last executing test programs:

12.891356463s ago: executing program 4 (id=3118):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x82, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800442f00fc000000000000000000000000000000ff02000000000000000000000000000124203bc5494cc63aafbbdd4a22eb0000000000000800000086dd080088be86ddffff100000000100000000000000080022eb000000002000e0000200000000000000000000000800655800000000a6991b7f42a4879f1fd33690f4"], 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x7}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x11, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x800a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e2300aae3becaaeaa0000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x2b, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r8, 0x83a06000)
ioctl$SIOCAX25NOUID(r8, 0x89e3, &(0x7f0000000440)=0x1)
listen(r7, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

11.77224518s ago: executing program 4 (id=3124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000))
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x10)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=<r3=>0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x17c, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x3a}, @nested={0x160, 0x129, 0x0, 0x1, [@generic="9743f17cdd77658f7363ba4cd06198d0a2bb01af9b830dc97bb24ea459e0aeafc928bd6903c0aeec03d019a53eaed804cac991", @generic="ae09f5d8b09689c554561ae7860568548a152644954dad15bf44afe0cb0813e2b60808dea014c0594633145ad398330f044701481162189ae215e4057c547672cbc84259d68fcb4fb30954bd722581d8c8551939707d796d309aeab4a388a3451d56ccc9e28191b00ed0877a1ee177ff0de0da74434026cca1d29d8e666f17adfae44c6ca792fb43cec21df74b3f7a6fa598c39170419c12348fb43815457fc827a069b4ff25ce885ba690ab523f4714f61afb0074c529b6a8a00831f5127765a43de31cba5ae7e36f66767bbc91b57c2ebf58aa9acc571d2662896884d3e03fc7b233980f10f206939d1acc4a1218055314a8a2d4", @nested={0xc, 0x9d, 0x0, 0x1, [@nested={0x4, 0x105}, @nested={0x4, 0x1f}]}, @nested={0xc, 0x11c, 0x0, 0x1, [@typed={0x8, 0xe1, 0x0, 0x0, @pid=r3}]}, @typed={0x8, 0x72, 0x0, 0x0, @u32=0xa8}, @typed={0x14, 0x140, 0x0, 0x0, @ipv6=@mcast2}]}, @nested={0x4, 0x4}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000200)=0x10) (async)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x17c, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x3a}, @nested={0x160, 0x129, 0x0, 0x1, [@generic="9743f17cdd77658f7363ba4cd06198d0a2bb01af9b830dc97bb24ea459e0aeafc928bd6903c0aeec03d019a53eaed804cac991", @generic="ae09f5d8b09689c554561ae7860568548a152644954dad15bf44afe0cb0813e2b60808dea014c0594633145ad398330f044701481162189ae215e4057c547672cbc84259d68fcb4fb30954bd722581d8c8551939707d796d309aeab4a388a3451d56ccc9e28191b00ed0877a1ee177ff0de0da74434026cca1d29d8e666f17adfae44c6ca792fb43cec21df74b3f7a6fa598c39170419c12348fb43815457fc827a069b4ff25ce885ba690ab523f4714f61afb0074c529b6a8a00831f5127765a43de31cba5ae7e36f66767bbc91b57c2ebf58aa9acc571d2662896884d3e03fc7b233980f10f206939d1acc4a1218055314a8a2d4", @nested={0xc, 0x9d, 0x0, 0x1, [@nested={0x4, 0x105}, @nested={0x4, 0x1f}]}, @nested={0xc, 0x11c, 0x0, 0x1, [@typed={0x8, 0xe1, 0x0, 0x0, @pid=r3}]}, @typed={0x8, 0x72, 0x0, 0x0, @u32=0xa8}, @typed={0x14, 0x140, 0x0, 0x0, @ipv6=@mcast2}]}, @nested={0x4, 0x4}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async)

11.457435745s ago: executing program 4 (id=3126):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$int_out(r0, 0x5462, &(0x7f0000000180))
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=<r6=>r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYRES32=r2, @ANYRES8=r6, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$int_out(r0, 0x5462, &(0x7f0000000180)) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x8) (async)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYRES32=r2, @ANYRES8=r6, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x0) (async)

10.983719981s ago: executing program 4 (id=3130):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}, 0x4}}, 0x57)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000005940)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000040)="6bbe0bbdf2a1b265b5", 0x9}, {&(0x7f0000000480)="820b89f57ee342ca9e3e1cbf5eddc011e95bec86fe25f200f90c8f3723c829435eb32f8eeac8a313153e193cc09db24b29dc36b0d6bad202ef08374682a5f6de6d2e24ea2daaf64a65f928575286aabc456f5b558f55405ae7ee9aad19a46961b229a32c8b3443dcc22838b50faf13387a778a3c58253632a31e65eb9ec83b6611f3db6c7019d3ce42bb3a195871747a463f74e3e85036d2362c92397253051078d2087248655fe2c848bf7e414f0643cee75db071f23c609849c1b894d28cb96f667da759e192cb0ee7ad3111cb912f98504511df921feecb4df68c9b05380ccfeddf6205c65b18", 0xe8}, {&(0x7f00000001c0)='E', 0x1}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f00000003c0)="7eb5b944e25429580896726253c3765b2087b1e9e2d552e8e5aefd65042d1462b2c54f8530412ec9", 0x28}, {&(0x7f0000000640)="243c00a55306f86147d61ab7a1b0f1a470484cd9493ad9aa6a392f2be4969db93765cfd87e08f2b3759112c57bed6c9e24558d0c070c33ad108edbde877fcabd1861988682f7a05aae315909001693a57c961340842ed142597ca2f415f4e0bef92be7b31fb7f292440d5b7647d2dea1819e", 0x72}, {&(0x7f0000000400)="cbb6b9fbd6882b0917931d669890605e73d7826ca3ebab4fd8d9d7cfa111a95e38778a95085e12134fd8577a0c80ddbc36728da53195d6c6", 0x38}, {&(0x7f00000006c0)="01e1f963cf1e661ff0a4394678c9ae9b99ed4ca53f4b1509bcdbc147f93d2e5c2df19beca191a2d6b47861d5f9a4584af327100b86527ea822a412f162e8290c0a619d96ccb3651f674a548987b5fb2e46c336ca1d9b78", 0x57}], 0x8, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r3, r3, r0, r0, r1, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xb8, 0x40000}}, {{&(0x7f0000001ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000003f80)="843c9c3f35a3ac933d254d76334fa57d4db85a4877198bba9bb7095957b237043eea905267939e3fc1ee2cd2ceab351a7e5830cacfbfba0b83300afd5b309b63d60d60260918eec489fd4f6e36de45d7f5e6a637752ab8bba78f0d33d2ae9ff44e917367874eec1252d0d3d905ff2b71b4d4890ecde4bd71c459fd0633afa2b6311b40fac771813abcd4f5efedeb95036e823f6ebf4ebedff03f41c06ebb5e55aa4aca78429e9c76e95ffd4e9cacae6772487e9c5ff076cdabed4cb4c7944dee9838eab55d4d1141469f8507e6733750ee3e4f4f36b3cddfc35079b41f7283b674fcb5e9052d9f39d67607d571553205e2b934e2964674bd6e66752a8de6391df51bbeae25cffee747576cbd04400a59921571be24478f6b1875a8717bb19590e092c734e1e6c991d2f26c77fd27340d0377a365983c49b46de2386b77683a14e64710d58740ccf63f3d3d64dee20c1eed78ce398417111e7c25c7ffa978d551c5c1d7eeef52692f1f878ad493a4d005053219323e40ada5abf6efaa1759b0567d2d9dc080a4c7835a1341003511b26901338bab81e8f7c9d0dae1850653164f8422a2b8b6ecb4589f31198067de575ac7fa43e1370e777e3fa673f2d0c3f575ccca24dbbe680c80058b67fb4ff72c41aeff44e247dd38a723f3a37d9094bfaaf30bbd444b273f91aa78d06efef36b55d1d4e74c2c5f8caeeadf9be0b50fd0a0e1cec1695ddab06d7dbb20e940d973e14735d113946838533b145913f3dec6c91c9d493861ec6201f7670bbc9f75825b62bc4240eaff42adb0d18560dd0885ae083f2abf035f347ef31c756a96662d31ef7ff673b810384f88b8937569c154905a89b704dc31aa4f43c99bfb4f4ff5220a1f0a4f077b0d05e728e1e287caa80fef968480c5dc806e94d8c8bd564c742fafadf86d7f3baf4ab365119c30d1758877615994c470ad81c71f4918634b2b0c352a5918e36ea85be8ad65eb2e07d3a6ec3a61ca302320c94f127f79f2fc35aa4955d9f2bf7cdad1d902919babf2ad5e5deff90b54c917f47b19e2906826982d2d33797c92090630d1ec393e295d4915a09c4d2aebc8d5760de82e378c637642e8606a2059d4a85c5bca6fe87d8ec80c1a31ea2e60a5a97ef2c01c3f872a2fb4086ced7fec2ecc2652711c2a2f232bf75817a5476d8a391823b7a7f6b60f0e68683d21c005771ca3e468460250d084234dae2e1b42b6f880a7f57597b6741ae7a6cc47dc4b6c9dc3c4ec3b17ace5dfd5b5d153eb36d00ddff753a0de0abbd8ab8792fc1dbd0f91ed51cd43402691615b77c08380ad4b31ef87f1caef7f3df06201459bdeabd58e29a68e1ff290399df0cd0d18496b4c9ec7e37382f98fff0dd9d8056ca00bddc9ccbf3ebd97d3a253b2d7e716599687ff35e41a03c7ac5d5bae91e89a7bf44b93e7ce5d9ee8e47f751c50cfeb2f694762a661ea6ca11d81b81010e37e84386247151c81dbfffb82d8430c0d3b29896654ade7c3c5bedfaacf760b5e14320b984dcd72963eadd446d523bfc6b038a62cbf769e22df1a1e9a78fdcb3f63d1a7f93823f8be985c0686b0ef362aa67f9bb6e59a5f055286dbc4b1cb581ec1c2837b0a3494000869767c3e3784ef05a8c8ae6e952ad0a8db8c2f414191f8113eeb787dbdb17cb47de78f6ae0ebb152ff7cf28d8409c637daa754c250db6d333b91e69bbaa71b6733b0d3ce4aecb94977105624d2f342896e41855ba710d75d20c4785185efc45609c4380ffd705d86327d8b4b5da488fc14e347d20260d054959446d1b39af5b7349822e6d20feb7d5feba2cc5a06177502340f8bab46a9e7ce9e11a24b53c7d69aa8f027a44a71adaea8592c96279bfacdfb312c2199e500fba564372db0795e70b08c092d66056a69fb238cc9e75427a6d36c74025639434342ad5c9162d861097767af189a18694e9a7d70460c26f625bf7cc89850a14b005443124064ceedd014a3d0ccfd424c21682cfafdf5b1409093a63147a4726ff2d795d4c00647fbd7feb826995837407fc92490a17558736a8df5f7d31e0d715776999572ed50c888aa2b770fff098876f28a6643af1cb31da8cbba7417349595e4ad19e9be2f593654205a117964c393f1d15848d990a360c59ce496906c7b43410e799d2ae7c822a545a249c3e35001e1c63559a564e536728885e718aaca29347acb73e9250a053cd1ff59b85ff3531b3cd886bed5c16599b5caffaab711b88b7125ecd5e532cd704ee30409af3f9682a5991c48b3400bce0c3a9a1501815eb48e0b5b27863d0b254988c4d14168ad8aa453be7bce797e8a3077bffb199da2b1e1928cc7e725f1a798c0d5a68bcad466a8f0fa03298dcc7ae41adc2a127458bab6fa6c93335e14d668c9f10d54ab161e960b73e2e562197277b6f2d9bc09e779024889600db479f03de52efdc58c0c0d5c33f47740d6a44d5cf6cf2ec0cc0bf2fcbefb44b885299ae6033f641ddd5e44524244b9670ae5669562ec098ba3ae0b6f8f09c58d0e8aef2f7dcf47e26bf735cf93836362c1707768967db6f61fe1e87d80dc750c98960940d372a06222da7f594cbfb572944c8b987910301580b7cc6cc2c84a14df859da8b33a5d30ea8e44d7cec974d1fa1615425144d45d45d3dd54593412ffe8d92db4df4a8693606c0081e911729c89711ab0f4cf6eb91007be2defa7865169226fb1d4c231a9c745fbdd78ba28c2b52122d3ba59bba68770399ed6a173629a3e59831180e1947b707c467fe2c1bad932804b6b1f2a5198edc37b286e4b43eeda81218f500a420ba364e94855b0563274f6b9d635cf48c5e14f209c97c36410eb481d28f4127ae23438ecf9b4ac844819d0cb2da7b1d40fb4f31913488cb43f099e8c2fbb23490a6cd39c10046238f79b7fe7039bdcb839e291cb4181d32ceb6c9bee7895873e6d116b4ec02ff928294161c3b5eba636f8078799430bef0ea9e96de5a9f275f4a8728924b59b59ed75a421823e43a7d8742c9dbe74f9b13df49f5cb88b1428245f269a12adfe98f7355a62b39cf8f550bc94e6ccf5d2377da2c5421909ac2f610d2b4497b4ae7d47b703d73ab17e7a436253b620c94d9f5b90256f06d8c308fa3d0915d2ba1f54b46d694b931e278162f330ff87a2a668fec5ff7b090f3c6193fe23921739a33dc4c2790af8e18b69a8e4bc85f676103dd548da0cb68e7dc19a1d2c89401ba0c151318bd062f9520686d39ceb33598de70b981e8299bc3afc5cea2e4bff8cf52eeeceb180547e08772c31836e1c26711216b2e8d96415006069c5473ec4c0b8c1aad038c892bea655544a5f0e2a4904e77f52c3276502190884943c5acadefd72faf40f7ecfd2b37d18a3b4e1182e7a29677865d49e51862512d0aafb3041d85c72ae6b08f236410b470647a31aef230a318e3e9a35253d5a182a3cee338caa45ccca2d5dbb2a3ac2af19d9980660fec35ccc55ac8a740eaf65d2a72b85ea3e1e9972a667c14bac204dce1a5e6e06cc1e3c8d9b1e2adea5bae1cff3b2e8981543f16fdfb070d87ef6729abc5182bfc0f5a6e6322adebb133531ede09afdb09fd3f2f66badc60f4a23480a56cb60e18f025c908a0fe2e3dbe781f74fe36a151a47c13d196aedb9e78b944aaeaa736dd8391dc84fd310a5894b82d0956db771d6c7448ba8a2b09ae548264a1568db5c831cd1961856f086d0213889834c08def6882f99228f540cb4ee183988566d136ab1b103939cae8af5fd88847651f21d90b32102f74cd73a2e3e5ff561753cb1150448de495a8187bd80785871956449e94b3472f0025021cc73531fb2d6313e7bb9eeb5371307ae9f2e6b21a2fd4ea2b9ec3800eed7ebce1be724916f65a07f9b7c1339ce5ef2d573d17f74682c0b6d9fc45496ef4eba23d3f67776b6c0a7bbd092e6b7b1f9b91d07df039ede5405303c07aca9be6cdb5d36569885a401634b50fb631766728689184561521f29857f36436fc5db1d2e09653edab1f7d685117d180cc1b922792a1b7a8ab8dcc6e417aa9dfc96d248b59c0f312f3f558ce3c7aeab101f975e312d5b7f6652d456837b1dd54d5d667b4f438c57f5d574b6a695c601214e1bbc4b8f0811d8478487e2634158806384e71ab602222e0cf39377632fa76509dc5c62d79a9804a6332535f573bfd580a7db1928dd11cbd8669cdf6931689df79a55056a295007907a7db52eb076aefe3407e5ba2bb7d21f03bb2cc9cb20649ed48d2971f32eb7ce8da0a678dc0e2a7f42c09434e1bad7c718831c2e77d15393312574f77dec21b465e94d51009c5d13146d23f4dfb7f9dc36e4b404f498d4025649e1ea0d9b283fb02aeba269ea6d0a7f27bd32a966137bb08e2f529e73d10be406fcd3c4470ece63e06f9a546f87ec712afbf8208d14460a5f85a40c51842ec0b004c8d1411f10d9533c839ba1a27bcc5d6e7b51a489bc1d3537127e7a65d86c485e2b2a0e4f45b9deccc0dc873f3ab80876331b9d5b86f1f8f4bb9c5f21cf36948da30185f3c379aa054d2b74320dac8cf64720c0e2190e0f82b9114455eed69762e94a159a4f256f7ad6f16101c086ee61b958428a90e6e7901fe06279419ae292dbb7b43c4971f5d8bc7cec235ceaacc757b052241844c952bc7d24ed74dac44851b55a13495c7ccc057aac4443958146406ad00bd38a9628c90bef5294271c1bc3234ad89cda85876ef12c99c2d94118fdd1312d98a451a9871f7d243c6872fd300429da7ca8bcfbcf17f20ac1599e29d0c93cbdc48e0b9b402d3a2739e52b4702d8242bf29b1090c2acb9fb429b9c0e3a1f69c6c3113d9e8d7effb809ed53e786c0b2f7a9e5a3b46e56ed3f41f69a52c36904c0461b3eef4ad9e949f95d323291ada556384dd6109f5898f5f318eb309cd531c448505d72b3f93c93c96cddb952c68713b76f918aa08e5fa1bc6926dbee413feb0e05cb0440d713af1c7dd27e69ca308a0f17c94ad27860c5fe29b59895fee6c030dce9590863e2f6ffb84c8462efb4f8583e79bfc57b52a4944ff3ec256381327ae63ce5fe6d18a3de989bec7091726185503fc5d83fb9ee869c0dd6477af56adb57064e528f56cb6e5002b20b2c8800ba394bca859549fc67fdfca7deebdcf0f3ffc4eb73a06a863be7cd96a7bceaf023aedc5c9cdd8a4e3ca7091f26b9d10162d75015845a80bb518c7c861bd648a977edfddf0878eb093831ab8590edd42da83815f653e127f92347f26d170a78d224268bd944ba61d6ba23582a531ec1ec6097d27a1cf1dcc6b6a41cb402ddf4419e9c8de00d549cb86027da580af7504331eca7a4081af3380d05c85105fd9084a4edd28ce1c8174e6825f306990626b77b070c84e6319930fb93b6589a1af1aa39dae136857c96f0a28caf93a523d2cd0767c032d10ad1407b2cb1dd363bfed058e96012d75f6fd92acdf95444b21b03476de15fa63bb9fb88692fe98efbb73edbd130c3cb3fb2b3b51a1859625d50a044848b0747a983bdd62b454e5c38fe264d70ccc9661fe5ad1cbd2d0e0078c8be7abad6a5688b2f1f7658c2cc4370926ddbe75ebe06b1f4439592a479574d03e04dc89684fe869c2871aa2fdb8abac850d56433e50e46ebe952c271c23753c83c612fc2cb077fe19bbce56a5b03784ab48770279526d6ec1f6253b357d36ca3b753db3b1a5e0c0da6a6b30e6119bdeefa29d5a115faf659352ea8578cbb09bdd6a0e2dd1c66cb1211ab9a5885b33f5c5e045217acdc7f278d48e7c3522eccdf3afa974d9530c1105f5c8046015a2c", 0x1000}, {&(0x7f0000001f40)="99f260c131ab8eaaa107a01e76260dd624eda1eaeb0f8c56fd4b631f743c2a1a10b7b3d70700b7243d02c4e774bbe71bc42b3826ad36b26b029e7a49", 0x3c}, {&(0x7f0000001f80)="dfbd4351839a4e170dca176ab2de6b780c8a55ca377ec3c346b7aa9e9f73d94d0fba7fafe52179b6bc842e0a4739db6ec5e236b14e5d7c62939744b0a6e04dbe1a98921c1a488203256d510ec666abbb509a50a68678cc27d02058187e2143ebeb3d8b5ea891ce1d42c5059114d479ac8cd785acf0a7923dabded9ce2d1b151ba550bb43924a1546d751399f4fedea96323fccf4f722ef7d7c20156f9733dce1fd2cbc22d6c7a1cc", 0xa8}, {&(0x7f0000002040)="aca4752bbdf5d7cc349db846de31649bc630220e7dd687775beacd79708737d851f9aa706876e43dfa7ab569b99372f30c9daffbcafba8b1ce6a023977b14a03e56a452cb83227949ee57137fc4adb969cdfd81ef5c2fdfbb0b5bd9ed93f1b96439d1ce45e0fa0f0145b54dbc944bea74ea5b0aec4616d9d2d2aa657ee91400bee50bb7620bbf01925ea9e1d021feb6dbd05fe78b640f5a501f10110327cabf1a70ef6809242a5a0dac69d06592e6abcae47c58df92b1c64b6c66b26e8e5fd2e599046dfbd", 0xc5}, {&(0x7f0000002140)="f3e9d8b1457505924902a7425593ea968c5de4ea27d05058311c31fc62e33cd5bac92f7287f0062dc459173ec0fb6524da3be30b423fede34cc25f703e10bff8c3a1b7625db2a05fc924ee2ab22e1d6cf30b89d7a831e4bb6f32d4da615911a1d668f8731f249599f20ee7a5993e18f938f1d4ea9761ebfeaf165b869cadd8c5179a7c13e4120acfb724c7a3300b4ad3701e0cfe7fe30e2ec468be12188c0f922c72c61cfb59851cf06fd4a621f70100b14506e3866b4b5fc5c4cbbe84e94e0e87183933aeebdca32a638de6913073a4f12cea56414021b05431c1e6937b6b2eccaf28", 0xe3}], 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="1c00000200"/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r2], 0x48, 0x40000d0}}, {{&(0x7f0000002340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f00000023c0)="f082e0b14bfaacd3e54b174d55e2afb8389f0b387e4d90e2473cd184e63e56ced071990efe53153736f960396c2ad7d8431d3e03d4fc5a0378fb9451e63d8414d6774d6c11bf5787286f9f52e63d74c6264f46e844d9a4e1d3a0f6b518f36cda50a26126ec60ebce1c743b0ffe391b2bf9dcca060e468e8dfa32aed0ffff8dbbf84d07827181426232999e9c30502354e527f91e", 0x94}, {&(0x7f0000002480)="a89c3987ba49e3c706b523bc20d16dfe5a3d8c709667ec3915d6681a1445f2964a10f4c5d26a7cacc8cda1b316ba22bd14cca85d2f84ff0c61f9c0ca723ffa946013e8face70125d4818874647e92ad7990e20f40527dc49b87a565b0af39cbb24d15c1842bf61b15a3f31dea01ee1b5e36410e5733a982f5d4d9fbabd0b46884b1b", 0x82}], 0x2, 0x0, 0x0, 0x40010}}, {{&(0x7f0000002580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002600)="5d9da70adac910e7824904d8f3df22a13207c93a5044e54f2ef09b6b9e4a30e26d157111eba8083cc231c7d79bd020f79b904f573dfd2b4b3cdb350167f483ecbe445a76a0921860d8057697d70b6a80df23e73e9057217d13d6b83bd8b60ecc479c8e4ed850ca6c92dc08ba5e64aa0083d53f345cf8548249a4d7baef3df4c36fac139a51b981af18313739163bfa6ae0ecd6c9d5292d0661be82e39be95b772d04613db872eafb04513c024844f1b657a50c12d1532e85d93e7848e61d401ca6b1fa5ffa2212271b104edeb2cf689da5ee275f299f94a64218a0073c864f6393304235268e40fb", 0xe8}, {&(0x7f0000002700)="ff2e93c7f85cde628757c90ee59bd6739b923322a5e2241505b2b11bf03ed53b5a", 0x21}, {&(0x7f0000002740)="c0545d76f962c75657020a4954936366dbe9fe8da7d40c01d81cc2e01d4b50952a8e40fbbd2839feebeb7b6966e3d44e6e877dd78c29c1e46aa10baba69a76f3d702f67b54d7dafe4337b04993", 0x4d}, {&(0x7f00000027c0)="66dae39be3d3e23d5f0228ad308844c8cd23cec5feee2b3708e15803580047a884a564a8e02b121147ef23f57a1b152954af3dc988d560b8bbca442b13031c4940f96de60878a6292c941db6cfea1e5bdcba8f36fbdc54a33a1e593764fc6714f038ff42469a8b9c114ddff49b0506efae1b01ef86d0908afe6031e7b6f9c7155a33f0ff1b24fb0a10520be641ba53417121a7fdea9255123f073a08e1c9a0d3c28cbcf24a81253a2042e3eefbe1da1c4d7d7c3336f9b8d8f839f74f91b67877ea7b782ed312a586b7085d497b3233824791cd639e8c47469a07791080d809", 0xdf}], 0x4, 0x0, 0x0, 0x20000010}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000002900)="6366cad9241a5ff841bd37334bc58b8d5e5075aa00551de8c1818d3c880000f87c116e94d01aa0a088fe7878a41eec28b9316b509d934b7ab92635e395e0b0a7f667f93aa8309f28213f4414f4bce6de", 0x50}, {&(0x7f0000004f80)="09b36a1beec190c140db021e6d9c2964e0ab775f99243d024c588f86f9eaa27948de0f4ca7c03516271495c8a66797c578339f3eee0ee6b5259ae3d9faca5e5b2f9b403f513fa230976afdf1f331f54609b9d54551026ccfd5ee822a16cb6e7583e4b55d7c501791433c5126ba572a6899cec39eafab145fba2cd51822f7c3ff77dc2d590be0f40987d601611f151cd9a2d85873a64bc9d0a8", 0x99}, {&(0x7f0000002980)="8297", 0x2}, {&(0x7f00000008c0)="02892dcd4320a928783e13a001b8ba1561b3cb4862a3f7c446ef5417f6458be0dfd7cb7ae88092738eb949d94db3adeca4631c733fc48bd7901ca0dad46610fb4bf2f82a914e2e30bbdf9c10e3b576df5208eaa5e15274a30e14737790c6c2ec81e5a7c2c0ff59cecabfd3627604de145d8b441a32f8410ad4b1ddfed4770d00c47e599df92665b07ce1d44fc70d703e47cc3a83b0a28e197f15dd712a0cfc6e595fb15035fd0aaa9fb5f8024e799c24b871a1f80d0ae65bab6e193b342a632d12317c6f7d968a85a4d9a085f385feac7ec10a", 0xd3}, {&(0x7f0000005140)="71c8a738b83aaa8f2aaadf694e3ac1f9f3535631dc08d012c4eefeacbee30a4025f03ecfc97679490dd9befc537eb79ed5b7e91fda43f3b8bd75be95df3f0c4b5ab10a42dfe7628e74ad60e3d90669a587e6c028c9716573c2bf16d890a4732277e1044531c0c3c92bdcbfb608a32b", 0x6f}], 0x5, 0x0, 0x0, 0x40008c0}}, {{&(0x7f0000005240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005700)=[{&(0x7f00000052c0)="5aa0e606e0dde980f732a494564d31b2ebafdf6a7a73069bbf34ca4747a9590f421b2beced388b0849c3f9fbf69afa85aba350efeec3a27dea4abfb8a8371cb53f01b85438b50f9e58212f070e54faeae882508ed3606288ce4ac25ecadcb664980b0fa472cba0ac80e2e2142bd28b286cceddbbca68ca36cc97865e70df1fd170075e491e575c21761e8e372f2ca6662b425f2f3efefe863ad890ee2fc2fa6bc052c7ae044e55ea8673c3391335a6b2693ba22a1b1130579d8f970230fc3611ca284370fe93841ac95fb3bcd84ac03464eb9fed6fe470997da94de36564", 0xde}, {&(0x7f00000053c0)="6c0334325c546dfcef865b5445e7399a3936fec7a57d5f6dc1417dc433eab1a7adf186add5e996bef844c01a1b5b1c6a3a7fbed25bc669126ac15dde2f9be45fd7534287eeb2ca2697c5e6e7217dbf203e671de417c9d9377a7fd897067eb0fb8af559d993a5f4f28e59d32b20c7e3772b829efcfa750ef727eceeda70cbffc9fde0dbd3ee925bc9d91f733cc8b02d7198d08efe0fc5c612305fc4e8", 0x9c}, {&(0x7f0000000800)="98aa16aaf64e186cc4e6169b3ce10a2ccdde61bdfb6e8d5a2b21bd432f327a1f0350fad1d0360b096d9684fe086af725cfed65f92a73ccec740c189dda99282bb116ba63341cc89fc86637d0bb6ba7c63b7508acbf39547d0e1cb6e598e01bd3f853e94bac53efb1be6ee81dacdcde90ea752a0088b114f342b3d8a53597399ff60ff7cbdd06b2c8ba1fcb835dab957926540dd55fb33e8e", 0x98}, {&(0x7f0000005540)="6d898b80cfdf2951584f77cee8e1f46f068f9ef364103b97094b2b1af9ecfbe989360a43e3f394d8405723db61a1752b12c190f31540ce6b81e0cc5ad9f2c3535c3802fe21835e31637ce57b6d419bbc433c0c22b7aea8675a4fda8a528f9320661c95d8f3489c84bdc689180f8a0b2c565ee300453be999046e98cc02b7839ebfd35897492e863299720a0ce57c5a29cc982a1d63a253dfce3233beda532ff54edabecf8f31de92d7c5cb204dce5721447065c195fa8ed1", 0xb8}, {&(0x7f0000005600)="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", 0xff}], 0x5, &(0x7f00000058c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x10}}], 0x6, 0x43ed0)
close(r3)
bind$tipc(r1, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0xffffffff}, 0x2}}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r4 = socket(0x22, 0x2, 0x6)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = socket(0x0, 0xa, 0xe9)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x100, 0x8000000, 0x25dfdbfc, {0x0, 0x0, 0x12, r7, {0x0, 0x300}, {0xd06100a6b4d83250, 0xffff}, {0xffe0, 0xfff2}}}, 0x24}, 0x1, 0x7a00}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES64=r9, @ANYRES8=r5], 0x50}}, 0x4008840)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

10.006521806s ago: executing program 4 (id=3139):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000c000000040000000200000000000000", @ANYRES32, @ANYBLOB="008f123f10e1c2c00b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500), 0x0}, 0x20)

4.816306381s ago: executing program 2 (id=3172):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000500000009000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x20000400)
r3 = socket(0x40000000015, 0x5, 0x0)
getsockname$netrom(r3, 0x0, &(0x7f0000000140)=0xe0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r4, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xfffffec3}, {&(0x7f0000000140)="df282030f97816377056", 0xa}], 0x3)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
accept4$rose(r5, &(0x7f0000000080)=@short={0xb, @remote, @null, 0x1, @netrom}, &(0x7f0000000180)=0x1c, 0x80000)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x2, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0x5}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r7, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000500000009000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
unshare(0x20000400) (async)
socket(0x40000000015, 0x5, 0x0) (async)
getsockname$netrom(r3, 0x0, &(0x7f0000000140)=0xe0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async)
writev(r4, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xfffffec3}, {&(0x7f0000000140)="df282030f97816377056", 0xa}], 0x3) (async)
socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
accept4$rose(r5, &(0x7f0000000080)=@short={0xb, @remote, @null, 0x1, @netrom}, &(0x7f0000000180)=0x1c, 0x80000) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x2, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0x5}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x60}}, 0x44080) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r7, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async)

4.640508963s ago: executing program 2 (id=3173):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060102000000000000000000000000050001000700000009000200730000000000000005000500020000001400078005001500010000000800124000000000050004000000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x41000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060102000000000000000000000000050001000700000009000200730000000000000005000500020000001400078005001500010000000800124000000000050004000000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x41000) (async)

4.500962791s ago: executing program 2 (id=3175):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x50, 0x5, 0x200, 0x7, 0x0, 0x7, 0x3, 0x7}}], 0x48, 0x40}, 0x4040040) (async)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
pipe(&(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x7) (async)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ipvs(0x0, r11)
sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r12], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) (async)
r13 = socket(0x1, 0x803, 0x0) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) (async)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001480)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000440)={0x0, 0x9, 0x37fffffffc, 0xb, {0x30, 0x3, 0x6, 0x5, 0x5}, [0x400, 0x7, 0x401, 0x3, 0x5, 0x63c, 0x8000, 0x9, 0x80000000]}}, @name="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"})
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
setsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f00000001c0)=0x251, 0x4) (async)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x44}}, 0x0)

4.43684832s ago: executing program 2 (id=3176):
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
pipe(&(0x7f0000000140)) (async)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000780)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
ioctl$int_in(r6, 0x5421, &(0x7f0000000140)=0x1)
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0) (async)
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x0)
splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) (async)
splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r1, &(0x7f00000001c0)="035a4d79a50ac1201cfa20a01380c8119f40522c22f51c7e7f6501efd76ac9402a2345f7b529c2e36fe4a6783b872373188841152bc06e1289dcf67dc33afb140ecc4913e8969b782f6fdf1e629b46daacbc874b09fafe6b5baefc8722391aa34ec8526d6b98f610dc75a754c2251fdc2a476db5036b9dee13d15304b7f36d7e78b68e6f19ea8518744f26", 0x8b, 0x2000c041, 0x0, 0x0) (async)
sendto$inet(r1, &(0x7f00000001c0)="035a4d79a50ac1201cfa20a01380c8119f40522c22f51c7e7f6501efd76ac9402a2345f7b529c2e36fe4a6783b872373188841152bc06e1289dcf67dc33afb140ecc4913e8969b782f6fdf1e629b46daacbc874b09fafe6b5baefc8722391aa34ec8526d6b98f610dc75a754c2251fdc2a476db5036b9dee13d15304b7f36d7e78b68e6f19ea8518744f26", 0x8b, 0x2000c041, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x20000000) (async)
sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x20000000)
splice(r1, 0x0, r0, 0x0, 0x8a, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0}, 0x94)

4.121035675s ago: executing program 2 (id=3182):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES64], 0xfc}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07eeffff7e00000000000200000014000180060001000200000008000300ac1414"], 0x28}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007ffffffed7f700004c0012802700010069703667726500003c000280050008000e00000006000f00090000000500160001000000080015005d300a0006000e000100000006000e00000000fe0500160004000000040014"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448c1}, 0x4004080)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r6=>r0, 0x8, 0x1, 0x5})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x1da, 0x3, 0x10}, &(0x7f0000000180)=0x14)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, &(0x7f0000000280))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x84, r9, 0x813, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x84}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r11, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x4c, r12, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048848}, 0x4000000)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r13, 0x1, 0x70bd2c, 0x0, {0x1, 0x0, 0x6000}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

3.242392426s ago: executing program 2 (id=3188):
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd647}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0xb0, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x80, 0x2, {{0x8, 0x90f0, 0x4, 0x0, 0x0, 0x4}, [@TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xa66, 0x7, 0x12000}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x7, 0xfff, 0x0, 0xb54af9cc}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x5, 0xa, 0xa7a3}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x8}}, @TCA_NETEM_DELAY_DIST={0x4}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x1, 0x56f5}}]}}}]}, 0xb0}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
socket$unix(0x1, 0x1, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4004810)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0xb, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r6, 0x0, 0xa0028000}, 0x86)
sendto$inet(r0, 0x0, 0x0, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000000c001700020000000000000008000900", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x8}, 0x20000081)

3.188955526s ago: executing program 1 (id=3189):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10a00, 0x0)
write$tun(r0, &(0x7f0000000140)={@val={0x0, 0xd}, @val={0x0, 0x2, 0x33, 0x6, 0x3, 0xbdb}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @empty, @private2, @broadcast, @mcast1}}, 0x42)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}]}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r2)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
listen(r3, 0x3)
listen(r3, 0x1)
r4 = socket(0x840000000002, 0x3, 0xff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
sendmmsg$inet(r4, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x2004c000)
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, 0x0, 0x44080)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x168, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r10, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x138, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x10, [0x5, 0x7, 0xb, 0x1, 0x6, 0xe, 0xb, 0x0, 0x9, 0x3, 0x4, 0xa, 0x4, 0x0, 0xc, 0xe], 0x0, [0xb4e, 0x5, 0xb64, 0x4, 0xe0, 0xffff, 0x8001, 0x7, 0x2, 0x4, 0x9, 0x2, 0x7, 0x9, 0x81, 0x3ff], [0x3, 0x88e3, 0x9, 0x7f, 0x6bcb, 0x8, 0x3, 0x8000, 0xf, 0xc1, 0x1, 0x8000, 0x8, 0x100, 0x6, 0x6]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xb8, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xae3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8c}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x17}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x360d}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x58}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4859}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x40}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x2}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7f}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

2.764952579s ago: executing program 0 (id=3193):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x4, 0x88}, 0x2c)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e22, 0x10000, 0x47d, 0x12d61, 0x12d58}}, 0x44)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x768, 0x65, 0x800, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x5dc, 0x2, [@TCA_U32_ACT={0x568, 0x7, [@m_nat={0x1a4, 0x18, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x17, 0xff, 0x6, 0xf, 0x1}, @remote, @private=0xa010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x100, 0x4, 0xffffffff, 0x2}, @loopback, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x0, 0xffffffffffffffff, 0xd842, 0x1}, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x2, 0x4, 0x9, 0x4d606470}, @private=0xa010100, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x74, 0xfffffffe, 0x3, 0x2, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x1, 0xfffffffe, 0x2}, @local, @dev={0xac, 0x14, 0x14, 0x3c}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x3, 0x10000000, 0x0, 0x1}, @initdev={0xac, 0x1e, 0x5, 0x0}, @private=0xa010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x79, 0x7, 0x8, 0x3, 0xc}, @private=0xa010101, @local, 0xffffffff, 0x1}}]}, {0x3c, 0x6, "536597b3e6829179ecb53bbd5ea5dfea4950881ef8806d1ca8208ce450e9154f20c99523fef43dad5a08bf4124a6c2e18e4f0361d575d6f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x100, 0x17, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000001}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}]}, {0xc3, 0x6, "ebdbbca68c28a3223763bd72f3554a0d4d1bf4c6e78102229303b3e580c0b00c3cf06ee34c526b61fd1499ff1aa699ea31e93670339a989c3b4b8ba7c4b8970aed0f6e2a5102a02ae95dabfde4cf065e2deb08b9d755bb6a3a87756c1186628533b11e02b9797ea6ba60f3a6987d48a4201e7f5fd39d2f2f80afd418f843d2d2c3bfac494d8cfaff17e6b1dd18e825bf9654400765193d6f8f66e0ae38b0dbac07185278eb25f1e678b763d01252889cd6be6790185f7dd9dd85279e54b8ba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x1c8, 0x10, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3637bdf, 0x0, 0x2, 0x10001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x8, 0x2, 0x8001}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x2, 0x40, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x0, 0x7, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x8, 0xff, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffff001, 0x3, 0x7, 0x80000001, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7fffffff, 0x0, 0x15fb, 0x80}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x400, 0x6, 0x1, 0x486619f3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x3, 0x3, 0x62}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x59a2, 0x20000000, 0xfffffff8, 0x7}, 0x4}}]}, {0x5b, 0x6, "12d0cfaafa947ac83a878790e4d6fa08220fb080d7611358b46b60c4a234e8dde374841f24fee41e5fb63136c39a3da0aaf79e70ce30b2447cc0f94603f59e338c84618ec87b722182c05bebeaa14e0710fabd555d567c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xf8, 0x7, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010101}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x20000000, 0xfffffff9, 0x8}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x68, 0x6, "3418f95f21ada6e32f592617f99dfa03487ad9b01af577ec2e2d236b36efdc6d3dfbc32a8ff7988f6f1fe840387b7683855e3d8262ce8ff2961cab3b8a295f79ae64b48b4d24228bcd928c61c53f9cd8d10816c430401eec5d6d6f7b42033ce695101d01"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffd705f1a7}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x89}, @TCA_U32_POLICE={0x30, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1249}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0xd9}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_POLICE={0x4}, @TCA_U32_INDEV={0x14, 0x8, 'team0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x150, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x138, 0x1, [@m_ct={0x134, 0xb, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_LABELS={0x14, 0x7, "ffe7377efb339bc59f350c7b025a3b71"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_PARMS={0x18, 0x1, {0xf, 0x101, 0x10000000, 0x1, 0x2}}, @TCA_CT_LABELS={0x14, 0x7, "075abac8315d88d707c2ed5fc953392e"}]}, {0xa2, 0x6, "a9b0373813e0f2da6e8f5cd5c2f0e993b814de8645c7545f5f50c5380480ed4ef5013ca2d00164d47399225c275c36df8b272a85bb6c9c930de5c21cfcfeb39c9de06bd96859ae3e19a20d72ffe99adec2667fa15f5dc9985c817c830838de22cb50db69cea06d79bdd4b0a20ecfe8241339adc4ecabecf238916cc0c9853aa03397dbea45206ac1c7dc9e4e70ad5eca346fde9e6998c280c8b19ae9d286"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x768}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket(0x14, 0x2, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r7, 0x25, 0xa, @void}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)

2.432204582s ago: executing program 1 (id=3195):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000200)={0x0, <r0=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x10}, 0xfffffffffffffee2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x400}]}, 0x24}}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000000))
socket$alg(0x26, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x8000)
recvfrom(r3, &(0x7f0000001080)=""/149, 0x95, 0x1, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xe41d, 0x7fffffff}, 0x0, 0x0)
r8 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000))
setsockopt$sock_int(r8, 0x1, 0xb, &(0x7f0000000040)=0x3, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x810, r1, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r9, 0x0, 0x0, 0x80800)

2.325261341s ago: executing program 3 (id=3196):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r0}, 0x10)
ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x50)

2.205696092s ago: executing program 3 (id=3197):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES64], 0xfc}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07eeffff7e00000000000200000014000180060001000200000008000300ac1414"], 0x28}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007ffffffed7f700004c0012802700010069703667726500003c000280050008000e00000006000f00090000000500160001000000080015005d300a0006000e000100000006000e00000000fe0500160004000000040014"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448c1}, 0x4004080)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r6=>r0, 0x8, 0x1, 0x5})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x1da, 0x3, 0x10}, &(0x7f0000000180)=0x14)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, &(0x7f0000000280))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x84, r9, 0x813, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x84}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r11, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x4c, r12, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048848}, 0x4000000)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r13, 0x1, 0x70bd2c, 0x0, {0x1, 0x0, 0x6000}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

1.964529653s ago: executing program 3 (id=3198):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0x3}}, 0x18}}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0x7, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x160, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xd, 0x5, 0x7, 0x1, 0x2, 0x80, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x0, 0x7, 0x3, 0x8, 0x2, 0x9, 0x54d, 0x7}}, {0x12, 0x2, [0xbd, 0xfe4e, 0x8, 0x8, 0x5, 0x7, 0x3]}}, {{0x1c, 0x1, {0xc0, 0x4, 0x2, 0x1, 0x2, 0x6, 0x7, 0x2}}, {0x8, 0x2, [0xfff8, 0x0]}}, {{0x1c, 0x1, {0xd, 0x6, 0x7, 0x1, 0x0, 0x7, 0x8, 0x4}}, {0xc, 0x2, [0x3, 0x4, 0x3, 0x0]}}, {{0x1c, 0x1, {0x7, 0x0, 0x9c0, 0x67, 0x0, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x40}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x5, 0xd8b5, 0xffffc3c9, 0x1, 0x5, 0xa, 0x7}}, {0x12, 0x2, [0x8, 0x92a9, 0x3, 0x1, 0xffff, 0x1, 0x8]}}, {{0x1c, 0x1, {0x0, 0x4, 0x4, 0x8000, 0x3, 0x8001, 0x6, 0x2}}, {0x8, 0x2, [0x9, 0x4]}}]}, @qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000091}, 0x4080)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r10, 0xc0189436, &(0x7f0000000140))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r10, 0x20, 0x1, 0x28, &(0x7f0000000300)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40)
close(r1)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r2, &(0x7f00000001c0)={0x40000008})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x1, 0x9, 0x2, 0x4, 0x3140}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0xe, 0xfffffffffffffffe, 0x2}, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040))

1.440688384s ago: executing program 0 (id=3199):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x1, 0x2, 0x4}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0x43, 0x7f, 0x1, 0x1, 0x3b}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffb800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

1.197282016s ago: executing program 1 (id=3200):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @private1, 0x80, 0x1}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
sendfile(r1, r2, 0x0, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x22048880)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
listen(r3, 0x3)
r6 = socket$inet(0x2, 0x80001, 0x84)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x50)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r6, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10)
listen(r6, 0x3)

1.135619102s ago: executing program 0 (id=3201):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x18)
unshare(0x8040480)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x50, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x2000c851}, 0x4040080)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'nq\x00', 0x1, 0x4, 0x72}, 0x2c)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44)
r6 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r6, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10)
socket(0x5, 0x2, 0xffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r9 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0xfb, 0x53, 0x3, 0x0, @loopback, @mcast2={0xff, 0x5}, 0x8, 0x700, 0x17, 0x3ff}})
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0x8, @mcast1}}, 0x0, 0x0, 0x1, 0x0, "43937c38e82a9ea587773be9b5bcc49f7d5ca866fc54c257a3f185903d52132920925a272c39961fb26bb75ac7890f12c865c332a289f8b287638053751ff532dc4a6d5761e624255d86a19bd90bad66"}, 0xd8)

944.616373ms ago: executing program 1 (id=3202):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair(0xa, 0x6, 0x7, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@initdev, <r4=>0x0}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x7800, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x6, 0x4, 0x0, @empty, @local}}}})

887.265978ms ago: executing program 3 (id=3203):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000055c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000005740)={0x0, 0x0, &(0x7f0000005700)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000f700", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250100000008000100010000000c0006000300000003000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r5)
getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r6, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="890900"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000000), &(0x7f0000000140)=r8}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r7}, 0x20)
sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c220aaaa08000104000000020000fe119078ac1414aae000000100006e2000089078f2c8e54fdc613007d77a25aacc66baa2d19de07c3e55"], 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r10, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

814.063027ms ago: executing program 0 (id=3204):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x3}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080)

713.011243ms ago: executing program 4 (id=3143):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000140001000000000000000000028824000400000000000000edcfeb488e63463d8554add1da6e00"/56], 0x38}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x29, 0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000780)=[@in6={0xa, 0x4e20, 0x3ff, @empty, 0x10001}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x2, @empty, 0x4}, @in6={0xa, 0x4e22, 0x7, @mcast2, 0xc00}, @in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1000}], 0xb0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x44}, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x100000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x41)
sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b0000000000d579f2921c437b4977b79daf97da50fd1f5e68c31f14c333e5e4dd37af3800c2c60a93f0a2a5e7cc186b8d803713c3f2b8c83b581e9724a3bd38d9cbed3ef8235db6ac99bf6af67b2008189f907d5b7e4da179ed96001797c039409c241c8b87e21471fcbec0c393aef377d6a1e04ce251"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23322648ac95f7"], 0x0)
r11 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8b04, &(0x7f0000000200)={'wlan1\x00'})
bind$inet(r11, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10)

529.103533ms ago: executing program 1 (id=3205):
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xdc2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x400}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000140)="a7", 0x1)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$FIOCLEX(r3, 0x5451) (async)
ioctl$FIOCLEX(r3, 0x5451)
write$tun(r3, &(0x7f0000001840)=ANY=[@ANYBLOB="0800430506000500000014000000400f"], 0x1200) (async)
write$tun(r3, &(0x7f0000001840)=ANY=[@ANYBLOB="0800430506000500000014000000400f"], 0x1200)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x615a}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r5, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xb, [@const={0x10, 0x0, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x4}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}, @struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x8, [{0xd, 0x0, 0x4}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x17, 0x0, 0x24, 0x2}]}, {0x0, [0x0, 0x5f, 0x30, 0x5f, 0x5f, 0x0, 0x0, 0x2e, 0x30]}}, &(0x7f0000000240)=""/205, 0x7b, 0xcd, 0x0, 0x200}, 0x28) (async)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xb, [@const={0x10, 0x0, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x4}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}, @struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x8, [{0xd, 0x0, 0x4}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x17, 0x0, 0x24, 0x2}]}, {0x0, [0x0, 0x5f, 0x30, 0x5f, 0x5f, 0x0, 0x0, 0x2e, 0x30]}}, &(0x7f0000000240)=""/205, 0x7b, 0xcd, 0x0, 0x200}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2, 0x0, r4, 0x6, '\x00', r7, r8, 0x5, 0x1, 0x3}, 0x50)

504.792983ms ago: executing program 0 (id=3206):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b3b20000000000000000000185100000010000ad0000009500007600000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
mmap(&(0x7f000009f000/0x3000)=nil, 0x3000, 0x1, 0x30, 0xffffffffffffffff, 0x6f322000)

479.384932ms ago: executing program 3 (id=3207):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES64], 0xfc}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07eeffff7e00000000000200000014000180060001000200000008000300ac1414"], 0x28}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007ffffffed7f700004c0012802700010069703667726500003c000280050008000e00000006000f00090000000500160001000000080015005d300a0006000e000100000006000e00000000fe0500160004000000040014"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448c1}, 0x4004080)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r6=>r0, 0x8, 0x1, 0x5})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x1da, 0x3, 0x10}, &(0x7f0000000180)=0x14)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, 0x0, &(0x7f0000000280))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x84, r9, 0x813, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x84}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r11, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x4c, r12, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048848}, 0x4000000)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r13, 0x1, 0x70bd2c, 0x0, {0x1, 0x0, 0x6000}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

264.204924ms ago: executing program 0 (id=3208):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x80000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5, 0x0, 0xffffffffffffffdf}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000280)=[{r3, 0x6149}], 0x1, 0x0, 0x0, 0x0)
epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0xfffff800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0xf)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000000040))
sendmsg$rds(r0, &(0x7f0000003b00)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/3, 0x3}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x6, &(0x7f0000003a00)=[@fadd={0x58, 0x114, 0x6, {{0x40, 0x6e62}, &(0x7f00000012c0)=0xfffffffffffffffd, &(0x7f0000001300)=0x523, 0xffffffffffff935d, 0x7, 0x10001, 0x80, 0x2, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x9}, {&(0x7f0000001340)=""/15, 0xf}, &(0x7f0000001600)=[{&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000001380)=""/114, 0x72}, {&(0x7f0000001400)=""/21, 0x15}, {&(0x7f0000001440)=""/21, 0x15}, {&(0x7f0000001480)=""/222, 0xde}, {&(0x7f0000001580)=""/90, 0x5a}], 0x6, 0x21, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x4}, {&(0x7f0000001680)=""/15, 0xf}, &(0x7f00000039c0)=[{&(0x7f0000003740)=""/211, 0xd3}, {&(0x7f0000003840)=""/183, 0xb7}, {&(0x7f00000016c0)=""/34, 0x22}, {&(0x7f0000003900)=""/177, 0xb1}], 0x4, 0x8, 0x1000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x100, 0x40d0}, 0x4000000)
r8 = socket$kcm(0x23, 0x5, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={@mcast2, @empty, @mcast1, 0x9, 0x5, 0x1, 0x0, 0xea43, 0x900003})
sendmsg$kcm(r8, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x80)

261.264821ms ago: executing program 1 (id=3209):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xe3}]}}]}, 0x44}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8005}, 0xc884)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4)

0s ago: executing program 3 (id=3210):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x128, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x32}}}}, [@key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c2fc4690b6f9202f9ea69a0845"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "3cdf85261822c6eb62"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "98472d837c41195b9c64d9a72d"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5c440b3489"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x360}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_MAC={0xfffffffffffffff6, 0x6, @random="4ef37c60fe81"}, @key_params, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]]}, 0x128}, 0x1, 0x0, 0x0, 0x40085}, 0x4000) (async)
sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)
recvfrom(r1, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x8, 0xfffffffffffffff9, 0x42b7, 0x8001, 0x34, 0x2, 0x7, 0xff}, &(0x7f0000000040)={0x6, 0x3, 0x4, 0xe, 0x5, 0x1, 0xa4c, 0x3}, &(0x7f0000000080)={0x8, 0x8001, 0x2, 0x81, 0x0, 0x6f, 0x1, 0x5}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) (async)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004200010a0000004ffbdbdf250a0000000800f400", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0xc6e9f000) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x0, 0x0, 0x148, 0xd8, 0x148, 0x178, 0x240, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0xfffffffe, @dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x0, 'ip6gretap0\x00', 'netpci0\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xe80, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) (async)
accept(r6, 0x0, 0x0)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0xffffe000) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r4, 0x2000)

kernel console output (not intermixed with test programs):

275.011733][T12190] virt_wifi0 speed is unknown, defaulting to 1000
[  275.046722][T12190] lo speed is unknown, defaulting to 1000
[  275.090404][T12194] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  275.214742][T12194] __nla_validate_parse: 11 callbacks suppressed
[  275.214763][T12194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1668'.
[  275.234400][T12202] netlink: 'syz.3.1667': attribute type 13 has an invalid length.
[  275.277736][T12201] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1668'.
[  275.464456][T12202] tipc: Resetting bearer <eth:syzkaller0>
[  275.520492][ T7299] lo speed is unknown, defaulting to 1000
[  275.526910][ T7299] syz2: Port: 1 Link DOWN
[  275.873894][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1674'.
[  275.932666][T12222] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1671'.
[  275.960138][T12223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1674'.
[  276.049565][T12230] xt_TPROXY: Can be used only with -p tcp or -p udp
[  276.369960][T12239] virt_wifi0 speed is unknown, defaulting to 1000
[  276.460287][T12248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1679'.
[  276.500895][T12239] lo speed is unknown, defaulting to 1000
[  276.704284][T12261] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1687'.
[  276.910847][T12271] xt_connbytes: Forcing CT accounting to be enabled
[  276.984970][T12269] virt_wifi0 speed is unknown, defaulting to 1000
[  277.019939][T12269] lo speed is unknown, defaulting to 1000
[  277.411202][T12292] netlink: 'syz.1.1696': attribute type 10 has an invalid length.
[  277.434391][T12278] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1693'.
[  277.476211][T12278] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1693'.
[  277.496876][T12278] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1693'.
[  277.512702][T12292] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.528630][T12292] team0: Port device bond0 added
[  277.964158][T12311] veth1_macvtap: left allmulticast mode
[  278.237110][T12329] netlink: 'syz.0.1706': attribute type 10 has an invalid length.
[  278.249593][T12330] netlink: 'syz.3.1707': attribute type 10 has an invalid length.
[  278.390176][T12339] xt_TPROXY: Can be used only with -p tcp or -p udp
[  278.431923][T12340] virt_wifi0 speed is unknown, defaulting to 1000
[  278.442772][T12340] lo speed is unknown, defaulting to 1000
[  278.733333][T12358] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001
[  278.932829][T12363] netlink: 'syz.2.1715': attribute type 96 has an invalid length.
[  279.187871][T12362] netlink: 'syz.4.1714': attribute type 11 has an invalid length.
[  279.286857][T12372] virt_wifi0 speed is unknown, defaulting to 1000
[  279.309353][T12372] lo speed is unknown, defaulting to 1000
[  279.951529][T12397] gretap2: entered promiscuous mode
[  280.233990][T12410] __nla_validate_parse: 7 callbacks suppressed
[  280.234013][T12410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'.
[  280.293128][T12405] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  280.340172][T12410] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1728'.
[  280.363139][T12417] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  280.589860][T12425] netlink: 'syz.1.1735': attribute type 2 has an invalid length.
[  280.635614][T12425] : entered promiscuous mode
[  280.688287][T12428] ip6gretap2: entered promiscuous mode
[  280.763621][T12434] netlink: 'syz.1.1735': attribute type 6 has an invalid length.
[  280.849276][T12438] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1738'.
[  280.962958][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1739'.
[  281.012456][T12442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1740'.
[  281.031028][T12442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1740'.
[  281.149993][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1742'.
[  281.197370][T12453] netlink: 'syz.1.1743': attribute type 1 has an invalid length.
[  281.205528][T12453] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1743'.
[  281.400525][T12467] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1749'.
[  281.412250][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'.
[  281.564114][T12470] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  281.682660][T12470] bond3 (unregistering): Released all slaves
[  281.840774][T12484] nbd: must specify a size in bytes for the device
[  281.987573][T12497] virt_wifi0 speed is unknown, defaulting to 1000
[  282.016485][T12497] lo speed is unknown, defaulting to 1000
[  282.218327][T12506] bond0: (slave bond_slave_0): Releasing backup interface
[  282.251456][T12506] bond0: (slave bond_slave_1): Releasing backup interface
[  282.270234][T12506] team0: Port device team_slave_0 removed
[  282.307534][T12506] team0: Port device team_slave_1 removed
[  282.320386][T12506] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.357148][T12506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  282.631036][T12522] IPVS: Error connecting to the multicast addr
[  282.903657][T12541] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  283.164087][T12557] xt_TPROXY: Can be used only with -p tcp or -p udp
[  283.550757][T12561] virt_wifi0 speed is unknown, defaulting to 1000
[  283.772452][T12592] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  283.804810][T12595] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000
[  284.666714][T12561] lo speed is unknown, defaulting to 1000
[  284.681348][T12589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.717040][T12560] tipc: Disabling bearer <eth:syzkaller0>
[  285.290991][T12633] virt_wifi0 speed is unknown, defaulting to 1000
[  285.314477][T12640] x_tables: duplicate underflow at hook 1
[  285.330355][T12633] lo speed is unknown, defaulting to 1000
[  285.733657][T12655] __nla_validate_parse: 14 callbacks suppressed
[  285.733679][T12655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1797'.
[  285.809657][T12655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1797'.
[  286.026770][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1802'.
[  286.079466][T12683] netlink: 'syz.1.1802': attribute type 23 has an invalid length.
[  286.216302][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1804'.
[  286.621998][T12707] virt_wifi0 speed is unknown, defaulting to 1000
[  286.633314][T12707] lo speed is unknown, defaulting to 1000
[  286.931452][T12724] netlink: 'syz.1.1814': attribute type 12 has an invalid length.
[  286.978557][T12727] netlink: 'syz.3.1816': attribute type 1 has an invalid length.
[  287.130930][T12721] virt_wifi0 speed is unknown, defaulting to 1000
[  287.158390][T12721] lo speed is unknown, defaulting to 1000
[  287.639957][T12760] netlink: 'syz.3.1826': attribute type 5 has an invalid length.
[  287.654328][T12760] netlink: 'syz.3.1826': attribute type 27 has an invalid length.
[  287.986809][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'.
[  288.115523][T12779] virt_wifi0 speed is unknown, defaulting to 1000
[  288.160525][T12779] lo speed is unknown, defaulting to 1000
[  288.358925][T12803] syzkaller0: tun_chr_ioctl cmd 1074025677
[  288.364952][T12803] syzkaller0: linktype set to 780
[  288.715437][T12817] erspan0: left allmulticast mode
[  288.724447][T12817] erspan0: left promiscuous mode
[  288.732769][T12817] bridge0: port 1(erspan0) entered disabled state
[  289.001465][T12838] IPVS: Error connecting to the multicast addr
[  289.009757][T12839] netlink: 'syz.2.1845': attribute type 1 has an invalid length.
[  289.018464][T12839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  289.478292][ T7312] IPVS: starting estimator thread 0...
[  289.513484][T12854] FAULT_INJECTION: forcing a failure.
[  289.513484][T12854] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.531102][T12854] CPU: 1 UID: 0 PID: 12854 Comm: syz.3.1848 Not tainted syzkaller #0 PREEMPT(full) 
[  289.531134][T12854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  289.531148][T12854] Call Trace:
[  289.531157][T12854]  <TASK>
[  289.531166][T12854]  dump_stack_lvl+0xe8/0x150
[  289.531200][T12854]  should_fail_ex+0x414/0x560
[  289.531242][T12854]  _copy_from_user+0x2d/0xb0
[  289.531280][T12854]  ___sys_sendmsg+0x158/0x2a0
[  289.531313][T12854]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.531382][T12854]  ? __fget_files+0x2a/0x420
[  289.531410][T12854]  ? __fget_files+0x3a0/0x420
[  289.531450][T12854]  __x64_sys_sendmsg+0x19b/0x260
[  289.531482][T12854]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.531521][T12854]  ? rcu_is_watching+0x15/0xb0
[  289.531563][T12854]  do_syscall_64+0xec/0xf80
[  289.531591][T12854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.531611][T12854]  ? trace_irq_disable+0x37/0x100
[  289.531640][T12854]  ? clear_bhb_loop+0x60/0xb0
[  289.531667][T12854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.531689][T12854] RIP: 0033:0x7fb5d778f749
[  289.531708][T12854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.531728][T12854] RSP: 002b:00007fb5d86ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.531752][T12854] RAX: ffffffffffffffda RBX: 00007fb5d79e6090 RCX: 00007fb5d778f749
[  289.531768][T12854] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007
[  289.531782][T12854] RBP: 00007fb5d86ab090 R08: 0000000000000000 R09: 0000000000000000
[  289.531795][T12854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.531808][T12854] R13: 00007fb5d79e6128 R14: 00007fb5d79e6090 R15: 00007ffd2177d258
[  289.531844][T12854]  </TASK>
[  289.570612][T12855] IPVS: using max 24 ests per chain, 57600 per kthread
[  289.749619][T12857] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1849'.
[  289.777165][T12857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  290.160354][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1855'.
[  290.365110][T12893] netlink: 'syz.3.1858': attribute type 10 has an invalid length.
[  290.374156][T12893] netlink: 'syz.3.1858': attribute type 10 has an invalid length.
[  290.383092][T12893] netlink: 'syz.3.1858': attribute type 10 has an invalid length.
[  290.393766][T12893] netlink: 'syz.3.1858': attribute type 10 has an invalid length.
[  290.483973][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'.
[  290.569682][T12905] xt_TPROXY: Can be used only with -p tcp or -p udp
[  290.649258][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'.
[  290.769184][T12909] xt_l2tp: missing protocol rule (udp|l2tpip)
[  290.868354][T12912] bpq0: left promiscuous mode
[  290.894655][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1861'.
[  290.947561][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'.
[  290.997049][T12919] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1864'.
[  291.147758][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1866'.
[  291.433676][T12945] vlan3: entered promiscuous mode
[  291.466121][T12945] ip6gretap0: entered promiscuous mode
[  291.584825][T12954] validate_nla: 30 callbacks suppressed
[  291.584849][T12954] netlink: 'syz.3.1869': attribute type 1 has an invalid length.
[  291.660922][T12954] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1869'.
[  291.932510][T12941] virt_wifi0 speed is unknown, defaulting to 1000
[  291.985213][T12941] lo speed is unknown, defaulting to 1000
[  292.032019][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'.
[  292.407020][T12972] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  292.819554][T13002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1880'.
[  292.929204][T12998] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.965069][T13009] IPVS: set_ctl: invalid protocol: 90 0.0.0.0:20000
[  292.973792][T12998] 8021q: adding VLAN 0 to HW filter on device team0
[  292.993638][T12998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.013655][T13012] ieee802154 phy0 wpan0: encryption failed: -22
[  293.093871][T13006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.187076][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  293.199012][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  293.400946][ T6595] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  293.661511][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'.
[  293.670588][T13043] openvswitch: netlink: Flow actions attr not present in new flow.
[  293.694369][T13042] netlink: 'syz.2.1891': attribute type 3 has an invalid length.
[  293.703274][T13042] netlink: 'syz.2.1891': attribute type 1 has an invalid length.
[  293.712489][T13042] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1891'.
[  293.719299][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'.
[  293.859327][T13046] xt_TCPMSS: Only works on TCP SYN packets
[  293.896447][ T6595] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.057231][ T7299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.127429][T13063] netlink: 'syz.0.1900': attribute type 4 has an invalid length.
[  294.136156][ T7299] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.156323][T13063] netlink: 'syz.0.1900': attribute type 4 has an invalid length.
[  294.318766][T13072] netlink: 'syz.0.1902': attribute type 11 has an invalid length.
[  294.380326][T13072] virt_wifi0 speed is unknown, defaulting to 1000
[  294.400596][T13072] lo speed is unknown, defaulting to 1000
[  294.457180][T13075] virt_wifi0 speed is unknown, defaulting to 1000
[  294.463982][ T3481] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.483484][ T3481] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.503966][T13075] lo speed is unknown, defaulting to 1000
[  294.746630][ T7312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  294.823082][T13086] ieee802154 phy0 wpan0: encryption failed: -22
[  294.942943][   T34] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  295.285004][T13101] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  295.327369][T13100] tcpmss_tg4_check: 55 callbacks suppressed
[  295.327393][T13100] xt_TCPMSS: Only works on TCP SYN packets
[  295.455003][T13108] .70·: renamed from hsr0
[  295.615402][T13108] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  295.650022][T13108] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  295.684469][T13108] .70·: entered allmulticast mode
[  295.699212][T13108] hsr_slave_0: entered allmulticast mode
[  295.705046][T13108] hsr_slave_1: entered allmulticast mode
[  295.714274][T13108] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check.
[  295.939884][T13125] xt_hashlimit: size too large, truncated to 1048576
[  296.136396][ T5841] Bluetooth: hci4: command 0x0406 tx timeout
[  296.941000][T13137] netlink: 'syz.1.1919': attribute type 39 has an invalid length.
[  297.873036][T13147] veth8: entered allmulticast mode
[  297.907171][T13141] virt_wifi0 speed is unknown, defaulting to 1000
[  297.924973][T13141] lo speed is unknown, defaulting to 1000
[  297.941833][T13151] ieee802154 phy0 wpan0: encryption failed: -22
[  298.263221][T13166] __nla_validate_parse: 12 callbacks suppressed
[  298.263245][T13166] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1926'.
[  298.289141][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1926'.
[  298.300053][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1927'.
[  298.325086][T13167] veth0: entered promiscuous mode
[  298.379679][T13165] veth0 (unregistering): left promiscuous mode
[  298.615992][    C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  298.616014][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  298.735386][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1931'.
[  298.923912][T13190] "syz.1.1934" (13190) uses obsolete ecb(arc4) skcipher
[  298.936024][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  299.138110][T13201] virt_wifi0 speed is unknown, defaulting to 1000
[  299.168115][T13201] lo speed is unknown, defaulting to 1000
[  299.470042][T13210] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1938'.
[  299.497959][T13213] xt_policy: neither incoming nor outgoing policy selected
[  299.526820][T13190] virt_wifi0 speed is unknown, defaulting to 1000
[  299.584358][T13190] lo speed is unknown, defaulting to 1000
[  299.627672][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1940'.
[  299.720115][T13215] 8021q: adding VLAN 0 to HW filter on device bond6
[  299.863439][   T30] audit: type=1800 audit(1768436613.279:6): pid=13223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1943" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2154 res=0 errno=0
[  299.931398][T13226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1942'.
[  300.160423][T13228] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1943'.
[  300.187894][T13228] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1943'.
[  300.284637][T13236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1946'.
[  300.447354][T13243] syzkaller0: entered promiscuous mode
[  300.452887][T13243] syzkaller0: entered allmulticast mode
[  300.529602][T13252] ieee802154 phy0 wpan0: encryption failed: -22
[  300.560602][T13249] bridge3: entered promiscuous mode
[  300.587173][T13249] bridge3: entered allmulticast mode
[  302.552149][T13266] virt_wifi0 speed is unknown, defaulting to 1000
[  302.581179][T13266] lo speed is unknown, defaulting to 1000
[  303.867916][T13333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.999376][T13334] macvlan2: entered promiscuous mode
[  304.004749][T13334] bond0: entered promiscuous mode
[  304.026160][T13334] macvlan2: entered allmulticast mode
[  304.052675][T13334] bond0: entered allmulticast mode
[  304.063477][T13334] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  304.088592][T13334] bond0: left allmulticast mode
[  304.106544][T13334] bond0: left promiscuous mode
[  304.249582][T13332] tipc: Disabling bearer <eth:syzkaller0>
[  304.658539][T13338] netlink: 'syz.4.1974': attribute type 2 has an invalid length.
[  304.683907][T13338] __nla_validate_parse: 5 callbacks suppressed
[  304.683926][T13338] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1974'.
[  304.759629][T13338] virt_wifi0 speed is unknown, defaulting to 1000
[  304.768162][T13338] lo speed is unknown, defaulting to 1000
[  304.893268][T13343] netlink: 'syz.2.1973': attribute type 2 has an invalid length.
[  304.984822][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1977'.
[  305.016529][T13352] FAULT_INJECTION: forcing a failure.
[  305.016529][T13352] name failslab, interval 1, probability 0, space 0, times 0
[  305.088601][T13352] CPU: 0 UID: 0 PID: 13352 Comm: syz.0.1978 Not tainted syzkaller #0 PREEMPT(full) 
[  305.088634][T13352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  305.088649][T13352] Call Trace:
[  305.088658][T13352]  <TASK>
[  305.088667][T13352]  dump_stack_lvl+0xe8/0x150
[  305.088703][T13352]  should_fail_ex+0x414/0x560
[  305.088745][T13352]  should_failslab+0xa8/0x100
[  305.088775][T13352]  __kmalloc_noprof+0xdf/0x800
[  305.088797][T13352]  ? kfree+0x4d/0x660
[  305.088826][T13352]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  305.088864][T13352]  tomoyo_realpath_from_path+0xe3/0x5d0
[  305.088897][T13352]  ? tomoyo_domain+0xd8/0x130
[  305.088934][T13352]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  305.088959][T13352]  tomoyo_path_number_perm+0x1e8/0x5a0
[  305.088988][T13352]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  305.089012][T13352]  ? __lock_acquire+0x6b6/0x2cf0
[  305.089052][T13352]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  305.089104][T13352]  ? __fget_files+0x2a/0x420
[  305.089136][T13352]  ? __fget_files+0x2a/0x420
[  305.089163][T13352]  ? __fget_files+0x3a0/0x420
[  305.089189][T13352]  ? __fget_files+0x2a/0x420
[  305.089222][T13352]  security_file_ioctl+0xcb/0x2d0
[  305.089248][T13352]  __se_sys_ioctl+0x47/0x170
[  305.089286][T13352]  do_syscall_64+0xec/0xf80
[  305.089319][T13352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.089341][T13352]  ? trace_irq_disable+0x37/0x100
[  305.089369][T13352]  ? clear_bhb_loop+0x60/0xb0
[  305.089395][T13352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.089416][T13352] RIP: 0033:0x7f656698f749
[  305.089435][T13352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.089454][T13352] RSP: 002b:00007f656785a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  305.089477][T13352] RAX: ffffffffffffffda RBX: 00007f6566be5fa0 RCX: 00007f656698f749
[  305.089493][T13352] RDX: 00002000000002c0 RSI: 0000000000008931 RDI: 0000000000000005
[  305.089506][T13352] RBP: 00007f656785a090 R08: 0000000000000000 R09: 0000000000000000
[  305.089519][T13352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.089532][T13352] R13: 00007f6566be6038 R14: 00007f6566be5fa0 R15: 00007ffdaa6eb288
[  305.089563][T13352]  </TASK>
[  305.089572][T13352] ERROR: Out of memory at tomoyo_realpath_from_path.
[  305.389875][T13357] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1980'.
[  305.505452][T13363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'.
[  305.561208][T13366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1984'.
[  305.606596][T13366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1984'.
[  305.620175][T13372] xt_TPROXY: Can be used only with -p tcp or -p udp
[  305.700399][T13366] xt_CT: You must specify a L4 protocol and not use inversions on it
[  306.009034][T13387] netlink: 'syz.2.1990': attribute type 21 has an invalid length.
[  306.052273][T13387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1990'.
[  306.345110][T13403] FAULT_INJECTION: forcing a failure.
[  306.345110][T13403] name failslab, interval 1, probability 0, space 0, times 0
[  306.361956][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'.
[  306.371435][T13403] CPU: 1 UID: 0 PID: 13403 Comm: syz.0.1994 Not tainted syzkaller #0 PREEMPT(full) 
[  306.371466][T13403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  306.371480][T13403] Call Trace:
[  306.371489][T13403]  <TASK>
[  306.371498][T13403]  dump_stack_lvl+0xe8/0x150
[  306.371533][T13403]  should_fail_ex+0x414/0x560
[  306.371575][T13403]  should_failslab+0xa8/0x100
[  306.371605][T13403]  __kmalloc_noprof+0xdf/0x800
[  306.371627][T13403]  ? tomoyo_encode+0x28b/0x550
[  306.371664][T13403]  tomoyo_encode+0x28b/0x550
[  306.371700][T13403]  tomoyo_realpath_from_path+0x58d/0x5d0
[  306.371733][T13403]  ? tomoyo_domain+0xd8/0x130
[  306.371771][T13403]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  306.371796][T13403]  tomoyo_path_number_perm+0x1e8/0x5a0
[  306.371824][T13403]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  306.371848][T13403]  ? __lock_acquire+0x6b6/0x2cf0
[  306.371887][T13403]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  306.371939][T13403]  ? __fget_files+0x2a/0x420
[  306.371970][T13403]  ? __fget_files+0x2a/0x420
[  306.372006][T13403]  ? __fget_files+0x3a0/0x420
[  306.372032][T13403]  ? __fget_files+0x2a/0x420
[  306.372064][T13403]  security_file_ioctl+0xcb/0x2d0
[  306.372090][T13403]  __se_sys_ioctl+0x47/0x170
[  306.372128][T13403]  do_syscall_64+0xec/0xf80
[  306.372155][T13403]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.372177][T13403]  ? trace_irq_disable+0x37/0x100
[  306.372205][T13403]  ? clear_bhb_loop+0x60/0xb0
[  306.372232][T13403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.372254][T13403] RIP: 0033:0x7f656698f749
[  306.372274][T13403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.372293][T13403] RSP: 002b:00007f656785a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  306.372317][T13403] RAX: ffffffffffffffda RBX: 00007f6566be5fa0 RCX: 00007f656698f749
[  306.372334][T13403] RDX: 00002000000002c0 RSI: 0000000000008931 RDI: 0000000000000005
[  306.372348][T13403] RBP: 00007f656785a090 R08: 0000000000000000 R09: 0000000000000000
[  306.372362][T13403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.372375][T13403] R13: 00007f6566be6038 R14: 00007f6566be5fa0 R15: 00007ffdaa6eb288
[  306.372411][T13403]  </TASK>
[  306.372435][T13403] ERROR: Out of memory at tomoyo_realpath_from_path.
[  306.915120][T13415] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  306.938736][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'.
[  307.021282][T13426] xt_TPROXY: Can be used only with -p tcp or -p udp
[  307.165637][T13433] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2003'.
[  307.418982][T13448] FAULT_INJECTION: forcing a failure.
[  307.418982][T13448] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  307.468048][T13446] bond4 (unregistering): Released all slaves
[  307.497857][T13443] syzkaller1: entered promiscuous mode
[  307.503582][T13443] syzkaller1: entered allmulticast mode
[  307.529881][T13448] CPU: 1 UID: 0 PID: 13448 Comm: syz.0.2007 Not tainted syzkaller #0 PREEMPT(full) 
[  307.529938][T13448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  307.529951][T13448] Call Trace:
[  307.529960][T13448]  <TASK>
[  307.529970][T13448]  dump_stack_lvl+0xe8/0x150
[  307.530005][T13448]  should_fail_ex+0x414/0x560
[  307.530047][T13448]  _copy_from_user+0x2d/0xb0
[  307.530076][T13448]  sock_do_ioctl+0x182/0x300
[  307.530113][T13448]  ? __pfx_sock_do_ioctl+0x10/0x10
[  307.530143][T13448]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  307.530192][T13448]  sock_ioctl+0x576/0x790
[  307.530227][T13448]  ? __pfx_sock_ioctl+0x10/0x10
[  307.530261][T13448]  ? __fget_files+0x2a/0x420
[  307.530287][T13448]  ? __fget_files+0x3a0/0x420
[  307.530313][T13448]  ? __fget_files+0x2a/0x420
[  307.530345][T13448]  ? bpf_lsm_file_ioctl+0x9/0x20
[  307.530370][T13448]  ? __pfx_sock_ioctl+0x10/0x10
[  307.530402][T13448]  __se_sys_ioctl+0xfc/0x170
[  307.530439][T13448]  do_syscall_64+0xec/0xf80
[  307.530466][T13448]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.530487][T13448]  ? trace_irq_disable+0x37/0x100
[  307.530515][T13448]  ? clear_bhb_loop+0x60/0xb0
[  307.530542][T13448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.530563][T13448] RIP: 0033:0x7f656698f749
[  307.530583][T13448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.530603][T13448] RSP: 002b:00007f656785a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  307.530627][T13448] RAX: ffffffffffffffda RBX: 00007f6566be5fa0 RCX: 00007f656698f749
[  307.530643][T13448] RDX: 00002000000002c0 RSI: 0000000000008931 RDI: 0000000000000005
[  307.530657][T13448] RBP: 00007f656785a090 R08: 0000000000000000 R09: 0000000000000000
[  307.530671][T13448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.530684][T13448] R13: 00007f6566be6038 R14: 00007f6566be5fa0 R15: 00007ffdaa6eb288
[  307.530722][T13448]  </TASK>
[  308.012033][T13462] virt_wifi0 speed is unknown, defaulting to 1000
[  308.062418][T13462] lo speed is unknown, defaulting to 1000
[  308.138384][T13467] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  308.257175][T13478] xt_TPROXY: Can be used only with -p tcp or -p udp
[  308.661873][T13488] 8021q: adding VLAN 0 to HW filter on device bond4
[  308.767080][T13498] netlink: 'syz.1.2021': attribute type 10 has an invalid length.
[  308.907324][T13493] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  308.968720][T13498] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  309.022174][T13494] bond4: (slave ip6gretap3): making interface the new active one
[  309.045452][T13494] bond4: (slave ip6gretap3): Enslaving as an active interface with an up link
[  309.567797][T13543] netlink: 'syz.4.2035': attribute type 10 has an invalid length.
[  309.612100][T13543] team0: Port device geneve0 added
[  309.628881][   T34] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.656214][   T34] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.683636][   T34] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.712692][   T34] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.885258][T13550] No such timeout policy "syz1"
[  309.991223][T13554] pim6reg: entered allmulticast mode
[  310.032369][T13554] tipc: Enabled bearer <ib:ipvlan1>, priority 10
[  310.263069][T13561] __nla_validate_parse: 10 callbacks suppressed
[  310.263090][T13561] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2042'.
[  310.339886][T13561] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2042'.
[  310.746344][T13551] pim6reg: left allmulticast mode
[  311.036619][T13583] netlink: 'syz.0.2044': attribute type 8 has an invalid length.
[  311.156252][ T5908] tipc: Node number set to 3162546176
[  311.255230][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'.
[  311.324590][T13595] xt_TPROXY: Can be used only with -p tcp or -p udp
[  311.602763][T13601] virt_wifi0 speed is unknown, defaulting to 1000
[  311.629325][T13605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2049'.
[  311.640345][T13601] lo speed is unknown, defaulting to 1000
[  312.442912][T13631] IPVS: Scheduler module ip_vs_sip not found
[  313.382476][T13679] virt_wifi0 speed is unknown, defaulting to 1000
[  313.402552][T13681] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2073'.
[  313.417274][T13679] lo speed is unknown, defaulting to 1000
[  313.424776][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2073'.
[  314.239945][T13711] siw: device registration error -23
[  314.514855][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'.
[  314.580841][T13723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2082'.
[  314.615645][T13723] xt_TPROXY: Can be used only with -p tcp or -p udp
[  316.679105][T13704] veth9: entered promiscuous mode
[  316.730277][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2083'.
[  317.918982][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'.
[  317.941083][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'.
[  317.958322][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'.
[  317.967842][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'.
[  317.979279][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'.
[  317.992729][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2087'.
[  318.001609][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'.
[  318.001811][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'.
[  318.001924][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'.
[  318.125713][T13758] virt_wifi0 speed is unknown, defaulting to 1000
[  318.777914][T13773] vlan2: left promiscuous mode
[  318.791720][T13773] hsr_slave_1: left promiscuous mode
[  318.822220][T13773] geneve2: left promiscuous mode
[  318.845657][T13773] gretap2: left promiscuous mode
[  318.872657][T13773] ip6gretap2: left promiscuous mode
[  318.889659][T13773] bridge3: left promiscuous mode
[  319.091123][T13788] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  319.117541][ T1004] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.166421][ T1004] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.214788][ T1004] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.264444][ T1004] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.610111][T13815] xt_TPROXY: Can be used only with -p tcp or -p udp
[  320.277342][T13837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  320.656335][T13858] netlink: 'syz.3.2113': attribute type 1 has an invalid length.
[  320.802799][T13863] xt_TPROXY: Can be used only with -p tcp or -p udp
[  321.022328][T13869] virt_wifi0 speed is unknown, defaulting to 1000
[  321.488599][T13893] netlink: 'syz.4.2121': attribute type 21 has an invalid length.
[  322.254991][T13942] __nla_validate_parse: 35 callbacks suppressed
[  322.255014][T13942] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2128'.
[  322.271267][T13938] netlink: 'syz.2.2130': attribute type 1 has an invalid length.
[  322.305485][T13942] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2128'.
[  322.444285][T13938] 8021q: adding VLAN 0 to HW filter on device bond5
[  322.472359][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  322.508166][T13942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  322.760973][T13963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2134'.
[  322.900988][T13963] vlan3: entered allmulticast mode
[  322.914432][T13963] bridge0: entered allmulticast mode
[  322.938613][T13963] bridge5: port 1(vlan3) entered blocking state
[  322.958315][T13963] bridge5: port 1(vlan3) entered disabled state
[  322.971112][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2138'.
[  322.985602][T13963] vlan3: entered promiscuous mode
[  323.040673][T13976] macvtap1: entered promiscuous mode
[  323.056401][T13976] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  323.097606][T13963] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  323.115930][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2140'.
[  323.341719][T13994] netlink: 'syz.0.2144': attribute type 2 has an invalid length.
[  323.356582][T13994] netlink: 'syz.0.2144': attribute type 9 has an invalid length.
[  323.377573][T13996] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2145'.
[  323.397817][T13994] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2144'.
[  323.408374][T13998] netlink: 'syz.0.2144': attribute type 11 has an invalid length.
[  323.422546][T13998] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.2144'.
[  323.679459][T14011] virt_wifi0 speed is unknown, defaulting to 1000
[  323.770396][T14020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2152'.
[  324.018620][T14029] nbd0: detected capacity change from 0 to 63
[  324.031289][ T5150] block nbd0: Receive control failed (result -32)
[  324.200443][T14042] syzkaller0: left promiscuous mode
[  324.225044][T14042] syzkaller0: left allmulticast mode
[  324.307385][T14051] pim6reg: entered allmulticast mode
[  324.313431][T14042] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  325.068710][T14091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2168'.
[  325.082238][T14089] openvswitch: netlink: Flow actions attr not present in new flow.
[  325.107405][T14089] netlink: 'syz.3.2169': attribute type 21 has an invalid length.
[  325.944369][T14151] netlink: 'syz.4.2185': attribute type 11 has an invalid length.
[  325.976333][T14149] netlink: 'syz.2.2184': attribute type 3 has an invalid length.
[  326.494244][T14180] netlink: 'syz.1.2194': attribute type 3 has an invalid length.
[  326.834891][T14181] virt_wifi0 speed is unknown, defaulting to 1000
[  327.545196][T14215] sctp: [Deprecated]: syz.0.2204 (pid 14215) Use of struct sctp_assoc_value in delayed_ack socket option.
[  327.545196][T14215] Use struct sctp_sack_info instead
[  327.791858][T14228] __nla_validate_parse: 9 callbacks suppressed
[  327.791878][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2210'.
[  327.881084][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2210'.
[  327.954382][T14233] xt_TPROXY: Can be used only with -p tcp or -p udp
[  328.452020][T14238] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.2211:14238
[  329.133668][T14262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2218'.
[  329.222232][T14264] virt_wifi0 speed is unknown, defaulting to 1000
[  329.458869][T14277] netlink: 'syz.0.2223': attribute type 1 has an invalid length.
[  329.484337][T14277] sctp: [Deprecated]: syz.0.2223 (pid 14277) Use of struct sctp_assoc_value in delayed_ack socket option.
[  329.484337][T14277] Use struct sctp_sack_info instead
[  329.498736][T14279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2222'.
[  329.512714][T14279] netlink: 'syz.2.2222': attribute type 1 has an invalid length.
[  329.523242][T14279] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2222'.
[  329.574696][T14285] sctp: [Deprecated]: syz.0.2223 (pid 14285) Use of struct sctp_assoc_value in delayed_ack socket option.
[  329.574696][T14285] Use struct sctp_sack_info instead
[  329.953909][T14304] virt_wifi0 speed is unknown, defaulting to 1000
[  330.016686][T14309] virt_wifi0 speed is unknown, defaulting to 1000
[  330.334238][T14316] bridge0: failed insert local address into bridge forwarding table
[  330.595874][T14327] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  330.609224][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2234'.
[  330.690165][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2234'.
[  330.776962][T14341] xt_TPROXY: Can be used only with -p tcp or -p udp
[  331.038329][T14344] syzkaller0: entered promiscuous mode
[  331.043878][T14344] syzkaller0: entered allmulticast mode
[  331.080663][T14346] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2236'.
[  331.403197][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2244'.
[  331.439844][T14359] virt_wifi0 speed is unknown, defaulting to 1000
[  331.499234][T14369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2245'.
[  331.648667][T14371] virt_wifi0 speed is unknown, defaulting to 1000
[  331.788131][T14380] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  332.032232][T14392] virt_wifi0 speed is unknown, defaulting to 1000
[  332.142974][T14402] virt_wifi0 speed is unknown, defaulting to 1000
[  333.178877][T14425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.218034][T14425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.268656][T14430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.417459][T14437] netlink: 'syz.2.2260': attribute type 2 has an invalid length.
[  333.434068][T14437] vxcan0: entered allmulticast mode
[  334.012434][T14455] __nla_validate_parse: 2 callbacks suppressed
[  334.012456][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2267'.
[  334.426848][T14481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2273'.
[  334.459748][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2273'.
[  334.702389][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2277'.
[  334.746972][T14494] netlink: 'syz.3.2274': attribute type 11 has an invalid length.
[  334.756747][T14494] netlink: 'syz.3.2274': attribute type 11 has an invalid length.
[  334.770525][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2277'.
[  334.781728][T14494] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2274'.
[  334.997201][T14500] netlink: 'syz.1.2280': attribute type 12 has an invalid length.
[  335.555135][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'.
[  335.633652][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'.
[  335.712415][T14528] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  335.762620][T14528] bond5 (unregistering): Released all slaves
[  335.775557][T14539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2291'.
[  335.796137][T14539] unsupported nlmsg_type 40
[  336.193640][T14560] sctp: [Deprecated]: syz.2.2297 (pid 14560) Use of int in max_burst socket option.
[  336.193640][T14560] Use struct sctp_assoc_value instead
[  336.320000][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2299'.
[  336.526521][T14584] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  336.618594][T14588] nbd1: detected capacity change from 0 to 127
[  336.700733][T14597] xt_TPROXY: Can be used only with -p tcp or -p udp
[  337.196172][T14624] ieee802154 phy0 wpan0: encryption failed: -22
[  337.301118][   T52] block nbd1: Receive control failed (result -32)
[  337.778582][T14653] xt_TPROXY: Can be used only with -p tcp or -p udp
[  338.376507][T14677] netlink: 'syz.2.2325': attribute type 10 has an invalid length.
[  338.391599][T14677] team0: Failed to send options change via netlink (err -105)
[  338.399691][T14677] team0: Port device v added
[  338.418216][T14677] netlink: 'syz.2.2325': attribute type 10 has an invalid length.
[  338.466306][T14677] team0: Failed to send options change via netlink (err -105)
[  338.486873][T14677] team0: Failed to send port change of device v via netlink (err -105)
[  338.496765][T14677] team0: Port device v removed
[  338.510589][T14677] bond0: (slave v): Enslaving as an active interface with an up link
[  339.129212][T14700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.159491][T14706] __nla_validate_parse: 7 callbacks suppressed
[  339.159511][T14706] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2333'.
[  339.238336][T14714] ieee802154 phy0 wpan0: encryption failed: -22
[  339.309526][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2335'.
[  339.324650][T14700] wg0: entered promiscuous mode
[  339.330196][T14700] wg0: entered allmulticast mode
[  339.373995][T14719] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2335'.
[  339.394354][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2335'.
[  339.424909][T14700] tipc: Disabling bearer <eth:syzkaller0>
[  339.538911][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'.
[  340.000787][T14734] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  340.424163][T14752] sctp: [Deprecated]: syz.0.2347 (pid 14752) Use of struct sctp_assoc_value in delayed_ack socket option.
[  340.424163][T14752] Use struct sctp_sack_info instead
[  340.455988][T14754] netlink: 'syz.1.2348': attribute type 2 has an invalid length.
[  340.463826][T14752] sctp: [Deprecated]: syz.0.2347 (pid 14752) Use of struct sctp_assoc_value in delayed_ack socket option.
[  340.463826][T14752] Use struct sctp_sack_info instead
[  340.519357][T14758] openvswitch: netlink: Duplicate key (type 21).
[  340.885659][T14778] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2353'.
[  340.948177][T14778] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2353'.
[  340.972515][T14785] ieee802154 phy0 wpan0: encryption failed: -22
[  341.122408][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'.
[  341.208588][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'.
[  341.233933][T14801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2357'.
[  342.031161][T14833] syzkaller0: entered promiscuous mode
[  342.049742][T14833] syzkaller0: entered allmulticast mode
[  342.141384][T14839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.167994][T14839] syzkaller0: entered promiscuous mode
[  342.189560][T14839] syzkaller0: entered allmulticast mode
[  342.262333][T14839] tipc: Resetting bearer <eth:syzkaller0>
[  342.271558][T14838] tipc: Resetting bearer <eth:syzkaller0>
[  342.303748][T14838] tipc: Disabling bearer <eth:syzkaller0>
[  342.623415][T14861] tipc: Resetting bearer <eth:syzkaller0>
[  342.738666][T14864] ieee802154 phy0 wpan0: encryption failed: -22
[  343.218466][T14879] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  343.284629][T14879] bond7 (unregistering): Released all slaves
[  343.633721][T14925] netlink: 'syz.4.2387': attribute type 1 has an invalid length.
[  344.143793][T14948] netlink: 'syz.2.2394': attribute type 10 has an invalid length.
[  344.166715][T14948] __nla_validate_parse: 9 callbacks suppressed
[  344.166737][T14948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2394'.
[  344.364818][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'.
[  344.566841][T14962] ieee802154 phy0 wpan0: encryption failed: -22
[  344.851927][T14975] IPVS: Error connecting to the multicast addr
[  344.875105][T14975] IPVS: Error connecting to the multicast addr
[  345.226905][T14989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2405'.
[  345.460842][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'.
[  345.483351][T15000] netlink: 'syz.0.2407': attribute type 1 has an invalid length.
[  345.553177][T15006] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10
[  345.622558][T15000] bond5: entered promiscuous mode
[  345.636997][T15000] 8021q: adding VLAN 0 to HW filter on device bond5
[  345.718619][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2407'.
[  345.767007][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2407'.
[  346.150246][T15033] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2415'.
[  346.161004][T15032] bridge0: port 1(macvtap2) entered blocking state
[  346.167872][T15032] bridge0: port 1(macvtap2) entered disabled state
[  346.174741][T15032] macvtap2: entered allmulticast mode
[  346.181686][T15032] bridge0: entered allmulticast mode
[  346.190099][T15032] macvtap2: left allmulticast mode
[  346.195428][T15032] bridge0: left allmulticast mode
[  346.420214][T15043] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  346.431341][T15043] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20001
[  346.520114][T15049] netlink: 'syz.1.2419': attribute type 2 has an invalid length.
[  346.574027][T15049] netlink: 'syz.1.2419': attribute type 6 has an invalid length.
[  347.044125][T15081] netlink: 'syz.0.2425': attribute type 10 has an invalid length.
[  347.072061][T15081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2425'.
[  347.086975][T15081] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  347.107693][T15072] netlink: 'syz.0.2425': attribute type 1 has an invalid length.
[  347.436273][T15088] delete_channel: no stack
[  347.503713][T15098] netlink: 'syz.2.2430': attribute type 13 has an invalid length.
[  347.513413][T15098] netlink: 'syz.2.2430': attribute type 17 has an invalid length.
[  347.599551][T15098] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.777497][T15098] 8021q: adding VLAN 0 to HW filter on device team0
[  347.797907][T15098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  348.131481][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2435'.
[  348.220042][T15097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  348.400060][T15127] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  348.834582][T15149] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2439'.
[  348.965230][T15160] xt_connbytes: Forcing CT accounting to be enabled
[  349.017004][T15163] netlink: 'syz.2.2442': attribute type 1 has an invalid length.
[  349.051690][T15149] bond0: entered promiscuous mode
[  349.069314][T15149] bond_slave_0: entered promiscuous mode
[  349.091285][T15149] bond_slave_1: entered promiscuous mode
[  349.113744][T15149] batadv0: entered promiscuous mode
[  349.150136][T15149] debugfs: 'hsr1' already exists in 'hsr'
[  349.171242][T15149] Cannot create hsr debugfs directory
[  349.179127][T15149] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  349.189989][T15149] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  349.224102][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'.
[  349.244865][T15149] 8021q: adding VLAN 0 to HW filter on device hsr1
[  349.362569][T15167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2443'.
[  349.400684][T15149] bond0: left promiscuous mode
[  349.418977][T15149] bond_slave_0: left promiscuous mode
[  349.425181][T15149] bond_slave_1: left promiscuous mode
[  349.436424][T15149] batadv0: left promiscuous mode
[  349.571770][T15160] bond6: (slave bridge5): making interface the new active one
[  349.589946][T15160] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  349.984743][T15194] ieee802154 phy0 wpan0: encryption failed: -22
[  350.105086][T15201] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2455'.
[  350.165031][T15201] ip6gretap3: entered allmulticast mode
[  350.669831][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2461'.
[  350.682673][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2461'.
[  350.760297][T15226] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2462'.
[  350.786471][T15226] openvswitch: netlink: Flow key attr not present in new flow.
[  351.125390][T15240] netlink: 'syz.3.2467': attribute type 1 has an invalid length.
[  351.262401][T15240] bond7: entered promiscuous mode
[  351.274978][T15240] 8021q: adding VLAN 0 to HW filter on device bond7
[  351.495078][T15267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2473'.
[  351.570022][T15246] bond7: (slave bridge6): making interface the new active one
[  351.578193][T15246] bridge6: entered promiscuous mode
[  351.584874][T15246] bond7: (slave bridge6): Enslaving as an active interface with an up link
[  351.595176][T15264] lo speed is unknown, defaulting to 1000
[  351.683321][T15267] hsr_slave_1 (unregistering): left promiscuous mode
[  351.882055][T15264] lo speed is unknown, defaulting to 1000
[  351.893299][T15264] lo speed is unknown, defaulting to 1000
[  352.017042][T15264] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  352.091836][T15264] lo speed is unknown, defaulting to 1000
[  352.122744][T15264] lo speed is unknown, defaulting to 1000
[  352.147221][T15264] lo speed is unknown, defaulting to 1000
[  352.173392][T15264] lo speed is unknown, defaulting to 1000
[  352.189503][T15264] lo speed is unknown, defaulting to 1000
[  352.308229][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'.
[  352.322216][T15297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2481'.
[  352.380025][T15301] tipc: Resetting bearer <eth:syzkaller0>
[  352.536800][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2489'.
[  353.406574][T15348] lo speed is unknown, defaulting to 1000
[  353.672828][T15367] ieee802154 phy0 wpan0: encryption failed: -22
[  354.058780][T15375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.081359][T15375] syzkaller0: entered allmulticast mode
[  354.123269][T15375] tipc: Resetting bearer <eth:syzkaller0>
[  354.440381][T15384] atomic_op ffff88807b698998 conn xmit_atomic 0000000000000000
[  354.456161][T15384] netlink: 'syz.0.2507': attribute type 3 has an invalid length.
[  354.465193][T15384] netlink: 'syz.0.2507': attribute type 3 has an invalid length.
[  354.497655][T15384] netlink: 'syz.0.2507': attribute type 39 has an invalid length.
[  354.801442][T15373] tipc: Disabling bearer <eth:syzkaller0>
[  355.900784][T15419] lo speed is unknown, defaulting to 1000
[  356.137544][T15430] geneve4: entered promiscuous mode
[  356.191756][ T3541] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  356.269087][ T3541] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  356.307302][ T3541] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  356.429749][ T3541] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  357.088996][T15445] __nla_validate_parse: 2 callbacks suppressed
[  357.089015][T15445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2521'.
[  357.440350][T15457] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  357.519619][T15458] lo speed is unknown, defaulting to 1000
[  358.915642][T15477] netlink: 'syz.4.2529': attribute type 12 has an invalid length.
[  359.569570][T15490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'.
[  359.666692][T15493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2536'.
[  359.833552][T15497] batadv1: entered promiscuous mode
[  359.892963][T15505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2538'.
[  359.906305][T15504] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2537'.
[  360.025326][T15502] netlink: 'syz.1.2535': attribute type 1 has an invalid length.
[  360.356673][T15512] lo speed is unknown, defaulting to 1000
[  360.814843][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2542'.
[  360.935311][T15524] lo speed is unknown, defaulting to 1000
[  361.091181][T15525] lo speed is unknown, defaulting to 1000
[  361.307953][T15535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'.
[  361.319166][T15535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2544'.
[  362.170002][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2549'.
[  362.189348][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'.
[  362.200091][T15528] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2541'.
[  362.271058][T15552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2549'.
[  362.417209][T15558] netlink: 'syz.3.2550': attribute type 21 has an invalid length.
[  362.490718][T15555] netlink: 'syz.3.2550': attribute type 1 has an invalid length.
[  362.551710][T15555] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2550'.
[  362.586892][T15558] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2550'.
[  362.610144][T15562] siw: device registration error -23
[  362.817552][T15571] ieee802154 phy0 wpan0: encryption failed: -22
[  362.864360][T15564] lo speed is unknown, defaulting to 1000
[  362.877699][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2553'.
[  363.027926][T15579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2556'.
[  363.316702][   T30] audit: type=1800 audit(1768436676.739:7): pid=15595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2558" name="memory.events" dev="tmpfs" ino=2773 res=0 errno=0
[  363.352266][T15579] nbd: socks must be embedded in a SOCK_ITEM attr
[  363.362493][T15598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  363.670507][T15610] netlink: 'syz.1.2564': attribute type 1 has an invalid length.
[  363.718647][T15604] netlink: 'syz.2.2563': attribute type 2 has an invalid length.
[  363.879895][T15619] netlink: 'syz.3.2565': attribute type 13 has an invalid length.
[  363.894360][T15610] 8021q: adding VLAN 0 to HW filter on device bond4
[  363.928431][T15604] !: entered promiscuous mode
[  363.950767][T15612] vlan2: entered promiscuous mode
[  363.986470][T15612] bond4: entered promiscuous mode
[  363.998169][T15612] vlan2: entered allmulticast mode
[  364.003433][T15612] bond4: entered allmulticast mode
[  364.033623][T15616] bond4: (slave gretap2): making interface the new active one
[  364.057514][T15624] block nbd2: Unsupported socket: should be TCP or UNIX.
[  364.097019][T15616] gretap2: entered promiscuous mode
[  364.106638][T15616] gretap2: entered allmulticast mode
[  364.113334][T15616] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  364.137709][T15619] tipc: Resetting bearer <eth:syzkaller0>
[  364.190212][T15621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2566'.
[  364.731383][T15654] netlink: 'syz.3.2578': attribute type 21 has an invalid length.
[  364.757685][T15654] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2578'.
[  364.796577][T15654] netlink: 'syz.3.2578': attribute type 5 has an invalid length.
[  364.804467][T15654] netlink: 'syz.3.2578': attribute type 6 has an invalid length.
[  364.833277][T15660] netlink: 'syz.3.2578': attribute type 1 has an invalid length.
[  365.128001][T15682] x_tables: duplicate underflow at hook 1
[  365.629506][T15702] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  365.659058][T15702] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  365.711566][T15702] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  365.732399][T15702] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  365.774329][T15702] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  365.788922][T15702] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  365.817309][T15702] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  365.824716][T15702] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  366.509037][T15742] netlink: 'syz.1.2603': attribute type 4 has an invalid length.
[  366.524858][T15742] tipc: New replicast peer: 255.255.255.255
[  366.534375][T15742] tipc: Enabled bearer <udp:syz2>, priority 10
[  366.625359][T15748] pim6reg1: entered promiscuous mode
[  366.656638][T15748] pim6reg1: entered allmulticast mode
[  366.801386][T15749] lo speed is unknown, defaulting to 1000
[  367.338409][T15776] block nbd2: shutting down sockets
[  367.602124][T15786] __nla_validate_parse: 4 callbacks suppressed
[  367.602145][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2617'.
[  367.766863][T15784] ip6gre0: left promiscuous mode
[  367.772526][T15784] wg1: left promiscuous mode
[  367.782309][T15784] wg1: left allmulticast mode
[  367.793780][T15784] syzkaller0: left promiscuous mode
[  367.799812][T15796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.811705][T15784] syzkaller0: left allmulticast mode
[  367.819372][T15797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.827954][T15784] gre2: left allmulticast mode
[  367.847505][T15784] geneve2: left promiscuous mode
[  367.849108][T15796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2615'.
[  367.861099][T15784] geneve2: left allmulticast mode
[  367.871824][T15784] geneve3: left promiscuous mode
[  367.885484][T15784] geneve3: left allmulticast mode
[  367.893440][T15798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2615'.
[  367.907826][T15784] veth9: left promiscuous mode
[  367.924346][T15784] bond7: left promiscuous mode
[  367.936995][T15784] bridge6: left promiscuous mode
[  368.113266][T15808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2621'.
[  368.258817][T15814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2624'.
[  368.363071][T15818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2626'.
[  368.379598][T15819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2625'.
[  368.392275][T15819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2625'.
[  368.402085][T15819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2625'.
[  368.411300][T15819] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2625'.
[  368.537501][T15823] lo speed is unknown, defaulting to 1000
[  368.580759][T15829] xt_TPROXY: Can be used only with -p tcp or -p udp
[  368.944782][T15848] lo speed is unknown, defaulting to 1000
[  369.424184][T15865] lo speed is unknown, defaulting to 1000
[  369.451743][T15870] lo speed is unknown, defaulting to 1000
[  369.498644][T15873] netlink: 'syz.2.2643': attribute type 1 has an invalid length.
[  370.149705][T15895] syzkaller1: entered promiscuous mode
[  370.160831][T15895] syzkaller1: entered allmulticast mode
[  370.168582][T15916] wg0: left promiscuous mode
[  370.173767][T15916] wg1: left promiscuous mode
[  370.180240][T15916] geneve3: left promiscuous mode
[  370.185546][T15916] gtp0: left promiscuous mode
[  370.192221][T15916] geneve4: left promiscuous mode
[  370.772799][T15944] netlink: 'syz.2.2659': attribute type 1 has an invalid length.
[  370.779067][T15946] netlink: 'syz.1.2654': attribute type 6 has an invalid length.
[  370.968565][T15956] netlink: 'syz.0.2664': attribute type 10 has an invalid length.
[  371.256299][T15973] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  371.374322][T15977] netlink: 'syz.3.2669': attribute type 28 has an invalid length.
[  371.388485][T15985] lo speed is unknown, defaulting to 1000
[  371.650773][T15999] netlink: 'syz.1.2673': attribute type 11 has an invalid length.
[  371.850147][T16011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.121369][T16011] syzkaller0: entered promiscuous mode
[  372.132508][T16011] syzkaller0: entered allmulticast mode
[  372.508705][T16027] tipc: Resetting bearer <eth:syzkaller0>
[  372.693558][T16010] tipc: Resetting bearer <eth:syzkaller0>
[  372.730703][T16010] tipc: Disabling bearer <eth:syzkaller0>
[  372.744049][T16036] __nla_validate_parse: 13 callbacks suppressed
[  372.744068][T16036] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2682'.
[  372.774378][T16024] lo speed is unknown, defaulting to 1000
[  372.912873][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2685'.
[  373.111913][T16056] netlink: 'syz.2.2686': attribute type 1 has an invalid length.
[  373.132679][T16056] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2686'.
[  373.376632][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2689'.
[  373.467642][T16078] netlink: 'syz.1.2688': attribute type 21 has an invalid length.
[  373.498283][T16078] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2688'.
[  373.621465][T16086] syzkaller0: entered promiscuous mode
[  373.630586][T16086] syzkaller0: entered allmulticast mode
[  373.644119][T16087] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  373.737478][T16050] delete_channel: no stack
[  373.863177][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2696'.
[  374.079020][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2701'.
[  374.147677][T16120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2701'.
[  374.179631][T16120] xt_TPROXY: Can be used only with -p tcp or -p udp
[  374.273608][T16123] lo speed is unknown, defaulting to 1000
[  374.501654][T16134] tc_dump_action: action bad kind
[  374.584784][T16141] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2705'.
[  374.836486][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2705'.
[  374.948895][T16142] bond4 (unregistering): Released all slaves
[  375.125828][T16151] lo speed is unknown, defaulting to 1000
[  375.148181][T16164] Cannot find add_set index 1 as target
[  375.424449][T16175] lo speed is unknown, defaulting to 1000
[  376.519760][T16224] lo speed is unknown, defaulting to 1000
[  377.091103][T16264] lo speed is unknown, defaulting to 1000
[  377.565934][   T30] audit: type=1800 audit(1768436690.979:8): pid=16281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2740" name="memory.events" dev="tmpfs" ino=2832 res=0 errno=0
[  377.589274][T16281] netlink: 'syz.1.2740': attribute type 32 has an invalid length.
[  377.629061][   T30] audit: type=1804 audit(1768436691.009:9): pid=16281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2740" name="memory.events" dev="tmpfs" ino=2832 res=1 errno=0
[  377.675417][T16281] bond5: Setting coupled_control to off (0)
[  378.018240][T16305] __nla_validate_parse: 9 callbacks suppressed
[  378.018261][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'.
[  378.061761][T16307] netlink: 'syz.4.2747': attribute type 39 has an invalid length.
[  378.290783][T16320] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2752'.
[  378.308904][T16320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2752'.
[  378.332299][T16318] netlink: 'syz.1.2749': attribute type 1 has an invalid length.
[  378.356383][T16322] lo speed is unknown, defaulting to 1000
[  378.371874][T16318] netlink: 'syz.1.2749': attribute type 3 has an invalid length.
[  378.412916][T16318] netlink: 'syz.1.2749': attribute type 1 has an invalid length.
[  378.464412][T16318] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2749'.
[  378.484659][T16318] NCSI netlink: No device for ifindex 1668546632
[  378.516765][T16330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2753'.
[  378.561976][T16318] netlink: 'syz.1.2749': attribute type 1 has an invalid length.
[  378.573963][T16332] netlink: 'syz.4.2754': attribute type 10 has an invalid length.
[  378.582619][T16332] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2754'.
[  379.078274][T16340] openvswitch: netlink: Tunnel attr 92 out of range max 16
[  379.530066][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2759'.
[  379.562321][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'.
[  379.707068][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2763'.
[  379.934606][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2766'.
[  380.093058][T16386] syzkaller0: entered promiscuous mode
[  380.099272][T16386] syzkaller0: entered allmulticast mode
[  380.184022][T16388] macvlan1: entered promiscuous mode
[  380.193590][T16388] bond0: entered promiscuous mode
[  380.199404][T16388] bond_slave_0: entered promiscuous mode
[  380.226520][T16388] bond_slave_1: entered promiscuous mode
[  380.232457][T16388] v: entered promiscuous mode
[  380.245371][T16388] macvlan1: entered allmulticast mode
[  380.252149][T16388] bond0: entered allmulticast mode
[  380.258502][T16388] bond_slave_0: entered allmulticast mode
[  380.264629][T16388] bond_slave_1: entered allmulticast mode
[  380.271974][T16388] v: entered allmulticast mode
[  380.282172][T16388] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  380.292195][T16388] bond0: left allmulticast mode
[  380.298622][T16388] bond_slave_0: left allmulticast mode
[  380.304300][T16388] bond_slave_1: left allmulticast mode
[  380.310995][T16388] v: left allmulticast mode
[  380.315711][T16388] bond0: left promiscuous mode
[  380.321637][T16388] bond_slave_0: left promiscuous mode
[  380.329291][T16388] bond_slave_1: left promiscuous mode
[  380.335082][T16388] v: left promiscuous mode
[  380.365476][T16393] netlink: 'syz.3.2771': attribute type 9 has an invalid length.
[  380.655083][T16420] xt_TPROXY: Can be used only with -p tcp or -p udp
[  381.265693][T16440] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  381.432026][T16451] bridge0: port 5(team0) entered blocking state
[  381.446752][T16451] bridge0: port 5(team0) entered disabled state
[  381.467765][T16451] team0: entered allmulticast mode
[  381.472961][T16451] team_slave_0: entered allmulticast mode
[  381.480341][T16451] team_slave_1: entered allmulticast mode
[  381.487609][T16451] geneve0: entered allmulticast mode
[  381.500080][T16451] team0: entered promiscuous mode
[  381.508456][T16451] team_slave_0: entered promiscuous mode
[  381.514359][T16451] team_slave_1: entered promiscuous mode
[  381.521991][T16451] geneve0: entered promiscuous mode
[  381.780849][T16458] netlink: 'syz.2.2789': attribute type 4 has an invalid length.
[  381.833009][T16458] syzkaller1: entered promiscuous mode
[  381.849794][T16458] syzkaller1: entered allmulticast mode
[  381.866140][T16458] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  381.888606][T16458] netlink: 'syz.2.2789': attribute type 30 has an invalid length.
[  381.967196][T16458] bond7: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  381.999001][T16458] bond7 (unregistering): Released all slaves
[  382.133905][T16465] FAULT_INJECTION: forcing a failure.
[  382.133905][T16465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  382.210259][T16465] CPU: 1 UID: 0 PID: 16465 Comm: syz.4.2790 Not tainted syzkaller #0 PREEMPT(full) 
[  382.210294][T16465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  382.210318][T16465] Call Trace:
[  382.210326][T16465]  <TASK>
[  382.210335][T16465]  dump_stack_lvl+0xe8/0x150
[  382.210364][T16465]  should_fail_ex+0x414/0x560
[  382.210398][T16465]  _copy_from_user+0x2d/0xb0
[  382.210422][T16465]  ___sys_sendmsg+0x158/0x2a0
[  382.210448][T16465]  ? __pfx____sys_sendmsg+0x10/0x10
[  382.210503][T16465]  ? __fget_files+0x2a/0x420
[  382.210524][T16465]  ? __fget_files+0x3a0/0x420
[  382.210557][T16465]  __x64_sys_sendmsg+0x19b/0x260
[  382.210581][T16465]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  382.210613][T16465]  ? __pfx_ksys_write+0x10/0x10
[  382.210640][T16465]  do_syscall_64+0xec/0xf80
[  382.210662][T16465]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.210679][T16465]  ? trace_irq_disable+0x37/0x100
[  382.210702][T16465]  ? clear_bhb_loop+0x60/0xb0
[  382.210723][T16465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.210740][T16465] RIP: 0033:0x7fd33658f749
[  382.210757][T16465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.210772][T16465] RSP: 002b:00007fd337441038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  382.210792][T16465] RAX: ffffffffffffffda RBX: 00007fd3367e5fa0 RCX: 00007fd33658f749
[  382.210806][T16465] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  382.210817][T16465] RBP: 00007fd337441090 R08: 0000000000000000 R09: 0000000000000000
[  382.210827][T16465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.210838][T16465] R13: 00007fd3367e6038 R14: 00007fd3367e5fa0 R15: 00007ffd7e98ee38
[  382.210866][T16465]  </TASK>
[  382.394351][T16468] xt_TPROXY: Can be used only with -p tcp or -p udp
[  382.909275][T16483] sch_tbf: burst 0 is lower than device ip6gretap0 mtu (1708) !
[  383.139152][T16488] netlink: 'syz.1.2796': attribute type 1 has an invalid length.
[  383.301538][T16496] 8021q: adding VLAN 0 to HW filter on device bond7
[  383.339385][T16496] bond6: (slave bond7): making interface the new active one
[  383.388572][T16506] __nla_validate_parse: 6 callbacks suppressed
[  383.388594][T16506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2796'.
[  383.419142][T16507] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  383.436538][T16496] bond6: (slave bond7): Enslaving as an active interface with an up link
[  383.771702][T16506] 8021q: adding VLAN 0 to HW filter on device bond6
[  383.815483][T16496] vlan3: entered promiscuous mode
[  383.832280][T16496] bond6: entered promiscuous mode
[  383.846123][T16496] bond7: entered promiscuous mode
[  383.985412][T16511] lo speed is unknown, defaulting to 1000
[  384.722731][T16529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2809'.
[  385.993631][T16556] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  386.032993][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'.
[  386.363287][T16559] netlink: 'syz.3.2819': attribute type 7 has an invalid length.
[  386.464429][T16561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2819'.
[  386.559181][T16564] xt_TPROXY: Can be used only with -p tcp or -p udp
[  386.637274][T16567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2820'.
[  386.687402][T16567] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2820'.
[  387.253709][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2826'.
[  387.387267][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2828'.
[  387.484868][T16596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.493331][T16596] syzkaller0: entered promiscuous mode
[  387.510294][T16596] syzkaller0: entered allmulticast mode
[  387.530239][T16596] macvlan0: left allmulticast mode
[  387.543126][T16596] netlink: 'syz.0.2829': attribute type 1 has an invalid length.
[  387.561476][T16596] netlink: 'syz.0.2829': attribute type 2 has an invalid length.
[  387.587215][T16595] tipc: Resetting bearer <eth:syzkaller0>
[  387.639816][T16595] tipc: Disabling bearer <eth:syzkaller0>
[  387.892905][T16612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2832'.
[  387.908248][T16612] xt_TPROXY: Can be used only with -p tcp or -p udp
[  387.947373][T16602] lo speed is unknown, defaulting to 1000
[  387.993301][T16606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2831'.
[  388.034931][T16610] netlink: 'syz.0.2833': attribute type 11 has an invalid length.
[  388.057209][T16617] netlink: 'syz.0.2833': attribute type 11 has an invalid length.
[  388.065519][T16610] netlink: 'syz.0.2833': attribute type 11 has an invalid length.
[  388.831717][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2844'.
[  388.856607][T16655] netlink: 'syz.2.2844': attribute type 2 has an invalid length.
[  389.118736][T16667] lo speed is unknown, defaulting to 1000
[  389.195430][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'.
[  389.308691][T16678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2848'.
[  389.389915][T16678] xt_TPROXY: Can be used only with -p tcp or -p udp
[  389.933639][T16706] netlink: 'syz.2.2856': attribute type 1 has an invalid length.
[  389.966614][T16706] netlink: 'syz.2.2856': attribute type 2 has an invalid length.
[  389.990077][T16706] netlink: 'syz.2.2856': attribute type 1 has an invalid length.
[  390.027498][T16706] netlink: 'syz.2.2856': attribute type 2 has an invalid length.
[  390.057215][T16711] netlink: 'syz.2.2856': attribute type 1 has an invalid length.
[  390.097891][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'.
[  390.100974][T16711] netlink: 'syz.2.2856': attribute type 2 has an invalid length.
[  390.128591][T16711] netlink: 'syz.2.2856': attribute type 1 has an invalid length.
[  390.144139][T16711] netlink: 'syz.2.2856': attribute type 2 has an invalid length.
[  390.167268][T16717] 8021q: adding VLAN 0 to HW filter on device bond8
[  390.174916][T16723] bond8: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  390.350031][T16731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2861'.
[  390.362085][T16731] xt_TPROXY: Can be used only with -p tcp or -p udp
[  390.572415][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2866'.
[  390.583294][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2866'.
[  390.829197][T16760] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2873'.
[  390.842189][T16761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2871'.
[  391.035562][T16771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2874'.
[  391.144149][T16775] xt_TPROXY: Can be used only with -p tcp or -p udp
[  391.844020][T16818] xt_TPROXY: Can be used only with -p tcp or -p udp
[  391.939989][T16810] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.021480][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  392.032008][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  392.046772][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  392.054840][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  392.063745][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  392.110379][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  392.119287][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  392.127476][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  392.135600][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  392.146593][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  392.281413][T16823] lo speed is unknown, defaulting to 1000
[  392.468880][T16823] chnl_net:caif_netlink_parms(): no params data found
[  392.547889][T16823] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.557311][T16823] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.564789][T16823] bridge_slave_0: entered allmulticast mode
[  392.572594][T16823] bridge_slave_0: entered promiscuous mode
[  392.583067][T16823] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.590614][T16823] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.598667][T16823] bridge_slave_1: entered allmulticast mode
[  392.606252][T16823] bridge_slave_1: entered promiscuous mode
[  392.640760][T16823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.652942][T16823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.690521][T16823] team0: Port device team_slave_0 added
[  392.698810][T16823] team0: Port device team_slave_1 added
[  392.730294][T16823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  392.737847][T16823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  392.764548][T16823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.779014][T16823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  392.786632][T16823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  392.813271][T16823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  392.861910][T16823] hsr_slave_0: entered promiscuous mode
[  392.869070][T16823] hsr_slave_1: entered promiscuous mode
[  392.875311][T16823] debugfs: 'hsr0' already exists in 'hsr'
[  392.881614][T16823] Cannot create hsr debugfs directory
[  393.286408][T16823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  393.298205][T16823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  393.310224][T16823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  393.321239][T16823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  393.406868][T16823] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.427878][T16823] 8021q: adding VLAN 0 to HW filter on device team0
[  393.441356][T14895] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.448526][T14895] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.463360][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.470529][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.663642][T16823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.710511][T16823] veth0_vlan: entered promiscuous mode
[  393.723531][T16823] veth1_vlan: entered promiscuous mode
[  393.753979][T16823] veth0_macvtap: entered promiscuous mode
[  393.764398][T16823] veth1_macvtap: entered promiscuous mode
[  393.784432][T16823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.799937][T16823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.814899][T14895] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.828172][T14895] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.840907][T14895] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.850690][T14895] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.923307][ T6595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.937477][ T6595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.968346][T14895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.977073][T14895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.216749][ T5150] Bluetooth: hci5: command tx timeout
[  396.295986][ T5150] Bluetooth: hci5: command tx timeout
[  398.376252][ T5150] Bluetooth: hci5: command tx timeout
[  400.456176][ T5150] Bluetooth: hci5: command tx timeout
[  500.245621][T16861] ip6erspan0: entered promiscuous mode
[  500.260026][T16863] bridge0: port 6(erspan0) entered blocking state
[  500.283802][T16863] bridge0: port 6(erspan0) entered disabled state
[  500.308998][T16863] erspan0: entered allmulticast mode
[  500.333221][T16863] erspan0: left allmulticast mode
[  500.665594][T16885] __nla_validate_parse: 10 callbacks suppressed
[  500.665629][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'.
[  500.682860][T16886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2903'.
[  500.706518][T16886] netlink: 'syz.3.2903': attribute type 7 has an invalid length.
[  500.718345][T16886] netlink: 'syz.3.2903': attribute type 8 has an invalid length.
[  500.743230][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2903'.
[  500.772158][T16885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2902'.
[  500.791718][T16886] team0: entered promiscuous mode
[  500.798610][T16885] xt_TPROXY: Can be used only with -p tcp or -p udp
[  500.807237][T16886] team_slave_0: entered promiscuous mode
[  500.814225][T16886] team_slave_1: entered promiscuous mode
[  500.821739][T16886] geneve0: entered promiscuous mode
[  500.829616][T16886] ip6gretap0: entered promiscuous mode
[  500.838661][T16886] gretap0: entered promiscuous mode
[  500.845022][T16886] debugfs: 'hsr1' already exists in 'hsr'
[  500.852427][T16886] Cannot create hsr debugfs directory
[  500.859244][T16886] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network
[  500.882590][T16886] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  500.912683][T16886] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network
[  501.246635][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  501.258617][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  501.269822][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  501.278086][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  501.287826][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  501.469508][T16903] lo speed is unknown, defaulting to 1000
[  501.502924][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2912'.
[  501.574206][T16917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2912'.
[  501.807431][T16920] syzkaller0: entered promiscuous mode
[  501.813064][T16920] syzkaller0: entered allmulticast mode
[  502.392977][T16903] chnl_net:caif_netlink_parms(): no params data found
[  502.518958][   T30] audit: type=1800 audit(1768436815.939:10): pid=16947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2919" name="memory.events" dev="tmpfs" ino=53 res=0 errno=0
[  502.834792][T16903] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.878583][T16903] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.898575][T16903] bridge_slave_0: entered allmulticast mode
[  502.927309][T16903] bridge_slave_0: entered promiscuous mode
[  502.958034][T16903] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.976940][T16903] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.984402][T16903] bridge_slave_1: entered allmulticast mode
[  502.995533][T16903] bridge_slave_1: entered promiscuous mode
[  503.073690][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2924'.
[  503.116299][T16967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2924'.
[  503.303161][T16903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  503.324153][T16978] syzkaller0: entered promiscuous mode
[  503.339894][ T5150] Bluetooth: hci3: command tx timeout
[  503.354809][T16978] syzkaller0: entered allmulticast mode
[  503.378143][T16903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.721873][T16903] team0: Port device team_slave_0 added
[  503.742201][T16903] team0: Port device team_slave_1 added
[  503.847762][T16903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.886685][T16903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.978661][T16903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.021452][T16903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.040206][T16903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  504.113695][T16903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.198419][T17003] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2932'.
[  504.238392][T17000] lo speed is unknown, defaulting to 1000
[  504.313403][T16903] hsr_slave_0: entered promiscuous mode
[  504.331432][T16903] hsr_slave_1: entered promiscuous mode
[  504.349471][T16903] debugfs: 'hsr0' already exists in 'hsr'
[  504.373533][T16903] Cannot create hsr debugfs directory
[  504.498326][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2935'.
[  504.561406][T17009] x_tables: duplicate underflow at hook 3
[  504.984412][T17024] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  505.032480][T17024] vlan0: entered promiscuous mode
[  505.043784][T17024] vlan0: entered allmulticast mode
[  505.058970][T17024] ip6gretap0: entered allmulticast mode
[  505.421027][ T5150] Bluetooth: hci3: command tx timeout
[  505.606560][T16903] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  505.646213][T16903] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  505.673029][T16903] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  505.710330][T16903] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  505.759163][T17058] __nla_validate_parse: 6 callbacks suppressed
[  505.759183][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'.
[  505.914315][T17058] bond1: (slave bridge0): Releasing backup interface
[  505.952337][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'.
[  505.973096][T17058] vlan3 (unregistering): left promiscuous mode
[  505.982594][T17058] bridge0 (unregistering): left promiscuous mode
[  506.001639][T17058] bridge5: port 1(vlan3) entered disabled state
[  506.252211][T16903] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.299505][T17081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2954'.
[  506.320686][T16903] 8021q: adding VLAN 0 to HW filter on device team0
[  506.343855][ T6595] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.351120][ T6595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.405068][ T6595] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.412326][ T6595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.593298][ T3541] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  506.625066][ T3541] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  506.648053][ T3541] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  506.663195][ T3541] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  506.721863][T17097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2958'.
[  507.055648][T16903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  507.158283][T17114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2963'.
[  507.255692][T16903] veth0_vlan: entered promiscuous mode
[  507.265331][T17116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2964'.
[  507.290017][T17116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2964'.
[  507.313689][T16903] veth1_vlan: entered promiscuous mode
[  507.352559][T17116] syzkaller0: entered promiscuous mode
[  507.362696][T17116] syzkaller0: entered allmulticast mode
[  507.424475][T17116] macsec1: entered promiscuous mode
[  507.456442][T17126] netlink: 'syz.3.2968': attribute type 2 has an invalid length.
[  507.477580][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2968'.
[  507.496604][ T5150] Bluetooth: hci3: command tx timeout
[  507.506678][T17120] netlink: 'syz.1.2967': attribute type 16 has an invalid length.
[  507.524071][T17120] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2967'.
[  507.698110][T16903] veth0_macvtap: entered promiscuous mode
[  507.728708][T16903] veth1_macvtap: entered promiscuous mode
[  507.793402][T16903] batman_adv: batadv0: Interface activated: batadv_slave_0
[  507.847942][T16903] batman_adv: batadv0: Interface activated: batadv_slave_1
[  507.886815][ T6594] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.895613][ T6594] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.941735][ T6594] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.965034][ T6594] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.094338][ T6594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.113355][ T6594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.254278][T14895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.274493][T14895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.380054][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'.
[  508.498296][T17161] lo speed is unknown, defaulting to 1000
[  508.783876][T17174] netlink: 'syz.2.2906': attribute type 7 has an invalid length.
[  508.792277][T17174] netlink: 'syz.2.2906': attribute type 8 has an invalid length.
[  509.502127][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  509.513004][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  509.521879][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  509.547352][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  509.563852][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  509.575877][   T52] Bluetooth: hci3: command tx timeout
[  509.701480][T17181] lo speed is unknown, defaulting to 1000
[  509.993843][T17196] syzkaller0: entered promiscuous mode
[  509.999564][T17196] syzkaller0: entered allmulticast mode
[  510.690725][T17226] lo speed is unknown, defaulting to 1000
[  510.725589][T17181] chnl_net:caif_netlink_parms(): no params data found
[  511.108330][T17247] __nla_validate_parse: 3 callbacks suppressed
[  511.108353][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2996'.
[  511.150175][T17247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2996'.
[  511.314917][T17181] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.335867][T17181] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.343201][T17181] bridge_slave_0: entered allmulticast mode
[  511.369066][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'.
[  511.375032][T17181] bridge_slave_0: entered promiscuous mode
[  511.407284][T17181] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.414575][T17181] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.426304][T17254] netlink: 'syz.2.2999': attribute type 61 has an invalid length.
[  511.434704][T17181] bridge_slave_1: entered allmulticast mode
[  511.450951][T17181] bridge_slave_1: entered promiscuous mode
[  511.561168][T17181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.589345][T17181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.658261][T17256] syzkaller0: entered promiscuous mode
[  511.667971][   T52] Bluetooth: hci2: command tx timeout
[  511.689294][T17256] syzkaller0: entered allmulticast mode
[  512.203091][T17181] team0: Port device team_slave_0 added
[  512.221731][T17181] team0: Port device team_slave_1 added
[  512.382033][T17270] lo speed is unknown, defaulting to 1000
[  512.394316][T17289] tipc: Started in network mode
[  512.417704][T17289] tipc: Node identity , cluster identity 4711
[  512.438321][T17289] tipc: Failed to obtain node identity
[  512.454127][T17289] tipc: Enabling of bearer <eth:ip_vti0> rejected, failed to enable media
[  512.471529][T17181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.495565][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.551099][T17181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.588569][T17181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.598246][T17295] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.3009'.
[  512.607539][T17301] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.3009'.
[  512.621849][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.649662][T17181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  513.010328][T17181] hsr_slave_0: entered promiscuous mode
[  513.021883][T17181] hsr_slave_1: entered promiscuous mode
[  513.029738][T17181] debugfs: 'hsr0' already exists in 'hsr'
[  513.035555][T17181] Cannot create hsr debugfs directory
[  513.134340][T17313] vlan2: entered promiscuous mode
[  513.140126][T17313] ip6gretap0: entered promiscuous mode
[  513.146750][T17313] vlan2: entered allmulticast mode
[  513.152188][T17313] ip6gretap0: entered allmulticast mode
[  513.444037][T17318] tipc: Started in network mode
[  513.449872][T17318] tipc: Node identity ff, cluster identity 4711
[  513.518940][T17318] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  513.738204][   T52] Bluetooth: hci2: command tx timeout
[  513.978606][T17347] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3018'.
[  513.994305][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3021'.
[  514.142273][T17360] netlink: 'syz.4.3022': attribute type 1 has an invalid length.
[  514.171329][T17359] netlink: 'syz.4.3022': attribute type 1 has an invalid length.
[  514.210036][T17181] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  514.403212][T17359] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  514.404958][T17360] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  514.437301][T17363] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  514.460365][T17181] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  514.511947][T17181] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  514.528067][T17181] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  514.806519][T17385] lo speed is unknown, defaulting to 1000
[  514.967796][T17393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3027'.
[  515.098966][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'.
[  515.259365][T17409] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3030'.
[  515.418707][T17181] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.609518][T17406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.817106][   T52] Bluetooth: hci2: command tx timeout
[  515.859414][T17406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.010150][T17406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.051376][T17181] 8021q: adding VLAN 0 to HW filter on device team0
[  516.173899][T17438] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  516.193213][T17438] bond1: (slave lo): speed changed to 0 on port 1
[  516.207631][T17438] bond1: (slave lo): Enslaving as a backup interface with an up link
[  516.220881][T17438] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  516.248559][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'.
[  516.276362][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'.
[  516.286511][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3036'.
[  516.303547][T17406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.322996][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.330332][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.341889][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.349123][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state
[  516.366903][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'.
[  516.382825][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'.
[  516.394941][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3036'.
[  516.404861][   T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  516.415521][T17445] lo speed is unknown, defaulting to 1000
[  516.436513][   T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  516.469648][   T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  516.511136][   T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  516.597797][ T3541] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.668395][ T3541] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.697781][ T6596] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.795075][ T6596] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.984013][T17467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  517.009368][T17466] netlink: 'syz.0.3042': attribute type 11 has an invalid length.
[  517.361241][T17181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  517.546576][T17181] veth0_vlan: entered promiscuous mode
[  517.589723][T17181] veth1_vlan: entered promiscuous mode
[  517.637787][T17486] netlink: 516 bytes leftover after parsing attributes in process `syz.3.3046'.
[  517.890765][T17489] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3049'.
[  517.900914][   T52] Bluetooth: hci2: command tx timeout
[  517.927811][T17181] veth0_macvtap: entered promiscuous mode
[  517.944679][T17181] veth1_macvtap: entered promiscuous mode
[  517.970772][T17181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  517.995650][T17181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.017228][ T6594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.041406][ T6594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.073818][ T6594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.098553][ T6594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.122613][T17495] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3051'.
[  518.143269][T17495] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  518.157284][T17495] bond0: (slave gre0): Error -95 calling set_mac_address
[  518.336893][ T6595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.366394][ T6595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.428397][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.439451][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.543581][T17512] netlink: 'syz.4.3056': attribute type 1 has an invalid length.
[  518.610425][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3056'.
[  518.758956][T17512] bond4: entered promiscuous mode
[  518.808187][T17512] 8021q: adding VLAN 0 to HW filter on device bond4
[  518.837931][T17517] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  518.953874][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  518.974954][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  518.989382][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  519.029031][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  519.040693][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  519.111506][ T5841] Bluetooth: hci5: command 0x0406 tx timeout
[  519.443473][T17537] xt_TPROXY: Can be used only with -p tcp or -p udp
[  520.105041][T17512] 8021q: adding VLAN 0 to HW filter on device bond4
[  520.158901][T17512] bond4: (slave gre3): The slave device specified does not support setting the MAC address
[  520.211359][T17512] bond4: (slave gre3): Setting fail_over_mac to active for active-backup mode
[  520.230134][T17512] bond4: (slave gre3): Opening slave failed
[  520.387162][T17526] lo speed is unknown, defaulting to 1000
[  520.656397][T17560] netlink: 'syz.4.3066': attribute type 1 has an invalid length.
[  520.744908][T17560] 8021q: adding VLAN 0 to HW filter on device bond5
[  521.105951][ T5150] Bluetooth: hci0: command tx timeout
[  521.160050][T17581] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  521.368746][ T6594] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.387600][T17526] chnl_net:caif_netlink_parms(): no params data found
[  521.422271][ T6594] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.460472][ T6594] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.530863][ T6594] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.547105][T17601] __nla_validate_parse: 10 callbacks suppressed
[  521.547125][T17601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3075'.
[  521.592758][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3075'.
[  521.734376][T17526] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.756666][T17526] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.772329][T17526] bridge_slave_0: entered allmulticast mode
[  521.791280][T17526] bridge_slave_0: entered promiscuous mode
[  521.812138][T17526] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.832398][T17526] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.851457][T17526] bridge_slave_1: entered allmulticast mode
[  521.876332][T17526] bridge_slave_1: entered promiscuous mode
[  521.974421][T17526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.016432][T17526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.122099][T17526] team0: Port device team_slave_0 added
[  522.154518][T17526] team0: Port device team_slave_1 added
[  522.509165][T17631] C: renamed from team_slave_0 (while UP)
[  522.564301][T17631] netlink: 'syz.1.3077': attribute type 4 has an invalid length.
[  522.573732][T17631] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3077'.
[  522.584471][T17631] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  522.642295][T17526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.678650][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.735778][T17526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.792004][T17526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.814542][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.867198][T17526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.879470][T17646] nbd2: detected capacity change from 0 to 127
[  522.900824][ T5150] block nbd2: Receive control failed (result -32)
[  523.120382][T17526] hsr_slave_0: entered promiscuous mode
[  523.139022][T17526] hsr_slave_1: entered promiscuous mode
[  523.155292][T17526] debugfs: 'hsr0' already exists in 'hsr'
[  523.165254][T17526] Cannot create hsr debugfs directory
[  523.176213][ T5150] Bluetooth: hci0: command tx timeout
[  523.184797][T17662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3083'.
[  523.202802][T17664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.216445][T17666] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3086'.
[  523.229503][T17656] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  523.254315][T17662] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3083'.
[  523.276887][T17664] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.3085'.
[  523.414117][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3087'.
[  523.566556][T17675] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3089'.
[  523.701031][T17679] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3090'.
[  524.011461][T17691] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  524.233905][T17526] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  524.382278][T17526] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  524.432132][T17526] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  524.458623][T17526] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  524.780225][T17730] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.788220][T17730] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.824764][T17742] netlink: 'syz.4.3110': attribute type 1 has an invalid length.
[  524.894791][T17730] team0: Failed to send port change of device C via netlink (err -105)
[  524.910114][T17730] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  524.926477][T17730] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.944082][T17730] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  525.294683][   T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.305473][   T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.325262][T17749] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  525.367808][T17755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  525.405875][   T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.458272][   T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.530623][T17526] 8021q: adding VLAN 0 to HW filter on device bond0
[  525.569527][T17526] 8021q: adding VLAN 0 to HW filter on device team0
[  525.620167][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.627469][ T6598] bridge0: port 1(bridge_slave_0) entered forwarding state
[  525.675413][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.682691][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.835420][T17773] lo speed is unknown, defaulting to 1000
[  526.069859][T17526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  526.125186][T17781] IPVS: set_ctl: invalid protocol: 108 172.30.0.3:20001
[  526.571263][T17526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  526.654134][T17792] __nla_validate_parse: 15 callbacks suppressed
[  526.654159][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'.
[  526.721560][T17792] openvswitch: netlink: Flow key attr not present in new flow.
[  526.938106][T17526] veth0_vlan: entered promiscuous mode
[  527.061973][T17526] veth1_vlan: entered promiscuous mode
[  527.074426][T17808] netlink: 'syz.4.3126': attribute type 1 has an invalid length.
[  527.188010][T17808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3126'.
[  527.214353][T17814] bond7: (slave gretap1): making interface the new active one
[  527.235005][T17814] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  527.281308][T17808] 8021q: adding VLAN 0 to HW filter on device bond7
[  527.324093][T17818] vlan3: entered promiscuous mode
[  527.340446][T17818] bond7: entered promiscuous mode
[  527.359974][T17814] netlink: 'syz.4.3126': attribute type 1 has an invalid length.
[  527.377641][T17818] gretap1: entered promiscuous mode
[  527.499074][T17824] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  527.535157][T17827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3129'.
[  527.560012][T17526] veth0_macvtap: entered promiscuous mode
[  527.568625][T17826] tipc: Can't bind to reserved service type 1
[  527.578124][T17824] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3129'.
[  527.608639][T17526] veth1_macvtap: entered promiscuous mode
[  527.644098][ T7308] IPVS: starting estimator thread 0...
[  527.657794][T17830] netlink: 'syz.1.3131': attribute type 1 has an invalid length.
[  527.668526][T17526] batman_adv: batadv0: Interface activated: batadv_slave_0
[  527.685645][T17526] batman_adv: batadv0: Interface activated: batadv_slave_1
[  527.718052][ T3541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  527.729577][ T3541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.743479][ T3541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.754508][ T1314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  527.764240][T17831] IPVS: using max 38 ests per chain, 91200 per kthread
[  527.781381][T17830] vlan2: entered allmulticast mode
[  527.788009][T17830] hsr0: entered allmulticast mode
[  527.793128][T17830] hsr_slave_0: entered allmulticast mode
[  527.801588][T17830] hsr_slave_1: entered allmulticast mode
[  527.929375][T14899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.944850][T14899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.001600][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.011381][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.161155][T17842] syzkaller0: entered promiscuous mode
[  528.167157][T17842] syzkaller0: entered allmulticast mode
[  528.343164][T17851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3137'.
[  530.443805][T17849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.451768][T17849] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.462172][T17849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.469857][T17849] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.718346][T17870] netlink: 'syz.3.3142': attribute type 1 has an invalid length.
[  530.732776][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3141'.
[  530.750935][T17873] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  530.839080][T17871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3141'.
[  530.971866][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  530.982398][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  530.998642][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  531.017448][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  531.025386][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  531.097028][T17880] lo speed is unknown, defaulting to 1000
[  531.239243][T17889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'.
[  531.352825][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'.
[  531.371257][T17880] chnl_net:caif_netlink_parms(): no params data found
[  531.399056][T17892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3149'.
[  531.706666][T17880] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.728514][T17880] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.759095][T17880] bridge_slave_0: entered allmulticast mode
[  531.777665][T17880] bridge_slave_0: entered promiscuous mode
[  531.828510][T17880] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.837025][T17880] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.845598][T17880] bridge_slave_1: entered allmulticast mode
[  531.854932][T17880] bridge_slave_1: entered promiscuous mode
[  532.242804][T17920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  532.252755][T17920] batman_adv: batadv0: Removing interface: batadv_slave_0
[  532.281151][T17912] __nla_validate_parse: 1 callbacks suppressed
[  532.281174][T17912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3154'.
[  532.298780][T17920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  532.307765][T17920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  532.468963][T17880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  532.489135][T17880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  532.701973][T17880] team0: Port device team_slave_0 added
[  532.748460][T17880] team0: Port device team_slave_1 added
[  532.855219][T17938] netlink: 'syz.0.3162': attribute type 33 has an invalid length.
[  532.873034][T17938] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3162'.
[  532.907158][T17948] nbd: must specify a device to reconfigure
[  532.922663][T17880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  532.931208][T17880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  532.962230][T17880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  533.011537][T17880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  533.032648][T17880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  533.060934][T17880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  533.075305][T17948] tipc: Started in network mode
[  533.080946][T17948] tipc: Node identity bef80f74cf66, cluster identity 4711
[  533.089959][T17948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.096883][ T5841] Bluetooth: hci1: command tx timeout
[  533.105170][T17951] syzkaller0: entered promiscuous mode
[  533.115221][T17951] syzkaller0: entered allmulticast mode
[  533.240940][T17942] lo speed is unknown, defaulting to 1000
[  533.250375][T17948] tipc: Resetting bearer <eth:syzkaller0>
[  533.312124][T17944] tipc: Resetting bearer <eth:syzkaller0>
[  533.331753][T17944] tipc: Disabling bearer <eth:syzkaller0>
[  533.380926][T17880] hsr_slave_0: entered promiscuous mode
[  533.406623][T17880] hsr_slave_1: entered promiscuous mode
[  533.413058][T17880] debugfs: 'hsr0' already exists in 'hsr'
[  533.426450][T17880] Cannot create hsr debugfs directory
[  533.623626][T17972] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  533.881566][T17981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3174'.
[  533.936669][T17880] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.972581][T17986] bond1: option mode: unable to set because the bond device has slaves
[  533.985380][T17985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3174'.
[  534.020921][T17880] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.151407][T17880] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.258585][T17880] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.392833][T18010] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  534.431069][T18010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3182'.
[  534.444389][T18010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3182'.
[  534.464420][T18013] netlink: 'syz.0.3183': attribute type 11 has an invalid length.
[  534.484871][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'.
[  534.495060][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'.
[  534.608874][T17880] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  534.639517][T17880] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  534.657595][T17880] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  534.673422][T17880] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  534.708447][T18017] netlink: 'syz.0.3184': attribute type 10 has an invalid length.
[  534.878001][T18011] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3181'.
[  534.912353][T17880] 8021q: adding VLAN 0 to HW filter on device bond0
[  534.954494][T17880] 8021q: adding VLAN 0 to HW filter on device team0
[  535.012119][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.019391][ T6598] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.035390][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.042676][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.167346][T18030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3186'.
[  535.195534][ T5841] Bluetooth: hci1: command tx timeout
[  535.198894][T18030] openvswitch: netlink: Flow key attr not present in new flow.
[  535.300941][T18035] netem: change failed
[  535.463271][T18043] netlink: 'syz.2.3188': attribute type 23 has an invalid length.
[  535.518676][T18048] nftables ruleset with unbound chain
[  535.800737][ T7308] IPVS: starting estimator thread 0...
[  535.818605][T17880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  535.937578][T18057] IPVS: using max 30 ests per chain, 72000 per kthread
[  536.374345][T18075] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  536.674581][T18078] tipc: Started in network mode
[  536.694084][T18078] tipc: Node identity d6023863ff8a, cluster identity 4711
[  536.715451][T18078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  536.748414][T17880] veth0_vlan: entered promiscuous mode
[  536.768425][T17880] veth1_vlan: entered promiscuous mode
[  536.810424][T18080] tipc: Resetting bearer <eth:syzkaller0>
[  536.880672][T17880] veth0_macvtap: entered promiscuous mode
[  536.902797][T17880] veth1_macvtap: entered promiscuous mode
[  536.954823][T17880] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.011591][T17880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  537.068561][   T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  537.123056][   T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  537.165592][   T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  537.247403][   T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  537.256662][ T5841] Bluetooth: hci1: command tx timeout
[  537.403222][T18092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  537.444224][T18077] tipc: Disabling bearer <eth:syzkaller0>
[  537.494645][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.524763][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.602196][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.622193][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.738320][T18101] netlink: 'syz.3.3203': attribute type 7 has an invalid length.
[  537.774762][T18101] __nla_validate_parse: 2 callbacks suppressed
[  537.774781][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3203'.
[  537.842042][T18105] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  537.929074][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'.
[  537.941230][T18109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3205'.
[  537.971798][T18109] geneve2: entered promiscuous mode
[  537.992856][T18109] geneve2: entered allmulticast mode
[  538.009325][T14899] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.036514][T14899] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.098653][T18113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  538.168572][T14899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.186418][T14899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.233357][T18117] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  538.277210][T18117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3207'.
[  538.293828][T18117] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3207'.
[  538.706478][ T3541] ------------[ cut here ]------------
[  538.712406][ T3541] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band
[  538.726245][ T3541] WARNING: net/mac80211/tx.c:758 at ieee80211_tx_h_rate_ctrl+0xbdd/0x1760, CPU#1: kworker/u8:13/3541
[  538.737207][ T3541] Modules linked in:
[  538.741491][ T3541] CPU: 1 UID: 0 PID: 3541 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  538.751220][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  538.761362][ T3541] Workqueue: events_unbound cfg80211_wiphy_work
[  538.767757][ T3541] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc4a/0x1760
[  538.774230][ T3541] Code: 00 00 48 8b 44 24 50 8b 30 45 31 ff 83 e6 07 41 0f 95 c7 31 ff e8 e6 f3 e8 f6 43 8d 0c 7f 83 c1 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 be 01 00 00 00 49 bf 00 00 00 00 00 fc ff df e9
[  538.793951][ T3541] RSP: 0018:ffffc9000c6673c0 EFLAGS: 00010206
[  538.800106][ T3541] RAX: ffffffff8ad8081a RBX: ffffffff8f9306f0 RCX: 0000000000000005
[  538.808160][ T3541] RDX: ffff8880458abac4 RSI: ffff8880788957c8 RDI: ffffffff8f9306f0
[  538.816211][ T3541] RBP: ffffc9000c667528 R08: ffff88801b7d29c7 R09: 1ffff110036fa538
[  538.824233][ T3541] R10: dffffc0000000000 R11: ffffed10036fa539 R12: ffff8880458abac4
[  538.832291][ T3541] R13: 1ffff920018cce8c R14: ffff8880788957c8 R15: 0000000000000001
[  538.840341][ T3541] FS:  0000000000000000(0000) GS:ffff888125f1e000(0000) knlGS:0000000000000000
[  538.849363][ T3541] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  538.856015][ T3541] CR2: 0000000000000000 CR3: 00000000636aa000 CR4: 00000000003526f0
[  538.864038][ T3541] Call Trace:
[  538.867393][ T3541]  <TASK>
[  538.870394][ T3541]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  538.876556][ T3541]  ? ieee80211_is_bufferable_mmpdu+0x103/0x200
[  538.882789][ T3541]  invoke_tx_handlers_late+0xba/0x18a0
[  538.888397][ T3541]  ? invoke_tx_handlers_early+0xa0c/0x1d50
[  538.894273][ T3541]  ieee80211_tx+0x2ac/0x460
[  538.898873][ T3541]  ? __pfx_ieee80211_tx+0x10/0x10
[  538.904028][ T3541]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[  538.910117][ T3541]  __ieee80211_tx_skb_tid_band+0x50f/0x680
[  538.916023][ T3541]  ? ieee80211_scan_state_send_probe+0x4e8/0xa00
[  538.922409][ T3541]  ieee80211_scan_state_send_probe+0x594/0xa00
[  538.928692][ T3541]  ieee80211_scan_work+0x65f/0x1c50
[  538.933989][ T3541]  cfg80211_wiphy_work+0x2ab/0x450
[  538.939212][ T3541]  ? process_scheduled_works+0x9ef/0x1770
[  538.944977][ T3541]  process_scheduled_works+0xad1/0x1770
[  538.950637][ T3541]  ? __pfx_process_scheduled_works+0x10/0x10
[  538.956699][ T3541]  ? do_raw_spin_lock+0x121/0x290
[  538.961852][ T3541]  worker_thread+0x8a0/0xda0
[  538.966554][ T3541]  ? __kthread_parkme+0x7b/0x200
[  538.971550][ T3541]  kthread+0x711/0x8a0
[  538.975710][ T3541]  ? __pfx_worker_thread+0x10/0x10
[  538.980881][ T3541]  ? __pfx_kthread+0x10/0x10
[  538.985551][ T3541]  ? _raw_spin_unlock_irq+0x23/0x50
[  538.990828][ T3541]  ? __pfx_kthread+0x10/0x10
[  538.995474][ T3541]  ret_from_fork+0x510/0xa50
[  539.000154][ T3541]  ? __pfx_ret_from_fork+0x10/0x10
[  539.005316][ T3541]  ? __switch_to+0xc9e/0x1480
[  539.010100][ T3541]  ? __pfx_kthread+0x10/0x10
[  539.014749][ T3541]  ret_from_fork_asm+0x1a/0x30
[  539.019635][ T3541]  </TASK>
[  539.022694][ T3541] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  539.030012][ T3541] CPU: 1 UID: 0 PID: 3541 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  539.039596][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  539.049689][ T3541] Workqueue: events_unbound cfg80211_wiphy_work
[  539.056089][ T3541] Call Trace:
[  539.059405][ T3541]  <TASK>
[  539.062373][ T3541]  vpanic+0x1e0/0x670
[  539.066409][ T3541]  panic+0xb9/0xc0
[  539.070181][ T3541]  ? __pfx_panic+0x10/0x10
[  539.074653][ T3541]  ? ret_from_fork_asm+0x1a/0x30
[  539.079650][ T3541]  __warn+0x317/0x4b0
[  539.083681][ T3541]  ? ieee80211_tx_h_rate_ctrl+0xbdd/0x1760
[  539.089537][ T3541]  ? ieee80211_tx_h_rate_ctrl+0xbdd/0x1760
[  539.095392][ T3541]  __report_bug+0x288/0x500
[  539.099943][ T3541]  ? ieee80211_tx_h_rate_ctrl+0xbdd/0x1760
[  539.105812][ T3541]  ? __pfx___report_bug+0x10/0x10
[  539.110892][ T3541]  ? kasan_save_track+0x4f/0x80
[  539.115833][ T3541]  ? kasan_save_track+0x3e/0x80
[  539.120730][ T3541]  ? __kasan_slab_alloc+0x6c/0x80
[  539.125809][ T3541]  ? kmalloc_reserve+0xbd/0x290
[  539.130720][ T3541]  ? __alloc_skb+0x204/0x3b0
[  539.135367][ T3541]  ? __netdev_alloc_skb+0xc1/0x810
[  539.140528][ T3541]  ? ieee80211_probereq_get+0x60/0x270
[  539.146043][ T3541]  ? ieee80211_build_probe_req+0x178/0x480
[  539.151902][ T3541]  report_bug_entry+0x19a/0x290
[  539.156804][ T3541]  ? ieee80211_tx_h_rate_ctrl+0xc4a/0x1760
[  539.162655][ T3541]  ? ieee80211_tx_h_rate_ctrl+0xc4f/0x1760
[  539.168506][ T3541]  handle_bug+0xca/0x200
[  539.172799][ T3541]  exc_invalid_op+0x1a/0x50
[  539.177464][ T3541]  asm_exc_invalid_op+0x1a/0x20
[  539.182371][ T3541] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc4a/0x1760
[  539.188842][ T3541] Code: 00 00 48 8b 44 24 50 8b 30 45 31 ff 83 e6 07 41 0f 95 c7 31 ff e8 e6 f3 e8 f6 43 8d 0c 7f 83 c1 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 be 01 00 00 00 49 bf 00 00 00 00 00 fc ff df e9
[  539.208500][ T3541] RSP: 0018:ffffc9000c6673c0 EFLAGS: 00010206
[  539.214615][ T3541] RAX: ffffffff8ad8081a RBX: ffffffff8f9306f0 RCX: 0000000000000005
[  539.222652][ T3541] RDX: ffff8880458abac4 RSI: ffff8880788957c8 RDI: ffffffff8f9306f0
[  539.230676][ T3541] RBP: ffffc9000c667528 R08: ffff88801b7d29c7 R09: 1ffff110036fa538
[  539.238691][ T3541] R10: dffffc0000000000 R11: ffffed10036fa539 R12: ffff8880458abac4
[  539.246802][ T3541] R13: 1ffff920018cce8c R14: ffff8880788957c8 R15: 0000000000000001
[  539.254829][ T3541]  ? ieee80211_tx_h_rate_ctrl+0xc3a/0x1760
[  539.260722][ T3541]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  539.266856][ T3541]  ? ieee80211_is_bufferable_mmpdu+0x103/0x200
[  539.273078][ T3541]  invoke_tx_handlers_late+0xba/0x18a0
[  539.278609][ T3541]  ? invoke_tx_handlers_early+0xa0c/0x1d50
[  539.284489][ T3541]  ieee80211_tx+0x2ac/0x460
[  539.289045][ T3541]  ? __pfx_ieee80211_tx+0x10/0x10
[  539.294148][ T3541]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[  539.300180][ T3541]  __ieee80211_tx_skb_tid_band+0x50f/0x680
[  539.306047][ T3541]  ? ieee80211_scan_state_send_probe+0x4e8/0xa00
[  539.312431][ T3541]  ieee80211_scan_state_send_probe+0x594/0xa00
[  539.318680][ T3541]  ieee80211_scan_work+0x65f/0x1c50
[  539.324025][ T3541]  cfg80211_wiphy_work+0x2ab/0x450
[  539.329202][ T3541]  ? process_scheduled_works+0x9ef/0x1770
[  539.334975][ T3541]  process_scheduled_works+0xad1/0x1770
[  539.340602][ T3541]  ? __pfx_process_scheduled_works+0x10/0x10
[  539.346624][ T3541]  ? do_raw_spin_lock+0x121/0x290
[  539.351738][ T3541]  worker_thread+0x8a0/0xda0
[  539.356398][ T3541]  ? __kthread_parkme+0x7b/0x200
[  539.361400][ T3541]  kthread+0x711/0x8a0
[  539.365537][ T3541]  ? __pfx_worker_thread+0x10/0x10
[  539.370698][ T3541]  ? __pfx_kthread+0x10/0x10
[  539.375350][ T3541]  ? _raw_spin_unlock_irq+0x23/0x50
[  539.380593][ T3541]  ? __pfx_kthread+0x10/0x10
[  539.385235][ T3541]  ret_from_fork+0x510/0xa50
[  539.389875][ T3541]  ? __pfx_ret_from_fork+0x10/0x10
[  539.395028][ T3541]  ? __switch_to+0xc9e/0x1480
[  539.399756][ T3541]  ? __pfx_kthread+0x10/0x10
[  539.404403][ T3541]  ret_from_fork_asm+0x1a/0x30
[  539.409241][ T3541]  </TASK>
[  539.412920][ T3541] Kernel Offset: disabled
[  539.417269][ T3541] Rebooting in 86400 seconds..