c9f5ba6ff5ca6ae098c74f485cf8451610e77cfc43d3f0c6af3a853374d4e10c2a2b081ec2b8e94c58ea86688d20381d07121edcc74b43f1f07bb11e020e42c2fbeec4ce5896f5b70374169e06cd852e850d04177f6cd8650c703268e687a072f2c51d71abd8", 0xb9}, {&(0x7f0000003fc0)}, {&(0x7f0000004000)="66b4fc1acc04d478a343aa7d048ee787763a323692b89b02dc38aea68ba6c8c598f246b23b87d6a04bdd2e1cace0e7632c40e85606d63c6477cb8889ff804a1489d70915694b9cbd54c7d9b86a53f2e9864fd214433fcf79a624c941232173bc02eecbcbfb5236535a686894bb415bbf586b8661789783335f4795ef8b4a9265f0af402a323e970a7755737df243e8b7f3ea681bdff3f1886715211ce78c12a6c8fe92e33ebac3d9628a322859b3d36210dd7349923e215bb9337425a923bbce5b876e5bd2895ce03513973c8190a3b91d10032066e0041ee1c891f28c5e30b8716b8cfa455d77631aeabe23611edb1ca481e49a0d", 0xf5}, {&(0x7f0000004100)="bdf764f8887abaa35c9fd9b3e05cd0082e44c3d63d5237ab2c6f9221ab39b9a2d2b24659582275074671fbe6daf98ee93ea9511bec60e64eb37a3a7fb81a6903704982ce3212ff5a143689f9b3a22771847f1ec9747691fc516c46125539020506bae528445b57e311f9a30dda512ab6caef9a7993116e894e669a146fecd43b6edaff5d1b41997babcd5a219df7da9c1af6e4104436f3f41ac52751b616c1c1dbd2b538", 0xa4}, {&(0x7f00000041c0)="a23c50caf3367df49cc333a268653de57d538625105c0046481bc5f522d13fac5a81657a54fdda100cb35e8599e44695757ecf2702adfdd2231a2bd22f1529fa6f4e31dbb4003e71256be8e6c1d7386899196da055f0ff", 0x57}, {&(0x7f0000004240)="84cb56ebb0673814e998f5828ab57378aebe14330ead2e773dab03dfe97a93c018911cc0c4bbc5cb648d9a33ca", 0x2d}, {&(0x7f0000004280)="15a336d50a4178168833f7d49ec7e77f3361549002feec1b39a8bf8dbd32e96f49af8e3f647ae5e1b5a87cbed014d249e30e75e8036cf7b14d87121729b2a549b137e9b62ce3cd1d442f36c5755407ee789526205cd7077b9518d69b468d20189cf7ab3d02a5c6bb932461f7d95b5168a37fe4908f4a7ccc23db919c53d31588b58a1f8c3724def10e650e3305f79bc08d75c589d9f9e76b1e5221639353a1b08459b0642cff05c507c7f2ec810e7053494e11e377ac8625bffa5941450749788ea9c472fee0ed59b74dbba7f2c6d93b8c04cd4de9de3197ab51de10b3d92ef75fad240abe13771588332a33a4e5", 0xee}], 0x9, &(0x7f0000004440)=[@timestamping={{0x14, 0x1, 0x25, 0xfe}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x99}}], 0x48}}], 0x2, 0x4000000) (async)
r10 = syz_genetlink_get_family_id$team(&(0x7f0000004580), r7)
sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000004840)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004800)={&(0x7f00000045c0)={0x20c, r10, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x922, 0x10, 0x1, 0x9}, {0x100, 0x0, 0x9, 0x9}, {0x40, 0xd, 0x3, 0x9}, {0x5, 0x5, 0x5, 0x400}, {0x95, 0x8, 0x88, 0xc}, {0xe, 0x1, 0x7, 0x7}, {0x2f8d, 0x5, 0xe, 0x3}, {0x6, 0x7, 0x6, 0x4}, {0x4, 0x4, 0x40, 0x5}, {0x9, 0x4, 0x7, 0x2}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}]}, 0x20c}}, 0x4810) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000004880), &(0x7f00000048c0)=0x4) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, &(0x7f0000004900), 0x4800, 0x0) (async)
ioctl$XFS_IOC_COMMIT_RANGE(r7, 0x40585883, &(0x7f0000004940)={r0, 0x0, 0xffffffffffffffb7, 0xffffffffffffffff, 0xa000000000, 0x4, [0x3, 0xf9, 0x98, 0x7, 0x4, 0xffffffffffffffff]})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004a80)={&(0x7f0000004a00)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x656}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffafea}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4801}, 0x24000004) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000004b00), 0x80, 0x0) (async)
unshare(0x0)

1.228382652s ago: executing program 4 (id=3885):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)

1.161951827s ago: executing program 3 (id=3886):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xfde2}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x98, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x20, 0x40, 0xfd, r5}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @batadv={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x0, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0x0, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0x0, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0x0, 0x1, 'BATMAN_V'}]}}}]}, 0x40}}, 0x20004840)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e24, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x18}, 0x882)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@empty, 0x60, r9})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x48, r7, 0x1, 0x70bd2c, 0xc89f, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xd2, 0x63}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8000}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x72}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x400}, 0x50)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xd6cd090108d52baf}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0)
pipe(&(0x7f00000001c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
splice(r13, &(0x7f0000000040), r12, 0x0, 0x800000000ff, 0x0)
close(r11)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000005c0)="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", 0xfd}], 0x1, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc4}}, @ip_retopts={{0x58, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x44, 0x5c, 0x1, 0x2, [{@multicast1, 0x1ff}, {@local}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x16b}, {@remote, 0x4}, {@empty, 0x8}, {@private=0xa010101, 0x100}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffffb}]}]}}}], 0x70}, 0x4040)

1.099410067s ago: executing program 5 (id=3887):
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
socket$kcm(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@fallback=r0, r0, 0x2f}, 0x20)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500"], 0x3c}}, 0x0)
socket(0xa, 0x3, 0x3a)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xf, 0x4}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xf5, 0x83}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.099060264s ago: executing program 4 (id=3888):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90)
close(0x3)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x2, 0x2, 0x0, 0x4, 0x0, 0x6, [{0x4, 0x2, 0x1}, {0x3, 0x3, 0x4}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4077, 0x42, 0xfed, 0x2}, 0x28)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f00000004c0)={{0x6, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
listen(r3, 0x80)
accept$netrom(r3, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
r6 = socket$inet6(0xa, 0x3, 0x5)
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000000)=""/1, &(0x7f0000000180)=0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20)
read(r2, &(0x7f00000003c0)=""/123, 0x7b)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4850}, 0x0)

1.005114611s ago: executing program 0 (id=3889):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000003c40)=0x8, 0x4)
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
splice(r1, 0x0, r4, 0x0, 0x2, 0x0)
splice(r3, 0x0, r2, 0x0, 0x1c, 0xe)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x73738972}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000630afcff000000009500"/40], &(0x7f0000000100)='GPL\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r7, 0x25, 0x8, @void}, 0x10)

878.058394ms ago: executing program 3 (id=3890):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010102, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000000200000000000013c040000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

769.616342ms ago: executing program 0 (id=3891):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000020000000001000320003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10)
bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r5, &(0x7f0000000000)="09000000010017", 0x7) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async)
recvmmsg(r7, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x68, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_bridge\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25df9bfc, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x3, 0x4, {@in6_addr=@empty, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000540)={&(0x7f00000000c0)={0x30, r0, 0x10ada85e65c25349, 0x3, 0x25dfdbfb, {{0x67}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200449a0)

769.07084ms ago: executing program 2 (id=3892):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc41)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

625.266108ms ago: executing program 3 (id=3893):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_MAP={0x24, 0xe, {0xc09e, 0x9, 0x1000, 0xfff9, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000040)

595.546413ms ago: executing program 0 (id=3894):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000003680)=[{&(0x7f0000001400)="eb", 0x1}], 0x2000000000000138, 0xe)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xffffffffffffff9f, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0x39000, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xc, 0x7, 0x9, 0xf, 0x20a20, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, <r11=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%-5lx  \x00'}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={<r12=>r1, 0x2, 0x6, 0x5})
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x18, r1}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x2, 0x3, 0x1, 0x1, 0xc, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r6, r8, r9, r10, r11, r12, r13], &(0x7f00000006c0)=[{0x5, 0x3, 0xb, 0x8}], 0x10, 0x7fffffff}, 0x94)
r14 = accept4(r1, 0x0, 0x0, 0x0)
recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0)
ioctl$int_in(r14, 0x5452, &(0x7f0000000500)=0xd0)
sendmmsg$inet6(r14, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001400)='(8', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8004)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000)

520.799337ms ago: executing program 3 (id=3895):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000041d000001"], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket(0x11, 0x3, 0x8)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800000003000000000000004959002c0065000004019078ac1414bbffffffff940ff00c8e76d0966f9a2b2407c08a00120090780000ffff7595b24c9a6c7fd8d3d60f7760d30d1cd7178c743f539c4f36457340013b51d57c1733e975055ba6d4dfa39d9375a841df2669eb141d327b8004c2b706d4483c669535ebd3e52300f067d77b25c87137"], 0xff04)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3}, 0x94)

464.936784ms ago: executing program 2 (id=3896):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x133, 0x133, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8}, {0x7, 0x2}]}, @func={0x8, 0x0, 0x0, 0xc, 0x5}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @datasec={0x5, 0x3, 0x0, 0xf, 0x3, [{0x5, 0x3, 0x8}, {0x1, 0x0, 0x8}, {0x1, 0x5, 0x2}], "d37b23"}, @enum={0x8, 0x6, 0x0, 0x6, 0x4, [{0x3, 0x1}, {0xe, 0x6}, {0xc, 0xfffffff9}, {0xa, 0x5}, {0xe, 0x7}, {0xe}]}, @fwd={0xc}, @struct={0x10, 0x7, 0x0, 0x4, 0x1, 0x76b, [{0xf, 0x3, 0xfffffff7}, {0x7, 0x5, 0x1}, {0xc, 0x2, 0x2}, {0x4, 0x1, 0x4000}, {0x9, 0x3, 0x3}, {0x7, 0x5, 0x1c}, {0x9, 0x0, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x8}}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000500)=""/4096, 0x150, 0x1000, 0x0, 0x400}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x9, 0x1, 0x4ad, 0x40008, r0, 0x0, '\x00', r3, r4, 0x1, 0x3, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xc, 0xa, 0x0, 0x1}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x2, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41100, 0x2}, 0x94)

406.181135ms ago: executing program 0 (id=3897):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket(0x11, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'macvlan0\x00', 0x4}, 0x18)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8954, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

343.341954ms ago: executing program 2 (id=3898):
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x44)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e23, 0x2, 0xcd}}, 0x44)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x18}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r2}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000240), 0x0, 0x1, r2}, 0x38)
syz_80211_join_ibss(0x0, 0x0, 0x0, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_int(r3, 0x1, 0x13, 0x0, &(0x7f00000002c0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000440)=@default_ap_ssid, 0x6, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)

221.14152ms ago: executing program 3 (id=3899):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r0}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newlink={0x74, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xef}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x74}}, 0x8000)

219.136476ms ago: executing program 0 (id=3900):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000006680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a440000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000018000380100000000000008000000100d103000004000080140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0x11c}]}, 0x18}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x2, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0xffff, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0xe}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800)

103.313135ms ago: executing program 5 (id=3901):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000000))
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000980)={{r1}, "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"})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000600)={0xfdf9, 0x8, 0x1f}, 0x8) (async)
sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3355}, 0x1c) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40000000000000069109000000000007b0ae8ff000000009500000000000000f205dd861493c3af83ef1b169838f075360fcdab325ef1741d11fd59d14360f3eecd02df730921d82678be28a4c5890a62d604fad0ad0e45294d0c55a785815514d7266db9dfbd46052868c8cc24ba4c65ed67c06d789bc62669758a258718078f1fd98492fcc67f645bff2d81bb25e9c3b219ec75eeae73275619f872d8394e5270262d1bf00e768b187f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
setsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, 0x0) (async, rerun: 32)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async, rerun: 32)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
read(r3, 0x0, 0x0) (async)
socket$kcm(0x29, 0x2, 0x0)

0s ago: executing program 3 (id=3902):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="44000000100001040000000000000000c92d0000", @ANYRES32=0x0, @ANYBLOB="2103000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

 link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  414.117254][T17579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2724'.
[  414.282341][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'.
[  414.539480][T17598] netlink: 'syz.5.2728': attribute type 10 has an invalid length.
[  414.572487][T17598] team0: Port device  added
[  414.593135][T17598] netlink: 'syz.5.2728': attribute type 10 has an invalid length.
[  414.740518][T17605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2731'.
[  414.756896][T17610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2733'.
[  414.847266][T17611] netlink: 'syz.0.2732': attribute type 1 has an invalid length.
[  414.888466][T17611] bond11: entered promiscuous mode
[  414.904033][T17611] 8021q: adding VLAN 0 to HW filter on device bond11
[  414.973901][T17611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2732'.
[  415.080017][T17613] gre0 speed is unknown, defaulting to 1000
[  415.232495][T17625] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2735'.
[  415.834899][T17613] lo speed is unknown, defaulting to 1000
[  415.843032][T17627] gre0 speed is unknown, defaulting to 1000
[  416.630663][T17653] dvmrp0: entered allmulticast mode
[  416.640100][T17627] lo speed is unknown, defaulting to 1000
[  416.712668][T17642] netlink: 'syz.5.2739': attribute type 9 has an invalid length.
[  417.290101][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2744'.
[  417.568041][T17692] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2749'.
[  417.786658][T17702] vlan3: entered promiscuous mode
[  417.800945][T17702] geneve1: entered promiscuous mode
[  417.806787][T17702] vlan3: entered allmulticast mode
[  417.812729][T17702] geneve1: entered allmulticast mode
[  418.466157][T17722] x_tables: ip_tables: osf match: only valid for protocol 6
[  420.007069][T17668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  420.243108][T17751] batadv1: entered promiscuous mode
[  420.248398][T17751] batadv1: entered allmulticast mode
[  420.571524][T17752] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001
[  420.590552][T17752] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2766'.
[  420.852957][T17776] xt_hashlimit: size too large, truncated to 1048576
[  420.956255][T17779] syzkaller1: entered promiscuous mode
[  420.962203][T17779] syzkaller1: entered allmulticast mode
[  421.994459][T17825] sctp: [Deprecated]: syz.2.2783 (pid 17825) Use of int in maxseg socket option.
[  421.994459][T17825] Use struct sctp_assoc_value instead
[  422.021431][T17825] sctp: [Deprecated]: syz.2.2783 (pid 17825) Use of int in maxseg socket option.
[  422.021431][T17825] Use struct sctp_assoc_value instead
[  422.443513][T17836] netlink: 'syz.3.2785': attribute type 1 has an invalid length.
[  422.549690][T17838] xt_l2tp: v2 sid > 0xffff: 4294967294
[  423.116133][T17847] gre0 speed is unknown, defaulting to 1000
[  423.306087][T17847] lo speed is unknown, defaulting to 1000
[  423.536628][T17850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2788'.
[  424.242642][T17787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  424.252633][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2779'.
[  424.421678][T17857] sctp: [Deprecated]: syz.4.2789 (pid 17857) Use of int in maxseg socket option.
[  424.421678][T17857] Use struct sctp_assoc_value instead
[  424.527406][T17860] netlink: 'syz.4.2793': attribute type 21 has an invalid length.
[  424.541200][T17860] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2793'.
[  424.686873][T17870] gre0 speed is unknown, defaulting to 1000
[  424.940252][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2795'.
[  424.994043][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2795'.
[  425.173066][  T399] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  425.182197][  T399] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  425.198413][  T399] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  425.237765][  T399] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  425.306542][T17890] syzkaller1: entered promiscuous mode
[  425.330993][T17890] syzkaller1: entered allmulticast mode
[  425.626312][T17908] x_tables: duplicate underflow at hook 3
[  425.735863][T17911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'.
[  425.748913][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2804'.
[  425.856593][T17870] lo speed is unknown, defaulting to 1000
[  425.889450][T17910] gre0 speed is unknown, defaulting to 1000
[  426.146702][T17926] netlink: 'syz.3.2807': attribute type 21 has an invalid length.
[  426.386805][T17911] gre0 speed is unknown, defaulting to 1000
[  426.398815][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2810'.
[  426.430337][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2810'.
[  426.446046][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2810'.
[  426.469092][  T399] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  426.478016][  T399] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  426.489558][  T399] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  426.530988][  T399] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  426.726842][T17911] lo speed is unknown, defaulting to 1000
[  426.748977][T17910] lo speed is unknown, defaulting to 1000
[  428.421023][T17896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  428.430754][T17926] netlink: 'syz.3.2807': attribute type 1 has an invalid length.
[  428.623730][T17969] __nla_validate_parse: 1 callbacks suppressed
[  428.623752][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'.
[  428.673676][T17969] vlan4: entered promiscuous mode
[  428.843657][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'.
[  428.852731][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2821'.
[  429.216355][T18007] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2827'.
[  429.538026][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  429.564443][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  429.582574][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  429.605114][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  429.621107][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  429.738924][T18013] gre0 speed is unknown, defaulting to 1000
[  429.802522][T18023] x_tables: ip_tables: osf match: only valid for protocol 6
[  429.945452][T18025] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2828'.
[  430.248469][T18013] lo speed is unknown, defaulting to 1000
[  430.572196][T18050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2833'.
[  430.606196][T18050] openvswitch: netlink: Invalid VLAN frame
[  430.636633][T18050] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2833'.
[  430.661545][T18050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2833'.
[  430.779173][T18013] chnl_net:caif_netlink_parms(): no params data found
[  430.959716][T18013] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.968168][T18013] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.975978][T18013] bridge_slave_0: entered allmulticast mode
[  430.985604][T18013] bridge_slave_0: entered promiscuous mode
[  430.995964][T18013] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.003904][T18013] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.011677][T18013] bridge_slave_1: entered allmulticast mode
[  431.019792][T18013] bridge_slave_1: entered promiscuous mode
[  431.116062][T18013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.164388][T18013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.246888][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'.
[  431.381286][T18013] team0: Port device team_slave_0 added
[  431.408562][T18013] team0: Port device team_slave_1 added
[  431.493346][T18013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.500562][T18013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.527669][T18013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.570478][T18069] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.581991][T18069] 8021q: adding VLAN 0 to HW filter on device team0
[  431.592958][T18069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  431.609915][T18013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.617122][T18013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.643792][T18013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.682089][ T5839] Bluetooth: hci3: command tx timeout
[  431.718773][T18013] hsr_slave_0: entered promiscuous mode
[  431.729581][T18013] hsr_slave_1: entered promiscuous mode
[  432.661669][T18018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  432.752748][T18013] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  432.892426][T18013] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  432.925623][T18013] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  432.946055][T18013] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  432.968861][T18105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2838'.
[  433.001841][T18100] gre0 speed is unknown, defaulting to 1000
[  433.285790][T18100] lo speed is unknown, defaulting to 1000
[  433.499358][T18013] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.581369][T18013] 8021q: adding VLAN 0 to HW filter on device team0
[  433.655645][   T49] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  433.664288][   T49] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  433.681395][T13391] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  433.694913][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.702169][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.770968][ T5839] Bluetooth: hci3: command tx timeout
[  433.791223][ T5912] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  433.881956][T18141] netlink: 'syz.4.2844': attribute type 3 has an invalid length.
[  433.914400][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.921748][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.985481][T18013] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  434.011138][T18013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  434.063807][T18145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2847'.
[  434.297333][T18153] xt_TPROXY: Can be used only with -p tcp or -p udp
[  434.398944][T18153] bond5: option packets_per_slave: invalid value (1048582)
[  434.437649][T18153] bond5: option packets_per_slave: allowed values 0 - 65535
[  434.495439][T18153] bond5 (unregistering): Released all slaves
[  434.561097][T13391] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  434.761128][T18013] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.877635][T18013] veth0_vlan: entered promiscuous mode
[  434.903465][T18013] veth1_vlan: entered promiscuous mode
[  434.967607][T18013] veth0_macvtap: entered promiscuous mode
[  434.989510][T18013] veth1_macvtap: entered promiscuous mode
[  435.008932][T18178] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2854'.
[  435.019091][T18178] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  435.026503][T18178] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  435.034837][T18178] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  435.061971][T18013] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.075469][T18013] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.106669][   T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.116159][   T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.148069][   T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.174179][   T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.841313][ T5827] Bluetooth: hci3: command tx timeout
[  436.745466][T18136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  436.896274][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.925001][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.951737][T18199] netlink: 'syz.2.2858': attribute type 2 has an invalid length.
[  437.003678][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.012348][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.173430][T18212] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20002
[  437.233834][T18214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  437.431306][T18225] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[  437.451721][T18225] team0 (unregistering): Port device team_slave_0 removed
[  437.464467][T18225] team0 (unregistering): Failed to send options change via netlink (err -105)
[  437.477807][T18225] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  437.522505][T18225] team0 (unregistering): Port device team_slave_1 removed
[  437.536605][T18228] IPVS: Scheduler module ip_vs_sip not found
[  437.557798][T18228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2865'.
[  437.761126][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  437.921626][ T5827] Bluetooth: hci3: command tx timeout
[  438.427545][T18247] netlink: 'syz.0.2871': attribute type 21 has an invalid length.
[  438.513599][T18247] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2871'.
[  438.646825][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  438.671122][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  438.680173][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  438.690121][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  438.701159][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  438.778516][T18261] gre0 speed is unknown, defaulting to 1000
[  438.785445][T18265] netlink: get zone limit has 4 unknown bytes
[  438.918871][T18268] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  439.104557][T18272] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  439.362841][T18277] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2878'.
[  439.465625][T18280] netlink: 'syz.5.2878': attribute type 163 has an invalid length.
[  439.752211][T18261] lo speed is unknown, defaulting to 1000
[  440.167753][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  440.290210][T18261] chnl_net:caif_netlink_parms(): no params data found
[  440.569573][T18261] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.585274][T18261] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.604378][T18261] bridge_slave_0: entered allmulticast mode
[  440.612849][T18261] bridge_slave_0: entered promiscuous mode
[  440.621941][T18261] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.629839][T18261] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.640420][T18261] bridge_slave_1: entered allmulticast mode
[  440.649600][T18261] bridge_slave_1: entered promiscuous mode
[  440.691885][T18261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.705759][T18261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.726864][T18284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  440.801136][    C0] bridge0: port 2(gretap0) entered learning state
[  440.808101][ T5827] Bluetooth: hci0: command tx timeout
[  440.833522][T18261] team0: Port device team_slave_0 added
[  440.842601][T18261] team0: Port device team_slave_1 added
[  440.896142][T18261] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.909816][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.988330][T18261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.003173][T18261] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.010483][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.063943][T18261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.135787][   T36] bond0: (slave rose0): interface is now down
[  441.137924][T18305] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.205401][T18261] hsr_slave_0: entered promiscuous mode
[  441.232133][T18261] hsr_slave_1: entered promiscuous mode
[  441.261701][T18261] debugfs: 'hsr0' already exists in 'hsr'
[  441.271442][T18261] Cannot create hsr debugfs directory
[  441.293661][   T36] bond0: (slave rose0): interface is now down
[  441.401934][T18317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2888'.
[  441.432324][   T36] bond0: (slave rose0): interface is now down
[  441.458338][T18317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2888'.
[  441.572285][   T36] bond0: (slave rose0): interface is now down
[  441.722187][   T36] bond0: (slave rose0): interface is now down
[  441.763779][   T36] bond0: now running without any active interface!
[  441.936889][T18326] netlink: 'syz.0.2891': attribute type 21 has an invalid length.
[  441.948822][T18261] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.969547][T18261] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.324926][T18337] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2893'.
[  442.371020][T18337] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2893'.
[  442.435732][T18261] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.471818][T18261] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.652776][T18261] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.679152][T18261] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.855318][T18261] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  442.881228][ T5827] Bluetooth: hci0: command 0x041b tx timeout
[  442.895647][T18261] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.288588][T18261] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  443.324885][T18261] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  443.360545][T18261] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  443.368515][ T1760] block nbd1: Possible stuck request ffff888026bc8000: control (read@0,1024B). Runtime 150 seconds
[  443.379488][ T1760] block nbd1: Possible stuck request ffff888026bc8200: control (read@1024,1024B). Runtime 150 seconds
[  443.392129][ T1760] block nbd1: Possible stuck request ffff888026bc8400: control (read@2048,1024B). Runtime 150 seconds
[  443.403632][ T1760] block nbd1: Possible stuck request ffff888026bc8600: control (read@3072,1024B). Runtime 150 seconds
[  443.427195][T18261] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  443.472367][T18347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'.
[  443.511568][T18347] xfrm0: entered promiscuous mode
[  443.520596][T18347] xfrm0: entered allmulticast mode
[  443.526604][T18349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2895'.
[  443.719174][T18261] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.770233][T18261] 8021q: adding VLAN 0 to HW filter on device team0
[  443.802468][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.809830][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.856279][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.863554][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.029644][T18377] vlan4: entered promiscuous mode
[  444.036585][T18377] geneve1: entered promiscuous mode
[  444.042702][T18377] vlan4: entered allmulticast mode
[  444.047986][T18377] geneve1: entered allmulticast mode
[  444.293370][T18381] bridge1: the hash_elasticity option has been deprecated and is always 16
[  444.327220][T18381] bridge1: entered allmulticast mode
[  444.588634][T18261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  444.706976][T18400] netlink: 'syz.4.2905': attribute type 89 has an invalid length.
[  444.732051][T18261] veth0_vlan: entered promiscuous mode
[  444.864136][T18261] veth1_vlan: entered promiscuous mode
[  444.961457][ T5839] Bluetooth: hci0: command 0x041b tx timeout
[  444.980684][T18261] veth0_macvtap: entered promiscuous mode
[  445.010391][T18261] veth1_macvtap: entered promiscuous mode
[  445.068725][T18261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  445.127878][T18261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  445.345001][ T5959] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.367664][ T5959] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.407351][ T5959] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.433871][ T5959] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.688163][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.735340][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.906571][ T5959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.915846][ T5959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.166365][T18430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2911'.
[  446.285105][T18439] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2914'.
[  446.333772][T18444] netlink: 'syz.0.2916': attribute type 89 has an invalid length.
[  446.496148][T18456] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2917'.
[  446.534027][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2917'.
[  446.559127][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2917'.
[  446.561605][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  447.041037][ T5839] Bluetooth: hci0: command 0x041b tx timeout
[  447.254992][T18486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2927'.
[  447.450273][T18490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  447.458538][T18490] IPv6: NLM_F_CREATE should be set when creating new route
[  447.471755][T18490] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2928'.
[  447.485053][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'.
[  447.494202][T18483] macvtap0: entered promiscuous mode
[  447.499750][T18483] macvtap0: entered allmulticast mode
[  447.506454][T18483] veth0_macvtap: entered allmulticast mode
[  447.514626][T18483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2926'.
[  447.524714][T18483] veth0_macvtap: left allmulticast mode
[  447.530458][T18483] veth0_macvtap: left promiscuous mode
[  449.122730][ T5839] Bluetooth: hci0: command 0x041b tx timeout
[  449.310537][T18445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  449.741261][T18524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2938'.
[  449.756286][T18525] netlink: 'syz.2.2936': attribute type 89 has an invalid length.
[  451.978397][T18564] netlink: 'syz.0.2948': attribute type 21 has an invalid length.
[  451.995194][T18564] __nla_validate_parse: 3 callbacks suppressed
[  451.995213][T18564] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2948'.
[  452.031057][T18564] netlink: 'syz.0.2948': attribute type 5 has an invalid length.
[  452.059345][T18564] netlink: 'syz.0.2948': attribute type 6 has an invalid length.
[  452.079480][T18564] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2948'.
[  452.113624][T18568] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2949'.
[  452.176241][T18571] netlink: 'syz.3.2951': attribute type 89 has an invalid length.
[  452.187872][T18572] FAULT_INJECTION: forcing a failure.
[  452.187872][T18572] name failslab, interval 1, probability 0, space 0, times 0
[  452.214202][T18572] CPU: 1 UID: 0 PID: 18572 Comm: syz.2.2950 Not tainted syzkaller #0 PREEMPT(full) 
[  452.214231][T18572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  452.214243][T18572] Call Trace:
[  452.214252][T18572]  <TASK>
[  452.214261][T18572]  dump_stack_lvl+0xe8/0x150
[  452.214298][T18572]  should_fail_ex+0x412/0x560
[  452.214337][T18572]  should_failslab+0xa8/0x100
[  452.214365][T18572]  ? skb_clone+0x212/0x3a0
[  452.214394][T18572]  kmem_cache_alloc_noprof+0x87/0x650
[  452.214418][T18572]  ? __netlink_lookup+0xc6/0x8b0
[  452.214464][T18572]  skb_clone+0x212/0x3a0
[  452.214496][T18572]  __netlink_deliver_tap+0x404/0x850
[  452.214549][T18572]  ? netlink_deliver_tap+0x2e/0x1b0
[  452.214574][T18572]  netlink_deliver_tap+0x19c/0x1b0
[  452.214599][T18572]  netlink_unicast+0x7e3/0x9b0
[  452.214642][T18572]  ? __pfx_netlink_unicast+0x10/0x10
[  452.214677][T18572]  ? netlink_sendmsg+0x650/0xb40
[  452.214699][T18572]  ? skb_put+0x11b/0x210
[  452.214727][T18572]  netlink_sendmsg+0x813/0xb40
[  452.214762][T18572]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.214800][T18572]  ? aa_sock_msg_perm+0xf1/0x1b0
[  452.214834][T18572]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  452.214864][T18572]  ____sys_sendmsg+0x972/0x9f0
[  452.214903][T18572]  ? __pfx_____sys_sendmsg+0x10/0x10
[  452.214942][T18572]  ? import_iovec+0x73/0xa0
[  452.214971][T18572]  ___sys_sendmsg+0x2a5/0x360
[  452.215007][T18572]  ? __pfx____sys_sendmsg+0x10/0x10
[  452.215073][T18572]  ? __fget_files+0x2a/0x420
[  452.215104][T18572]  ? __fget_files+0x3a0/0x420
[  452.215148][T18572]  __x64_sys_sendmsg+0x1bd/0x2a0
[  452.215181][T18572]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  452.215220][T18572]  ? __pfx_ksys_write+0x10/0x10
[  452.215259][T18572]  do_syscall_64+0x14d/0xf80
[  452.215285][T18572]  ? trace_irq_disable+0x3b/0x150
[  452.215317][T18572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.215340][T18572]  ? clear_bhb_loop+0x40/0x90
[  452.215369][T18572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.215390][T18572] RIP: 0033:0x7f78a5d9c799
[  452.215414][T18572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.215432][T18572] RSP: 002b:00007f78a6ca2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  452.215456][T18572] RAX: ffffffffffffffda RBX: 00007f78a6015fa0 RCX: 00007f78a5d9c799
[  452.215472][T18572] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003
[  452.215487][T18572] RBP: 00007f78a6ca2090 R08: 0000000000000000 R09: 0000000000000000
[  452.215500][T18572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  452.215513][T18572] R13: 00007f78a6016038 R14: 00007f78a6015fa0 R15: 00007ffdcef17158
[  452.215549][T18572]  </TASK>
[  452.812483][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'.
[  453.144243][T18604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'.
[  453.194689][T18605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.202766][T18601] syzkaller0: entered promiscuous mode
[  453.208291][T18601] syzkaller0: entered allmulticast mode
[  453.218842][T18604] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  453.288754][T18601] tipc: Resetting bearer <eth:syzkaller0>
[  453.348529][T18600] tipc: Resetting bearer <eth:syzkaller0>
[  453.364074][T18610] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2960'.
[  453.397317][T18600] tipc: Disabling bearer <eth:syzkaller0>
[  453.627367][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2961'.
[  453.642604][T18616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'.
[  453.670042][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2964'.
[  453.736409][T18624] vlan3: entered promiscuous mode
[  453.822769][T18626] gre0 speed is unknown, defaulting to 1000
[  454.000686][T18634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2968'.
[  454.073202][T18636] netlink: 'syz.0.2969': attribute type 89 has an invalid length.
[  454.492918][T18626] lo speed is unknown, defaulting to 1000
[  454.504154][T18649] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  454.862596][   T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  454.886573][   T49] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  454.900248][   T49] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.936096][   T49] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.412699][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  455.429858][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  455.437898][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  455.456800][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  455.465124][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  455.553246][T18671] gre0 speed is unknown, defaulting to 1000
[  455.856279][T18684] IPv6: sit3: Disabled Multicast RS
[  456.381027][T18671] lo speed is unknown, defaulting to 1000
[  456.427780][T18696] netlink: 'syz.0.2988': attribute type 21 has an invalid length.
[  456.450966][T18696] IPv6: NLM_F_CREATE should be specified when creating new route
[  456.471108][T18696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  456.478725][T18696] IPv6: NLM_F_CREATE should be set when creating new route
[  456.486153][T18696] IPv6: NLM_F_CREATE should be set when creating new route
[  456.486316][T18697] netlink: 'syz.0.2988': attribute type 21 has an invalid length.
[  456.493430][T18696] IPv6: NLM_F_CREATE should be set when creating new route
[  456.540474][T18697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  456.583613][T18687] veth0_to_team: entered promiscuous mode
[  456.589544][T18687] veth0_to_team: entered allmulticast mode
[  456.675436][T18703] netlink: 'syz.0.2989': attribute type 89 has an invalid length.
[  456.692765][T18671] chnl_net:caif_netlink_parms(): no params data found
[  456.853528][T18671] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.861171][T18671] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.868475][T18671] bridge_slave_0: entered allmulticast mode
[  456.876646][T18671] bridge_slave_0: entered promiscuous mode
[  456.886837][T18671] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.894475][T18671] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.902149][T18671] bridge_slave_1: entered allmulticast mode
[  456.911853][T18671] bridge_slave_1: entered promiscuous mode
[  456.974973][T18671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  456.989675][T18671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.041558][T18671] team0: Port device team_slave_0 added
[  457.050732][T18671] team0: Port device team_slave_1 added
[  457.132147][T18671] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.149282][T18671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.208969][T18671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  457.245473][T18671] batman_adv: batadv0: Adding interface: batadv_slave_1
[  457.272316][T18671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.305012][T18671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  457.440694][T18671] hsr_slave_0: entered promiscuous mode
[  457.449411][T18671] hsr_slave_1: entered promiscuous mode
[  457.456574][T18671] debugfs: 'hsr0' already exists in 'hsr'
[  457.462852][T18671] Cannot create hsr debugfs directory
[  457.523138][ T5839] Bluetooth: hci2: command tx timeout
[  457.577301][T18713] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20003
[  457.605437][T18715] __nla_validate_parse: 3 callbacks suppressed
[  457.605455][T18715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2992'.
[  458.431735][T18676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  458.483289][T18671] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  458.551087][T18671] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  458.605227][T18671] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  458.638735][T18671] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  458.675162][T18741] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2996'.
[  459.050077][T18762] bond1: Unable to set down delay as MII monitoring is disabled
[  459.068924][T18762] bond1 (unregistering): Released all slaves
[  459.150162][T18757] syzkaller0: entered promiscuous mode
[  459.155948][T18757] syzkaller0: entered allmulticast mode
[  459.321529][T18768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3002'.
[  459.601061][ T5839] Bluetooth: hci2: command tx timeout
[  461.158808][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3001'.
[  461.266891][T18671] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.325057][T18671] 8021q: adding VLAN 0 to HW filter on device team0
[  461.346055][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.353312][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.374811][T18795] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3005'.
[  461.397432][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.404754][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.426530][T18795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3005'.
[  461.681974][ T5839] Bluetooth: hci2: command tx timeout
[  461.765073][T18813] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3010'.
[  461.906267][T18817] 8021q: VLANs not supported on lo
[  461.954853][T18815] team0: Port device syz_tun added
[  462.021751][T18818] bond5: (slave lo): Releasing backup interface
[  462.030335][T18818] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  462.062319][T18818] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  462.116395][ T5912] lo speed is unknown, defaulting to 1000
[  462.122796][T13391] lo speed is unknown, defaulting to 1000
[  462.318967][T18824] IPv6: ÿ‰: Disabled Multicast RS
[  462.633490][T18830] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3015'.
[  462.749767][T18826] syzkaller1: entered promiscuous mode
[  462.768074][T18826] syzkaller1: entered allmulticast mode
[  462.860268][T18671] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.955465][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3018'.
[  463.152350][T18671] veth0_vlan: entered promiscuous mode
[  463.205254][T18671] veth1_vlan: entered promiscuous mode
[  463.284642][T18671] veth0_macvtap: entered promiscuous mode
[  463.297416][T18671] veth1_macvtap: entered promiscuous mode
[  463.321461][T18671] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.356098][T18671] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.408946][  T154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.434784][  T154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.480984][  T154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.506009][T18852] netlink: 'syz.4.3021': attribute type 4 has an invalid length.
[  463.529482][  T154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.571273][T18858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3023'.
[  463.712470][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.725962][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.765038][ T5839] Bluetooth: hci2: command tx timeout
[  463.841472][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  463.887634][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.913958][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.065010][T18871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'.
[  464.117315][T18869] syzkaller0: entered promiscuous mode
[  464.124647][T18869] syzkaller0: entered allmulticast mode
[  464.344820][T18883] tipc: Failed to remove unknown binding: 66,0,0/0:744810900/744810901
[  464.354449][T18883] tipc: Failed to remove unknown binding: 66,0,0/0:744810900/744810901
[  464.364617][T18883] netlink: 'syz.2.3029': attribute type 1 has an invalid length.
[  464.462997][T18878] gre0 speed is unknown, defaulting to 1000
[  464.651455][T18887] "syz.0.3031" (18887) uses obsolete ecb(arc4) skcipher
[  464.884342][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  464.901668][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  464.910314][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  464.919301][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  464.927054][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  465.211970][T18878] lo speed is unknown, defaulting to 1000
[  465.218796][T18892] gre0 speed is unknown, defaulting to 1000
[  465.433173][ T5834] team0: Port device syz_tun removed
[  465.487404][T18903] erspan0: entered promiscuous mode
[  465.849081][T18903] syzkaller0: entered promiscuous mode
[  465.856268][T18903] syzkaller0: entered allmulticast mode
[  465.875608][T18892] lo speed is unknown, defaulting to 1000
[  466.174923][T18910] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3038'.
[  466.254651][T18910] ip6gre3: entered promiscuous mode
[  466.260011][T18910] ip6gre3: entered allmulticast mode
[  466.297274][ T5959] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  466.321762][ T5959] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  466.331133][T13391] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  466.452489][   T30] audit: type=1107 audit(1774466149.802:6): pid=18914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  466.746971][T18925] netlink: 'syz.2.3041': attribute type 29 has an invalid length.
[  466.756096][T18922] gre0 speed is unknown, defaulting to 1000
[  466.872037][T18892] chnl_net:caif_netlink_parms(): no params data found
[  466.965550][T18925] netlink: 'syz.2.3041': attribute type 29 has an invalid length.
[  466.994728][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3044'.
[  467.042121][T13391] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  467.054130][ T5839] Bluetooth: hci1: command tx timeout
[  467.107972][T18939] netlink: 'syz.0.3046': attribute type 3 has an invalid length.
[  467.300224][T18922] lo speed is unknown, defaulting to 1000
[  467.361985][T13391] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  467.479676][T18892] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.491188][T18892] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.498829][T18892] bridge_slave_0: entered allmulticast mode
[  467.507402][T18892] bridge_slave_0: entered promiscuous mode
[  467.517012][T18892] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.541086][T18892] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.551500][T18892] bridge_slave_1: entered allmulticast mode
[  467.563300][T18892] bridge_slave_1: entered promiscuous mode
[  467.678801][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3050'.
[  467.741758][T18957] netlink: 'syz.5.3050': attribute type 9 has an invalid length.
[  467.861626][T18963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3052'.
[  468.092352][T18892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  468.107708][T18892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  468.110663][T18960] gre0 speed is unknown, defaulting to 1000
[  468.189995][T18892] team0: Port device team_slave_0 added
[  468.205360][T18892] team0: Port device team_slave_1 added
[  468.297304][T18892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  468.306759][T18892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.335786][T18892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.375051][T18892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.390213][T18892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.418417][T18892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  468.492785][T18892] hsr_slave_0: entered promiscuous mode
[  468.499672][T18892] hsr_slave_1: entered promiscuous mode
[  468.506426][T18892] debugfs: 'hsr0' already exists in 'hsr'
[  468.512339][T18892] Cannot create hsr debugfs directory
[  468.533761][T18960] lo speed is unknown, defaulting to 1000
[  468.533777][T18970] gre0 speed is unknown, defaulting to 1000
[  468.654344][T18978] ipvlan2: entered promiscuous mode
[  468.661680][T18978] bridge0: port 3(ipvlan2) entered blocking state
[  468.668776][T18978] bridge0: port 3(ipvlan2) entered disabled state
[  468.675742][T18978] ipvlan2: entered allmulticast mode
[  468.681315][T18978] bridge0: entered allmulticast mode
[  468.746068][T18978] ipvlan2: left allmulticast mode
[  468.762982][T18978] bridge0: left allmulticast mode
[  469.046896][T18970] lo speed is unknown, defaulting to 1000
[  469.054793][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3059'.
[  469.122150][ T5839] Bluetooth: hci1: command tx timeout
[  469.467517][T18995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3061'.
[  469.492363][T18995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3061'.
[  469.508456][T18993] netlink: 'syz.2.3060': attribute type 1 has an invalid length.
[  469.581824][T18993] 8021q: adding VLAN 0 to HW filter on device bond1
[  469.719622][T18996] 8021q: adding VLAN 0 to HW filter on device batadv1
[  469.729171][T18996] bond1: (slave batadv1): making interface the new active one
[  469.740512][T18996] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  469.826663][T19002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3062'.
[  470.100248][T18892] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  470.158744][T18892] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  470.178118][T18892] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  470.200094][T18892] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  470.312597][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3066'.
[  470.366104][T19033] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  470.521726][T19035] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3069'.
[  470.622035][T18892] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.640991][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  470.685310][T18892] 8021q: adding VLAN 0 to HW filter on device team0
[  470.717583][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.725004][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.761934][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.769184][ T5958] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.834401][T19020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3066'.
[  470.881907][    C0] bridge0: port 2(gretap0) entered forwarding state
[  470.888618][    C0] bridge0: topology change detected, propagating
[  471.208931][ T5839] Bluetooth: hci1: command tx timeout
[  471.493669][T18892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  471.611222][T19068] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3076'.
[  471.971152][T19079] syzkaller0: entered promiscuous mode
[  471.977394][T19079] syzkaller0: entered allmulticast mode
[  473.284213][ T5839] Bluetooth: hci1: command tx timeout
[  473.473865][ T1760] block nbd1: Possible stuck request ffff888026bc8000: control (read@0,1024B). Runtime 180 seconds
[  473.485325][ T1760] block nbd1: Possible stuck request ffff888026bc8200: control (read@1024,1024B). Runtime 180 seconds
[  473.496783][ T1760] block nbd1: Possible stuck request ffff888026bc8400: control (read@2048,1024B). Runtime 180 seconds
[  473.508095][ T1760] block nbd1: Possible stuck request ffff888026bc8600: control (read@3072,1024B). Runtime 180 seconds
[  473.757822][T18892] veth0_vlan: entered promiscuous mode
[  473.775392][T18892] veth1_vlan: entered promiscuous mode
[  473.828582][T18892] veth0_macvtap: entered promiscuous mode
[  473.840674][T18892] veth1_macvtap: entered promiscuous mode
[  473.873289][T18892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.911697][T18892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  473.935863][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.962549][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.983996][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  474.014533][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.448860][T19118] __nla_validate_parse: 4 callbacks suppressed
[  474.448879][T19118] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3090'.
[  474.465931][T19118] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3090'.
[  474.714260][T19127] gre0 speed is unknown, defaulting to 1000
[  474.831082][T19077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  475.081141][T19123] gre0 speed is unknown, defaulting to 1000
[  475.094374][T19127] lo speed is unknown, defaulting to 1000
[  475.213480][T19138] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.221298][T19138] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.347376][T19138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.367904][T19138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.497449][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.516663][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.563310][T19140] syzkaller0: entered promiscuous mode
[  475.568938][T19140] syzkaller0: entered allmulticast mode
[  475.592523][ T5958] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  475.610934][T19123] lo speed is unknown, defaulting to 1000
[  475.623998][ T5958] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  475.641681][ T5958] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  475.691480][T19151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3098'.
[  477.064728][ T5958] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  477.182886][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.200492][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.407627][T19172] FAULT_INJECTION: forcing a failure.
[  477.407627][T19172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  477.438405][T19172] CPU: 0 UID: 0 PID: 19172 Comm: syz.4.3030 Not tainted syzkaller #0 PREEMPT(full) 
[  477.438437][T19172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  477.438450][T19172] Call Trace:
[  477.438459][T19172]  <TASK>
[  477.438469][T19172]  dump_stack_lvl+0xe8/0x150
[  477.438506][T19172]  should_fail_ex+0x412/0x560
[  477.438545][T19172]  _copy_from_user+0x2d/0xb0
[  477.438602][T19172]  get_user_ifreq+0x6b/0x180
[  477.438635][T19172]  sock_ioctl+0x704/0x7f0
[  477.438669][T19172]  ? __pfx_sock_ioctl+0x10/0x10
[  477.438703][T19172]  ? __fget_files+0x3a0/0x420
[  477.438735][T19172]  ? __fget_files+0x2a/0x420
[  477.438770][T19172]  ? bpf_lsm_file_ioctl+0x9/0x20
[  477.438799][T19172]  ? __pfx_sock_ioctl+0x10/0x10
[  477.438829][T19172]  __se_sys_ioctl+0xfc/0x170
[  477.438857][T19172]  do_syscall_64+0x14d/0xf80
[  477.438881][T19172]  ? trace_irq_disable+0x3b/0x150
[  477.438919][T19172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.438942][T19172]  ? clear_bhb_loop+0x40/0x90
[  477.438967][T19172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.438990][T19172] RIP: 0033:0x7f4191b9c799
[  477.439011][T19172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.439030][T19172] RSP: 002b:00007f4192b12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  477.439053][T19172] RAX: ffffffffffffffda RBX: 00007f4191e15fa0 RCX: 00007f4191b9c799
[  477.439069][T19172] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000003
[  477.439082][T19172] RBP: 00007f4192b12090 R08: 0000000000000000 R09: 0000000000000000
[  477.439095][T19172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.439107][T19172] R13: 00007f4191e16038 R14: 00007f4191e15fa0 R15: 00007ffc0d8db098
[  477.439143][T19172]  </TASK>
[  477.967894][T19187] Bluetooth: MGMT ver 1.23
[  477.978933][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3108'.
[  477.988519][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'.
[  478.064672][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3108'.
[  478.073908][ T5958] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  478.100972][ T5958] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  478.101001][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'.
[  478.132759][ T5958] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  478.154470][ T5958] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  478.325418][T19203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3113'.
[  478.357491][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'.
[  478.629359][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x77
[  478.780628][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3119'.
[  479.142588][T19238] xt_hashlimit: size too large, truncated to 1048576
[  479.208210][T19209] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  479.257803][T19241] syzkaller1: entered promiscuous mode
[  479.304311][T19241] syzkaller1: entered allmulticast mode
[  479.466977][T19249] netlink: 'syz.3.3126': attribute type 58 has an invalid length.
[  479.841083][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  479.956488][T19271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.115223][T19281] __nla_validate_parse: 3 callbacks suppressed
[  480.115246][T19281] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3135'.
[  480.242562][T19281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3135'.
[  480.275626][T19281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3135'.
[  480.322999][T19281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3135'.
[  480.335554][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'.
[  480.413077][T19271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.507136][T19271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.577431][ T5839] Bluetooth: hci0: command 0x041b tx timeout
[  480.645895][T19271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.955651][T18081] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  480.993335][   T49] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  481.044024][   T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  481.089113][ T5959] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  481.250199][T19312] netlink: 'syz.3.3143': attribute type 89 has an invalid length.
[  481.452562][T19319] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3146'.
[  481.614520][T19333] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3150'.
[  481.629109][T19331] tipc: Can't bind to reserved service type 2
[  481.661664][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3150'.
[  481.989459][T19350] batadv_slave_1: entered promiscuous mode
[  482.008766][T19347] batadv_slave_1: left promiscuous mode
[  482.082079][T19349] netlink: 'syz.4.3154': attribute type 1 has an invalid length.
[  482.103594][T19349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  482.136517][T19355] tipc: Started in network mode
[  482.171040][T19355] tipc: Node identity 72fc272cfa06, cluster identity 4711
[  482.178406][T19355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  482.200448][T19355] syzkaller0: entered promiscuous mode
[  482.207921][T19355] syzkaller0: entered allmulticast mode
[  482.295909][T19355] tipc: Resetting bearer <eth:syzkaller0>
[  482.376116][T19355] tipc: Disabling bearer <eth:syzkaller0>
[  482.422911][T19360] gre0 speed is unknown, defaulting to 1000
[  482.639414][T18081] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x77
[  482.974275][T19393] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3167'.
[  483.269565][T19369] gre0 speed is unknown, defaulting to 1000
[  483.277885][T19360] lo speed is unknown, defaulting to 1000
[  483.375264][T19400] netlink: 'syz.4.3170': attribute type 9 has an invalid length.
[  483.390008][T19400] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.3170'.
[  483.404799][T19380] IPVS: Error connecting to the multicast addr
[  483.411198][T19397] netlink: 'syz.5.3162': attribute type 9 has an invalid length.
[  483.732857][T19410] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode
[  483.743126][T19410] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode
[  483.801926][T19369] lo speed is unknown, defaulting to 1000
[  483.817705][T19414] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma?
[  483.865932][T19414] netlink: 'syz.3.3174': attribute type 4 has an invalid length.
[  483.899137][T19416] IPv6: NLM_F_REPLACE set, but no existing node found!
[  483.912034][T19417] netlink: 'syz.3.3174': attribute type 4 has an invalid length.
[  483.962891][T19414] netlink: 'syz.3.3174': attribute type 1 has an invalid length.
[  484.110241][T19426] netlink: 'syz.3.3178': attribute type 89 has an invalid length.
[  485.153602][T19452] syzkaller0: entered promiscuous mode
[  485.157068][T19454] netlink: 'syz.2.3186': attribute type 89 has an invalid length.
[  485.159134][T19452] syzkaller0: entered allmulticast mode
[  485.194854][T19456] __nla_validate_parse: 6 callbacks suppressed
[  485.194874][T19456] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3187'.
[  485.640615][T19473] netlink: 'syz.0.3189': attribute type 11 has an invalid length.
[  485.648797][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'.
[  485.952963][T19484] netlink: 'syz.0.3195': attribute type 89 has an invalid length.
[  486.051880][T19486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3196'.
[  486.277014][T19496] syzkaller0: entered promiscuous mode
[  486.295383][T19496] syzkaller0: entered allmulticast mode
[  486.452091][T19506] unsupported nlmsg_type 40
[  486.633403][T19516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3203'.
[  486.840715][T19527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  486.944410][T19529] vlan2: entered promiscuous mode
[  486.949637][T19529] gretap0: entered promiscuous mode
[  487.081567][T19534] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  487.341532][T19557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3216'.
[  487.377748][T19555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3216'.
[  487.507085][T19562] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3217'.
[  487.631487][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3220'.
[  487.724328][T19574] FAULT_INJECTION: forcing a failure.
[  487.724328][T19574] name failslab, interval 1, probability 0, space 0, times 0
[  487.770189][T19574] CPU: 0 UID: 0 PID: 19574 Comm: syz.3.3221 Not tainted syzkaller #0 PREEMPT(full) 
[  487.770219][T19574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  487.770232][T19574] Call Trace:
[  487.770241][T19574]  <TASK>
[  487.770250][T19574]  dump_stack_lvl+0xe8/0x150
[  487.770286][T19574]  should_fail_ex+0x412/0x560
[  487.770323][T19574]  should_failslab+0xa8/0x100
[  487.770354][T19574]  __kmalloc_noprof+0xe8/0x760
[  487.770379][T19574]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  487.770422][T19574]  tomoyo_realpath_from_path+0xe3/0x5d0
[  487.770469][T19574]  ? tomoyo_path_number_perm+0x219/0x630
[  487.770498][T19574]  tomoyo_path_number_perm+0x246/0x630
[  487.770531][T19574]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  487.770565][T19574]  ? sb_end_write+0xe9/0x1c0
[  487.770596][T19574]  ? vfs_write+0x9bc/0xb90
[  487.770662][T19574]  ? ksys_write+0x1fc/0x270
[  487.770696][T19574]  security_file_ioctl+0xc3/0x2a0
[  487.770726][T19574]  __se_sys_ioctl+0x47/0x170
[  487.770757][T19574]  do_syscall_64+0x14d/0xf80
[  487.770788][T19574]  ? trace_irq_disable+0x3b/0x150
[  487.770820][T19574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.770842][T19574]  ? clear_bhb_loop+0x40/0x90
[  487.770871][T19574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.770893][T19574] RIP: 0033:0x7f74a539c799
[  487.770914][T19574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.770931][T19574] RSP: 002b:00007f74a35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  487.770954][T19574] RAX: ffffffffffffffda RBX: 00007f74a5615fa0 RCX: 00007f74a539c799
[  487.770969][T19574] RDX: 0000200000000040 RSI: 0000000000008b29 RDI: 0000000000000003
[  487.770982][T19574] RBP: 00007f74a35f6090 R08: 0000000000000000 R09: 0000000000000000
[  487.770993][T19574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.771005][T19574] R13: 00007f74a5616038 R14: 00007f74a5615fa0 R15: 00007ffcab8a73b8
[  487.771043][T19574]  </TASK>
[  488.019605][T19574] ERROR: Out of memory at tomoyo_realpath_from_path.
[  488.092517][T19590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3225'.
[  488.283380][T19602] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3229'.
[  488.880997][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  488.881050][ T5827] Bluetooth: hci0: command 0x041b tx timeout
[  491.297529][T19604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  491.451544][T19641] __nla_validate_parse: 1 callbacks suppressed
[  491.451565][T19641] netlink: 404 bytes leftover after parsing attributes in process `syz.5.3237'.
[  491.471069][T19641] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3237'.
[  491.498573][T19641] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3237'.
[  491.538328][T19641] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3237'.
[  491.562618][T19645] gre1: entered promiscuous mode
[  491.730366][T19657] netlink: 'syz.0.3243': attribute type 89 has an invalid length.
[  491.840584][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3244'.
[  491.859406][T19666] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3246'.
[  491.885042][T19667] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3246'.
[  491.896687][T19666] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3246'.
[  492.067241][T19674] FAULT_INJECTION: forcing a failure.
[  492.067241][T19674] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  492.102744][T19674] CPU: 0 UID: 0 PID: 19674 Comm: syz.3.3247 Not tainted syzkaller #0 PREEMPT(full) 
[  492.102776][T19674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  492.102789][T19674] Call Trace:
[  492.102798][T19674]  <TASK>
[  492.102808][T19674]  dump_stack_lvl+0xe8/0x150
[  492.102844][T19674]  should_fail_ex+0x412/0x560
[  492.102884][T19674]  _copy_to_user+0x31/0xb0
[  492.102912][T19674]  wext_handle_ioctl+0x145/0x1d0
[  492.102941][T19674]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  492.102984][T19674]  sock_ioctl+0x159/0x7f0
[  492.103019][T19674]  ? __pfx_sock_ioctl+0x10/0x10
[  492.103050][T19674]  ? ksys_write+0x1fc/0x270
[  492.103082][T19674]  ? bpf_lsm_file_ioctl+0x9/0x20
[  492.103112][T19674]  ? __pfx_sock_ioctl+0x10/0x10
[  492.103142][T19674]  __se_sys_ioctl+0xfc/0x170
[  492.103171][T19674]  do_syscall_64+0x14d/0xf80
[  492.103197][T19674]  ? trace_irq_disable+0x3b/0x150
[  492.103228][T19674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.103251][T19674]  ? clear_bhb_loop+0x40/0x90
[  492.103278][T19674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.103301][T19674] RIP: 0033:0x7f74a539c799
[  492.103321][T19674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  492.103339][T19674] RSP: 002b:00007f74a35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  492.103362][T19674] RAX: ffffffffffffffda RBX: 00007f74a5615fa0 RCX: 00007f74a539c799
[  492.103378][T19674] RDX: 0000200000000040 RSI: 0000000000008b29 RDI: 0000000000000003
[  492.103391][T19674] RBP: 00007f74a35f6090 R08: 0000000000000000 R09: 0000000000000000
[  492.103405][T19674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.103417][T19674] R13: 00007f74a5616038 R14: 00007f74a5615fa0 R15: 00007ffcab8a73b8
[  492.103454][T19674]  </TASK>
[  492.703669][T19688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3253'.
[  492.706502][T19689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3253'.
[  492.906318][T19699] x_tables: duplicate underflow at hook 2
[  493.112315][T19706] netlink: 'syz.4.3257': attribute type 153 has an invalid length.
[  493.157497][T19707] gre0 speed is unknown, defaulting to 1000
[  493.208575][T19716] FAULT_INJECTION: forcing a failure.
[  493.208575][T19716] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  493.274469][T19716] CPU: 1 UID: 0 PID: 19716 Comm: syz.2.3261 Not tainted syzkaller #0 PREEMPT(full) 
[  493.274501][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  493.274514][T19716] Call Trace:
[  493.274523][T19716]  <TASK>
[  493.274532][T19716]  dump_stack_lvl+0xe8/0x150
[  493.274571][T19716]  should_fail_ex+0x412/0x560
[  493.274610][T19716]  _copy_to_user+0x31/0xb0
[  493.274638][T19716]  simple_read_from_buffer+0xe1/0x170
[  493.274677][T19716]  proc_fail_nth_read+0x1bb/0x230
[  493.274713][T19716]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  493.274758][T19716]  ? rw_verify_area+0x2a6/0x4d0
[  493.274782][T19716]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  493.274815][T19716]  vfs_read+0x20c/0xa70
[  493.274845][T19716]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  493.274872][T19716]  ? __pfx_vfs_read+0x10/0x10
[  493.274921][T19716]  ksys_read+0x150/0x270
[  493.274969][T19716]  ? __pfx_ksys_read+0x10/0x10
[  493.275007][T19716]  do_syscall_64+0x14d/0xf80
[  493.275033][T19716]  ? trace_irq_disable+0x3b/0x150
[  493.275065][T19716]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.275088][T19716]  ? clear_bhb_loop+0x40/0x90
[  493.275116][T19716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.275148][T19716] RIP: 0033:0x7f78a5d5cfce
[  493.275169][T19716] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  493.275188][T19716] RSP: 002b:00007f78a6ca1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  493.275211][T19716] RAX: ffffffffffffffda RBX: 00007f78a6ca26c0 RCX: 00007f78a5d5cfce
[  493.275228][T19716] RDX: 000000000000000f RSI: 00007f78a6ca20a0 RDI: 0000000000000005
[  493.275240][T19716] RBP: 00007f78a6ca2090 R08: 0000000000000000 R09: 0000000000000000
[  493.275252][T19716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  493.275265][T19716] R13: 00007f78a6016038 R14: 00007f78a6015fa0 R15: 00007ffdcef17158
[  493.275301][T19716]  </TASK>
[  493.747381][T19707] lo speed is unknown, defaulting to 1000
[  494.049915][ T5905] IPVS: starting estimator thread 0...
[  494.140969][T19734] IPVS: using max 27 ests per chain, 64800 per kthread
[  494.704227][T19762] netlink: 'syz.4.3272': attribute type 21 has an invalid length.
[  494.821621][T19761] netlink: 'syz.0.3269': attribute type 13 has an invalid length.
[  494.850990][T19761] netlink: 'syz.0.3269': attribute type 17 has an invalid length.
[  494.957788][T19761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  495.666283][T19765] lec:lec_atm_close: lec0: Shut down!
[  495.989292][T19799] netlink: 'syz.2.3282': attribute type 89 has an invalid length.
[  496.100450][T19802] macsec1: entered promiscuous mode
[  496.250572][T19813] netlink: 'syz.4.3286': attribute type 89 has an invalid length.
[  496.343269][T19815] tipc: Failed to remove unknown binding: 66,0,0/0:503772456/503772458
[  496.351747][T19815] tipc: Failed to remove unknown binding: 66,0,0/0:503772456/503772457
[  496.387516][T19815] tipc: Failed to remove unknown binding: 66,0,0/0:503772456/503772458
[  496.440879][T19815] tipc: Failed to remove unknown binding: 66,0,0/0:503772456/503772457
[  496.467685][T19822] __nla_validate_parse: 7 callbacks suppressed
[  496.467703][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3287'.
[  496.483045][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  496.757251][T19828] gre0 speed is unknown, defaulting to 1000
[  496.971114][ T5912] lec:lec_start_xmit: lec0:No lecd attached
[  497.076831][T19839] IPv6: sit1: Disabled Multicast RS
[  497.761715][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  497.879800][T19861] tipc: Enabling of bearer <eth:dvmrp0> rejected, failed to enable media
[  497.913183][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3296'.
[  497.913471][T19828] lo speed is unknown, defaulting to 1000
[  498.255751][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3301'.
[  498.379131][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'.
[  498.568477][T19905] netlink: 'syz.2.3301': attribute type 4 has an invalid length.
[  499.414848][T19931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3308'.
[  499.439946][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'.
[  499.449605][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3308'.
[  499.768692][T19949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3315'.
[  499.835780][T19949] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3315'.
[  499.851043][T19949] netlink: 'syz.3.3315': attribute type 1 has an invalid length.
[  499.859166][T19949] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3315'.
[  500.036278][T19960] gre0 speed is unknown, defaulting to 1000
[  500.074602][T19967] netlink: 'syz.5.3320': attribute type 1 has an invalid length.
[  500.578293][T19981] lo: entered allmulticast mode
[  500.681424][T19960] lo speed is unknown, defaulting to 1000
[  501.006660][T19995] gre0 speed is unknown, defaulting to 1000
[  501.569753][T19995] lo speed is unknown, defaulting to 1000
[  501.608405][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  501.955013][T20030] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000
[  502.039659][T20028] ip6gre1: entered promiscuous mode
[  502.240814][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms
[  502.250161][    C0] lec:lec_tx_timeout: lec0
[  502.256328][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  502.523873][T20040] syzkaller0: entered promiscuous mode
[  502.531331][T20040] syzkaller0: entered allmulticast mode
[  503.532741][ T1760] block nbd1: Possible stuck request ffff888026bc8000: control (read@0,1024B). Runtime 210 seconds
[  503.543776][ T1760] block nbd1: Possible stuck request ffff888026bc8200: control (read@1024,1024B). Runtime 210 seconds
[  503.555751][ T1760] block nbd1: Possible stuck request ffff888026bc8400: control (read@2048,1024B). Runtime 210 seconds
[  503.567114][ T1760] block nbd1: Possible stuck request ffff888026bc8600: control (read@3072,1024B). Runtime 210 seconds
[  504.351792][T20051] gre0 speed is unknown, defaulting to 1000
[  504.524137][T20073] netlink: 'syz.4.3343': attribute type 8 has an invalid length.
[  504.548225][T20073] __nla_validate_parse: 1 callbacks suppressed
[  504.548247][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3343'.
[  504.591436][T20073] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.599268][T20073] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.688292][T20051] lo speed is unknown, defaulting to 1000
[  504.776796][T20085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  504.899593][T20092] netlink: 'syz.0.3349': attribute type 4 has an invalid length.
[  504.927270][T20092] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3349'.
[  505.080619][T20092] .`: renamed from bond0 (while UP)
[  505.091130][T20103] netlink: 'syz.5.3351': attribute type 1 has an invalid length.
[  505.102503][T20103] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3351'.
[  505.184911][T20107] gre0 speed is unknown, defaulting to 1000
[  505.219797][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3352'.
[  505.259678][T20102] vlan0: entered promiscuous mode
[  505.340281][T20110] netlink: 'syz.0.3353': attribute type 2 has an invalid length.
[  505.355910][T20112] netlink: 'syz.5.3354': attribute type 1 has an invalid length.
[  505.369798][T20110] netlink: 1696 bytes leftover after parsing attributes in process `syz.0.3353'.
[  505.556405][T20116] syzkaller0: entered promiscuous mode
[  505.567774][T20116] syzkaller0: entered allmulticast mode
[  505.847977][T20107] lo speed is unknown, defaulting to 1000
[  505.876678][T20113] gre0 speed is unknown, defaulting to 1000
[  506.223890][T20110] 8021q: adding VLAN 0 to HW filter on device .`
[  506.234363][T20110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  506.463133][T20113] lo speed is unknown, defaulting to 1000
[  506.892019][   T13] gretap0: left allmulticast mode
[  506.901105][   T13] gretap0: left promiscuous mode
[  506.909637][   T13] bridge0: port 2(gretap0) entered disabled state
[  506.965265][   T13] ¾x9ÿ: left allmulticast mode
[  506.970192][   T13] ¾x9ÿ: left promiscuous mode
[  506.981249][   T13] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  507.076697][T20155] netlink: 'syz.5.3366': attribute type 8 has an invalid length.
[  507.086966][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3366'.
[  507.264722][   T13] bond2 (unregistering): (slave geneve2): Releasing active interface
[  507.536799][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.547521][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.557262][   T13] bond0 (unregistering): Released all slaves
[  507.569150][   T13] bond1 (unregistering): Released all slaves
[  507.586490][   T13] bond2 (unregistering): Released all slaves
[  507.602463][   T13] bond3 (unregistering): Released all slaves
[  507.621463][   T13] bond4 (unregistering): (slave vlan0): Releasing backup interface
[  507.630435][   T13] bond4 (unregistering): Released all slaves
[  507.653075][   T13] bond5 (unregistering): Released all slaves
[  507.667886][   T13] bond6 (unregistering): Released all slaves
[  507.683215][   T13] bond7 (unregistering): Released all slaves
[  507.702069][   T13] bond8 (unregistering): Released all slaves
[  507.723449][   T13] bond9 (unregistering): Released all slaves
[  507.743796][   T13] bond10 (unregistering): (slave veth17): Releasing backup interface
[  507.755284][   T13] bond10 (unregistering): Released all slaves
[  507.770448][   T13] bond11 (unregistering): Released all slaves
[  507.789265][   T13] bond12 (unregistering): Released all slaves
[  508.000890][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  508.008983][    C0] lec:lec_tx_timeout: lec0
[  508.015824][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  508.038817][   T13] tipc: Disabling bearer <eth:ipvlan0>
[  508.048696][   T13] tipc: Left network mode
[  508.209944][T20161] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  508.316698][   T13] IPVS: stopping backup sync thread 8391 ...
[  508.338929][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3370'.
[  508.825576][ T5959] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  508.861052][ T5959] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  508.888085][ T5959] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  508.924188][T20173] syzkaller0: entered promiscuous mode
[  508.929877][T20173] syzkaller0: entered allmulticast mode
[  508.949695][ T5959] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  509.245137][T20207] netlink: 'syz.3.3380': attribute type 8 has an invalid length.
[  509.254725][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'.
[  509.643820][T20221] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3384'.
[  509.834579][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  509.870658][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.196236][T20242] netlink: 'syz.5.3387': attribute type 8 has an invalid length.
[  510.204492][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3387'.
[  510.498338][   T13] team0 (unregistering): Port device team_slave_1 removed
[  510.567535][   T13] team0 (unregistering): Port device team_slave_0 removed
[  510.640951][ T5839] Bluetooth: hci1: command tx timeout
[  510.809431][T20242] bond0: entered promiscuous mode
[  510.817199][T20242] bridge_slave_1: entered promiscuous mode
[  510.825184][T20242] gretap0: entered promiscuous mode
[  510.831952][T20242] bond0: left promiscuous mode
[  510.837043][T20242] bridge_slave_1: left promiscuous mode
[  510.844091][T20242] gretap0: left promiscuous mode
[  511.287184][T20273] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3394'.
[  511.376134][T20275] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3394'.
[  511.413746][T20277] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3395'.
[  511.595058][   T13] IPVS: stop unused estimator thread 0...
[  511.656478][T20282] vlan3: entered promiscuous mode
[  511.755318][T20297] netlink: 'syz.4.3400': attribute type 8 has an invalid length.
[  511.763831][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3400'.
[  512.079921][T20303] gre0 speed is unknown, defaulting to 1000
[  512.421477][T20324] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3407'.
[  512.545809][T20303] lo speed is unknown, defaulting to 1000
[  512.731044][ T5839] Bluetooth: hci1: command 0x0405 tx timeout
[  512.923928][T20343] gre0 speed is unknown, defaulting to 1000
[  513.041077][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  513.049156][    C0] lec:lec_tx_timeout: lec0
[  513.054071][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  513.214355][T20354] bridge2: entered promiscuous mode
[  513.282894][T20343] lo speed is unknown, defaulting to 1000
[  513.728155][T20374] netlink: 'syz.4.3420': attribute type 8 has an invalid length.
[  513.736871][T20374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3420'.
[  513.779926][T20377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3422'.
[  513.817361][T20376] gre0 speed is unknown, defaulting to 1000
[  513.823343][T20377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3422'.
[  514.258474][T20376] lo speed is unknown, defaulting to 1000
[  514.472098][T20403] team0: Port device syz_tun added
[  514.913574][T20416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'.
[  514.926484][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3432'.
[  515.016737][T20416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'.
[  515.173069][ T5959] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x77
[  515.544205][T20428] bridge1: entered allmulticast mode
[  515.942926][T20420] gre0 speed is unknown, defaulting to 1000
[  516.404389][T20453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3441'.
[  516.425240][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3440'.
[  516.444626][T20457] netlink: 121 bytes leftover after parsing attributes in process `syz.5.3440'.
[  516.493618][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'.
[  516.506821][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'.
[  516.526632][T20459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3441'.
[  516.585039][T20420] lo speed is unknown, defaulting to 1000
[  516.585074][T20429] gre0 speed is unknown, defaulting to 1000
[  516.682442][T20463] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  517.037646][T20429] lo speed is unknown, defaulting to 1000
[  517.127659][T20471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3445'.
[  517.252119][  T154] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x77
[  517.298100][T20480] netlink: 'syz.0.3447': attribute type 8 has an invalid length.
[  517.356845][T20480] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.364822][T20480] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.424515][T20483] netlink: 'syz.2.3448': attribute type 1 has an invalid length.
[  517.576974][T20483] 8021q: adding VLAN 0 to HW filter on device bond2
[  517.632498][T20485] bond7: option packets_per_slave: invalid value (1048582)
[  517.639996][T20485] bond7: option packets_per_slave: allowed values 0 - 65535
[  517.649876][T20485] bond7 (unregistering): Released all slaves
[  517.694074][T20487] vlan3: entered promiscuous mode
[  517.699447][T20487] bond2: entered promiscuous mode
[  517.705700][T20487] vlan3: entered allmulticast mode
[  517.712040][T20487] bond2: entered allmulticast mode
[  517.738350][T20488] bond2: (slave bridge2): making interface the new active one
[  517.746040][T20488] bridge2: entered promiscuous mode
[  517.752159][T20488] bridge2: entered allmulticast mode
[  517.758965][T20488] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  518.060802][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  518.068919][    C0] lec:lec_tx_timeout: lec0
[  518.074163][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  518.269927][T20508] netlink: 'syz.0.3455': attribute type 89 has an invalid length.
[  518.922534][T20533] netlink: 'syz.3.3462': attribute type 89 has an invalid length.
[  519.265064][T20535] gre0 speed is unknown, defaulting to 1000
[  519.656023][T20544] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.663312][T20544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  519.671154][T20544] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.678345][T20544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  519.735223][T20544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  520.037156][T20535] lo speed is unknown, defaulting to 1000
[  520.204488][T20576] gre0 speed is unknown, defaulting to 1000
[  520.237291][ T5958] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x77
[  520.751317][T20576] lo speed is unknown, defaulting to 1000
[  520.893837][T20587] gre0: entered promiscuous mode
[  520.912525][T20587] gre0: entered allmulticast mode
[  521.241401][T20599] netlink: 'syz.0.3478': attribute type 89 has an invalid length.
[  521.777514][T20619] netlink: 'syz.3.3483': attribute type 5 has an invalid length.
[  521.803143][T20619] __nla_validate_parse: 5 callbacks suppressed
[  521.803163][T20619] netlink: 4952 bytes leftover after parsing attributes in process `syz.3.3483'.
[  522.018618][T20627] netlink: 'syz.5.3486': attribute type 7 has an invalid length.
[  522.049003][T20629] netlink: 'syz.2.3487': attribute type 10 has an invalid length.
[  522.099876][T20630] netlink: 'syz.2.3487': attribute type 10 has an invalid length.
[  522.133707][T20629] team0: Port device dummy0 added
[  522.175075][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3488'.
[  522.267080][T20630] team0: Port device dummy0 removed
[  522.332259][T20641] No such timeout policy "syz1"
[  522.363381][T20630] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  522.409939][T20646] netlink: 'syz.0.3490': attribute type 10 has an invalid length.
[  522.682042][T20652] syzkaller0: entered promiscuous mode
[  522.687715][T20652] syzkaller0: entered allmulticast mode
[  522.779680][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3492'.
[  522.813616][T20656] netlink: 'syz.0.3494': attribute type 2 has an invalid length.
[  522.841106][T20656] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3494'.
[  522.900312][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3496'.
[  523.080806][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  523.089105][    C0] lec:lec_tx_timeout: lec0
[  523.094395][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  523.226586][T20676] netlink: 'syz.0.3500': attribute type 89 has an invalid length.
[  523.261041][T20677] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3499'.
[  523.281221][T20678] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3499'.
[  523.314722][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3499'.
[  523.407984][T20685] 8021q: adding VLAN 0 to HW filter on device bond1
[  523.554281][T20700] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3505'.
[  523.593892][T20700] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3505'.
[  523.803454][T20711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  524.025464][T20718] xt_hashlimit: invalid rate
[  524.374735][T20740] netlink: 'syz.2.3518': attribute type 5 has an invalid length.
[  524.408300][T20733] syzkaller0: entered promiscuous mode
[  524.415984][T20733] syzkaller0: entered allmulticast mode
[  524.423942][T20741] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  526.436089][T20772] netlink: 'syz.4.3524': attribute type 89 has an invalid length.
[  526.450478][T20742] gre0 speed is unknown, defaulting to 1000
[  527.231770][T20802] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  527.263409][T20742] lo speed is unknown, defaulting to 1000
[  527.277771][T20802] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  527.302749][T20802] __nla_validate_parse: 4 callbacks suppressed
[  527.302768][T20802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3531'.
[  527.422848][T20808] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3534'.
[  527.922993][T20836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  528.030548][T20841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3543'.
[  528.042274][T20839] netlink: 'syz.5.3544': attribute type 4 has an invalid length.
[  528.061474][T20843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3545'.
[  528.100824][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  528.109102][    C0] lec:lec_tx_timeout: lec0
[  528.114697][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  528.147840][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3544'.
[  528.161927][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3546'.
[  528.173076][T20849] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3546'.
[  528.347196][T20858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3549'.
[  528.425415][T20860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3550'.
[  528.581606][T20868] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3552'.
[  528.657400][T20873] openvswitch: netlink: Message has 592 unknown bytes.
[  528.664685][T20873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.037386][T20894] netlink: 'syz.0.3560': attribute type 20 has an invalid length.
[  529.121388][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  529.234886][T20905] IPVS: set_ctl: invalid protocol: 58 10.1.5.1:32
[  529.727931][T20928] netlink: 'syz.2.3570': attribute type 142 has an invalid length.
[  529.750441][T20930] macsec0: entered promiscuous mode
[  529.768686][T20930] macsec0: entered allmulticast mode
[  529.774159][T20932] netlink: 'syz.0.3571': attribute type 20 has an invalid length.
[  530.529567][T20974] gre0: entered promiscuous mode
[  530.541482][T20974] gre0: entered allmulticast mode
[  530.633709][T20980] gre0 speed is unknown, defaulting to 1000
[  530.963901][T20980] lo speed is unknown, defaulting to 1000
[  531.189254][T20988] netlink: 'syz.4.3584': attribute type 20 has an invalid length.
[  531.509767][T21002] x_tables: duplicate underflow at hook 2
[  531.600580][T21010] netlink: 'syz.4.3590': attribute type 2 has an invalid length.
[  531.797732][T20999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  531.981021][T21018] batman_adv: batadv0: Adding interface: ipvlan3
[  531.994280][T21018] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1536) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568.
[  532.028172][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.090893][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.131284][T21018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  532.180480][T21018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.218967][T21018] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  532.271526][T21036] netlink: 'syz.0.3594': attribute type 8 has an invalid length.
[  532.280192][T21036] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.287603][T21036] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.495022][T21040] __nla_validate_parse: 11 callbacks suppressed
[  532.495044][T21040] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3596'.
[  533.130848][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  533.139072][    C0] lec:lec_tx_timeout: lec0
[  533.144909][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  533.241050][   T30] audit: type=1800 audit(1774466216.582:7): pid=21058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3600" name="memory.events" dev="tmpfs" ino=3011 res=0 errno=0
[  533.557312][T21071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.609910][ T1760] block nbd1: Possible stuck request ffff888026bc8000: control (read@0,1024B). Runtime 240 seconds
[  533.615082][T21071] tipc: Disabling bearer <eth:syzkaller0>
[  533.627257][ T1760] block nbd1: Possible stuck request ffff888026bc8200: control (read@1024,1024B). Runtime 240 seconds
[  533.638660][ T1760] block nbd1: Possible stuck request ffff888026bc8400: control (read@2048,1024B). Runtime 240 seconds
[  533.649961][ T1760] block nbd1: Possible stuck request ffff888026bc8600: control (read@3072,1024B). Runtime 240 seconds
[  534.042382][T21084] bond7 (unregistering): Released all slaves
[  534.125443][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3607'.
[  534.137182][T21090] FAULT_INJECTION: forcing a failure.
[  534.137182][T21090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  534.181372][T21090] CPU: 1 UID: 0 PID: 21090 Comm: syz.3.3609 Not tainted syzkaller #0 PREEMPT(full) 
[  534.181402][T21090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  534.181416][T21090] Call Trace:
[  534.181424][T21090]  <TASK>
[  534.181435][T21090]  dump_stack_lvl+0xe8/0x150
[  534.181473][T21090]  should_fail_ex+0x412/0x560
[  534.181513][T21090]  _copy_from_user+0x2d/0xb0
[  534.181539][T21090]  kstrtouint_from_user+0xd6/0x180
[  534.181575][T21090]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  534.181626][T21090]  proc_fail_nth_write+0x8e/0x210
[  534.181661][T21090]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  534.181701][T21090]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  534.181745][T21090]  vfs_write+0x29a/0xb90
[  534.181780][T21090]  ? __pfx_vfs_write+0x10/0x10
[  534.181808][T21090]  ? __fget_files+0x2a/0x420
[  534.181846][T21090]  ? __fget_files+0x3a0/0x420
[  534.181878][T21090]  ? __fget_files+0x2a/0x420
[  534.181922][T21090]  ksys_write+0x150/0x270
[  534.181950][T21090]  ? __pfx_ksys_write+0x10/0x10
[  534.181990][T21090]  do_syscall_64+0x14d/0xf80
[  534.182017][T21090]  ? trace_irq_disable+0x3b/0x150
[  534.182048][T21090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.182071][T21090]  ? clear_bhb_loop+0x40/0x90
[  534.182100][T21090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.182122][T21090] RIP: 0033:0x7f74a535cfce
[  534.182143][T21090] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  534.182162][T21090] RSP: 002b:00007f74a35f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  534.182185][T21090] RAX: ffffffffffffffda RBX: 00007f74a35f66c0 RCX: 00007f74a535cfce
[  534.182201][T21090] RDX: 0000000000000001 RSI: 00007f74a35f60a0 RDI: 0000000000000008
[  534.182215][T21090] RBP: 00007f74a35f6090 R08: 0000000000000000 R09: 0000000000000000
[  534.182228][T21090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  534.182240][T21090] R13: 00007f74a5616038 R14: 00007f74a5615fa0 R15: 00007ffcab8a73b8
[  534.182277][T21090]  </TASK>
[  534.729219][T21097] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3612'.
[  534.947174][ T5192] udevd[5192]: worker [7942] /devices/virtual/block/nbd1 timeout; kill it
[  534.956159][ T5192] udevd[5192]: seq 19091 '/devices/virtual/block/nbd1' killed
[  535.083105][T21102] netlink: 488 bytes leftover after parsing attributes in process `syz.0.3610'.
[  535.121291][T21102] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3610'.
[  535.290906][T21107] netlink: 'syz.3.3614': attribute type 8 has an invalid length.
[  535.319859][T21107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'.
[  536.130195][T21133] netlink: 'syz.0.3624': attribute type 89 has an invalid length.
[  536.195883][T21138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3626'.
[  536.206532][T21138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3626'.
[  536.694049][T21150] gre0 speed is unknown, defaulting to 1000
[  536.722881][T21153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3630'.
[  537.126265][T21150] lo speed is unknown, defaulting to 1000
[  537.196046][T21162] netlink: 'syz.2.3632': attribute type 2 has an invalid length.
[  537.214422][T21162] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3632'.
[  537.356087][T21169] netlink: 'syz.0.3634': attribute type 1 has an invalid length.
[  537.395342][T21168] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.446013][T21176] netlink: 'syz.2.3635': attribute type 8 has an invalid length.
[  537.502301][T21169] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.510477][T21172] __nla_validate_parse: 1 callbacks suppressed
[  537.510497][T21172] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3633'.
[  537.553858][T21173] bond0: (slave dummy0): making interface the new active one
[  537.562826][T21165] --map-set only usable from mangle table
[  537.568704][T21173] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  537.594639][T21177] bond0 (unregistering): (slave dummy0): Releasing active interface
[  537.615927][T21177] bond0 (unregistering): Released all slaves
[  537.664718][T21176] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.672516][T21176] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.707741][T21168] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.853426][T21168] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.980669][T21168] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.135267][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.159918][ T5959] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.161209][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  538.176427][    C0] lec:lec_tx_timeout: lec0
[  538.181728][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  538.200602][   T58] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.221739][   T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.451111][T21203] gre0 speed is unknown, defaulting to 1000
[  538.613306][T21208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3643'.
[  538.674738][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3643'.
[  538.684974][T21208] hsr_slave_0: left promiscuous mode
[  538.693523][T21208] hsr_slave_1: left promiscuous mode
[  538.883302][T21203] lo speed is unknown, defaulting to 1000
[  539.069544][T21219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3649'.
[  539.079167][T21219] netlink: 'syz.0.3649': attribute type 7 has an invalid length.
[  539.099874][T21222] netlink: 'syz.5.3644': attribute type 1 has an invalid length.
[  539.129561][T21219] netlink: 'syz.0.3649': attribute type 8 has an invalid length.
[  539.178804][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3649'.
[  539.391789][T21232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'.
[  539.405479][T21241] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3653'.
[  540.424937][T21263] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.458263][T21263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.527974][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  540.538537][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  540.547208][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  540.559266][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  540.568449][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  540.623633][T21289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3663'.
[  540.763823][  T154] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.782504][T21294] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  540.829888][  T154] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.848419][  T154] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.906753][T21285] gre0 speed is unknown, defaulting to 1000
[  540.924885][  T154] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.013447][T21302] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3665'.
[  541.045580][T21302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3665'.
[  541.441001][T21285] lo speed is unknown, defaulting to 1000
[  541.834255][T21285] chnl_net:caif_netlink_parms(): no params data found
[  542.031931][T21285] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.039347][T21285] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.047284][T21285] bridge_slave_0: entered allmulticast mode
[  542.057953][T21285] bridge_slave_0: entered promiscuous mode
[  542.067388][T21285] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.074984][T21285] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.083001][T21285] bridge_slave_1: entered allmulticast mode
[  542.091474][T21285] bridge_slave_1: entered promiscuous mode
[  542.144001][T21285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.205922][T21285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.318837][T21285] team0: Port device team_slave_0 added
[  542.368198][T21285] team0: Port device team_slave_1 added
[  542.506314][T21357] netlink: Conntrack attr has 3 unknown bytes
[  542.518750][T21285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.535068][T21285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.630670][T21285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.643077][ T5839] Bluetooth: hci4: command tx timeout
[  542.671062][T21285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.691449][T21361] __nla_validate_parse: 5 callbacks suppressed
[  542.691470][T21361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3682'.
[  542.719457][T21285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.771514][T21285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.818142][T21361] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3682'.
[  542.911056][T21285] hsr_slave_0: entered promiscuous mode
[  542.918019][T21285] hsr_slave_1: entered promiscuous mode
[  542.925155][T21285] debugfs: 'hsr0' already exists in 'hsr'
[  542.931300][T21285] Cannot create hsr debugfs directory
[  543.068197][T21393] syzkaller1: tun_chr_ioctl cmd 1074025677
[  543.076547][T21393] syzkaller1: linktype set to 823
[  543.089002][T21388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3687'.
[  543.190929][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  543.199086][    C0] lec:lec_tx_timeout: lec0
[  543.204032][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  543.294833][T21285] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.312956][T21285] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.366507][T21390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3686'.
[  543.410164][T21285] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.435740][T21285] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.478407][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3691'.
[  543.509533][T21285] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.537061][T21285] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.709183][T21285] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.720490][T21411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3693'.
[  543.742494][T21285] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.026000][T21285] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  544.075045][T21285] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  544.106477][T21285] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  544.135023][T21285] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  544.174674][T21427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3696'.
[  544.192096][T21427] bond0: entered promiscuous mode
[  544.197318][T21427] bond_slave_0: entered promiscuous mode
[  544.205252][T21427] bond_slave_1: entered promiscuous mode
[  544.215427][T21427] debugfs: 'hsr0' already exists in 'hsr'
[  544.221705][T21427] Cannot create hsr debugfs directory
[  544.227430][T21427] hsr0: entered promiscuous mode
[  544.312036][T21438] ip6gretap0: entered promiscuous mode
[  544.323480][T21439] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  544.356557][T21439] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3698'.
[  544.379913][T21441] netlink: 'syz.3.3699': attribute type 1 has an invalid length.
[  544.416830][T21285] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.470537][T21285] 8021q: adding VLAN 0 to HW filter on device team0
[  544.655032][T21422] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.662308][T21422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.729836][T21422] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.737119][T21422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.737309][ T5839] Bluetooth: hci4: command tx timeout
[  544.926655][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'.
[  544.951804][T21457] netlink: 'syz.3.3706': attribute type 30 has an invalid length.
[  544.997959][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'.
[  544.999119][T21425] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  545.039953][T21425] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  545.049629][T21457] netlink: 'syz.3.3706': attribute type 30 has an invalid length.
[  545.076487][T21425] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  545.086414][T21425] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  545.118665][T21457] syzkaller1: tun_chr_ioctl cmd 1074025677
[  545.125725][T21457] syzkaller1: Refused to change device type
[  545.241537][T21470] openvswitch: netlink: IP tunnel dst address not specified
[  545.371206][T21285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.425201][T21479] TCP: TCP_TX_DELAY enabled
[  545.631790][T21486] netlink: 'syz.2.3710': attribute type 89 has an invalid length.
[  546.305866][T21285] veth0_vlan: entered promiscuous mode
[  546.369142][T21285] veth1_vlan: entered promiscuous mode
[  546.565333][T21285] veth0_macvtap: entered promiscuous mode
[  546.574382][T21513] FAULT_INJECTION: forcing a failure.
[  546.574382][T21513] name failslab, interval 1, probability 0, space 0, times 0
[  546.600404][T21513] CPU: 0 UID: 0 PID: 21513 Comm: syz.4.3716 Not tainted syzkaller #0 PREEMPT(full) 
[  546.600432][T21513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  546.600446][T21513] Call Trace:
[  546.600454][T21513]  <TASK>
[  546.600471][T21285] veth1_macvtap: entered promiscuous mode
[  546.600463][T21513]  dump_stack_lvl+0xe8/0x150
[  546.600500][T21513]  should_fail_ex+0x412/0x560
[  546.600594][T21513]  should_failslab+0xa8/0x100
[  546.600713][T21513]  __kmalloc_cache_noprof+0x88/0x660
[  546.600808][T21513]  ? __pfx_stack_trace_save+0x10/0x10
[  546.600858][T21513]  ? rtnl_newlink+0x136/0x1be0
[  546.600935][T21513]  rtnl_newlink+0x136/0x1be0
[  546.600992][T21513]  ? kasan_save_track+0x4f/0x80
[  546.601058][T21513]  ? kasan_save_track+0x3e/0x80
[  546.601112][T21513]  ? kasan_save_free_info+0x46/0x50
[  546.601208][T21513]  ? __kasan_slab_free+0x5c/0x80
[  546.601264][T21513]  ? kmem_cache_free+0x187/0x630
[  546.601330][T21513]  ? __dev_queue_xmit+0x1557/0x3870
[  546.601405][T21513]  ? __netlink_deliver_tap+0x5ad/0x850
[  546.601461][T21513]  ? netlink_deliver_tap+0x19c/0x1b0
[  546.601508][T21513]  ? netlink_unicast+0x7e3/0x9b0
[  546.601533][T21513]  ? netlink_sendmsg+0x813/0xb40
[  546.601554][T21513]  ? __pfx_rtnl_newlink+0x10/0x10
[  546.601571][T21513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.601623][T21513]  ? kasan_quarantine_put+0xbb/0x1f0
[  546.601682][T21513]  ? lockdep_hardirqs_on+0x7a/0x110
[  546.601749][T21513]  ? kmem_cache_free+0x187/0x630
[  546.601856][T21513]  ? nlmon_xmit+0xb0/0x100
[  546.601973][T21513]  ? __lock_acquire+0x6b5/0x2cf0
[  546.602089][T21513]  ? __local_bh_enable_ip+0xd0/0x130
[  546.602179][T21513]  ? lockdep_hardirqs_on+0x7a/0x110
[  546.602244][T21513]  ? __dev_queue_xmit+0x28b/0x3870
[  546.602350][T21513]  ? __local_bh_enable_ip+0xd0/0x130
[  546.602427][T21513]  ? __dev_queue_xmit+0x28b/0x3870
[  546.602589][T21513]  ? __pfx_rtnl_newlink+0x10/0x10
[  546.602652][T21513]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  546.602726][T21513]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  546.602790][T21513]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  546.602843][T21513]  ? ref_tracker_free+0x693/0x840
[  546.602926][T21513]  ? __copy_skb_header+0xa3/0x4a0
[  546.603008][T21513]  ? __pfx_ref_tracker_free+0x10/0x10
[  546.603125][T21513]  netlink_rcv_skb+0x232/0x4b0
[  546.603190][T21513]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  546.603263][T21513]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  546.603396][T21513]  ? netlink_deliver_tap+0x2e/0x1b0
[  546.603508][T21513]  netlink_unicast+0x80f/0x9b0
[  546.603625][T21513]  ? __pfx_netlink_unicast+0x10/0x10
[  546.603713][T21513]  ? netlink_sendmsg+0x650/0xb40
[  546.603786][T21513]  ? skb_put+0x11b/0x210
[  546.603863][T21513]  netlink_sendmsg+0x813/0xb40
[  546.603950][T21513]  ? __pfx_netlink_sendmsg+0x10/0x10
[  546.604018][T21513]  ? aa_sock_msg_perm+0xf1/0x1b0
[  546.604114][T21513]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  546.604184][T21513]  ____sys_sendmsg+0x972/0x9f0
[  546.604283][T21513]  ? __pfx_____sys_sendmsg+0x10/0x10
[  546.604374][T21513]  ? import_iovec+0x73/0xa0
[  546.604450][T21513]  ___sys_sendmsg+0x2a5/0x360
[  546.604621][T21513]  ? __pfx____sys_sendmsg+0x10/0x10
[  546.604822][T21513]  ? __fget_files+0x2a/0x420
[  546.604937][T21513]  ? __fget_files+0x3a0/0x420
[  546.605049][T21513]  __x64_sys_sendmsg+0x1bd/0x2a0
[  546.605133][T21513]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  546.605232][T21513]  ? __pfx_ksys_write+0x10/0x10
[  546.605351][T21513]  do_syscall_64+0x14d/0xf80
[  546.605417][T21513]  ? trace_irq_disable+0x3b/0x150
[  546.605497][T21513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.605566][T21513]  ? clear_bhb_loop+0x40/0x90
[  546.605633][T21513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.605694][T21513] RIP: 0033:0x7f4191b9c799
[  546.605768][T21513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.605823][T21513] RSP: 002b:00007f4192af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  546.605888][T21513] RAX: ffffffffffffffda RBX: 00007f4191e16090 RCX: 00007f4191b9c799
[  546.605943][T21513] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  546.605981][T21513] RBP: 00007f4192af1090 R08: 0000000000000000 R09: 0000000000000000
[  546.606015][T21513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  546.606047][T21513] R13: 00007f4191e16128 R14: 00007f4191e16090 R15: 00007ffc0d8db098
[  546.606135][T21513]  </TASK>
[  547.029893][ T5839] Bluetooth: hci4: command tx timeout
[  547.272472][T21285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.352264][T21285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.384945][T21422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.397967][T21422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.445316][T21422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.474796][T21527] gre0 speed is unknown, defaulting to 1000
[  547.491220][T21422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.714359][T21423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.730199][T21535] __nla_validate_parse: 2 callbacks suppressed
[  547.730221][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3722'.
[  547.733920][T21423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.788204][T21541] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  547.849204][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'.
[  547.880631][T21422] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  547.892115][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'.
[  547.915557][T21422] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  547.942783][T21422] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  547.973166][T21422] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  548.149508][T21423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.169775][T21423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.210915][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  548.219068][    C0] lec:lec_tx_timeout: lec0
[  548.223843][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  548.431594][T21553] x_tables: ip_tables: osf match: only valid for protocol 6
[  548.448588][T21527] lo speed is unknown, defaulting to 1000
[  548.468375][T21556] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3727'.
[  548.524468][T21557] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.531702][T21557] bridge0: port 2(bridge_slave_1) entered forwarding state
[  548.539268][T21557] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.546506][T21557] bridge0: port 1(bridge_slave_0) entered forwarding state
[  548.697612][T21562] netlink: 'syz.2.3730': attribute type 1 has an invalid length.
[  548.929330][T21570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3733'.
[  549.040854][ T5839] Bluetooth: hci4: command tx timeout
[  549.566350][T21588] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3738'.
[  549.610357][T21592] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3739'.
[  549.739543][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3739'.
[  549.813582][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3740'.
[  550.105932][T21603] netlink: 'syz.0.3742': attribute type 1 has an invalid length.
[  550.187929][T21605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3742'.
[  550.196923][T21603] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.261004][T21605] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  550.329586][T21605] bond0: entered allmulticast mode
[  550.710630][T21631] netlink: 'syz.4.3750': attribute type 6 has an invalid length.
[  550.736192][T21631] netlink: 'syz.4.3750': attribute type 5 has an invalid length.
[  550.760323][T21631] netlink: 'syz.4.3750': attribute type 6 has an invalid length.
[  550.778777][T21631] netlink: 'syz.4.3750': attribute type 5 has an invalid length.
[  551.166231][T21640] openvswitch: netlink: Multiple metadata blocks provided
[  551.300206][T21647] netlink: 'syz.5.3757': attribute type 1 has an invalid length.
[  551.367105][T21647] netlink: 'syz.5.3757': attribute type 1 has an invalid length.
[  551.390462][T21649] netlink: 'syz.0.3758': attribute type 1 has an invalid length.
[  551.399351][T21650] netlink: 'syz.0.3758': attribute type 1 has an invalid length.
[  551.515336][T21652] ip6tnl1: entered allmulticast mode
[  551.972407][T21672] IPVS: set_ctl: invalid protocol: 10 0.0.0.0:0
[  552.121152][T21682] wg1: entered promiscuous mode
[  552.148284][T21682] wg1: entered allmulticast mode
[  553.061794][T21696] wg1: left promiscuous mode
[  553.066593][T21696] wg1: left allmulticast mode
[  553.110230][T21696] veth0_to_team: left promiscuous mode
[  553.116425][T21696] veth0_to_team: left allmulticast mode
[  553.133799][T21696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  553.148262][T21696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  553.411173][T21696] bridge1: left allmulticast mode
[  553.434196][T21696] vlan3: left promiscuous mode
[  553.440668][T21696] bond2: left promiscuous mode
[  553.446739][T21696] bridge2: left promiscuous mode
[  553.453029][T21696] vlan3: left allmulticast mode
[  553.457932][T21696] bond2: left allmulticast mode
[  553.463576][T21696] bridge2: left allmulticast mode
[  553.633911][T21369] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.666328][T21369] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.690039][T21738] netlink: 'syz.0.3777': attribute type 4 has an invalid length.
[  553.718583][T21738] __nla_validate_parse: 12 callbacks suppressed
[  553.718607][T21738] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3777'.
[  553.740114][T21369] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.774381][T21369] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.791615][T21735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3775'.
[  554.081072][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5860 ms
[  554.089263][    C0] lec:lec_tx_timeout: lec0
[  554.094832][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  554.487756][T21770] gre0 speed is unknown, defaulting to 1000
[  554.635691][T21776] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3789'.
[  554.671154][T21779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3790'.
[  554.864126][T21776] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3789'.
[  554.880899][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  555.003352][T21770] lo speed is unknown, defaulting to 1000
[  555.564720][T21792] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3794'.
[  555.887006][T21797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3796'.
[  556.147036][T21809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3799'.
[  556.156189][T21809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3799'.
[  556.555178][T21819] gre0 speed is unknown, defaulting to 1000
[  557.061445][T21819] lo speed is unknown, defaulting to 1000
[  557.369546][T21830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3803'.
[  557.663184][   T30] audit: type=1800 audit(1774466241.012:8): pid=21841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3807" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1159 res=0 errno=0
[  558.044089][T21852] validate_nla: 4 callbacks suppressed
[  558.044111][T21852] netlink: 'syz.0.3809': attribute type 10 has an invalid length.
[  558.074821][T21852] wlan1: mtu less than device minimum
[  558.121614][T21852] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  558.341913][T21863] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  558.381184][T21863] netlink: 'syz.0.3813': attribute type 13 has an invalid length.
[  558.743618][T21872] __nla_validate_parse: 3 callbacks suppressed
[  558.743640][T21872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3816'.
[  558.797398][T21875] gre0 speed is unknown, defaulting to 1000
[  558.819919][T21877] vcan0: entered promiscuous mode
[  558.842195][T21877] vcan0: entered allmulticast mode
[  559.110823][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  559.118907][    C0] lec:lec_tx_timeout: lec0
[  559.123609][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  559.227884][T21875] lo speed is unknown, defaulting to 1000
[  559.821679][T21903] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3822'.
[  560.009976][T21907] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3824'.
[  560.019919][T21907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3824'.
[  560.135958][T21909] netlink: 'syz.0.3825': attribute type 1 has an invalid length.
[  560.253617][T21917] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  560.305424][T21909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3825'.
[  560.333051][T21917] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  560.393133][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3825'.
[  560.567156][T21369] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  560.582424][T21369] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  560.604248][T21931] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3830'.
[  560.606131][T21369] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  560.614989][T21931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3830'.
[  560.630083][T21911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3826'.
[  560.633441][T21931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3830'.
[  560.651453][T21378] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.498259][T21978] sctp: [Deprecated]: syz.5.3843 (pid 21978) Use of struct sctp_assoc_value in delayed_ack socket option.
[  561.498259][T21978] Use struct sctp_sack_info instead
[  562.051070][T21999] netlink: 'syz.4.3847': attribute type 1 has an invalid length.
[  562.077783][T22001] netlink: 'syz.4.3847': attribute type 1 has an invalid length.
[  562.553619][T22022] netlink: 'syz.3.3859': attribute type 1 has an invalid length.
[  562.727650][T22031] netlink: 'syz.3.3862': attribute type 1 has an invalid length.
[  562.786225][T22031] 8021q: adding VLAN 0 to HW filter on device bond1
[  562.845351][T22031] vlan3: entered promiscuous mode
[  562.850480][T22031] bond1: entered promiscuous mode
[  562.881551][T22031] vlan3: entered allmulticast mode
[  562.911552][T22031] bond1: entered allmulticast mode
[  563.007954][T22043] netlink: 'syz.4.3867': attribute type 10 has an invalid length.
[  563.055169][T22043] team0: Failed to send options change via netlink (err -105)
[  563.069618][T22043] team0: Port device dummy0 added
[  563.103680][T22043] netlink: 'syz.4.3867': attribute type 10 has an invalid length.
[  563.132039][T22043] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  563.161516][T22043] team0: Failed to send options change via netlink (err -105)
[  563.179776][T22056] netlink: 'syz.5.3869': attribute type 1 has an invalid length.
[  563.195056][T22043] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  563.219700][T22043] team0: Port device dummy0 removed
[  563.239970][T22043] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  563.299666][T22055] bridge1: entered promiscuous mode
[  563.418835][T22061] bond1: (slave geneve2): making interface the new active one
[  563.428069][T22061] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  563.437825][T21369] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  563.449808][T21369] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  563.459899][T21369] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  563.469425][T21369] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  563.682710][ T1760] block nbd1: Possible stuck request ffff888026bc8000: control (read@0,1024B). Runtime 270 seconds
[  563.693856][ T1760] block nbd1: Possible stuck request ffff888026bc8200: control (read@1024,1024B). Runtime 270 seconds
[  563.705099][ T1760] block nbd1: Possible stuck request ffff888026bc8400: control (read@2048,1024B). Runtime 270 seconds
[  563.717055][ T1760] block nbd1: Possible stuck request ffff888026bc8600: control (read@3072,1024B). Runtime 270 seconds
[  563.797638][T22079] tipc: Started in network mode
[  563.803058][T22079] tipc: Node identity 080211, cluster identity 4711
[  563.809988][T22079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  563.825478][T22079] tipc: Resetting bearer <eth:syzkaller0>
[  563.832741][T22079] xt_l2tp: v2 sid > 0xffff: 4294967294
[  563.954861][T22083] __nla_validate_parse: 16 callbacks suppressed
[  563.954884][T22083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3877'.
[  564.003627][T22085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3879'.
[  564.069232][T22086] xt_bpf: check failed: parse error
[  564.130816][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  564.139094][    C0] lec:lec_tx_timeout: lec0
[  564.144084][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  564.555204][T22127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3887'.
[  564.572748][T22130] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3889'.
[  564.584954][T22127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3887'.
[  564.652532][T22133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3890'.
[  564.864485][T21378] tipc: Resetting bearer <eth:syzkaller0>
[  564.872492][T14977] tipc: Node number set to 134353152
[  564.937274][T22144] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3894'.
[  564.962775][T22144] ip6tnl0: Caught tx_queue_len zero misconfig
[  565.340493][T21422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.356480][T22159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3900'.
[  565.385272][T21422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.413289][T22159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3900'.
[  565.449402][    C0] ------------[ cut here ]------------
[  565.455396][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  565.465321][    C0] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#0: syz-executor/18671
[  565.476298][    C0] Modules linked in:
[  565.480275][    C0] CPU: 0 UID: 0 PID: 18671 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  565.489900][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  565.500043][    C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[  565.506380][    C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[  565.526265][    C0] RSP: 0018:ffffc90000007838 EFLAGS: 00010246
[  565.532424][    C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  565.540532][    C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90229800
[  565.548593][    C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  565.556737][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88803f639b68
[  565.564790][    C0] R13: 0000000000000000 R14: ffffffff90229800 R15: ffff8880622c3138
[  565.572937][    C0] FS:  000055555f651500(0000) GS:ffff88812545f000(0000) knlGS:0000000000000000
[  565.581957][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  565.588590][    C0] CR2: 00007f74a55e7158 CR3: 000000007cf36000 CR4: 00000000003526f0
[  565.596657][    C0] Call Trace:
[  565.599974][    C0]  <IRQ>
[  565.602990][    C0]  rate_control_send_low+0x1a7/0x7b0
[  565.608433][    C0]  rate_control_get_rate+0x20b/0x5d0
[  565.613828][    C0]  ieee80211_beacon_get_finish+0x3af/0x6f0
[  565.619702][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  565.626149][    C0]  ? __ieee80211_beacon_get+0xce1/0x1880
[  565.631902][    C0]  __ieee80211_beacon_get+0xd3d/0x1880
[  565.637431][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  565.643090][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  565.648705][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  565.655001][    C0]  mac80211_hwsim_beacon_tx+0x3c5/0x870
[  565.660773][    C0]  ? lock_acquire+0xf0/0x2e0
[  565.665418][    C0]  __iterate_interfaces+0x2ab/0x590
[  565.670681][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  565.676942][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  565.684231][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  565.690355][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  565.697572][    C0]  mac80211_hwsim_beacon+0xbb/0x180
[  565.702864][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  565.708730][    C0]  __hrtimer_run_queues+0x53a/0xcc0
[  565.714135][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  565.719914][    C0]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  565.726290][    C0]  hrtimer_run_softirq+0x182/0x5a0
[  565.731509][    C0]  handle_softirqs+0x22a/0x870
[  565.736334][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  565.741218][    C0]  __irq_exit_rcu+0x5f/0x150
[  565.745860][    C0]  irq_exit_rcu+0x9/0x30
[  565.750153][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  565.755907][    C0]  </IRQ>
[  565.758971][    C0]  <TASK>
[  565.761992][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  565.768030][    C0] RIP: 0010:rcu_is_watching+0x3a/0xb0
[  565.773544][    C0] Code: e8 2b 08 05 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 d7 1d 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 8c 2e 85 00 48 c7 c3 58 49 1d 93 49 03 1e 48 89
[  565.793678][    C0] RSP: 0018:ffffc90006917c58 EFLAGS: 00000246
[  565.799802][    C0] RAX: 1ffffffff1c3baf2 RBX: 0000000000000000 RCX: 0000000080000001
[  565.807883][    C0] RDX: 0000000000000000 RSI: ffffffff8c27c160 RDI: ffffffff8c27c120
[  565.815941][    C0] RBP: 0000000000000001 R08: ffffffff81bbce65 R09: ffffffff8e75e520
[  565.824189][    C0] R10: dffffc0000000000 R11: ffffed100bf86535 R12: dffffc0000000000
[  565.832245][    C0] R13: ffffffff81bbce65 R14: ffffffff8e1dd790 R15: dffffc0000000000
[  565.840270][    C0]  ? cgroup_tryget+0x55/0x2b0
[  565.845078][    C0]  ? cgroup_tryget+0x55/0x2b0
[  565.849829][    C0]  ? rcu_is_watching+0x15/0xb0
[  565.854712][    C0]  ? cgroup_tryget+0x55/0x2b0
[  565.859446][    C0]  lock_release+0x4b/0x3d0
[  565.863969][    C0]  ? cgroup_tryget+0x55/0x2b0
[  565.868700][    C0]  ? cgroup_tryget+0x55/0x2b0
[  565.873580][    C0]  cgroup_tryget+0x1c9/0x2b0
[  565.878359][    C0]  ? cgroup_sk_alloc+0x26/0x3c0
[  565.883505][    C0]  cgroup_sk_alloc+0x255/0x3c0
[  565.888338][    C0]  sk_alloc+0x25b/0x390
[  565.892608][    C0]  inet_create+0x7a0/0x1000
[  565.897174][    C0]  ? inet_create+0x9c/0x1000
[  565.901879][    C0]  __sock_create+0x4b2/0x9d0
[  565.906618][    C0]  __sys_socket+0xd6/0x1b0
[  565.911152][    C0]  __x64_sys_socket+0x7a/0x90
[  565.915918][    C0]  do_syscall_64+0x14d/0xf80
[  565.920561][    C0]  ? trace_irq_disable+0x3b/0x150
[  565.925705][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.931855][    C0]  ? clear_bhb_loop+0x40/0x90
[  565.936611][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.942603][    C0] RIP: 0033:0x7f74a539e007
[  565.947068][    C0] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  565.966922][    C0] RSP: 002b:00007ffcab8a7058 EFLAGS: 00000206 ORIG_RAX: 0000000000000029
[  565.975455][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f74a539e007
[  565.983682][    C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  565.991753][    C0] RBP: 00007ffcab8a775c R08: 0000000000000000 R09: 0000000000000000
[  565.999776][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000ba
[  566.007832][    C0] R13: 00000000000927c0 R14: 000000000008a047 R15: 00007ffcab8a77b0
[  566.016013][    C0]  </TASK>
[  566.019091][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  566.026418][    C0] CPU: 0 UID: 0 PID: 18671 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  566.036042][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  566.046144][    C0] Call Trace:
[  566.049597][    C0]  <IRQ>
[  566.052476][    C0]  vpanic+0x56c/0xa60
[  566.056514][    C0]  ? __pfx__printk+0x10/0x10
[  566.061206][    C0]  ? __pfx_vpanic+0x10/0x10
[  566.065771][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  566.071182][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  566.076439][    C0]  panic+0xc5/0xd0
[  566.080216][    C0]  ? __pfx_panic+0x10/0x10
[  566.084712][    C0]  __warn+0x315/0x4f0
[  566.088754][    C0]  ? __rate_control_send_low+0x524/0x800
[  566.094442][    C0]  ? __rate_control_send_low+0x524/0x800
[  566.100300][    C0]  __report_bug+0x29a/0x540
[  566.104850][    C0]  ? kernel_text_address+0xa5/0xe0
[  566.110107][    C0]  ? __rate_control_send_low+0x524/0x800
[  566.115867][    C0]  ? __pfx___report_bug+0x10/0x10
[  566.120954][    C0]  ? stack_trace_save+0xa9/0x100
[  566.125981][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  566.131577][    C0]  report_bug_entry+0x19a/0x290
[  566.136478][    C0]  ? __rate_control_send_low+0x5bb/0x800
[  566.142139][    C0]  ? __rate_control_send_low+0x5c0/0x800
[  566.147884][    C0]  handle_bug+0xce/0x200
[  566.152246][    C0]  exc_invalid_op+0x1a/0x50
[  566.156776][    C0]  asm_exc_invalid_op+0x1a/0x20
[  566.161652][    C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[  566.167923][    C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[  566.187647][    C0] RSP: 0018:ffffc90000007838 EFLAGS: 00010246
[  566.193782][    C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  566.201779][    C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90229800
[  566.209778][    C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  566.217769][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88803f639b68
[  566.225765][    C0] R13: 0000000000000000 R14: ffffffff90229800 R15: ffff8880622c3138
[  566.233790][    C0]  ? __rate_control_send_low+0x58d/0x800
[  566.239735][    C0]  rate_control_send_low+0x1a7/0x7b0
[  566.245138][    C0]  rate_control_get_rate+0x20b/0x5d0
[  566.250488][    C0]  ieee80211_beacon_get_finish+0x3af/0x6f0
[  566.256345][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  566.262718][    C0]  ? __ieee80211_beacon_get+0xce1/0x1880
[  566.268378][    C0]  __ieee80211_beacon_get+0xd3d/0x1880
[  566.273873][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  566.279464][    C0]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  566.284959][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  566.291073][    C0]  mac80211_hwsim_beacon_tx+0x3c5/0x870
[  566.296674][    C0]  ? lock_acquire+0xf0/0x2e0
[  566.301307][    C0]  __iterate_interfaces+0x2ab/0x590
[  566.306721][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  566.312828][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  566.320097][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  566.326210][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  566.333273][    C0]  mac80211_hwsim_beacon+0xbb/0x180
[  566.338528][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  566.344394][    C0]  __hrtimer_run_queues+0x53a/0xcc0
[  566.349644][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  566.355390][    C0]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  566.361493][    C0]  hrtimer_run_softirq+0x182/0x5a0
[  566.366645][    C0]  handle_softirqs+0x22a/0x870
[  566.371531][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  566.376337][    C0]  __irq_exit_rcu+0x5f/0x150
[  566.380956][    C0]  irq_exit_rcu+0x9/0x30
[  566.385237][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  566.391078][    C0]  </IRQ>
[  566.394035][    C0]  <TASK>
[  566.397011][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  566.403193][    C0] RIP: 0010:rcu_is_watching+0x3a/0xb0
[  566.408613][    C0] Code: e8 2b 08 05 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 d7 1d 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 8c 2e 85 00 48 c7 c3 58 49 1d 93 49 03 1e 48 89
[  566.428263][    C0] RSP: 0018:ffffc90006917c58 EFLAGS: 00000246
[  566.434372][    C0] RAX: 1ffffffff1c3baf2 RBX: 0000000000000000 RCX: 0000000080000001
[  566.442541][    C0] RDX: 0000000000000000 RSI: ffffffff8c27c160 RDI: ffffffff8c27c120
[  566.450537][    C0] RBP: 0000000000000001 R08: ffffffff81bbce65 R09: ffffffff8e75e520
[  566.458531][    C0] R10: dffffc0000000000 R11: ffffed100bf86535 R12: dffffc0000000000
[  566.466520][    C0] R13: ffffffff81bbce65 R14: ffffffff8e1dd790 R15: dffffc0000000000
[  566.474533][    C0]  ? cgroup_tryget+0x55/0x2b0
[  566.479294][    C0]  ? cgroup_tryget+0x55/0x2b0
[  566.484010][    C0]  ? rcu_is_watching+0x15/0xb0
[  566.488821][    C0]  ? cgroup_tryget+0x55/0x2b0
[  566.493538][    C0]  lock_release+0x4b/0x3d0
[  566.497985][    C0]  ? cgroup_tryget+0x55/0x2b0
[  566.502781][    C0]  ? cgroup_tryget+0x55/0x2b0
[  566.507504][    C0]  cgroup_tryget+0x1c9/0x2b0
[  566.512133][    C0]  ? cgroup_sk_alloc+0x26/0x3c0
[  566.517015][    C0]  cgroup_sk_alloc+0x255/0x3c0
[  566.521813][    C0]  sk_alloc+0x25b/0x390
[  566.526016][    C0]  inet_create+0x7a0/0x1000
[  566.530549][    C0]  ? inet_create+0x9c/0x1000
[  566.535282][    C0]  __sock_create+0x4b2/0x9d0
[  566.539903][    C0]  __sys_socket+0xd6/0x1b0
[  566.544346][    C0]  __x64_sys_socket+0x7a/0x90
[  566.549044][    C0]  do_syscall_64+0x14d/0xf80
[  566.553707][    C0]  ? trace_irq_disable+0x3b/0x150
[  566.558764][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.564851][    C0]  ? clear_bhb_loop+0x40/0x90
[  566.569568][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.575487][    C0] RIP: 0033:0x7f74a539e007
[  566.579923][    C0] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  566.599642][    C0] RSP: 002b:00007ffcab8a7058 EFLAGS: 00000206 ORIG_RAX: 0000000000000029
[  566.608430][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f74a539e007
[  566.616421][    C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[  566.624419][    C0] RBP: 00007ffcab8a775c R08: 0000000000000000 R09: 0000000000000000
[  566.632422][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000ba
[  566.640591][    C0] R13: 00000000000927c0 R14: 000000000008a047 R15: 00007ffcab8a77b0
[  566.648632][    C0]  </TASK>
[  566.652314][    C0] Kernel Offset: disabled
[  566.656663][    C0] Rebooting in 86400 seconds..