last executing test programs:

4.489087979s ago: executing program 0 (id=2126):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b70200000000f9ff7b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)

3.735831782s ago: executing program 0 (id=2131):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
unshare(0x2a020400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
unshare(0x6020480) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32)
getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040))
unshare(0x44040000) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) (async)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r2)
sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000128bd7000fcdbdf2503000000080003000300000005000500053800000014000100ff0100000000000000000000040000010400040014000100fe8000000000000000000000000000280500060080000000050005000000000087ee6beecbe6a88ca6624f1b082520acf575ff23686803e5508fcfe90834e1d7adc1539e94d6b0cd2ccb8567067b4f8068720471f478ca005894010da078d42fd6684c855215244080982e8ef7baba12d2d90df5f3abf210fe4a"], 0x60}, 0x1, 0x0, 0x0, 0x4005040}, 0x24000000)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x4, 0x0, 0x0, 0x62, 0xfffffffffffffeec], 0x197ba3, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fd00008367312f394c83b600000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x108) (async)
pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000280)="2ed1f515ea0991424c0d1aa8d4b0dafd9fb9d671868e9273320b940fd100", 0x1e}, {&(0x7f00000001c0)="06c54587", 0x4}], 0x2, 0xe, 0x401)

2.52026651s ago: executing program 3 (id=2146):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf67a000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x40240c4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)
ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r8, &(0x7f0000000040)={0x23, 0x14}, 0x10)
bind$phonet(r7, &(0x7f0000000000)={0x23, 0x4}, 0x10)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYRES8=r7], 0x78)
bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r9 = accept4$alg(r5, 0x0, 0x0, 0x0)
read$alg(r9, &(0x7f00000012c0)=""/4109, 0x100d)
sendmmsg$alg(r9, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xac, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xac}, 0x1, 0x0, 0x0, 0x20044840}, 0x4004050)
unshare(0x8040480)

2.327500616s ago: executing program 0 (id=2149):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='q', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x280}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x100, @local, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000300)="83", 0x1}], 0x1}}], 0x2, 0x240048d1)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x10, 0x0, 0xc9, 0x2, 0xb, 0x8, 0x9, 0x4, 0x9, 0x8, 0x9, 0x3, 0xef, 0xb6}, 0xe)

2.236142544s ago: executing program 1 (id=2150):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2080000000101e0014002b8008000100", @ANYRES32=r2, @ANYBLOB="080003000800000008001b0000000000"], 0x3c}}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4)
sendmmsg$inet6(r5, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000000)="d7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002b80)="99", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003d80)="7f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000004140)='#4', 0x2}], 0x1}}], 0x4, 0x84)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040), 0x4)
mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x2000003, 0x6011, r4, 0xffffc000)

2.062700369s ago: executing program 0 (id=2152):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0xffffffffffffff8e, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x9}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async)
sendmmsg$inet(r1, &(0x7f0000005e80)=[{{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f00000003c0)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f4b3fec69874016431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x94}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f0000000e80)="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", 0x36b}], 0x4}}], 0x1, 0x40080a0) (async)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) (async)
sendmmsg$inet(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x5410c3, 0x0) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000000c0)={0x7, 'dummy0\x00', {0x8}, 0x9}) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async)
sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, 0xffffffffffffffff, 0x0)

1.88071193s ago: executing program 4 (id=2154):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'})
ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000000))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xc}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x6b}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x6d4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2ef}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="500000000000000029000000040000007f06000000000000000000000001000000000000000600000000000000020000000000000007000000000000000000000000002400000000000000290000003200000000000000000000000000ffff00"/108], 0x78}}], 0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x4800)

1.878620292s ago: executing program 1 (id=2155):
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x4, 0xb, 0xa, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="b40800000000000073114200000000008510000002000000b7000000000000009500c200000000009500001200000000ad5640cecc7b2ddd81b13d568507693548da02d366f754edd53374d8feb3b57b591f5d3b0b806839ec5cd9adbf0b199aa664eb1db8cf7541853adbbe5b2bf62dc89052388bf4c486bb654c016695ae5a0050c25c2bef2c3dc72730153b2de9b22bd18dc68e0b504cf6583a7297ef34b5208c210e79fdd2c46b9a89d1a67b0b24acf8139d3b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

1.706374084s ago: executing program 1 (id=2157):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x29, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x308}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x973}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12d2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x56a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x575}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10e6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'veth1_to_batadv\x00'})

1.269014617s ago: executing program 0 (id=2159):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="180900000000000000000000000100001812000019c5", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000480)={0x4001, 0x8004}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000011c0)={0x1, 0x58, &(0x7f0000000100)}, 0x10)
socket$inet_icmp(0x2, 0x2, 0x1)
r8 = socket(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300)
syz_genetlink_get_family_id$ethtool(0x0, r8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r10=>0x0})
r11 = socket(0x10, 0x80002, 0x0)
r12 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r11, @ANYRES32=r11], 0x44}}, 0x2000800)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)

1.23720349s ago: executing program 1 (id=2160):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)

1.17684746s ago: executing program 4 (id=2161):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f00)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x80}, {0x8, 0x8, 0x100000002, 0x4, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x7fffffff, 0x2000000000000000, 0x2, 0xfffffffffffffffd}, 0xfffffffe, 0x0, 0x2, 0x0, 0x2, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0xce4aaf06f309f971}, 0x4004) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0xf4, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0xc002001) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r9=>0x0}) (async)
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000200)={0x0, 0xfffffffffffffda2, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r10, 0x1, 0x70bd27, 0x25dfdc06, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x0) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r12, r12, 0x2f}, 0x20)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, <r14=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r13, r13, 0x2f, 0x2020, 0x4, @void, @void, @value=r14}, 0x20) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000a000}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r7, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000060}, 0x4001)
r15 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) (async)
sendmsg$nl_xfrm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

1.116793521s ago: executing program 3 (id=2163):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020600)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x1)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000ffff2bbd709200bbdbdf25000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc020000000000000000000000000001"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020000}, 0xc, 0xfffffffffffffffd}, 0x20004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r7, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)

1.012607807s ago: executing program 4 (id=2164):
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000b0601020000000000000000050000070500010007000000267a39c1b7b43d83a6b1040007800900020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) (async)
syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c9"], 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async, rerun: 32)
r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x30, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x7, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c804}, 0x2) (async, rerun: 32)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @initdev}, &(0x7f0000000280)=0xc) (async, rerun: 32)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async, rerun: 32)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00', @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000800100000000000000fe000000ef1d62ee7e923b0ad9cd06000000753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964ff81213608ec3c3db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) (async)
sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e0010000000400008007020000d467aef0f23fe738fe606f366a8ad845cbc1d403869d1bba326fa04c3d6b8fa4292c98fc38be60c55dba7768f9d105510bdf20f63bc1f261b6230f3b053be41b248b6a11b3e14a5904fcd221d05afaf49517761161e2eef4489880b41ef4101430a813616d210b2cd84be8c85561a594f8f6ae360d65525043ed103b89e416928ba508f8d080060a4630d2838891cbb2d001f3e16a"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) (async)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
recvfrom$phonet(r7, 0x0, 0x0, 0x40010102, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r8, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000002400)}}], 0x1, 0x0) (async, rerun: 32)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.012109095s ago: executing program 1 (id=2165):
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
socket$tipc(0x1e, 0x5, 0x0) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x100004}}, 0x10) (async)
bind$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x100004}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x2}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800), &(0x7f00000007c0)=0xc) (async)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={<r6=>0x0, <r7=>0x0, <r8=>0x0}, &(0x7f00000007c0)=0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r5}, 0x8)
sendmmsg$unix(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x40044}}], 0x1, 0x4) (async)
sendmmsg$unix(r5, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x40044}}], 0x1, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r9=>r0, 0x8, 0x3, 0x1})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={<r10=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@RTM_NEWNSID={0x3c, 0x58, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8, 0x3, r9}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40881) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@RTM_NEWNSID={0x3c, 0x58, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_FD={0x8, 0x3, r9}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40881)
sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x200008}, [@generic={0x91, 0x1, 0x1, 0x22}]}, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x200008}, [@generic={0x91, 0x1, 0x1, 0x22}]}, &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ff9}, 0x94)

955.624727ms ago: executing program 3 (id=2166):
r0 = socket(0x2a, 0x2, 0x0)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) (async)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) (async)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (async, rerun: 32)
unshare(0x40400) (async, rerun: 32)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r4 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r4, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0x3}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x9200}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) (async)
socket$netlink(0x10, 0x3, 0xf) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x83}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async, rerun: 64)
unshare(0x2c020400) (async, rerun: 64)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048008}, 0x4040844)

925.839372ms ago: executing program 1 (id=2167):
unshare(0x2040400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000002817d49d6fc9540c5235077bdd06b6718a9e2cb1f8e8755e976bf907dc2114c2a3ce58518729397d53a13ae6e031af6bf1729d61aac71dcd6a2047c5023a617ff47ebdcbbf", @ANYRES16=0x0, @ANYBLOB="01002cbd700000000000010000000c0002000200000000000000040007800c0006000200000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000540)=0x2, 0x4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c5", 0x21}], 0x1}}], 0x2, 0x20000044)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000808000000b70300000000ff90850200007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x439a9e25, 0x5, 0x0, 0x3f, 0x7}, &(0x7f0000000440)=0x98)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000b40)="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", 0x102}], 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="e8000000000000001701000002000000cf000000aabee602fac79aa98ae739fcc8daa5a2a80e9b7325e7351a9bb7c8cb7db4d309f78a1a686fb1f36c4afdc899edcc3704641993f16464cc1519aaab8f4df15f20c302580f4d809673b82de3370e0bb91bb264b24b28979f0f0672e317484d077f2c8c97058731c47ba8745772187b29a203182cf96e4ec600a02b32d8532b0896ada28d326340b5bc73ffde0176afa60650f4076061d3394e7b2f3d337d487af68e312c3258822d231430b42f2f7f96997373aee85b986f8ac8edf7d7cf6e585c017abf0000000000"], 0xe8}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x40800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
unshare(0x28000600)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000000)={0x5, 0xfffffffa, 0xffff}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00'})

868.295467ms ago: executing program 4 (id=2169):
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x774, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000080)=""/18, &(0x7f00000000c0)=0x12)
getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000001140)={0x1f, 0x401, @none, 0x7}, 0xe)
ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f0000001180))
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001240)={'syztnl0\x00', &(0x7f0000001200)={'syztnl1\x00', <r3=>0x0, 0x8, 0x7, 0x18, 0x3, {{0x8, 0x4, 0x3, 0x2c, 0x20, 0x64, 0x0, 0x89, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0xd, [{@private=0xa010101, 0x8}]}]}}}}})
sendmsg$nl_route_sched(r2, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)=@getchain={0x44, 0x66, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0xe}, {0xf, 0xffff}, {0x0, 0x1}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000001380))
ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc038586b, &(0x7f00000014c0)={r2, &(0x7f00000013c0)='\x00', 0x98000, &(0x7f0000001400)={@align=0xa6da, {0xb58, 0x80, 0x1, 0x101}}, 0x1, &(0x7f0000001440), &(0x7f0000001480)=0x8})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001500)={<r4=>r0, 0x81, 0x5, 0x3})
getsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000001540)={@private, @remote, @loopback}, &(0x7f0000001580)=0xc)
ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f00000015c0))
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000001600)={0x0, 0x8, 0x1, 0xffffff01, @vifc_lcl_addr=@multicast1, @multicast1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001880)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f0000001680)=@newqdisc={0x188, 0x24, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0x4}, {0xb, 0xfff3}, {0x0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3d22}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x13, 0xfffffff8, 0xfffff625, 0x4}}}}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0x9, 0x8001, 0x1, 0xfec3, 0x2d1, 0x7}}, {0x12, 0x2, [0x5, 0x7, 0x7, 0xb, 0x3, 0x26a7, 0xfff8]}}, {{0x1c, 0x1, {0x9, 0x5b, 0x1, 0x3, 0x1, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x1, 0x8, 0x5, 0x2, 0x2, 0xfffffffa, 0x7}}, {0x12, 0x2, [0x8a, 0x7f, 0x5, 0x8, 0xf3c3, 0xffff, 0x401]}}]}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xd, 0x1, 0x4}}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xe1, 0xfcd1, 0x0, 0x2, 0x7fffffff, 0x6, 0xa}}, {0x18, 0x2, [0x7, 0x0, 0x9, 0x1dc0, 0x4, 0x1, 0x7, 0xf, 0x5, 0x10]}}, {{0x1c, 0x1, {0x5, 0x5, 0x10, 0x4, 0x1, 0xffffffff, 0x4, 0x6}}, {0x10, 0x2, [0x3, 0x5729, 0x5, 0x5, 0x5, 0x9]}}]}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "f74293019e721b3123acd9b1b9f65eec"}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x91}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000085}, 0x40040)
sendmsg(r0, &(0x7f00000020c0)={&(0x7f00000018c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001940)="9a43a969e63a9856a8b4d1e574fe11afce4bc884db3ca7ff2f50ba5a12933f21bf637ec06c31b925845e3b8cde9a1a10d6a4316dc290deb5e9402f95a67f0c93ca8fba1a92be11a1bbc374eb3509628c757f9fdcb4c8ed2aaec5b7ea946eca1b7475a1ee3c0a355fd188e0601e4b43c143cb38ed09", 0x75}, {&(0x7f00000019c0)="0e3681ad1611832e01f26a676aa3e9ad7a11f74074be46933472d354d2d47b11ded8dc80497bf09f3681eb37018203af5d39b292f5a18b20357200e4e314995647e43adb7d6bf9b89374f66162545e64329586a787f578f08aab6b3f342e3997f99929d89dccc93c06f55d698d8cc9f6fc9aaa27b90f5839693ed4e8de377455c94f8aac553980e13b3673f4d323b8e1a0ac58e7f348431e7e45b751d728173ef29aca633b88b43149d40e452b69712dfc5b5c7fcd6481b4fc6b6732e2ab4dfc3ba7eb02eed01c26f9915ccf8a02b0ad77d4fdb5960bac809808074bf02409c50534f7", 0xe3}, {&(0x7f0000001ac0)="31937cee53aa684986281dc407a63a482fa5cf474d3393f2b86002414837a692380314d7b7e1fc6f1f778ffa43f67e3f6313a24abdb6db724554bd03535ffc2bdf1796b20c97d83e1f900f90aa420feb4d4508355db811c285955489b9ee81c8f378e8d9c037add143a44d96ed3bf1cc2cbc23b65f3000abaeb6284c44e21d5cb15314b4d3a20040", 0x88}, {&(0x7f0000001b80)="661f94ea5ea59ba8cb3febdc0da6985817b7f9e77eaf6a8a608167ea7ca98f86edfc645e0e30dece03a8831c414019126710fa27b11aa4ec6102f3b9aba6f4e2039e8ddade61dd4143acb9fce797ac98f3c803bd159f2efadd5a3dffde5c7be5adf32230d6b9e664a4020e8a927d586833b616d73f8146c44272ee86897ab17ad7196b4c753800df45722fe60f48b679d71f1a3a796aef", 0x97}, {&(0x7f0000001c40)="ba644c173cbe3dcd", 0x8}, {&(0x7f0000001c80)="a30ea845457971db2509b7be8fea768ad32da35d654f75ed13001731ef89695fb85497368ec15fc668ce56c77b3fb1d907c1baaa2499c24721571d35ead83ac589374320c7caf3fcb551dbcf43034c74fa2dae8e1ecad3ea5929c81f8db9a164efe5c5e809a5777c511f8e74e6680fdafddb1c9302416de0bd04d20ba9ac9a729fe5dc8a45647c83d2f174c1c979cf58c7c353c5640bd77ba572af980f97efa0a1a45058a03621f3439f8e0bdb3b5aa31a68d29fac3a45c6de9347421b811316", 0xc0}, {&(0x7f0000001d40)="cfc53874733325ca705a485cb1b8f41cd799d63243741d04c01aaa5e1b5d008c7b934a169dc86d4c443b55f400a681d4ed8a9e98583c4511d657ec7ebb2e665b6f80ea66b14953e4aa40bbf7eee69ca00515cf7b21889cdeb57426f6220b6b36aaa856747eb319340e7f53129b", 0x6d}, {&(0x7f0000001dc0)="eae0f60ae6ef85935d6db587e17ed60908ddb78b7aa72398656c906a73c99d0efa01c3391373454c1ec6c243b0889d786c44fa3c183e162d1c7f89e4807b8697d27fe2", 0x43}], 0x8, &(0x7f0000001ec0)=[{0x10, 0x3a, 0x5}, {0x88, 0xff, 0x200, "8eeb87bf9dc2f336bf28208762fdba46fc15ea7ab3f564b78532cebff37b2df4a1f4b65924faa07661a8da05ada0c69aff3ec234118a8947ec5e36abfe3c0300c381d969ee37b0b51d03ba13c6d5b9578c9086f7c55ab517725d868515bb425b79c04a618e6e4df5bc92aa71ead1153356dde8c4"}, {0xf0, 0x29, 0x1, "15021de92943b6ac7fc8c22d2e00d8cc7092b0d44b41a314a062f97af1cf94cb4b657769cfada8992fdfef2f2df04e7acbc84b9bd279b61ac706539c685db278a82ff1d0872411c24203a3b76661668c3d510d8171e35374739f5f1c2b04dc083c4c16dd2bfaddbcbae8501956481ca5e8e99dd512bc2694dea84c6663282a7867cf5b1fdbb036120d5c24499247786334f1fec52fa78768b6efec1103efcb654a2f4029c378987ec84f10aefbed4cad1c91e486b99e62c9721dc881364fec16b0a197db5a553752f86905f0304155aad675a0a85e64ae53b4"}, {0x70, 0x109, 0x1262acdf, "d13231bce50c1f95adaae3fd1e10a301c58f41395c21b64c262bb84dbfb08771bbec4d65c44c17545bed2b512556f809ee21f2fce8f89f5b2129214aa5f122da7946e3d6177eb2ea3e2a66c378f64a41f2afcca85d7b722ba36fcc6f"}], 0x1f8}, 0x24004844)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000002100)={<r6=>0x0, 0xb8, "83dcd118fd9d1c9fc597d2f9c196e0ff484d3228e38eed9d870348e2f8b308cea8ba9cd32aa94aa2c963315d21b68da9fab7dda130bd92bae18d27dc176dd6919d0d6a1e8c1d44ae0a2a29316f05e26a0dc19eecd3a14b56ebdf177dbc3b811f64612768fb27a28a735ca896da789686a12608c99741c188b8638ba5009bc2a14cd7b377349ea23cf1ea1462cf5613c02bf60ff3c211fb02d8ac9b6f4b53575cb0ac2b8f4530b9a33ff6b6fbbf751478b5b1d19db67d9090"}, &(0x7f00000021c0)=0xc0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000002200)=@sack_info={r6, 0xfffffffe, 0x5}, &(0x7f0000002240)=0xc)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r4)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, r7, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4080)
getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000023c0)={<r8=>r6, 0x101, 0x2ba6f7a8, 0x7ff}, &(0x7f0000002400)=0x10)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000002440)={r8, 0x800}, 0x8)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000002480), &(0x7f00000024c0)=0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000002500)={r6, 0x6}, &(0x7f0000002540)=0x8)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000002580)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}})

765.356261ms ago: executing program 3 (id=2170):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x10004)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r2, 0x8b1a, &(0x7f0000000040))
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x1)

602.632172ms ago: executing program 4 (id=2172):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) (async, rerun: 32)
r1 = socket(0x10, 0x3, 0x0) (rerun: 32)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f00000000c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private=0xa010102, 0x4, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffffff, 0xffffff00, 0x5, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, {[0xff, 0xff, 0xff, 0x101, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, 0x2, 0x1, 0x8, 0x7, 0x1, 0x1000, 'veth1_to_hsr\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x0, 0x2e8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @loopback, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) (async)
recvfrom$unix(r2, 0x0, 0xfffffffffffffde3, 0x40010020, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c140000003e"], 0xa0}}, 0x0) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
close(0x3)

545.185264ms ago: executing program 2 (id=2173):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x1, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfff8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbfdbbbb080045"], 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x20008890}, 0x24000000)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

518.361242ms ago: executing program 3 (id=2174):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x402}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c659900", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

461.09613ms ago: executing program 2 (id=2175):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)

408.861994ms ago: executing program 4 (id=2176):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r2=>0x0, 0x29, 0x6, 0x87, 0x0, 0x10, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7800, 0xa8, 0x8}})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x27, 0xe, 0x0, &(0x7f0000000340)="f9ad48cc429d29fc68a30c0cf893", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000800ff07000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x22e, 0x10}, 0xc)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
readv(r6, 0x0, 0x0)
write$nci(r6, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x12, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb089, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x85}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x0, 0x2, 0xb, 0x0, 0x2, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xc9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2e}}]}, &(0x7f0000000440)='syzkaller\x00', 0x56b, 0x1e, &(0x7f0000000480)=""/30, 0x41000, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x2, 0x80000000, 0xab}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r3, r5, 0x1, r6], &(0x7f00000006c0)=[{0x1, 0x2, 0x5, 0x9}, {0x1, 0x2, 0x0, 0xb}], 0x10, 0x8}, 0x94)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)

404.098876ms ago: executing program 2 (id=2177):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x43, &(0x7f0000000000), 0xff7b)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000300)='\x00', 0x280, &(0x7f0000000340)={@_ha_fsid={[0xfffffffd, 0xffff760e]}, {0x3, 0x4, 0x8}}, 0x94d4, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x5})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3, 0x800000}, 0x38)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r4, &(0x7f0000003f40), 0x0, 0x200000d0)
socket(0x27, 0x80000, 0x3)
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r5)
accept4(r1, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x80000)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={<r8=>r0, &(0x7f0000000040)='..\x00', 0x101280, &(0x7f0000000080)={@_ha_fsid={[0x9, 0x1]}, {0xe6, 0x98, 0x9}}, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4})
getsockname$qrtr(r8, &(0x7f0000000180), &(0x7f00000001c0)=0xc)

265.517435ms ago: executing program 2 (id=2178):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f61400c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044804)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r3=>0x0, 0x2f, 0x3, 0xa, 0xe8, 0x21, @local, @mcast1, 0x700, 0x0, 0x1, 0x415e}})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000005c0)={0x0, 0x1, 0x5a, r3, 0x2}, 0xc)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000140)="f1b21d15142fbf28ab7542bc8ce2194486c800b0abaa15fd9eb651e07079d052b70aceba81bbb1b49632bbe4bd7d12a2a0879419674c0e635601b4d63afb84ee611e4a4efba82bd79d5a1ff9cad4eee03923f97332031a", &(0x7f00000001c0)=""/52, &(0x7f0000000240)="38015bd3d76b9aab607d54452d44d2f7092f26cae79c1d06b17a12a6db976af9c5378787707ae1ebb07b3d36e5e60af8bcb8f8fa566630e91edae829daa581c90e36ae704ddb449039b854f2392275ea025664c08886c03b263b107c", &(0x7f0000000340)="92cf2c2ad39ef872fb632c74d0175990244538f42e487d4e25b0508e65e7c5bf7801348677f9a05f87d292f1d1692d2e8f6de9505081b3b851f8da02b6408c8e1753b67c8c0fb92508fddaa2088a5555e5044ce32411098b7a5b615d170bee3a8671406ccfc056a38d88ab", 0xfffffff7, 0xffffffffffffffff, 0x4}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

144.928491ms ago: executing program 2 (id=2179):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250c0000002c0001801400020070696d7265673100000000000000000014000200626f6e6430000000000000d6869b8af96bfc970b94293417000000000034000180140002006272696467655f736c6176655f30000008000300010000001400020064756d6d793000000000000000000001"], 0x74}}, 0x6008085)

144.496898ms ago: executing program 3 (id=2180):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x8000)
r1 = socket$kcm(0xf, 0x3, 0x2)
writev(r0, &(0x7f0000001a40)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="6a5e08757b0cb9237d5eece06ef819ba18076bfa9ac054b3bd31a66334b06c899f1630402cb975f3c8f14f48dd18cc9dc3331b6c2eb63adf72ba54c6a16f9dd6cc42d0e04b1643f86cb93d653658a834fa2774c1828b4348de3be5ec9c6a1b22aa886d63c5ba253bf31b84bf98e0efa1088ff052dbbb22076e7af5fce788b8a56c60651ebbc06946f97580da66ec52e4774d6499b3fb1e59628bd3abecb9535a74e6f1835d7d3ff08644ae7d8a535c1a4155d47d0afb012fd5ddee472009cb35bc86d2057d702b1f1d7734516ed97fd31969614b90970799732922cb9db726cfe9c0494fa3c43194", 0xe8}, {&(0x7f0000001700)="09219ec83e867871d36faf6cceb823ef51cca58c81a5fd8b512d4e9f8cfe0d51e50ae435406d68ca5168e7d47c148906f7", 0x31}, {&(0x7f0000001740)="0f3b722dc776a0e4b7cf6667d9e2c2e9ac3e8007ea7828b271c5f953581312045e625b7fe87a408e40ea557c272008b52c56c00e87099e7cf4f7ba1245", 0x3d}, {&(0x7f0000001780)="cbc6f577e041b5aeecd0f0891901", 0xe}, {&(0x7f00000017c0)="485e97ee8f55f10e67158a151b6099f9af65fdb47f67a10a9fb96416e29ed63ec9c60b035e7382543b52dc7a0639fabf4735326ee1da9d15969cd8ae7f788fd8f4144779dac8c859f8ec9556dc9932f81ca2bc1f59560b9d14647f137e167d1c0225a06354145a801dc6b9677e9962443b1ea6c379b49029e7d0e0379f05bc09b5729af85d096000a821970e1e6d9319f71e6fee683b4e3cde62d762dd88b65024ed20e7bc12f78638ce2c65475608c325ddbe22e1c9d78da615070f5986db8fb27e239c9be4e15600e7d83043c36a11c8f0cc1fd8b6b6d7b7bb69c6edf2303c3736a2159f3087", 0xe7}, {&(0x7f00000018c0)="b375b642f11f8a5f358994c3c1fa53e49a813e75c727d232ef11a195686b1d7754bec96e3ecdfe789ec3a80448ba00b75e682de8fe5d2dcad22c6ab94713c4f37f06867f74a3809aa6561aa26cef0d79b713d2ae6df5e6bbf7b4f925237b507b8875189b9b3a60", 0x67}, {&(0x7f0000001940)="33ff04bb757cab2d36cc3a3a87", 0xd}, {&(0x7f0000001980)="da7c5e7a180960679c37bbea7c68435c24bd5a53f59da11f53d17ed991a0b85abf980df2b4ba7bcdf1f35f30efa7f5f8759dfae744579e21627b88d46ecc9c79e9696b231acdaaf76ba8be73d7f6f39d58e73114fe6d1f9b3ec729222d86284fbae9634bb7c8e0a5c68056c54ffccdc760cc79086431f0f9ce0b02f08a39c33bcf45856ffaa60d366b7973d53ac387cf643fbd85aaaf4dbd", 0x98}], 0x9)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async)
socket(0xa, 0x3, 0xff) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020756c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f4940000850000000600000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94)
socket$packet(0x11, 0x2, 0x300) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r4, 0x0, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c7fff00000081907800000000ffffffff2a00907800000000190d1bb2fc5f16cb9ad00d45abadd6a1a1cfbeeb29426444c99fefbb56daa23d06b21f4dacfe302e34154716af6d26c6fa4c06d89874e5662a2226db63d79c61848f6db9d6c0361bc2787313b65a446bab6446dcc530f146998d863dd054b120b8f29c16057706c4214fc51b90148f79c38b432bb7b6129f78eb18bfbc256baac212ca138f5f8e9446ebf9c42db49470"], 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r7)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x50, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a010400000000010000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a0000080003400000011c08000640ffffff000c000980080001400000003900000000000000000000000700000af492f0ded4bbcbbc4b635e2f68ba42fde884911c913b710a0fff91415b00000071f80000"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

94.287513ms ago: executing program 0 (id=2181):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x30, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x20001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xb, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x9d}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000200)=0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf25020000000a0009000180c2000002000008000300", @ANYRES32=r11, @ANYBLOB="8562d05071dc7b6b69fa4bf201ed7c6d140498042a6696499c70677f419f00"], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x4048080)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)

0s ago: executing program 2 (id=2182):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={<r0=>0xffffffffffffffff, &(0x7f0000000080)='O\x00', 0x20180, &(0x7f00000000c0)={@_ha_fsid={[0x1f93, 0x1ff]}, {0x4, 0x47, 0x7ff, 0x4}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000440)=0xfff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003000000060006000200010007000120fb"], 0x40}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="e5fa0000", @ANYRES64=0x0, @ANYRES16=r5, @ANYRES32=r5, @ANYRESDEC=r5], 0x44}}, 0x90)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x46}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x88a0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='O\x00', 0x20180, &(0x7f00000000c0)={@_ha_fsid={[0x1f93, 0x1ff]}, {0x4, 0x47, 0x7ff, 0x4}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000440)=0xfff}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003000000060006000200010007000120fb"], 0x40}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="e5fa0000", @ANYRES64=0x0, @ANYRES16=r5, @ANYRES32=r5, @ANYRESDEC=r5], 0x44}}, 0x90) (async)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x46}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x88a0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

kernel console output (not intermixed with test programs):

k: 'syz.4.507': attribute type 2 has an invalid length.
[  391.918682][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'.
[  392.032986][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'.
[  392.211405][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  392.355117][ T8003] lo speed is unknown, defaulting to 1000
[  392.361349][ T8003] lo speed is unknown, defaulting to 1000
[  392.390662][ T8003] lo speed is unknown, defaulting to 1000
[  392.468102][ T8003] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  392.567162][ T8003] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  392.628521][ T8015] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[  392.641882][ T8016] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[  392.657990][ T8003] lo speed is unknown, defaulting to 1000
[  392.665554][ T8017] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[  392.682380][ T8016] netlink: 'syz.0.515': attribute type 4 has an invalid length.
[  392.690381][ T8016] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.515'.
[  392.691258][ T8017] netlink: 'syz.0.515': attribute type 4 has an invalid length.
[  392.722805][ T8003] lo speed is unknown, defaulting to 1000
[  392.730416][ T8017] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.515'.
[  392.738183][ T8020] sctp: [Deprecated]: syz.4.517 (pid 8020) Use of int in max_burst socket option.
[  392.738183][ T8020] Use struct sctp_assoc_value instead
[  392.786543][ T8003] lo speed is unknown, defaulting to 1000
[  392.820532][ T8003] lo speed is unknown, defaulting to 1000
[  392.859357][ T8003] lo speed is unknown, defaulting to 1000
[  393.048140][ T8031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.521'.
[  393.274888][ T8006] lec:lec_atm_close: lec0: Shut down!
[  393.367282][ T8040] netlink: 'syz.2.523': attribute type 2 has an invalid length.
[  393.420127][ T8040] hmac(sha224: entered promiscuous mode
[  393.687721][ T8037] netlink: 76 bytes leftover after parsing attributes in process `syz.0.522'.
[  394.008558][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'.
[  394.029804][ T8049] erspan1: entered promiscuous mode
[  394.043565][ T8049] erspan1: entered allmulticast mode
[  394.293437][ T8054] netlink: 36 bytes leftover after parsing attributes in process `syz.0.527'.
[  394.448516][ T8058] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  395.085938][ T7986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  395.686411][ T8085] netlink: 84 bytes leftover after parsing attributes in process `syz.4.537'.
[  395.723421][ T8085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  396.327205][ T8122] xt_hashlimit: size too large, truncated to 1048576
[  396.437218][ T8126] syzkaller1: entered promiscuous mode
[  396.499172][ T8126] syzkaller1: entered allmulticast mode
[  396.563524][ T8136] netlink: 68 bytes leftover after parsing attributes in process `syz.4.546'.
[  396.997084][ T8147] bond4: option fail_over_mac: invalid value (127)
[  397.005941][ T8147] bond4 (unregistering): Released all slaves
[  397.441740][   T10] lec:lec_start_xmit: lec0:No lecd attached
[  397.864219][ T8173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.555'.
[  397.938900][ T8173] bridge0: port 1(vlan2) entered blocking state
[  397.954196][ T8173] bridge0: port 1(vlan2) entered disabled state
[  397.960741][ T8173] vlan2: entered allmulticast mode
[  397.972331][ T8173] geneve0: entered allmulticast mode
[  398.003955][ T8173] vlan2: entered promiscuous mode
[  398.009173][ T8173] geneve0: entered promiscuous mode
[  398.382181][ T8163] lec:lec_atm_close: lec0: Shut down!
[  398.540372][ T8185] geneve1: entered promiscuous mode
[  398.585218][ T8189] veth3: entered promiscuous mode
[  398.601558][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.561'.
[  398.686208][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.3.561'.
[  398.729100][ T8201] netlink: 'syz.4.562': attribute type 2 has an invalid length.
[  398.747538][ T8201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.562'.
[  399.014468][ T8215] netlink: 'syz.0.566': attribute type 1 has an invalid length.
[  399.276985][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'.
[  399.286091][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'.
[  399.302088][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'.
[  399.310923][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'.
[  399.459442][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'.
[  399.562024][ T8242] netlink: 'syz.4.574': attribute type 1 has an invalid length.
[  399.588654][ T8242] netlink: 'syz.4.574': attribute type 2 has an invalid length.
[  399.622240][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'.
[  399.660548][ T8242] netlink: 'syz.4.574': attribute type 1 has an invalid length.
[  399.684948][ T8242] netlink: 224 bytes leftover after parsing attributes in process `syz.4.574'.
[  399.700615][ T8246] syzkaller1: entered promiscuous mode
[  399.718335][ T8246] syzkaller1: entered allmulticast mode
[  400.056738][ T8264] netlink: 224 bytes leftover after parsing attributes in process `syz.1.580'.
[  400.143249][ T8267] netlink: 44 bytes leftover after parsing attributes in process `syz.3.581'.
[  400.156240][ T8270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.581'.
[  400.258499][ T8275] x_tables: duplicate underflow at hook 1
[  400.318228][ T8279] syzkaller0: entered promiscuous mode
[  400.341597][ T8279] syzkaller0: entered allmulticast mode
[  400.766439][ T8301] netlink: 'syz.2.586': attribute type 1 has an invalid length.
[  400.926973][ T8301] bond2: entered promiscuous mode
[  400.967889][ T8301] 8021q: adding VLAN 0 to HW filter on device bond2
[  401.038556][ T8312] bridge0: port 2(vlan3) entered blocking state
[  401.070403][ T8312] bridge0: port 2(vlan3) entered disabled state
[  401.083932][ T8312] vlan3: entered allmulticast mode
[  401.094500][ T8312] bridge0: entered allmulticast mode
[  401.144488][ T8312] vlan3: left allmulticast mode
[  401.150995][ T8312] bridge0: left allmulticast mode
[  401.212784][ T8320] openvswitch: netlink: Message has 16 unknown bytes.
[  401.277956][ T8316] netlink: 'syz.4.592': attribute type 21 has an invalid length.
[  401.297108][ T8320] tipc: Cannot configure node identity twice
[  401.305864][ T8316] netlink: 'syz.4.592': attribute type 20 has an invalid length.
[  401.323716][   T30] audit: type=1804 audit(1775886036.422:5): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.592" name="/newroot/115/memory.events" dev="tmpfs" ino=613 res=1 errno=0
[  401.844512][ T8341] 8021q: adding VLAN 0 to HW filter on device bond4
[  401.872514][ T5873] Bluetooth: hci2: link tx timeout
[  401.878185][ T5873] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  402.107078][ T8360] 8021q: VLANs not supported on lo
[  402.116965][ T8360] netlink: 'syz.0.603': attribute type 15 has an invalid length.
[  402.144577][ T8363] netlink: 'syz.2.604': attribute type 32 has an invalid length.
[  402.609003][ T8374] sit1: entered allmulticast mode
[  402.725874][ T8373] bridge_slave_0: left allmulticast mode
[  402.761255][ T8373] bridge_slave_0: left promiscuous mode
[  402.783256][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.907554][ T8373] bridge_slave_1: left allmulticast mode
[  402.913399][ T8373] bridge_slave_1: left promiscuous mode
[  402.919325][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.933955][ T8373] bond0: (slave bond_slave_0): Releasing backup interface
[  402.944322][ T8373] bond0: (slave bond_slave_1): Releasing backup interface
[  402.967836][ T8373] team0: Port device team_slave_0 removed
[  402.977923][ T8373] team0: Port device team_slave_1 removed
[  403.006046][ T8373] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.062390][ T8373] batman_adv: batadv0: Removing interface: batadv_slave_1
[  403.088476][ T8373] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  403.270447][ T8393] syzkaller0: entered promiscuous mode
[  403.292789][ T8393] syzkaller0: entered allmulticast mode
[  403.361304][ T8393] bond0: entered promiscuous mode
[  403.372931][ T8393] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  403.428066][ T8393] gretap0: entered promiscuous mode
[  403.438763][ T8393] debugfs: 'hsr1' already exists in 'hsr'
[  403.446025][ T8393] Cannot create hsr debugfs directory
[  403.451878][ T8393] hsr1: entered promiscuous mode
[  403.497541][ T8404] ip6gre1: entered promiscuous mode
[  403.523441][ T8404] ip6gre1: entered allmulticast mode
[  403.770555][ T8420] netlink: 'syz.0.620': attribute type 13 has an invalid length.
[  403.813357][ T8420] netlink: 'syz.0.620': attribute type 17 has an invalid length.
[  403.897833][ T5881] Bluetooth: hci2: command 0x0405 tx timeout
[  403.930537][ T8419] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.953275][ T8419] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.051224][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms
[  404.059665][    C0] lec:lec_tx_timeout: lec0
[  404.064651][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  404.244263][ T8420] bridge0: left allmulticast mode
[  404.254691][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.264039][ T8420] 8021q: adding VLAN 0 to HW filter on device team0
[  404.276738][ T8420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  404.320656][ T8425] bond3: entered promiscuous mode
[  404.329845][ T8425] 8021q: adding VLAN 0 to HW filter on device bond3
[  404.355478][ T8429] 8021q: adding VLAN 0 to HW filter on device bond3
[  404.370148][ T8429] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  404.382858][ T8429] bond3: (slave vcan1): Error -95 calling set_mac_address
[  404.423634][ T6624] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.450274][ T6624] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.460178][ T6624] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.469552][ T6624] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.617221][ T6624] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.657732][ T6624] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.700852][ T6624] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  404.724029][ T8450] __nla_validate_parse: 14 callbacks suppressed
[  404.724051][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'.
[  404.748356][ T6624] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.840457][ T8457] ve: renamed from ip6_vti0
[  404.886422][ T8458] syzkaller0: entered promiscuous mode
[  404.903288][ T8458] syzkaller0: entered allmulticast mode
[  405.096514][ T6624] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  405.170062][ T8471] netlink: 220 bytes leftover after parsing attributes in process `syz.3.632'.
[  405.201753][ T8471] netlink: 'syz.3.632': attribute type 2 has an invalid length.
[  405.275636][ T8471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.632'.
[  405.288703][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'.
[  405.322868][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'.
[  405.338017][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'.
[  405.353243][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'.
[  405.367520][ T8482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.633'.
[  405.370550][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'.
[  405.388700][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'.
[  405.427955][ T8478] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.436951][ T8478] 8021q: adding VLAN 0 to HW filter on device team0
[  405.451128][ T8478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  405.534644][ T8462] netlink: 'syz.4.629': attribute type 1 has an invalid length.
[  405.585749][ T8467] netlink: 'syz.4.629': attribute type 8 has an invalid length.
[  405.699011][ T8462] 8021q: adding VLAN 0 to HW filter on device bond5
[  405.753791][ T8467] bond5: (slave geneve2): making interface the new active one
[  405.783509][ T8467] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  405.984194][ T8507] netlink: 'syz.2.638': attribute type 13 has an invalid length.
[  405.992442][ T8507] netlink: 'syz.2.638': attribute type 17 has an invalid length.
[  406.005515][ T8510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.435995][ T5963] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  406.473931][ T5963] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  406.612212][ T5963] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  406.621402][ T5963] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  407.045410][ T8532] netlink: 'syz.1.644': attribute type 1 has an invalid length.
[  407.170126][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.261027][ T8507] 8021q: adding VLAN 0 to HW filter on device team0
[  407.344810][ T8507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  407.483024][ T8532] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  408.211395][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  408.371074][ T8591] netlink: 'syz.1.655': attribute type 9 has an invalid length.
[  408.460108][ T8557] lec:lec_atm_close: lec0: Shut down!
[  409.177077][ T8615] netlink: 'syz.4.660': attribute type 12 has an invalid length.
[  409.411422][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  409.753097][ T8648] netlink: 'syz.0.669': attribute type 1 has an invalid length.
[  409.787551][ T8649] tipc: Started in network mode
[  409.819527][ T8648] __nla_validate_parse: 19 callbacks suppressed
[  409.819546][ T8648] netlink: 92 bytes leftover after parsing attributes in process `syz.0.669'.
[  409.845841][ T8649] tipc: Node identity a60d79fc3b21, cluster identity 4711
[  409.854775][ T8649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.862181][ T8652] syzkaller0: entered promiscuous mode
[  409.868470][ T8652] syzkaller0: entered allmulticast mode
[  409.956413][ T8648] tipc: Resetting bearer <eth:syzkaller0>
[  409.987795][ T8648] tipc: Disabling bearer <eth:syzkaller0>
[  410.347824][ T8680] netlink: 216 bytes leftover after parsing attributes in process `syz.4.679'.
[  410.361474][ T8680] netlink: 'syz.4.679': attribute type 2 has an invalid length.
[  410.391352][ T8680] netlink: 'syz.4.679': attribute type 1 has an invalid length.
[  410.416358][ T8683] netlink: 'syz.1.678': attribute type 9 has an invalid length.
[  410.441281][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'.
[  410.509615][ T8683] erspan0: entered promiscuous mode
[  410.548921][ T8689] netlink: 'syz.0.680': attribute type 4 has an invalid length.
[  410.562756][ T8683] macvlan2: entered promiscuous mode
[  410.568342][ T8683] macvlan2: entered allmulticast mode
[  410.592834][ T8689] netlink: 17 bytes leftover after parsing attributes in process `syz.0.680'.
[  410.602529][ T8683] erspan0: entered allmulticast mode
[  410.677339][ T8691] netlink: 68 bytes leftover after parsing attributes in process `syz.4.681'.
[  410.830348][ T8699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.683'.
[  411.936476][ T8760] netlink: 'syz.0.702': attribute type 13 has an invalid length.
[  411.986519][ T8760] netlink: 'syz.0.702': attribute type 17 has an invalid length.
[  412.021005][ T8760] netlink: 'syz.0.702': attribute type 27 has an invalid length.
[  412.105413][ T8757] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'.
[  412.115145][ T8757] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'.
[  412.155228][ T8757] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'.
[  412.210965][ T8757] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'.
[  412.770224][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.778285][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.996602][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  413.010468][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  413.152404][ T8802] bond1: left promiscuous mode
[  413.160866][ T8802] veth1_vlan: left allmulticast mode
[  413.166697][ T8802] macvtap1: left promiscuous mode
[  413.172135][ T8802] macvtap1: left allmulticast mode
[  413.196994][ T8802] xfrm1: left allmulticast mode
[  413.203515][ T8802] hsr1: left allmulticast mode
[  413.216597][ T8802] batadv0: left allmulticast mode
[  413.222798][ T8802] bond0: left allmulticast mode
[  413.227777][ T8802] bond_slave_0: left allmulticast mode
[  413.233432][ T8802] bond_slave_1: left allmulticast mode
[  413.250022][ T8802] ip6gre1: left promiscuous mode
[  413.255250][ T8802] ip6gre1: left allmulticast mode
[  413.421136][ T8830] 8021q: adding VLAN 0 to HW filter on device bond4
[  413.482547][ T8834] bond4: (slave syz_tun): Enslaving as an active interface with an up link
[  413.496834][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  413.516431][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  413.559645][ T8835] bond4 (unregistering): (slave syz_tun): Releasing backup interface
[  413.596236][ T8835] bond4 (unregistering): Released all slaves
[  413.685424][   T69] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  413.695497][   T69] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  413.707592][   T69] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  413.717451][   T69] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  413.747256][   T69] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  413.771321][   T69] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  414.034131][ T8863] openvswitch: netlink: Missing key (keys=40, expected=80)
[  414.051242][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms
[  414.059368][    C0] lec:lec_tx_timeout: lec0
[  414.065102][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  414.622823][ T8894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.655432][ T8896] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  415.055197][ T8922] __nla_validate_parse: 7 callbacks suppressed
[  415.055219][ T8922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.733'.
[  415.477205][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'.
[  415.536545][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'.
[  415.724657][ T8950] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  415.783137][ T8950] bond5 (unregistering): Released all slaves
[  415.824477][ T8948] team0: Device macsec1 is already an upper device of the team interface
[  416.198732][ T8973] FAULT_INJECTION: forcing a failure.
[  416.198732][ T8973] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  416.215551][ T8973] CPU: 0 UID: 0 PID: 8973 Comm: syz.4.742 Not tainted syzkaller #0 PREEMPT(full) 
[  416.215578][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  416.215589][ T8973] Call Trace:
[  416.215598][ T8973]  <TASK>
[  416.215616][ T8973]  dump_stack_lvl+0xe8/0x150
[  416.215653][ T8973]  should_fail_ex+0x412/0x560
[  416.215690][ T8973]  _copy_from_user+0x2d/0xb0
[  416.215715][ T8973]  __sys_bpf+0x229/0x950
[  416.215736][ T8973]  ? __pfx___sys_bpf+0x10/0x10
[  416.215771][ T8973]  ? ksys_write+0x242/0x270
[  416.215797][ T8973]  ? __pfx_ksys_write+0x10/0x10
[  416.215827][ T8973]  __x64_sys_bpf+0x7c/0x90
[  416.215855][ T8973]  do_syscall_64+0x14d/0xf80
[  416.215874][ T8973]  ? trace_irq_disable+0x3b/0x150
[  416.215891][ T8973]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.215911][ T8973]  ? clear_bhb_loop+0x40/0x90
[  416.215935][ T8973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.215955][ T8973] RIP: 0033:0x7f86a999c819
[  416.215975][ T8973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.215992][ T8973] RSP: 002b:00007f86a7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  416.216014][ T8973] RAX: ffffffffffffffda RBX: 00007f86a9c15fa0 RCX: 00007f86a999c819
[  416.216028][ T8973] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000003
[  416.216041][ T8973] RBP: 00007f86a7bf6090 R08: 0000000000000000 R09: 0000000000000000
[  416.216053][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.216064][ T8973] R13: 00007f86a9c16038 R14: 00007f86a9c15fa0 R15: 00007ffd2f825ca8
[  416.216096][ T8973]  </TASK>
[  416.399933][ T8977] netlink: 44 bytes leftover after parsing attributes in process `syz.0.745'.
[  416.692261][ T8992] netlink: 'syz.2.747': attribute type 1 has an invalid length.
[  416.736706][ T8992] 8021q: adding VLAN 0 to HW filter on device bond3
[  416.820697][ T8992] bond3: (slave dummy0): making interface the new active one
[  416.848648][ T8992] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  416.986596][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'.
[  417.185490][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'.
[  417.410362][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'.
[  417.681387][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.763'.
[  417.961424][ T9059] netlink: 'syz.2.765': attribute type 2 has an invalid length.
[  417.988963][ T9064] netlink: 'syz.4.768': attribute type 10 has an invalid length.
[  418.054184][ T9068] FAULT_INJECTION: forcing a failure.
[  418.054184][ T9068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  418.102601][ T9064] bond0: (slave wlan1): Opening slave failed
[  418.131962][ T9068] CPU: 0 UID: 0 PID: 9068 Comm: syz.0.769 Not tainted syzkaller #0 PREEMPT(full) 
[  418.131992][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  418.132003][ T9068] Call Trace:
[  418.132011][ T9068]  <TASK>
[  418.132020][ T9068]  dump_stack_lvl+0xe8/0x150
[  418.132053][ T9068]  should_fail_ex+0x412/0x560
[  418.132090][ T9068]  _copy_from_user+0x2d/0xb0
[  418.132116][ T9068]  map_delete_elem+0x2b8/0x690
[  418.132142][ T9068]  __sys_bpf+0x5e5/0x950
[  418.132165][ T9068]  ? __pfx___sys_bpf+0x10/0x10
[  418.132200][ T9068]  ? ksys_write+0x242/0x270
[  418.132226][ T9068]  ? __pfx_ksys_write+0x10/0x10
[  418.132256][ T9068]  __x64_sys_bpf+0x7c/0x90
[  418.132286][ T9068]  do_syscall_64+0x14d/0xf80
[  418.132305][ T9068]  ? trace_irq_disable+0x3b/0x150
[  418.132322][ T9068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.132343][ T9068]  ? clear_bhb_loop+0x40/0x90
[  418.132366][ T9068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.132386][ T9068] RIP: 0033:0x7fe62419c819
[  418.132405][ T9068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  418.132471][ T9068] RSP: 002b:00007fe624f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  418.132493][ T9068] RAX: ffffffffffffffda RBX: 00007fe624415fa0 RCX: 00007fe62419c819
[  418.132517][ T9068] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000003
[  418.132776][ T9068] RBP: 00007fe624f87090 R08: 0000000000000000 R09: 0000000000000000
[  418.132796][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.132807][ T9068] R13: 00007fe624416038 R14: 00007fe624415fa0 R15: 00007ffe5a81c668
[  418.132842][ T9068]  </TASK>
[  418.451651][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  418.668215][ T9092] dvmrp0: entered allmulticast mode
[  418.713330][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'.
[  418.811545][ T9113] netlink: 60 bytes leftover after parsing attributes in process `syz.4.779'.
[  419.091489][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  419.099659][    C0] lec:lec_tx_timeout: lec0
[  419.104523][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  420.025716][ T9153] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  420.131976][ T9156] syzkaller0: entered promiscuous mode
[  420.137610][ T9156] syzkaller0: entered allmulticast mode
[  420.438317][ T9168] __nla_validate_parse: 2 callbacks suppressed
[  420.438339][ T9168] netlink: 68 bytes leftover after parsing attributes in process `syz.2.795'.
[  420.491924][ T9168] netlink: 68 bytes leftover after parsing attributes in process `syz.2.795'.
[  420.536860][ T9168] netlink: 'syz.2.795': attribute type 32 has an invalid length.
[  420.653483][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'.
[  420.716368][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'.
[  421.017198][ T9183] xt_hashlimit: max too large, truncated to 1048576
[  421.041547][ T9183] xt_hashlimit: overflow, try lower: 2/0
[  421.273793][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.804'.
[  421.381975][ T9194] macvlan2: entered allmulticast mode
[  421.729925][ T9201] netlink: 'syz.3.806': attribute type 1 has an invalid length.
[  421.953593][ T9203] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  421.982479][ T9207] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.808'.
[  422.026494][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.809'.
[  422.865166][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'.
[  422.933864][ T9230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.358521][ T9242] netlink: 14 bytes leftover after parsing attributes in process `syz.4.816'.
[  423.436642][ T9242] bond0 (unregistering): left promiscuous mode
[  423.443750][ T9242] bond_slave_0: left promiscuous mode
[  423.449714][ T9242] bond_slave_1: left promiscuous mode
[  423.465415][ T9242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.479102][ T9242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.498693][ T9242] bond0 (unregistering): Released all slaves
[  423.739627][ T9252] geneve3: entered promiscuous mode
[  423.745063][ T9252] geneve3: entered allmulticast mode
[  423.752713][ T6624] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  423.771048][ T9253] netlink: 'syz.2.823': attribute type 10 has an invalid length.
[  423.781985][ T9251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  423.794447][ T6624] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  423.804926][ T6624] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  423.831430][ T6624] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  423.913304][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.824'.
[  424.047799][ T9262] 8021q: adding VLAN 0 to HW filter on device bond5
[  424.111198][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  424.119288][    C0] lec:lec_tx_timeout: lec0
[  424.124207][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  424.725855][ T9291] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  424.788373][ T9293] bond6 (unregistering): Released all slaves
[  426.015665][ T9345] netlink: 144 bytes leftover after parsing attributes in process `syz.1.845'.
[  426.258147][ T9354] ip6tnl1: entered allmulticast mode
[  426.295169][ T5946] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  426.312193][ T5946] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  426.321553][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  426.906192][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  427.000333][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.009355][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.092697][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  427.244801][ T9396] xt_hashlimit: size too large, truncated to 1048576
[  427.333654][ T9401] veth0_to_bridge: entered promiscuous mode
[  427.430278][ T9400] bond4: option arp_all_targets: invalid value (129)
[  427.549763][ T9400] bond4 (unregistering): Released all slaves
[  427.629241][ T7654] IPVS: starting estimator thread 0...
[  427.741803][ T9409] IPVS: using max 25 ests per chain, 60000 per kthread
[  427.985801][ T9392] veth0_to_bridge: left promiscuous mode
[  428.575106][ T9432] veth1_macvtap: left promiscuous mode
[  428.594149][ T9432] macsec0: entered allmulticast mode
[  428.763980][ T9438] netlink: 'syz.3.868': attribute type 13 has an invalid length.
[  428.989236][ T9433] veth1_macvtap: entered promiscuous mode
[  429.004648][ T9433] veth1_macvtap: entered allmulticast mode
[  429.011000][ T9433] macsec0: left allmulticast mode
[  429.018816][ T9433] veth1_macvtap: left allmulticast mode
[  429.131221][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  429.139317][    C0] lec:lec_tx_timeout: lec0
[  429.144573][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  429.265992][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'.
[  429.329426][ T9453] netlink: 'syz.0.875': attribute type 1 has an invalid length.
[  429.349542][ T9453] netlink: 224 bytes leftover after parsing attributes in process `syz.0.875'.
[  429.435372][ T9464] netlink: 'syz.1.877': attribute type 10 has an invalid length.
[  429.453746][ T9463] netlink: 'syz.1.877': attribute type 10 has an invalid length.
[  429.478016][ T9464] team0: Cannot enslave team device to itself
[  429.502079][ T9463] team0: Cannot enslave team device to itself
[  429.519800][ T9469] xt_cgroup: invalid path, errno=-2
[  429.672466][ T9475] netlink: 11 bytes leftover after parsing attributes in process `syz.4.881'.
[  429.722387][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'.
[  429.960585][ T9486] netlink: 27 bytes leftover after parsing attributes in process `syz.4.881'.
[  430.096180][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'.
[  430.381535][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  430.645842][ T9488] netlink: 'syz.2.885': attribute type 10 has an invalid length.
[  430.722452][ T9503] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0
[  431.092568][ T9513] sctp: [Deprecated]: syz.3.891 (pid 9513) Use of struct sctp_assoc_value in delayed_ack socket option.
[  431.092568][ T9513] Use struct sctp_sack_info instead
[  431.206453][ T9519] netlink: 'syz.0.892': attribute type 32 has an invalid length.
[  431.235987][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'.
[  431.497243][ T9519] bond6: option coupled_control: invalid value (12)
[  431.524058][ T9519] bond6 (unregistering): Released all slaves
[  432.016110][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'.
[  432.083826][ T9549] netlink: 260 bytes leftover after parsing attributes in process `syz.3.900'.
[  432.093989][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'.
[  432.135876][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'.
[  432.183493][ T9554] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.903'.
[  432.210193][ T9547] 8021q: VLANs not supported on ip6gre0
[  432.228941][ T9557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.904'.
[  432.433535][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'.
[  433.848933][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'.
[  433.928907][ T9585] xt_bpf: check failed: parse error
[  434.151215][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  434.159280][    C0] lec:lec_tx_timeout: lec0
[  434.164355][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  434.299643][ T9610] netlink: 140 bytes leftover after parsing attributes in process `syz.3.918'.
[  434.789810][ T9669] tun0: tun_chr_ioctl cmd 1074025672
[  434.858690][ T9669] tun0: ignored: set checksum disabled
[  434.874708][ T9674] No such timeout policy "syz0"
[  434.919630][ T9677] netlink: 'syz.1.927': attribute type 5 has an invalid length.
[  435.013070][ T9679] netlink: 'syz.4.928': attribute type 16 has an invalid length.
[  435.060002][ T9673] syzkaller0: entered promiscuous mode
[  435.074370][ T9673] syzkaller0: entered allmulticast mode
[  435.091368][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  435.107385][ T9686] mac80211_hwsim hwsim15 syzkaller0: Caught tx_queue_len zero misconfig
[  435.139261][ T9676] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  435.244353][ T9686] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  435.261024][ T9686] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  436.165770][ T9726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.171365][ T9653] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  436.195669][ T9726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.215497][ T9653] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  436.231943][ T9726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.243466][ T9653] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  436.263880][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.282669][ T9653] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  436.320689][ T9738] bond0: Error: Cannot enslave bond to itself.
[  436.332858][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.349294][ T9739] __nla_validate_parse: 10 callbacks suppressed
[  436.349317][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.940'.
[  436.468437][ T9738] geneve4: entered promiscuous mode
[  436.513425][ T9662] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  436.529511][ T9739] nbd: socks must be embedded in a SOCK_ITEM attr
[  436.543143][ T9662] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  436.613979][ T9662] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  436.634062][ T9726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.940'.
[  436.653602][ T9662] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  436.663652][ T9754] netlink: 'syz.0.944': attribute type 10 has an invalid length.
[  436.673307][ T9726] nbd: nbd64 already in use
[  436.674180][ T7908] block nbd64: NBD_DISCONNECT
[  436.717540][ T9755] netlink: 'syz.0.944': attribute type 10 has an invalid length.
[  436.725402][ T9754] team0: Port device dummy0 added
[  436.739240][ T9723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.787339][ T9723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.833762][ T9755] team0: Port device dummy0 removed
[  436.845116][ T9755] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  436.863746][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'.
[  436.908889][ T9746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.943'.
[  437.022728][ T7908] udevd[7908]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  437.276766][ T9780] 8021q: adding VLAN 0 to HW filter on device team0
[  437.322671][ T9780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  437.613188][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'.
[  437.808167][ T9800] syzkaller1: tun_chr_ioctl cmd 1074025677
[  437.832112][ T9800] syzkaller1: linktype set to 805
[  438.187739][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.963'.
[  438.265332][ T9818] 8021q: adding VLAN 0 to HW filter on device bond4
[  438.367103][ T9828] bond4: entered promiscuous mode
[  438.390532][ T9828] bond4: entered allmulticast mode
[  438.443228][ T9828] 8021q: adding VLAN 0 to HW filter on device bond4
[  438.492412][ T9828] team0: Port device bond4 added
[  438.500732][ T9839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.962'.
[  438.595726][ T9818] vxcan1: entered promiscuous mode
[  438.612216][ T9818] bond4: (slave vxcan1): refused to change device type
[  438.694734][ T9840] syzkaller0: entered promiscuous mode
[  438.700353][ T9840] syzkaller0: entered allmulticast mode
[  438.786153][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.968'.
[  439.026895][ T9856] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  439.066629][ T9858] netlink: 'syz.3.970': attribute type 12 has an invalid length.
[  439.084806][ T9858] netlink: 120 bytes leftover after parsing attributes in process `syz.3.970'.
[  439.123633][ T9856] netlink: 'syz.3.970': attribute type 12 has an invalid length.
[  439.171187][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  439.179275][    C0] lec:lec_tx_timeout: lec0
[  439.184357][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  439.204861][ T9856] netlink: 120 bytes leftover after parsing attributes in process `syz.3.970'.
[  439.268219][ T9860] ipip0: entered promiscuous mode
[  439.289147][ T9866] netlink: 'syz.4.972': attribute type 13 has an invalid length.
[  439.322533][ T9858] team0: Failed to send options change via netlink (err -105)
[  439.330089][ T9858] team0: Mode changed to "loadbalance"
[  439.533800][ T9877] vlan3: entered promiscuous mode
[  439.942830][ T9903] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  439.954644][ T9903] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  440.036210][ T9903] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  440.050491][ T9903] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  440.328813][ T9903] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  440.353049][ T9903] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  440.440672][ T9922] syzkaller0: entered promiscuous mode
[  440.446789][ T9922] syzkaller0: entered allmulticast mode
[  440.482907][ T9903] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  440.541680][ T9903] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  442.227316][ T9657] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.235886][ T9657] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  442.277206][ T9952] vlan2: entered allmulticast mode
[  442.323861][ T5946] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.350372][ T5946] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  442.457127][ T9662] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.481556][ T9662] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  442.556610][ T9662] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.573123][ T9662] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  442.621553][ T9966] sit0: entered promiscuous mode
[  442.632016][ T9966] netlink: 'syz.4.995': attribute type 1 has an invalid length.
[  442.650065][ T9966] __nla_validate_parse: 2 callbacks suppressed
[  442.650085][ T9966] netlink: 1 bytes leftover after parsing attributes in process `syz.4.995'.
[  443.044959][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1003'.
[  443.167964][T10000] xt_cgroup: invalid path, errno=-2
[  443.230063][ T9989] nbd4: detected capacity change from 0 to 63
[  443.251757][T10000] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  443.270881][ T5881] block nbd4: Receive control failed (result -32)
[  443.294152][ T7908] block nbd4: Dead connection, failed to find a fallback
[  443.312771][ T7908] block nbd4: shutting down sockets
[  443.348052][ T7908] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  443.365786][ T7908] Buffer I/O error on dev nbd4, logical block 0, async page read
[  443.376452][ T7908] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  443.388024][ T7908] Buffer I/O error on dev nbd4, logical block 1, async page read
[  443.397652][ T7908] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  443.408105][ T7908] Buffer I/O error on dev nbd4, logical block 2, async page read
[  443.426331][ T7908] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  443.437809][ T7908] Buffer I/O error on dev nbd4, logical block 3, async page read
[  443.457449][ T7908] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  443.481772][ T7908] Buffer I/O error on dev nbd4, logical block 0, async page read
[  443.500644][ T7908] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  443.551949][ T7908] Buffer I/O error on dev nbd4, logical block 1, async page read
[  443.562259][ T7908] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  443.586385][ T7908] Buffer I/O error on dev nbd4, logical block 2, async page read
[  443.621831][ T7908] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  443.653691][ T7908] Buffer I/O error on dev nbd4, logical block 3, async page read
[  443.667865][T10014] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1010'.
[  443.709738][ T7908] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  443.788461][ T7908] Buffer I/O error on dev nbd4, logical block 0, async page read
[  443.826560][ T7908] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  443.845167][ T7908] Buffer I/O error on dev nbd4, logical block 1, async page read
[  443.851627][T10024] ipt_ECN: cannot use operation on non-tcp rule
[  443.854544][T10026] openvswitch: netlink: IP tunnel TTL not specified.
[  443.874145][T10022] netlink: 'syz.3.1011': attribute type 4 has an invalid length.
[  443.874863][ T7908] ldm_validate_partition_table(): Disk read failed.
[  443.897430][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1012'.
[  443.910756][ T7908] Dev nbd4: unable to read RDB block 0
[  443.936948][ T7908]  nbd4: unable to read partition table
[  443.943698][T10024] netlink: 'syz.3.1011': attribute type 4 has an invalid length.
[  443.976238][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1012'.
[  443.984930][ T7908] ldm_validate_partition_table(): Disk read failed.
[  443.992489][T10031] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1011'.
[  443.998790][ T7908] Dev nbd4: unable to read RDB block 0
[  444.020444][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'.
[  444.058406][ T7908]  nbd4: unable to read partition table
[  444.191207][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  444.199308][    C0] lec:lec_tx_timeout: lec0
[  444.204687][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  444.236399][T10038] bridge0: port 2(syz_tun) entered blocking state
[  444.243955][T10038] bridge0: port 2(syz_tun) entered disabled state
[  444.255521][T10038] syz_tun: entered allmulticast mode
[  444.275464][T10038] syz_tun: entered promiscuous mode
[  444.494644][T10050] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 0, id = 0
[  445.103651][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'.
[  445.337829][T10048] syzkaller1: entered promiscuous mode
[  445.343526][T10048] syzkaller1: entered allmulticast mode
[  445.378071][T10043] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  445.638655][T10065] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  445.825783][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'.
[  446.376154][T10095] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1030'.
[  446.787138][ T5881] block nbd0: Receive control failed (result -1)
[  447.248729][T10128] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  447.355138][T10128] bond0 (unregistering): Released all slaves
[  447.456806][T10140] netlink: 'syz.3.1044': attribute type 4 has an invalid length.
[  447.483251][T10138] netlink: 'syz.0.1043': attribute type 1 has an invalid length.
[  447.503267][T10139] vlan3: entered promiscuous mode
[  447.521737][T10139] bridge0: entered promiscuous mode
[  447.546329][T10134] netlink: 'syz.3.1044': attribute type 4 has an invalid length.
[  447.727535][T10134] __nla_validate_parse: 3 callbacks suppressed
[  447.727556][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'.
[  447.779405][T10150] ip6gre0: Caught tx_queue_len zero misconfig
[  447.807219][T10150] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  448.461110][T10175] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1053'.
[  448.547597][T10175] bond0 (unregistering): Released all slaves
[  448.695355][T10186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1057'.
[  448.725687][T10186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1057'.
[  448.762931][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'.
[  448.854632][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'.
[  448.950269][T10194] ipvlan0: entered promiscuous mode
[  449.105770][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1061'.
[  449.162289][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'.
[  449.211181][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  449.219335][    C0] lec:lec_tx_timeout: lec0
[  449.225048][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  449.335951][T10200] bond5: entered promiscuous mode
[  449.369834][T10200] 8021q: adding VLAN 0 to HW filter on device bond5
[  449.405283][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'.
[  449.419713][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'.
[  449.753591][T10236] Bluetooth: MGMT ver 1.23
[  449.883697][T10240] xt_hashlimit: overflow, try lower: 0/0
[  449.924539][T10240] netlink: 'syz.2.1072': attribute type 4 has an invalid length.
[  449.924543][T10245] netlink: 'syz.2.1072': attribute type 4 has an invalid length.
[  449.928081][T10246] netlink: 'syz.2.1072': attribute type 4 has an invalid length.
[  450.166942][T10252] xt_hashlimit: size too large, truncated to 1048576
[  450.195553][T10254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.204853][T10250] netlink: 'syz.2.1077': attribute type 13 has an invalid length.
[  450.389888][T10263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.488901][T10263] tipc: Resetting bearer <eth:syzkaller0>
[  450.567539][T10265] syzkaller0: entered promiscuous mode
[  450.602895][T10265] syzkaller0: entered allmulticast mode
[  450.908101][T10286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.917749][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.117309][T10294] netlink: 'syz.0.1089': attribute type 1 has an invalid length.
[  451.184847][   T30] audit: type=1800 audit(1775886086.282:6): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1090" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1084 res=0 errno=0
[  451.430375][T10302] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  451.447144][ T7647] tipc: Node number set to 117440512
[  451.474077][T10302] tipc: Resetting bearer <eth:syzkaller0>
[  451.485766][T10311] netlink: 'syz.1.1095': attribute type 21 has an invalid length.
[  451.493876][T10311] netlink: 'syz.1.1095': attribute type 22 has an invalid length.
[  451.509190][T10311] netlink: 'syz.1.1095': attribute type 23 has an invalid length.
[  451.518164][T10301] tipc: Disabling bearer <eth:syzkaller0>
[  451.521385][T10311] netlink: 'syz.1.1095': attribute type 25 has an invalid length.
[  451.532408][T10311] netlink: 'syz.1.1095': attribute type 26 has an invalid length.
[  452.152158][T10326] lo: Caught tx_queue_len zero misconfig
[  452.258468][T10339] veth0_virt_wifi: entered promiscuous mode
[  452.815863][T10357] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  453.053851][T10368] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  453.252602][T10378] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20002
[  453.721655][T10398] xt_connbytes: Forcing CT accounting to be enabled
[  453.781430][T10398] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  453.820089][T10404] __nla_validate_parse: 10 callbacks suppressed
[  453.820112][T10404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1120'.
[  453.825676][T10401] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  454.231181][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  454.239274][    C0] lec:lec_tx_timeout: lec0
[  454.244344][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  454.408167][T10423] sit0: left promiscuous mode
[  454.524561][T10423] 8021q: adding VLAN 0 to HW filter on device team0
[  454.552999][T10423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  454.588616][T10429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1127'.
[  454.625391][T10448] geneve2: entered promiscuous mode
[  454.813831][T10459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.942038][T10459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.979967][T10459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.028574][T10459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.041116][T10461] tipc: Started in network mode
[  455.046094][T10461] tipc: Node identity 3a35a86a5d89, cluster identity 4711
[  455.057806][T10461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.073106][T10459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.115830][T10468] syzkaller0: entered promiscuous mode
[  455.125111][T10475] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1135'.
[  455.129975][T10468] syzkaller0: entered allmulticast mode
[  455.269514][T10461] tipc: Resetting bearer <eth:syzkaller0>
[  455.280744][T10481] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1136'.
[  455.315482][T10460] tipc: Resetting bearer <eth:syzkaller0>
[  455.364871][T10460] tipc: Disabling bearer <eth:syzkaller0>
[  455.644537][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1142'.
[  455.738306][T10493] syzkaller0: entered promiscuous mode
[  455.747774][T10498] validate_nla: 4 callbacks suppressed
[  455.747795][T10498] netlink: 'syz.2.1143': attribute type 2 has an invalid length.
[  455.761648][T10493] syzkaller0: entered allmulticast mode
[  455.781647][T10498] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1143'.
[  456.512350][T10520] net_ratelimit: 1 callbacks suppressed
[  456.512370][T10520] openvswitch: netlink: Missing valid actions attribute.
[  456.555232][T10520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.684232][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1148'.
[  456.811698][T10531] xt_hashlimit: size too large, truncated to 1048576
[  457.222944][T10549] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1157'.
[  457.574586][T10565] netlink: 'syz.3.1160': attribute type 6 has an invalid length.
[  457.608161][T10568] mac80211_hwsim hwsim15 syzkaller0: Caught tx_queue_len zero misconfig
[  457.655222][ T5871] Bluetooth: hci4: command 0x0406 tx timeout
[  457.662003][ T5878] Bluetooth: hci1: command 0x0406 tx timeout
[  457.667167][T10574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1164'.
[  457.668951][ T5142] Bluetooth: hci3: command 0x0406 tx timeout
[  457.849565][T10578] macsec2: entered allmulticast mode
[  457.858893][T10578] ip6gretap0: entered allmulticast mode
[  457.874005][T10578] ip6gretap0: left allmulticast mode
[  458.400889][T10599] dummy0: entered promiscuous mode
[  458.407124][T10599] dummy0: entered allmulticast mode
[  458.433173][T10608] geneve3: entered promiscuous mode
[  458.450798][ T9662] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.470884][ T9662] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.498858][ T9662] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.623644][ T9662] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.106789][T10649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1185'.
[  459.146972][T10651] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1184'.
[  459.251305][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  459.259681][    C0] lec:lec_tx_timeout: lec0
[  459.262375][T10663] 8021q: VLANs not supported on vcan0
[  459.264486][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  459.303870][T10663] netlink: 'syz.4.1186': attribute type 3 has an invalid length.
[  459.319554][T10663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1186'.
[  459.328258][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'.
[  459.509009][T10672] netlink: 'syz.3.1189': attribute type 1 has an invalid length.
[  459.577106][T10679] xt_cgroup: invalid path, errno=-2
[  459.607328][T10680] netlink: 'syz.3.1189': attribute type 8 has an invalid length.
[  459.618481][T10678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1192'.
[  459.690764][T10681] netlink: 'syz.1.1191': attribute type 4 has an invalid length.
[  459.702966][T10672] 8021q: adding VLAN 0 to HW filter on device bond7
[  459.745556][T10680] bond7: (slave geneve3): making interface the new active one
[  459.755300][T10680] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  459.785278][T10688] x_tables: duplicate underflow at hook 2
[  459.838129][ T9663] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  459.874396][ T9663] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  459.955670][ T9663] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  459.994609][T10691] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1195'.
[  459.997106][ T9663] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  460.089410][T10691] openvswitch: netlink: Flow key attr not present in new flow.
[  460.189756][T10703] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1197'.
[  460.393326][T10708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1199'.
[  461.217766][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'.
[  461.309828][T10730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1205'.
[  461.525724][T10734] xt_time: invalid argument - start or stop time greater than 23:59:59
[  461.635636][T10741] netlink: 'syz.1.1208': attribute type 11 has an invalid length.
[  461.939566][T10753] sctp: [Deprecated]: syz.2.1211 (pid 10753) Use of struct sctp_assoc_value in delayed_ack socket option.
[  461.939566][T10753] Use struct sctp_sack_info instead
[  462.486350][T10775] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  462.508973][T10775] bond0 (unregistering): Released all slaves
[  462.736354][T10784] syzkaller0: entered promiscuous mode
[  462.765159][T10784] syzkaller0: entered allmulticast mode
[  462.956747][T10797] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  463.469104][T10825] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  463.954686][T10847] IPv6: NLM_F_CREATE should be specified when creating new route
[  464.034472][T10818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  464.196248][T10851] x_tables: duplicate underflow at hook 1
[  464.249515][T10855] __nla_validate_parse: 6 callbacks suppressed
[  464.249536][T10855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1234'.
[  464.270270][T10851] sctp: [Deprecated]: syz.3.1236 (pid 10851) Use of int in maxseg socket option.
[  464.270270][T10851] Use struct sctp_assoc_value instead
[  464.413210][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'.
[  464.466707][T10863] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1239'.
[  464.589117][T10869] geneve5: entered promiscuous mode
[  464.611573][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.621241][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.783322][T10869] syzkaller1: entered promiscuous mode
[  464.783942][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1243'.
[  464.799820][T10869] syzkaller1: entered allmulticast mode
[  464.879484][T10882] netlink: 'syz.0.1243': attribute type 1 has an invalid length.
[  464.887646][T10879] 8021q: adding VLAN 0 to HW filter on device bond6
[  465.091177][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms
[  465.099293][    C0] lec:lec_tx_timeout: lec0
[  465.104589][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  465.672731][T10911] vlan4: entered promiscuous mode
[  465.677804][T10911] geneve1: entered promiscuous mode
[  465.734753][T10911] vlan4: entered allmulticast mode
[  465.744717][T10911] geneve1: entered allmulticast mode
[  465.805744][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'.
[  465.896249][T10931] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.1253'.
[  465.914262][T10931] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  466.183351][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1257'.
[  466.507671][T10953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.609068][T10957] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1262'.
[  466.647702][T10959] netlink: 'syz.4.1261': attribute type 4 has an invalid length.
[  466.648938][T10962] netlink: 'syz.4.1261': attribute type 4 has an invalid length.
[  466.698887][T10955] netlink: 'syz.4.1261': attribute type 4 has an invalid length.
[  466.707001][T10959] netlink: 'syz.4.1261': attribute type 4 has an invalid length.
[  467.002423][T10980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1268'.
[  467.145949][T10983] erspan0: entered promiscuous mode
[  467.153772][T10982] ip6tnl0: Caught tx_queue_len zero misconfig
[  467.242611][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'.
[  467.294941][T10990] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20004
[  467.333800][T10991] sch_fq: defrate 4294967293 ignored.
[  467.361244][T10990] sch_fq: defrate 4294967293 ignored.
[  467.497008][ T5946] tipc: Subscription rejected, illegal request
[  467.616543][T11009] netlink: 'syz.4.1276': attribute type 14 has an invalid length.
[  467.647331][T11013] netlink: 'syz.4.1276': attribute type 11 has an invalid length.
[  467.684744][T11009] ip6gretap0: entered promiscuous mode
[  467.775730][T11012] syz.0.1277 (11012) used greatest stack depth: 17472 bytes left
[  468.886416][T11069] netlink: 'syz.2.1287': attribute type 1 has an invalid length.
[  469.030147][T11069] 8021q: adding VLAN 0 to HW filter on device bond4
[  469.094709][T11088] netlink: 'syz.4.1292': attribute type 1 has an invalid length.
[  469.124175][T11082] bond4: (slave geneve6): making interface the new active one
[  469.133835][T11082] bond4: (slave geneve6): Enslaving as an active interface with an up link
[  469.395499][T11108] __nla_validate_parse: 5 callbacks suppressed
[  469.395519][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'.
[  469.605956][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'.
[  469.651795][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  470.077601][T11127] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1296'.
[  470.121177][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  470.129305][    C0] lec:lec_tx_timeout: lec0
[  470.134076][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  470.175029][T11132] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1297'.
[  470.184223][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'.
[  470.186935][T11127] syzkaller1: entered promiscuous mode
[  470.221928][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'.
[  470.233700][T11127] syzkaller1: entered allmulticast mode
[  470.465795][T11140] bridge0: port 3(veth0_to_bridge) entered blocking state
[  470.481910][T11140] bridge0: port 3(veth0_to_bridge) entered disabled state
[  470.489474][T11140] veth0_to_bridge: entered allmulticast mode
[  470.545544][T11144] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  470.581979][T11140] veth0_to_bridge: entered promiscuous mode
[  470.664394][T11151] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1302'.
[  471.463001][T11180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.514726][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'.
[  471.563446][T11182] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1307'.
[  472.309319][T11197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1311'.
[  472.915114][T11225] IPVS: set_ctl: invalid protocol: 94 10.1.1.0:20003
[  473.104744][T11227] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  473.123616][T11227] erspan0: left allmulticast mode
[  473.141801][T11227] macvlan2: left promiscuous mode
[  473.153427][T11227] macvlan2: left allmulticast mode
[  473.182574][T11227] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode
[  473.190376][T11227] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode
[  473.244202][T11227] bond4: left promiscuous mode
[  473.249533][T11227] bond4: left allmulticast mode
[  473.256064][T11227] ipip0: left promiscuous mode
[  473.263162][T11227] vlan3: left promiscuous mode
[  473.270150][T11227] bridge0: left promiscuous mode
[  473.289103][T11227] vlan4: left promiscuous mode
[  473.361750][T11227] geneve1: left promiscuous mode
[  473.378055][T11227] vlan4: left allmulticast mode
[  473.419027][T11227] geneve1: left allmulticast mode
[  473.562352][T11243] ip6tnl1: entered allmulticast mode
[  475.141275][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  475.149369][    C0] lec:lec_tx_timeout: lec0
[  475.154021][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  480.161343][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  480.169419][    C0] lec:lec_tx_timeout: lec0
[  480.174283][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  485.181233][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  485.189357][    C0] lec:lec_tx_timeout: lec0
[  485.194369][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  489.036946][T11260] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20003
[  489.042133][T11265] __nla_validate_parse: 1 callbacks suppressed
[  489.042152][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'.
[  489.107480][T11262] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1332'.
[  489.121936][T11262] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1332'.
[  489.155840][T11262] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1332'.
[  489.414695][T11286] netlink: 'syz.4.1338': attribute type 3 has an invalid length.
[  489.431835][T11283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  489.439741][T11283] syzkaller0: entered promiscuous mode
[  489.445529][T11283] syzkaller0: entered allmulticast mode
[  489.453489][T11282] veth1_virt_wifi: entered promiscuous mode
[  489.459441][T11282] veth1_virt_wifi: entered allmulticast mode
[  489.483034][T11283] tipc: Resetting bearer <eth:syzkaller0>
[  489.528856][T11291] xt_hashlimit: size too large, truncated to 1048576
[  489.702853][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'.
[  490.101829][T11311] sock: sock_timestamping_bind_phc: sock not bind to device
[  490.201270][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  490.209391][    C0] lec:lec_tx_timeout: lec0
[  490.214557][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  490.253997][T11315] netlink: 'syz.2.1344': attribute type 11 has an invalid length.
[  490.322383][T11277] tipc: Resetting bearer <eth:syzkaller0>
[  490.345397][T11277] tipc: Disabling bearer <eth:syzkaller0>
[  490.368349][ T5915] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.390834][ T5915] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  490.426136][ T5915] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.483169][ T5915] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  490.518256][ T5915] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.590930][ T5915] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  490.634603][ T5915] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  490.674974][ T5915] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  490.714959][T11328] netlink: 'syz.1.1348': attribute type 4 has an invalid length.
[  490.724201][T11332] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[  490.742979][T11334] netlink: 'syz.3.1351': attribute type 4 has an invalid length.
[  490.758668][T11328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1348'.
[  490.770716][T11334] netlink: 'syz.3.1351': attribute type 4 has an invalid length.
[  491.514437][T11370] netlink: 'syz.4.1360': attribute type 1 has an invalid length.
[  491.529859][T11363] can: request_module (can-proto-5) failed.
[  491.545529][T11370] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1360'.
[  491.557799][T11372] netlink: 'syz.3.1362': attribute type 2 has an invalid length.
[  491.570987][T11370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1360'.
[  491.899432][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'.
[  492.048424][T11395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1367'.
[  492.083651][T11398] dummy0: left promiscuous mode
[  492.088646][T11398] dummy0: left allmulticast mode
[  492.206261][T11400] netlink: 'syz.3.1368': attribute type 7 has an invalid length.
[  492.494419][T11419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.652330][T11419] bond5 (unregistering): Released all slaves
[  492.753868][T11430] tipc: Started in network mode
[  492.777381][T11430] tipc: Node identity da1ea656cbc8, cluster identity 4711
[  492.808541][T11430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  492.838948][T11432] syzkaller0: entered promiscuous mode
[  492.865550][T11432] syzkaller0: entered allmulticast mode
[  492.912794][T11438] bond0: (slave bond_slave_1): Releasing backup interface
[  493.016505][T11447] tipc: Resetting bearer <eth:syzkaller0>
[  493.044296][T11428] tipc: Resetting bearer <eth:syzkaller0>
[  493.112660][T11428] tipc: Disabling bearer <eth:syzkaller0>
[  493.162461][T11452] netlink: 'syz.1.1382': attribute type 7 has an invalid length.
[  493.198864][ T9646] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  493.198965][T11452] netlink: 'syz.1.1382': attribute type 7 has an invalid length.
[  493.218121][ T9646] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  493.295502][ T9646] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  493.334433][ T9646] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  493.453002][T11469] syzkaller0: entered promiscuous mode
[  493.468922][T11469] syzkaller0: entered allmulticast mode
[  493.550010][T11472] !©�9: entered promiscuous mode
[  493.557373][T11474] !©�9: left promiscuous mode
[  493.590521][T11477] wg2: Caught tx_queue_len zero misconfig
[  493.598028][T11469] batadv0: entered promiscuous mode
[  493.603408][T11469] batadv0: entered allmulticast mode
[  493.609160][T11469] bridge0: port 1(batadv0) entered blocking state
[  493.616486][T11469] bridge0: port 1(batadv0) entered disabled state
[  493.726788][T11480] ip6erspan1: entered promiscuous mode
[  493.737544][T11480] ip6erspan1: entered allmulticast mode
[  493.893979][ T9646] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  493.904209][ T9646] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  494.082419][T11497] __nla_validate_parse: 15 callbacks suppressed
[  494.082440][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1394'.
[  494.240517][T11501] žÿ: renamed from team_slave_1
[  494.501336][T11513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1400'.
[  494.837258][T11536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1406'.
[  494.889809][T11533] validate_nla: 5 callbacks suppressed
[  494.889831][T11533] netlink: 'syz.1.1404': attribute type 1 has an invalid length.
[  494.922734][T11538] lo speed is unknown, defaulting to 1000
[  494.928815][T11538] lo speed is unknown, defaulting to 1000
[  494.939731][T11533] bridge_slave_1: Caught tx_queue_len zero misconfig
[  494.962654][T11538] lo speed is unknown, defaulting to 1000
[  495.025190][T11542] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1408'.
[  495.043783][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'.
[  495.058166][T11538] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  495.221166][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  495.229257][    C0] lec:lec_tx_timeout: lec0
[  495.233985][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  495.266529][T11538] lo speed is unknown, defaulting to 1000
[  495.293811][T11538] lo speed is unknown, defaulting to 1000
[  495.334709][T11538] lo speed is unknown, defaulting to 1000
[  495.348799][T11554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1414'.
[  495.350070][T11538] lo speed is unknown, defaulting to 1000
[  495.384736][T11538] lo speed is unknown, defaulting to 1000
[  495.533611][T11558] tipc: Started in network mode
[  495.549860][T11558] tipc: Node identity 6aa0b41f1948, cluster identity 4711
[  495.557590][T11558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  495.566061][T11561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1417'.
[  495.577738][T11558] syzkaller0: entered promiscuous mode
[  495.585056][T11558] syzkaller0: entered allmulticast mode
[  495.645912][T11558] tipc: Resetting bearer <eth:syzkaller0>
[  495.693260][T11557] tipc: Resetting bearer <eth:syzkaller0>
[  495.757276][T11557] tipc: Disabling bearer <eth:syzkaller0>
[  495.886778][T11570] syzkaller0: entered promiscuous mode
[  495.912121][T11570] syzkaller0: entered allmulticast mode
[  496.080535][ T9646] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  496.097465][ T9646] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  496.176148][T11553] infiniband syz2: set down
[  496.227169][T11553] infiniband syz2: added syzkaller0
[  496.352601][ T9646] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  496.359758][T11594] netlink: 46 bytes leftover after parsing attributes in process `syz.3.1428'.
[  496.373272][ T9646] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  496.446992][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'.
[  496.492096][T11553] RDS/IB: syz2: added
[  496.499376][T11553] smc: adding ib device syz2 with port count 1
[  496.508661][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1431'.
[  496.526947][T11553] smc:    ib device syz2 port 1 has pnetid S (user defined)
[  497.015527][T11618] bond8: entered promiscuous mode
[  497.021101][T11618] 8021q: adding VLAN 0 to HW filter on device bond8
[  498.224787][T11656] pimreg9: entered allmulticast mode
[  498.858289][T11675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  498.866555][T11675] syzkaller0: entered promiscuous mode
[  498.872831][T11675] syzkaller0: entered allmulticast mode
[  498.904602][T11675] tipc: Resetting bearer <eth:syzkaller0>
[  498.923853][T11674] tipc: Resetting bearer <eth:syzkaller0>
[  498.947769][T11674] tipc: Disabling bearer <eth:syzkaller0>
[  499.778425][T11703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  499.854237][T11710] netlink: 'syz.2.1451': attribute type 10 has an invalid length.
[  500.172825][T11703] lo speed is unknown, defaulting to 1000
[  500.175139][ T9646] smc: removing ib device syz2
[  500.189967][T11623] lo speed is unknown, defaulting to 1000
[  500.227276][T11715] netlink: zone id is out of range
[  500.233145][T11715] netlink: zone id is out of range
[  500.241422][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  500.248595][T11715] netlink: zone id is out of range
[  500.249482][    C0] lec:lec_tx_timeout: lec0
[  500.256028][T11715] netlink: zone id is out of range
[  500.259707][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  500.275840][T11715] netlink: zone id is out of range
[  500.293587][T11715] netlink: zone id is out of range
[  500.543905][T11721] netlink: 'syz.0.1453': attribute type 5 has an invalid length.
[  500.553068][T11721] __nla_validate_parse: 3 callbacks suppressed
[  500.553088][T11721] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1453'.
[  500.579987][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'.
[  500.619487][T11715] lo speed is unknown, defaulting to 1000
[  500.713341][T11718] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1453'.
[  500.926920][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1456'.
[  501.562177][T11742] netlink: 'syz.0.1459': attribute type 8 has an invalid length.
[  501.876720][ T5915] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.900538][ T5915] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  501.995257][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'.
[  502.033964][ T5915] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.038258][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'.
[  502.046557][ T5915] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.517614][T11771] netlink: 'syz.0.1464': attribute type 10 has an invalid length.
[  502.527177][T11771] team0: Device veth1_macvtap failed to register rx_handler
[  502.567120][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'.
[  502.707503][T11776] netlink: 'syz.2.1466': attribute type 1 has an invalid length.
[  502.715779][T11776] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1466'.
[  502.725181][T11776] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1466'.
[  502.770374][T11776] netlink: 'syz.2.1466': attribute type 1 has an invalid length.
[  502.970430][T11787] lo speed is unknown, defaulting to 1000
[  502.986787][T11784] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  503.662441][T11812] dvmrp1: entered allmulticast mode
[  503.847699][T11818] netlink: 'syz.4.1478': attribute type 10 has an invalid length.
[  503.891431][T11818] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1478'.
[  504.210000][T11831] netlink: 'syz.0.1480': attribute type 1 has an invalid length.
[  504.384555][T11831] bond7: entered promiscuous mode
[  504.393131][T11831] 8021q: adding VLAN 0 to HW filter on device bond7
[  505.118567][T11870] sctp: [Deprecated]: syz.3.1486 (pid 11870) Use of int in max_burst socket option deprecated.
[  505.118567][T11870] Use struct sctp_assoc_value instead
[  505.938429][T11896] delete_channel: no stack
[  506.051152][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  506.059344][    C0] lec:lec_tx_timeout: lec0
[  506.064482][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  506.133790][T11912] ip6tnl0: Caught tx_queue_len zero misconfig
[  506.154008][T11912] __nla_validate_parse: 2 callbacks suppressed
[  506.154027][T11912] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1495'.
[  506.543844][T11925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  506.572325][T11925] syzkaller0: entered promiscuous mode
[  506.577878][T11925] syzkaller0: entered allmulticast mode
[  506.635777][T11925] tipc: Resetting bearer <eth:syzkaller0>
[  506.653170][T11924] tipc: Resetting bearer <eth:syzkaller0>
[  506.687948][T11924] tipc: Disabling bearer <eth:syzkaller0>
[  507.077748][T11947] netlink: 'syz.4.1504': attribute type 1 has an invalid length.
[  507.112743][T11947] netlink: 'syz.4.1504': attribute type 4 has an invalid length.
[  507.129070][T11949] netlink: 'syz.0.1506': attribute type 5 has an invalid length.
[  507.130768][T11947] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1504'.
[  507.153021][T11952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1504'.
[  507.181010][T11949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1506'.
[  507.310622][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1508'.
[  507.337508][T11947] syzkaller0: entered promiscuous mode
[  507.345103][T11947] syzkaller0: entered allmulticast mode
[  507.365523][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1508'.
[  507.428454][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1508'.
[  509.635061][T11986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1518'.
[  509.650829][T11996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1521'.
[  509.668486][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'.
[  509.710295][T11998] hsr_slave_0: left promiscuous mode
[  509.717528][T11998] hsr_slave_1: left promiscuous mode
[  509.747364][T12004] xt_ipcomp: unknown flags 1D
[  509.784025][T12007] tipc: Failed to remove unknown binding: 66,1,1/0:1953241456/1953241458
[  509.816949][T12007] tipc: Failed to remove unknown binding: 66,1,1/0:1953241456/1953241458
[  509.862057][T12007] tipc: Failed to remove unknown binding: 66,1,1/0:1953241456/1953241458
[  510.036576][ T9646] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  510.054702][ T9646] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  510.103392][ T9646] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  510.131312][ T9646] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  510.490149][T12031] lo speed is unknown, defaulting to 1000
[  511.091179][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  511.099398][    C0] lec:lec_tx_timeout: lec0
[  511.104503][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  511.445931][T12068] __nla_validate_parse: 6 callbacks suppressed
[  511.445952][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'.
[  511.716333][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'.
[  511.827848][T12083] nbd: must specify at least one socket
[  511.849173][T12083] sctp: [Deprecated]: syz.0.1544 (pid 12083) Use of int in max_burst socket option.
[  511.849173][T12083] Use struct sctp_assoc_value instead
[  511.886480][T12079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1542'.
[  511.911297][T12080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1542'.
[  512.190544][T12092] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20000
[  512.659657][T12103] dvmrp6: entered allmulticast mode
[  512.781958][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'.
[  512.785337][T12119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  512.818457][T12119] syzkaller0: entered promiscuous mode
[  512.825315][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'.
[  512.826350][T12119] syzkaller0: entered allmulticast mode
[  512.973413][T12125] tipc: Resetting bearer <eth:syzkaller0>
[  512.988175][T12118] tipc: Resetting bearer <eth:syzkaller0>
[  513.005919][T12118] tipc: Disabling bearer <eth:syzkaller0>
[  513.094844][T12132] netlink: 'syz.1.1555': attribute type 4 has an invalid length.
[  513.103181][T12131] netlink: 'syz.3.1559': attribute type 5 has an invalid length.
[  513.156320][T12131] netlink: 'syz.3.1559': attribute type 9 has an invalid length.
[  513.175198][T12131] netlink: 'syz.3.1559': attribute type 6 has an invalid length.
[  513.238578][T12131] netlink: 'syz.3.1559': attribute type 7 has an invalid length.
[  513.325318][T12131] netlink: 'syz.3.1559': attribute type 8 has an invalid length.
[  513.658350][T12146] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1562'.
[  514.054332][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'.
[  515.954746][T12131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  516.111188][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  516.119258][    C0] lec:lec_tx_timeout: lec0
[  516.124816][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  516.150006][T12166] netlink: 'syz.1.1568': attribute type 10 has an invalid length.
[  516.169383][T12165] netlink: 'syz.4.1566': attribute type 12 has an invalid length.
[  516.178954][T12165] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.1566'.
[  516.188179][T12166] team0: Port device dummy0 added
[  516.209246][T12172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1569'.
[  516.330913][T12172] bond9: entered promiscuous mode
[  516.349489][T12172] bond9: entered allmulticast mode
[  516.587013][T12186] syzkaller0: entered promiscuous mode
[  516.605742][T12186] syzkaller0: entered allmulticast mode
[  516.629702][T12201] __nla_validate_parse: 1 callbacks suppressed
[  516.629724][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'.
[  516.735180][T12203] tipc: New replicast peer: 255.255.255.255
[  516.744634][T12203] tipc: Enabled bearer <udp:syz2>, priority 10
[  516.890892][T12210] sctp: [Deprecated]: syz.2.1580 (pid 12210) Use of int in max_burst socket option deprecated.
[  516.890892][T12210] Use struct sctp_assoc_value instead
[  516.916621][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1579'.
[  516.942665][T12209] macvtap0: entered promiscuous mode
[  516.948275][T12209] batadv0: entered promiscuous mode
[  516.954314][T12209] macvtap0: entered allmulticast mode
[  516.960065][T12209] batadv0: entered allmulticast mode
[  516.968190][T12209] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  516.976954][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'.
[  517.004387][T12214] batadv0: left allmulticast mode
[  517.022810][T12214] batadv0: left promiscuous mode
[  517.078393][T12216] netlink: 'syz.2.1581': attribute type 1 has an invalid length.
[  517.219067][T12218] netlink: 'syz.2.1581': attribute type 1 has an invalid length.
[  517.862956][ T8823] tipc: Node number set to 2636937724
[  517.952700][T12256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  517.968993][T12256] syzkaller0: entered promiscuous mode
[  517.977291][T12256] syzkaller0: entered allmulticast mode
[  518.093437][T12256] tipc: Resetting bearer <eth:syzkaller0>
[  518.174867][T12254] tipc: Resetting bearer <eth:syzkaller0>
[  518.217835][T12254] tipc: Disabling bearer <eth:syzkaller0>
[  518.635492][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'.
[  518.711536][T12276] tun0: tun_chr_ioctl cmd 1074025672
[  518.728480][T12276] tun0: ignored: set checksum disabled
[  519.228770][T12298] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  519.253960][T12298] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode
[  519.262269][T12298] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode
[  519.466403][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1608'.
[  519.498464][T12303] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  519.524352][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1608'.
[  519.539301][T12303] bond5 (unregistering): Released all slaves
[  520.053848][T12324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'.
[  520.114270][T12324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'.
[  520.139935][T12326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1611'.
[  520.186257][T12326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1611'.
[  520.354349][T12324] bridge0: port 3(vlan2) entered blocking state
[  520.361069][T12324] bridge0: port 3(vlan2) entered disabled state
[  520.368583][T12324] vlan2: entered allmulticast mode
[  520.402882][T12324] geneve0: entered allmulticast mode
[  520.417439][T12324] vlan2: entered promiscuous mode
[  520.433488][T12324] geneve0: entered promiscuous mode
[  520.591586][T12330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  520.884422][T12340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.906667][T12343] dummy0: entered promiscuous mode
[  520.912504][T12343] vlan3: entered promiscuous mode
[  520.942731][T12342] ip6t_REJECT: ECHOREPLY is not supported
[  520.962971][T12344] syzkaller0: entered promiscuous mode
[  520.968595][T12344] syzkaller0: entered allmulticast mode
[  521.034204][T12339] tipc: Resetting bearer <eth:syzkaller0>
[  521.069823][T12339] tipc: Disabling bearer <eth:syzkaller0>
[  521.131169][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  521.139381][    C0] lec:lec_tx_timeout: lec0
[  521.144831][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  521.697788][T12369] __nla_validate_parse: 2 callbacks suppressed
[  521.697809][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1626'.
[  521.975923][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'.
[  522.079186][T12386] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1629'.
[  522.259186][T12390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  522.287852][T12390] syzkaller0: entered promiscuous mode
[  522.333675][T12390] syzkaller0: entered allmulticast mode
[  522.419020][T12389] tipc: Resetting bearer <eth:syzkaller0>
[  522.440672][T12389] tipc: Disabling bearer <eth:syzkaller0>
[  523.085878][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'.
[  523.343076][T12443] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1646'.
[  523.442722][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1647'.
[  523.482681][ T5915] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  523.499945][ T5915] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  523.511985][ T8823] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  523.627630][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'.
[  523.685235][T12455] bond7 (unregistering): Released all slaves
[  523.881879][T12473] netlink: 'syz.0.1653': attribute type 1 has an invalid length.
[  523.906556][T12453] bond7: entered promiscuous mode
[  523.912635][T12453] 8021q: adding VLAN 0 to HW filter on device bond7
[  524.060967][T12473] 8021q: adding VLAN 0 to HW filter on device bond8
[  524.161944][ T8823] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  524.213093][ T5881] Bluetooth: hci2: command 0x0405 tx timeout
[  524.246261][T12479] bond8: (slave gretap1): making interface the new active one
[  524.258278][T12479] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  524.273925][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'.
[  524.375149][ T8823] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  524.392705][T12473] bond8 (unregistering): (slave gretap1): Releasing active interface
[  524.436287][T12473] bond8 (unregistering): Released all slaves
[  524.503892][T12496] veth0_to_bond: Caught tx_queue_len zero misconfig
[  524.665196][T12500] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1659'.
[  525.183733][T12521] pimreg: tun_chr_ioctl cmd 1074025677
[  525.189644][T12521] pimreg: linktype set to 774
[  525.217000][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'.
[  526.151166][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  526.159290][    C0] lec:lec_tx_timeout: lec0
[  526.164282][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  526.492151][T12573] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  526.507225][T12576] lo speed is unknown, defaulting to 1000
[  526.781735][T12578] lo speed is unknown, defaulting to 1000
[  526.897141][T12586] __nla_validate_parse: 1 callbacks suppressed
[  526.897164][T12586] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1685'.
[  527.068192][T12589] syzkaller0: entered promiscuous mode
[  527.083038][T12589] syzkaller0: entered allmulticast mode
[  527.353485][T12596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  527.361619][T12596] syzkaller0: entered promiscuous mode
[  527.367218][T12596] syzkaller0: entered allmulticast mode
[  527.590460][T12600] xfrm0: Caught tx_queue_len zero misconfig
[  527.615701][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1691'.
[  527.651877][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  527.682430][T12584] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  527.688740][T12584] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  527.703731][T12584] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  527.712205][T12584] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  527.738379][T12584] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  527.759868][T12584] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  527.808225][T12584] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  527.821641][T12584] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  527.847707][T12584] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  527.863240][T12584] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  528.033056][T12613] netlink: 'syz.2.1696': attribute type 11 has an invalid length.
[  528.047327][T12613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1696'.
[  528.065814][T12614] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1694'.
[  528.132605][T12595] tipc: Resetting bearer <eth:syzkaller0>
[  528.200104][T12595] tipc: Disabling bearer <eth:syzkaller0>
[  528.782595][T12621] SET target dimension over the limit!
[  528.819117][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'.
[  528.883134][T12628] netlink: 'syz.2.1699': attribute type 8 has an invalid length.
[  528.895866][T12628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1699'.
[  528.924803][T12630] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1698'.
[  528.926045][T12624] 8021q: adding VLAN 0 to HW filter on device team0
[  528.987748][T12624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  529.233753][T12636] xt_hashlimit: size too large, truncated to 1048576
[  529.329800][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1703'.
[  529.356508][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1703'.
[  529.675176][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'.
[  529.739791][T12655] : entered promiscuous mode
[  529.812992][T12655] openvswitch: : Dropping previously announced user features
[  530.009548][T12664] netlink: 'syz.2.1709': attribute type 9 has an invalid length.
[  530.312860][T12673] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004
[  530.405590][T12683] netlink: 'syz.0.1712': attribute type 1 has an invalid length.
[  530.559181][T12688] netlink: 'syz.3.1716': attribute type 2 has an invalid length.
[  531.030636][T12706] netlink: 'syz.3.1719': attribute type 1 has an invalid length.
[  531.081881][T12706] bond10: entered promiscuous mode
[  531.092711][T12706] 8021q: adding VLAN 0 to HW filter on device bond10
[  531.167839][T12706] bridge0: port 3(batadv1) entered blocking state
[  531.171378][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  531.182523][    C0] lec:lec_tx_timeout: lec0
[  531.187181][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  531.193984][T12706] bridge0: port 3(batadv1) entered disabled state
[  531.272079][T12706] batadv1: entered allmulticast mode
[  531.287087][T12706] batadv1: entered promiscuous mode
[  531.671776][ T9655] batman_adv: batadv1: IGMP Querier appeared
[  531.677876][ T9655] batman_adv: batadv1: MLD Querier appeared
[  531.829211][T12743] x_tables: ip_tables: icmp match: only valid for protocol 1
[  531.849718][T12742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.874207][T12742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.918878][T12747] __nla_validate_parse: 8 callbacks suppressed
[  531.918900][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1729'.
[  531.943810][T12736] netlink: 'syz.0.1727': attribute type 3 has an invalid length.
[  531.952193][T12736] netlink: 'syz.0.1727': attribute type 3 has an invalid length.
[  531.960475][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'.
[  532.007910][T12742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  532.022218][T12742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.136140][T12756] netlink: 'syz.0.1731': attribute type 1 has an invalid length.
[  532.168329][T12742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  532.187199][T12742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.189988][T12762] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1731'.
[  532.296061][T12756] 8021q: adding VLAN 0 to HW filter on device bond8
[  532.359002][T12742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  532.431824][T12742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.733546][ T5915] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  532.744240][ T5915] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.809666][ T5915] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  532.857185][ T5915] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.970298][ T5915] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  533.004407][ T5915] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.243795][T12815] netlink: 'syz.4.1744': attribute type 1 has an invalid length.
[  533.243799][T12808] --map-set only usable from mangle table
[  533.274098][T12802] bond5: option lacp_active: invalid value (8)
[  533.296985][T12802] bond5 (unregistering): Released all slaves
[  533.427703][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1747'.
[  533.457756][ T9655] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  533.466839][ T9655] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.792691][T12837] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1749'.
[  533.850892][T12841] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  534.083841][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'.
[  534.120748][T12853] lo speed is unknown, defaulting to 1000
[  534.248713][T12863] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  534.343050][T12865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1756'.
[  534.352747][T12865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1756'.
[  534.406298][T12869] sctp: [Deprecated]: syz.4.1757 (pid 12869) Use of struct sctp_assoc_value in delayed_ack socket option.
[  534.406298][T12869] Use struct sctp_sack_info instead
[  534.557113][T12875] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.584481][T12875] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  534.690673][T12875] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.739222][T12875] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  534.856247][T12875] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.871023][T12875] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  534.960690][T12875] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.971766][T12875] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  535.160466][ T9662] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.169524][ T9662] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  535.267425][ T5946] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.286278][ T5946] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  535.334208][T12909] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1763'.
[  535.405340][T12909] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1763'.
[  535.477639][ T9663] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.491174][ T9663] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  535.539796][T12909] gretap1: entered promiscuous mode
[  535.545619][T12909] gretap1: entered allmulticast mode
[  535.551932][ T9663] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.563820][ T9663] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  535.581345][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  535.693048][T12920] gre0: Master is either lo or non-ether device
[  535.771973][T12922] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  535.834512][T12925] Cannot find del_set index 4 as target
[  536.201520][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  536.209628][    C0] lec:lec_tx_timeout: lec0
[  536.214797][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  536.745741][T12980] lo speed is unknown, defaulting to 1000
[  536.823321][T12982] macvlan3: entered promiscuous mode
[  536.831596][T12982] bond0: entered promiscuous mode
[  536.838846][T12982] bond_slave_0: entered promiscuous mode
[  536.850936][T12982] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  536.866960][T12982] team0: Port device macvlan3 added
[  537.491541][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  537.794098][T13013] __nla_validate_parse: 4 callbacks suppressed
[  537.794119][T13013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1798'.
[  537.827617][T13013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1798'.
[  537.849932][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'.
[  538.077201][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'.
[  538.099145][T13039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1802'.
[  538.513895][T13062] netlink: 'syz.0.1808': attribute type 29 has an invalid length.
[  538.534289][T13062] macsec1: entered promiscuous mode
[  538.539792][T13062] batadv_slave_1: entered promiscuous mode
[  539.378526][T13091] netlink: 'syz.3.1816': attribute type 11 has an invalid length.
[  539.416077][T13091] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1816'.
[  539.870315][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'.
[  540.331047][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'.
[  540.398000][T13131] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  540.500388][T13129] xt_TPROXY: Can be used only with -p tcp or -p udp
[  540.634009][T13129] syzkaller0: entered promiscuous mode
[  540.639634][T13129] syzkaller0: entered allmulticast mode
[  540.647421][T13135] syzkaller1: entered promiscuous mode
[  540.660226][T13135] syzkaller1: entered allmulticast mode
[  540.666714][T13144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1830'.
[  541.226144][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  541.234257][    C0] lec:lec_tx_timeout: lec0
[  541.238932][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  541.435158][T13164] netlink: 'syz.3.1835': attribute type 2 has an invalid length.
[  541.443330][T13164] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1835'.
[  541.453756][T13164] netlink: 'syz.3.1835': attribute type 2 has an invalid length.
[  542.869125][T13169] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  542.883024][T13180] netlink: 'syz.4.1837': attribute type 8 has an invalid length.
[  542.968461][T13178] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  543.070053][T13186] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20004
[  543.141744][T13186] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20004
[  543.464527][ T9659] tipc: Subscription rejected, illegal request
[  543.485728][T13209] bridge2: entered promiscuous mode
[  543.491015][T13209] bridge2: entered allmulticast mode
[  543.510314][T13209] team0: Port device bridge2 added
[  543.660334][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'.
[  543.750168][T13227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1852'.
[  543.786466][T13226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1852'.
[  543.898598][T13238] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1854'.
[  544.066466][T13245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1855'.
[  544.163349][T13242] netlink: 'syz.3.1855': attribute type 1 has an invalid length.
[  544.213817][T13252] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1858'.
[  544.389666][T13258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1859'.
[  544.574999][T13267] pim6reg: entered allmulticast mode
[  544.643621][T13271] pim6reg: left allmulticast mode
[  544.974293][T13284] lo speed is unknown, defaulting to 1000
[  545.010341][T13289] netlink: 'syz.1.1865': attribute type 1 has an invalid length.
[  545.211424][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  545.240770][T13289] 8021q: adding VLAN 0 to HW filter on device bond6
[  545.356148][T13303] bond6: (slave geneve4): making interface the new active one
[  545.380000][T13303] bond6: (slave geneve4): Enslaving as an active interface with an up link
[  545.471503][ T9655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.492084][ T9655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.551210][ T9655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.590541][ T9655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  545.643203][T13326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.721682][    T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  546.112451][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'.
[  546.166154][T13345] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  546.245126][T13340] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1879'.
[  546.254280][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  546.254313][    C0] lec:lec_tx_timeout: lec0
[  546.263186][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  546.587788][T13374] openvswitch: netlink: Flow key attr not present in new flow.
[  547.030218][T13393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1893'.
[  547.203152][T13403] syzkaller0: entered promiscuous mode
[  547.208863][T13403] syzkaller0: entered allmulticast mode
[  547.275227][T13403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  547.295653][T13402] tipc: Resetting bearer <eth:syzkaller0>
[  547.338107][T13402] tipc: Disabling bearer <eth:syzkaller0>
[  547.419228][T13407] syzkaller1: entered promiscuous mode
[  547.442538][T13407] syzkaller1: entered allmulticast mode
[  547.949535][T13422] lo speed is unknown, defaulting to 1000
[  548.123341][T13453] netlink: 'syz.1.1911': attribute type 1 has an invalid length.
[  548.188736][T13442] lo speed is unknown, defaulting to 1000
[  548.543714][T13460] geneve5: entered promiscuous mode
[  548.549003][T13460] geneve5: entered allmulticast mode
[  548.674135][T13480] __nla_validate_parse: 9 callbacks suppressed
[  548.674158][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1920'.
[  548.732651][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'.
[  548.749465][T13480] netlink: 'syz.3.1920': attribute type 14 has an invalid length.
[  548.773941][T13480] netlink: 'syz.3.1920': attribute type 12 has an invalid length.
[  548.819205][T13484] netlink: 'syz.4.1921': attribute type 4 has an invalid length.
[  548.844993][T13467] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  548.864489][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1920'.
[  548.878408][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'.
[  548.897463][T13480] netlink: 'syz.3.1920': attribute type 14 has an invalid length.
[  548.905432][T13480] netlink: 'syz.3.1920': attribute type 12 has an invalid length.
[  549.076952][T13484] syzkaller0: entered promiscuous mode
[  549.082911][T13484] syzkaller0: entered allmulticast mode
[  549.093456][T13484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  549.105235][T13483] tipc: Resetting bearer <eth:syzkaller0>
[  549.132419][T13483] tipc: Disabling bearer <eth:syzkaller0>
[  549.239619][T13497] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1924'.
[  549.278614][T13494] bond12: option arp_all_targets: invalid value (129)
[  549.296096][T13502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'.
[  549.307025][T13497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1924'.
[  549.319909][T13494] bond12 (unregistering): Released all slaves
[  549.425623][T13502] 8021q: adding VLAN 0 to HW filter on device bond9
[  549.443544][T13505] bond9: entered promiscuous mode
[  549.462004][T13505] bond9: entered allmulticast mode
[  549.506544][T13505] 8021q: adding VLAN 0 to HW filter on device bond9
[  549.539415][T13505] team0: Port device bond9 added
[  549.560798][T13510] vxcan3: entered promiscuous mode
[  549.574022][T13510] bond9: (slave vxcan3): refused to change device type
[  549.916668][T13531] team0: entered promiscuous mode
[  549.922653][T13531] team_slave_0: entered promiscuous mode
[  549.928728][T13531] team_slave_1: entered promiscuous mode
[  549.937252][T13531] bond4: entered promiscuous mode
[  549.948987][T13531] dummy0: entered promiscuous mode
[  549.955469][T13531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  549.973083][T13530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  549.988230][T13530] syzkaller0: entered promiscuous mode
[  550.001950][T13530] syzkaller0: entered allmulticast mode
[  550.047450][T13530] tipc: Resetting bearer <eth:syzkaller0>
[  550.067880][T13540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1936'.
[  550.088146][T13529] tipc: Resetting bearer <eth:syzkaller0>
[  550.148193][T13529] tipc: Disabling bearer <eth:syzkaller0>
[  550.320202][T13559] netlink: 'syz.2.1942': attribute type 1 has an invalid length.
[  550.332561][T13559] nbd: couldn't find device at index -427251215
[  550.343680][T13558] tipc: Can't bind to reserved service type 0
[  550.452890][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1945'.
[  550.536167][T13574] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  550.597752][   T30] audit: type=1804 audit(1775886185.692:7): pid=13580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1949" name="/newroot/381/cgroup.controllers" dev="tmpfs" ino=1964 res=1 errno=0
[  550.644620][   T30] audit: type=1800 audit(1775886185.692:8): pid=13580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1949" name="cgroup.controllers" dev="tmpfs" ino=1964 res=0 errno=0
[  550.694699][   T30] audit: type=1800 audit(1775886185.722:9): pid=13580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1949" name="cgroup.controllers" dev="tmpfs" ino=1964 res=0 errno=0
[  550.819247][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1951'.
[  551.020663][T13597] FAULT_INJECTION: forcing a failure.
[  551.020663][T13597] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  551.069910][T13597] CPU: 1 UID: 0 PID: 13597 Comm: syz.3.1954 Not tainted syzkaller #0 PREEMPT(full) 
[  551.069946][T13597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  551.069958][T13597] Call Trace:
[  551.069966][T13597]  <TASK>
[  551.069975][T13597]  dump_stack_lvl+0xe8/0x150
[  551.070012][T13597]  should_fail_ex+0x412/0x560
[  551.070050][T13597]  _copy_to_user+0x31/0xb0
[  551.070078][T13597]  simple_read_from_buffer+0xe1/0x170
[  551.070123][T13597]  proc_fail_nth_read+0x1bb/0x230
[  551.070156][T13597]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  551.070189][T13597]  ? rw_verify_area+0x2a6/0x4d0
[  551.070212][T13597]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  551.070242][T13597]  vfs_read+0x20c/0xa70
[  551.070263][T13597]  ? fdget_pos+0x246/0x320
[  551.070287][T13597]  ? __pfx___mutex_lock+0x10/0x10
[  551.070309][T13597]  ? __pfx_vfs_read+0x10/0x10
[  551.070332][T13597]  ? __fget_files+0x2a/0x420
[  551.070354][T13597]  ? __fget_files+0x3a0/0x420
[  551.070371][T13597]  ? __fget_files+0x2a/0x420
[  551.070398][T13597]  ksys_read+0x150/0x270
[  551.070423][T13597]  ? __pfx_ksys_read+0x10/0x10
[  551.070458][T13597]  do_syscall_64+0x14d/0xf80
[  551.070478][T13597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.070498][T13597]  ? clear_bhb_loop+0x40/0x90
[  551.070521][T13597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.070540][T13597] RIP: 0033:0x7eff8195d04e
[  551.070560][T13597] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  551.070577][T13597] RSP: 002b:00007eff82846fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  551.070600][T13597] RAX: ffffffffffffffda RBX: 00007eff828476c0 RCX: 00007eff8195d04e
[  551.070613][T13597] RDX: 000000000000000f RSI: 00007eff828470a0 RDI: 0000000000000007
[  551.070626][T13597] RBP: 00007eff82847090 R08: 0000000000000000 R09: 0000000000000000
[  551.070638][T13597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  551.070650][T13597] R13: 00007eff81c16038 R14: 00007eff81c15fa0 R15: 00007fffdb839268
[  551.070682][T13597]  </TASK>
[  551.390137][T13604] syzkaller0: entered promiscuous mode
[  551.396142][T13604] syzkaller0: entered allmulticast mode
[  551.559054][T13612] netlink: 'syz.2.1962': attribute type 1 has an invalid length.
[  551.571400][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  551.778210][T13628] bridge0: port 2(erspan0) entered blocking state
[  551.791892][T13628] bridge0: port 2(erspan0) entered disabled state
[  551.810441][T13628] erspan0: entered allmulticast mode
[  551.837119][T13628] erspan0: entered promiscuous mode
[  551.889230][T13629] erspan0: left allmulticast mode
[  551.911532][T13629] erspan0: left promiscuous mode
[  551.933715][T13629] bridge0: port 2(erspan0) entered disabled state
[  552.051136][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms
[  552.059270][    C0] lec:lec_tx_timeout: lec0
[  552.064454][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  552.270484][T13645] veth11: entered allmulticast mode
[  552.293657][T13645] bond7: (slave veth11): Enslaving as an active interface with an up link
[  552.315108][T13639] bond7 (unregistering): (slave veth11): Releasing backup interface
[  552.326959][T13639] bond7 (unregistering): Released all slaves
[  552.472654][T13659] netlink: 'syz.2.1973': attribute type 1 has an invalid length.
[  552.649560][T13673] xt_hashlimit: size too large, truncated to 1048576
[  552.656856][T13673] xt_hashlimit: max too large, truncated to 1048576
[  552.708772][T13682] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  552.835749][T13681] syzkaller0: entered promiscuous mode
[  554.352242][T13763] x_tables: duplicate underflow at hook 1
[  554.439270][T13769] x_tables: duplicate underflow at hook 2
[  554.591447][T13780] __nla_validate_parse: 7 callbacks suppressed
[  554.591478][T13780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2004'.
[  554.884087][ T9655] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  554.911457][ T9655] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.921067][ T9655] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  554.960854][ T9655] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  554.980433][ T9655] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  555.000521][ T9655] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.009351][ T9655] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  555.031306][ T9655] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.284464][T13812] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2013'.
[  555.907053][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2025'.
[  556.205870][T13853] netlink: 'syz.1.2028': attribute type 1 has an invalid length.
[  556.247396][T13856] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2029'.
[  556.297496][T13859] netlink: 'syz.2.2030': attribute type 9 has an invalid length.
[  556.323587][T13859] netlink: 'syz.2.2030': attribute type 6 has an invalid length.
[  556.332605][T13861] netlink: 'syz.2.2030': attribute type 9 has an invalid length.
[  556.340526][T13861] netlink: 'syz.2.2030': attribute type 6 has an invalid length.
[  556.517919][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'.
[  556.527767][T13875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2036'.
[  556.542229][T13875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2036'.
[  556.702795][T13881] lo speed is unknown, defaulting to 1000
[  557.091281][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  557.099395][    C0] lec:lec_tx_timeout: lec0
[  557.104380][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  557.134148][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'.
[  557.161622][T13908] netlink: 'syz.3.2043': attribute type 30 has an invalid length.
[  557.191429][ T9659] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  557.199834][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'.
[  557.209290][ T9659] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  557.229856][T13908] netlink: 'syz.3.2043': attribute type 30 has an invalid length.
[  557.247219][T13913] bond0: (slave dummy0): Releasing backup interface
[  557.283794][T13913] bridge_slave_0: left promiscuous mode
[  557.295975][T13913] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.308511][T13913] bridge_slave_1: left allmulticast mode
[  557.315201][T13913] bridge_slave_1: left promiscuous mode
[  557.325544][T13913] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.342373][T13913] vlan2: left promiscuous mode
[  557.347553][T13913] geneve0: left promiscuous mode
[  557.358329][T13913] bond0: (slave bond_slave_0): Releasing backup interface
[  557.370279][T13913] bond0: (slave bond_slave_1): Releasing backup interface
[  557.385365][T13913] team0: Port device team_slave_0 removed
[  557.406204][T13913] team0: Port device team_slave_1 removed
[  557.416658][T13913] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.433465][T13913] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.446096][T13913] bond1: (slave bridge1): Releasing backup interface
[  557.457912][T13913] bond2: (slave geneve2): Releasing backup interface
[  557.485075][T13913] vlan2: left allmulticast mode
[  557.512624][T13913] geneve0: left allmulticast mode
[  557.518457][T13913] bridge0: port 3(vlan2) entered disabled state
[  557.541891][T13913] team0: Port device bond9 removed
[  557.555549][ T9659] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  557.588750][ T9659] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  557.800919][T13923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2045'.
[  558.492014][T13954] netlink: 'syz.1.2053': attribute type 1 has an invalid length.
[  559.212046][T13986] ip6tnl4: entered allmulticast mode
[  560.740125][T13995] lo speed is unknown, defaulting to 1000
[  560.888673][T14013] __nla_validate_parse: 17 callbacks suppressed
[  560.888696][T14013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'.
[  560.993307][T14021] netlink: 'syz.3.2071': attribute type 6 has an invalid length.
[  561.001276][T14020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2070'.
[  561.020663][T14021] IPv6: NLM_F_CREATE should be specified when creating new route
[  561.137245][T14029] netlink: 'syz.4.2074': attribute type 10 has an invalid length.
[  561.535598][T14042] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2076'.
[  561.566510][T14042] validate_nla: 1 callbacks suppressed
[  561.566534][T14042] netlink: 'syz.4.2076': attribute type 9 has an invalid length.
[  561.737531][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2077'.
[  561.758200][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'.
[  561.779046][T14047] geneve4: entered promiscuous mode
[  561.797496][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'.
[  562.025413][T14058] netlink: 'syz.4.2080': attribute type 21 has an invalid length.
[  562.053102][T14059] netlink: 'syz.3.2081': attribute type 1 has an invalid length.
[  562.111157][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  562.119243][    C0] lec:lec_tx_timeout: lec0
[  562.124219][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  562.130267][T14059] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2081'.
[  562.671339][T14084] netlink: 'syz.4.2087': attribute type 10 has an invalid length.
[  562.766151][T14082] pim6reg: entered allmulticast mode
[  562.779335][T14082] pim6reg: left allmulticast mode
[  563.015112][T14097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2091'.
[  563.175522][T14101] syzkaller0: mtu less than device minimum
[  564.359380][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'.
[  564.427236][T14133] netlink: 840 bytes leftover after parsing attributes in process `syz.4.2102'.
[  564.462067][T14136] netem: incorrect ge model size
[  564.468563][T14136] netem: change failed
[  564.571062][T14137] lo speed is unknown, defaulting to 1000
[  564.812775][T14155] netlink: 'syz.2.2108': attribute type 8 has an invalid length.
[  565.445088][T14172] hsr_slave_0: left promiscuous mode
[  565.485017][T14176] openvswitch: netlink: Unknown key attributes 2
[  565.511228][T14172] hsr_slave_1: left promiscuous mode
[  567.131153][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  567.139232][    C0] lec:lec_tx_timeout: lec0
[  567.144230][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  567.287162][T14237] __nla_validate_parse: 4 callbacks suppressed
[  567.287192][T14237] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2129'.
[  567.322930][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2129'.
[  567.732973][T14264] netlink: 'syz.4.2133': attribute type 1 has an invalid length.
[  567.755983][T14264] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2133'.
[  567.782015][T14254] lo speed is unknown, defaulting to 1000
[  567.859795][T14268] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2135'.
[  568.162046][T14276] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2137'.
[  568.232488][T14271] lo speed is unknown, defaulting to 1000
[  568.960055][T14315] bond5: Unable to set up delay as MII monitoring is disabled
[  569.000330][T14315] bond5 (unregistering): Released all slaves
[  569.010001][T14326] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2150'.
[  569.674093][T14332] veth0_virt_wifi: left promiscuous mode
[  569.690375][T14332] geneve1: left promiscuous mode
[  569.701069][T14332] erspan1: left promiscuous mode
[  569.706838][T14332] erspan1: left allmulticast mode
[  569.712641][T14332] veth3: left promiscuous mode
[  569.718370][T14332] sit1: left allmulticast mode
[  569.748979][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'.
[  569.800276][T14332] bond7: left promiscuous mode
[  569.807104][T14332] macvtap0: left promiscuous mode
[  569.813025][T14332] macvtap0: left allmulticast mode
[  569.820991][T14332] batadv_slave_1: left promiscuous mode
[  569.827412][T14332] macsec1: left promiscuous mode
[  569.835011][T14332] bond9: left promiscuous mode
[  569.839915][T14332] bond9: left allmulticast mode
[  569.899872][ T9655] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  569.941463][ T9655] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  569.970823][ T9655] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  570.006456][ T9655] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  570.114650][T14363] ip6erspan2: entered allmulticast mode
[  570.124267][T14358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2162'.
[  570.144471][T14358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2162'.
[  570.509487][T14392] netlink: 'syz.2.2171': attribute type 93 has an invalid length.
[  570.764462][T14406] sock: sock_set_timeout: `syz.2.2177' (pid 14406) tries to set negative timeout
[  570.783794][T14406] netlink: 'syz.2.2177': attribute type 1 has an invalid length.
[  570.791845][T14406] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2177'.
[  571.492509][    C1] ==================================================================
[  571.500649][    C1] BUG: KASAN: slab-use-after-free in ax25_heartbeat_expiry+0x115/0x140
[  571.508946][    C1] Read of size 4 at addr ffff888035f08060 by task syz.4.2176/14423
[  571.516964][    C1] 
[  571.519327][    C1] CPU: 1 UID: 0 PID: 14423 Comm: syz.4.2176 Not tainted syzkaller #0 PREEMPT(full) 
[  571.519354][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  571.519368][    C1] Call Trace:
[  571.519376][    C1]  <IRQ>
[  571.519385][    C1]  dump_stack_lvl+0xe8/0x150
[  571.519418][    C1]  print_report+0xba/0x230
[  571.519442][    C1]  ? ax25_heartbeat_expiry+0x115/0x140
[  571.519465][    C1]  kasan_report+0x117/0x150
[  571.519492][    C1]  ? ax25_heartbeat_expiry+0x115/0x140
[  571.519518][    C1]  ax25_heartbeat_expiry+0x115/0x140
[  571.519542][    C1]  call_timer_fn+0x192/0x640
[  571.519568][    C1]  ? __pfx_ax25_heartbeat_expiry+0x10/0x10
[  571.519589][    C1]  ? call_timer_fn+0xd4/0x640
[  571.519613][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  571.519643][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  571.519670][    C1]  ? __pfx_ax25_heartbeat_expiry+0x10/0x10
[  571.519693][    C1]  __run_timer_base+0x652/0x8b0
[  571.519717][    C1]  ? ktime_get+0x45/0x200
[  571.519741][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  571.519767][    C1]  ? sched_clock_cpu+0x74/0x440
[  571.519796][    C1]  run_timer_softirq+0xb7/0x170
[  571.519820][    C1]  handle_softirqs+0x22a/0x870
[  571.519847][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  571.519875][    C1]  __irq_exit_rcu+0x5f/0x150
[  571.519899][    C1]  irq_exit_rcu+0x9/0x30
[  571.519923][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  571.519953][    C1]  </IRQ>
[  571.519961][    C1]  <TASK>
[  571.519968][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  571.519991][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  571.520021][    C1] Code: f7 e8 fd cc ec f5 f7 c3 00 02 00 00 74 05 e8 90 38 18 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e4 87 de f5 65 8b 05 0d c0 67 07 85 c0 74 18 5b 41 5e c3 cc cc
[  571.520039][    C1] RSP: 0018:ffffc9000c1f67e8 EFLAGS: 00000206
[  571.520059][    C1] RAX: 0000000000000006 RBX: 0000000000000292 RCX: 0000000080000001
[  571.520073][    C1] RDX: 0000000000000006 RSI: ffffffff8df2c159 RDI: 0000000000000001
[  571.520086][    C1] RBP: 0000000000000000 R08: ffffffff9011b3b7 R09: 1ffffffff2023676
[  571.520101][    C1] R10: dffffc0000000000 R11: fffffbfff2023677 R12: ffff888089000000
[  571.520115][    C1] R13: ffff888088c00000 R14: ffffffff9a509c70 R15: 000000000000034e
[  571.520150][    C1]  debug_check_no_obj_freed+0x52e/0x550
[  571.520187][    C1]  __free_pages_ok+0x5a1/0xc50
[  571.520214][    C1]  pfifo_fast_change_tx_queue_len+0x965/0xa40
[  571.520253][    C1]  ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10
[  571.520280][    C1]  dev_qdisc_change_tx_queue_len+0x3a8/0x510
[  571.520310][    C1]  ? __pfx_dev_qdisc_change_tx_queue_len+0x10/0x10
[  571.520344][    C1]  netif_change_tx_queue_len+0x179/0x280
[  571.520375][    C1]  ? __pfx_netif_change_tx_queue_len+0x10/0x10
[  571.520405][    C1]  ? netif_change_flags+0xe8/0x1a0
[  571.520434][    C1]  do_setlink+0x112d/0x4590
[  571.520463][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  571.520508][    C1]  ? __pfx_do_setlink+0x10/0x10
[  571.520534][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  571.520567][    C1]  ? rcu_is_watching+0x15/0xb0
[  571.520595][    C1]  ? __mutex_trylock_common+0x158/0x260
[  571.520627][    C1]  ? __pfx___mutex_trylock_common+0x10/0x10
[  571.520658][    C1]  ? rcu_is_watching+0x15/0xb0
[  571.520684][    C1]  ? trace_contention_end+0x3d/0x150
[  571.520704][    C1]  ? __mutex_lock+0x319/0x1300
[  571.520724][    C1]  ? __pfx___nla_validate_parse+0x10/0x10
[  571.520751][    C1]  ? rtnl_newlink+0x883/0x1bb0
[  571.520777][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  571.520802][    C1]  ? ns_capable+0x89/0xe0
[  571.520829][    C1]  rtnl_newlink+0x14ca/0x1bb0
[  571.520860][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  571.520881][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.520918][    C1]  ? kasan_quarantine_put+0xbb/0x1f0
[  571.520941][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  571.520962][    C1]  ? kmem_cache_free+0x187/0x630
[  571.520985][    C1]  ? nlmon_xmit+0xb0/0x100
[  571.521015][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  571.521043][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  571.521067][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  571.521083][    C1]  ? __dev_queue_xmit+0x2b6/0x3920
[  571.521106][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  571.521143][    C1]  ? __dev_queue_xmit+0x2b6/0x3920
[  571.521173][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  571.521195][    C1]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  571.521219][    C1]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  571.521241][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  571.521263][    C1]  ? ref_tracker_free+0x693/0x840
[  571.521279][    C1]  ? __copy_skb_header+0xa3/0x4a0
[  571.521307][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  571.521330][    C1]  netlink_rcv_skb+0x232/0x4b0
[  571.521355][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  571.521378][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  571.521406][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  571.521433][    C1]  netlink_unicast+0x80f/0x9b0
[  571.521457][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  571.521478][    C1]  ? netlink_sendmsg+0x650/0xb40
[  571.521498][    C1]  ? skb_put+0x11b/0x210
[  571.521524][    C1]  netlink_sendmsg+0x813/0xb40
[  571.521554][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  571.521578][    C1]  ? aa_sock_msg_perm+0xf1/0x1b0
[  571.521597][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  571.521621][    C1]  ____sys_sendmsg+0x972/0x9f0
[  571.521653][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  571.521681][    C1]  ? import_iovec+0x73/0xa0
[  571.521704][    C1]  ___sys_sendmsg+0x2a5/0x360
[  571.521732][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  571.521761][    C1]  ? futex_wake+0x4ac/0x580
[  571.521795][    C1]  ? __fget_files+0x2a/0x420
[  571.521809][    C1]  ? __fget_files+0x3a0/0x420
[  571.521828][    C1]  __x64_sys_sendmsg+0x1bd/0x2a0
[  571.521856][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  571.521903][    C1]  ? rcu_is_watching+0x15/0xb0
[  571.521930][    C1]  do_syscall_64+0x14d/0xf80
[  571.521947][    C1]  ? trace_irq_disable+0x3b/0x150
[  571.521964][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.521983][    C1]  ? clear_bhb_loop+0x40/0x90
[  571.522005][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.522024][    C1] RIP: 0033:0x7f86a999c819
[  571.522044][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  571.522061][    C1] RSP: 002b:00007f86a7791028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  571.522084][    C1] RAX: ffffffffffffffda RBX: 00007f86a9c16270 RCX: 00007f86a999c819
[  571.522099][    C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  571.522113][    C1] RBP: 00007f86a9a32c91 R08: 0000000000000000 R09: 0000000000000000
[  571.522134][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  571.522147][    C1] R13: 00007f86a9c16308 R14: 00007f86a9c16270 R15: 00007ffd2f825ca8
[  571.522170][    C1]  </TASK>
[  571.522179][    C1] 
[  572.151134][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  572.151910][    C1] Allocated by task 11295:
[  572.159985][    C0] lec:lec_tx_timeout: lec0
[  572.167959][    C1]  kasan_save_track+0x3e/0x80
[  572.167986][    C1]  __kasan_kmalloc+0x93/0xb0
[  572.168014][    C1]  __kmalloc_cache_noprof+0x31c/0x660
[  572.181262][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  572.183969][    C1]  ax25_dev_device_up+0x54/0x5f0
[  572.232022][    C1]  ax25_device_event+0x127/0x8a0
[  572.237067][    C1]  notifier_call_chain+0x1be/0x400
[  572.242189][    C1]  __dev_notify_flags+0x1a9/0x310
[  572.247219][    C1]  netif_change_flags+0xe8/0x1a0
[  572.252236][    C1]  dev_change_flags+0x130/0x260
[  572.257103][    C1]  dev_ioctl+0x7b4/0x1150
[  572.261438][    C1]  sock_do_ioctl+0x23e/0x320
[  572.266035][    C1]  sock_ioctl+0x5c6/0x7f0
[  572.270365][    C1]  __se_sys_ioctl+0xfc/0x170
[  572.274963][    C1]  do_syscall_64+0x14d/0xf80
[  572.279555][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.285546][    C1] 
[  572.287887][    C1] Freed by task 14346:
[  572.291961][    C1]  kasan_save_track+0x3e/0x80
[  572.296643][    C1]  kasan_save_free_info+0x46/0x50
[  572.301708][    C1]  __kasan_slab_free+0x5c/0x80
[  572.306499][    C1]  __rcu_free_sheaf_prepare+0x129/0x290
[  572.312051][    C1]  rcu_free_sheaf+0x31/0x200
[  572.316732][    C1]  rcu_core+0x7cd/0x1070
[  572.321006][    C1]  handle_softirqs+0x22a/0x870
[  572.325774][    C1]  __irq_exit_rcu+0x5f/0x150
[  572.330370][    C1]  irq_exit_rcu+0x9/0x30
[  572.334643][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  572.340302][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  572.346485][    C1] 
[  572.348820][    C1] The buggy address belongs to the object at ffff888035f08000
[  572.348820][    C1]  which belongs to the cache kmalloc-256 of size 256
[  572.363057][    C1] The buggy address is located 96 bytes inside of
[  572.363057][    C1]  freed 256-byte region [ffff888035f08000, ffff888035f08100)
[  572.376777][    C1] 
[  572.379106][    C1] The buggy address belongs to the physical page:
[  572.385552][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35f08
[  572.394319][    C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  572.402904][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  572.410461][    C1] page_type: f5(slab)
[  572.414472][    C1] raw: 00fff00000000040 ffff88813fea7b40 dead000000000100 dead000000000122
[  572.423059][    C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  572.431648][    C1] head: 00fff00000000040 ffff88813fea7b40 dead000000000100 dead000000000122
[  572.440326][    C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  572.449185][    C1] head: 00fff00000000001 ffffea0000d7c201 00000000ffffffff 00000000ffffffff
[  572.457857][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  572.466719][    C1] page dumped because: kasan: bad access detected
[  572.473154][    C1] page_owner tracks the page as allocated
[  572.478871][    C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5865, tgid 5865 (syz-executor), ts 335980594772, free_ts 335864092175
[  572.500513][    C1]  post_alloc_hook+0x231/0x280
[  572.505293][    C1]  get_page_from_freelist+0x24dc/0x2580
[  572.510935][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[  572.516744][    C1]  allocate_slab+0x77/0x660
[  572.521346][    C1]  refill_objects+0x331/0x3c0
[  572.526035][    C1]  __pcs_replace_empty_main+0x2e6/0x730
[  572.531589][    C1]  __kmalloc_noprof+0x474/0x760
[  572.536448][    C1]  __register_sysctl_table+0xba1/0x1340
[  572.542015][    C1]  __devinet_sysctl_register+0x386/0x490
[  572.547656][    C1]  devinet_sysctl_register+0x187/0x200
[  572.553120][    C1]  inetdev_event+0xf35/0x1610
[  572.557827][    C1]  notifier_call_chain+0x1be/0x400
[  572.562966][    C1]  netif_change_name+0x5e5/0x960
[  572.567914][    C1]  do_setlink+0xb6c/0x4590
[  572.572338][    C1]  rtnl_newlink+0x15ad/0x1bb0
[  572.577088][    C1]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  572.582035][    C1] page last free pid 5868 tgid 5868 stack trace:
[  572.588357][    C1]  __free_frozen_pages+0xc2b/0xdb0
[  572.593473][    C1]  __slab_free+0x263/0x2b0
[  572.597904][    C1]  qlist_free_all+0x97/0x100
[  572.602500][    C1]  kasan_quarantine_reduce+0x148/0x160
[  572.607961][    C1]  __kasan_slab_alloc+0x22/0x80
[  572.612816][    C1]  __kmalloc_cache_noprof+0x2ba/0x660
[  572.618199][    C1]  netdevice_event+0x3cb/0x8f0
[  572.623495][    C1]  notifier_call_chain+0x1be/0x400
[  572.628637][    C1]  netif_set_mac_address+0x39f/0x4e0
[  572.633935][    C1]  do_setlink+0x9b1/0x4590
[  572.638364][    C1]  rtnl_newlink+0x15ad/0x1bb0
[  572.643050][    C1]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  572.648013][    C1]  netlink_rcv_skb+0x232/0x4b0
[  572.652781][    C1]  netlink_unicast+0x80f/0x9b0
[  572.657647][    C1]  netlink_sendmsg+0x813/0xb40
[  572.662467][    C1]  __sys_sendto+0x672/0x710
[  572.667002][    C1] 
[  572.669336][    C1] Memory state around the buggy address:
[  572.675053][    C1]  ffff888035f07f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  572.683114][    C1]  ffff888035f07f80: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc
[  572.691179][    C1] >ffff888035f08000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  572.699251][    C1]                                                        ^
[  572.706444][    C1]  ffff888035f08080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  572.714506][    C1]  ffff888035f08100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  572.722563][    C1] ==================================================================
[  572.730783][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  572.738002][    C1] CPU: 1 UID: 0 PID: 14423 Comm: syz.4.2176 Not tainted syzkaller #0 PREEMPT(full) 
[  572.747381][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  572.757449][    C1] Call Trace:
[  572.760741][    C1]  <IRQ>
[  572.763638][    C1]  vpanic+0x56c/0xa60
[  572.767745][    C1]  ? __pfx_vpanic+0x10/0x10
[  572.772346][    C1]  ? irqentry_exit+0x59e/0x620
[  572.777135][    C1]  panic+0xc5/0xd0
[  572.780891][    C1]  ? __pfx_panic+0x10/0x10
[  572.785323][    C1]  ? ax25_heartbeat_expiry+0x115/0x140
[  572.790807][    C1]  ? ax25_heartbeat_expiry+0x115/0x140
[  572.796282][    C1]  check_panic_on_warn+0x89/0xb0
[  572.801234][    C1]  ? ax25_heartbeat_expiry+0x115/0x140
[  572.806718][    C1]  end_report+0x73/0x180
[  572.810972][    C1]  ? ax25_heartbeat_expiry+0x115/0x140
[  572.816435][    C1]  kasan_report+0x128/0x150
[  572.820947][    C1]  ? ax25_heartbeat_expiry+0x115/0x140
[  572.826420][    C1]  ax25_heartbeat_expiry+0x115/0x140
[  572.831802][    C1]  call_timer_fn+0x192/0x640
[  572.836402][    C1]  ? __pfx_ax25_heartbeat_expiry+0x10/0x10
[  572.842230][    C1]  ? call_timer_fn+0xd4/0x640
[  572.846920][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  572.852048][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  572.857256][    C1]  ? __pfx_ax25_heartbeat_expiry+0x10/0x10
[  572.863067][    C1]  __run_timer_base+0x652/0x8b0
[  572.867926][    C1]  ? ktime_get+0x45/0x200
[  572.872364][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  572.878070][    C1]  ? sched_clock_cpu+0x74/0x440
[  572.882940][    C1]  run_timer_softirq+0xb7/0x170
[  572.887815][    C1]  handle_softirqs+0x22a/0x870
[  572.892592][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  572.897369][    C1]  __irq_exit_rcu+0x5f/0x150
[  572.901972][    C1]  irq_exit_rcu+0x9/0x30
[  572.906230][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  572.911884][    C1]  </IRQ>
[  572.914824][    C1]  <TASK>
[  572.917763][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  572.923753][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  572.930185][    C1] Code: f7 e8 fd cc ec f5 f7 c3 00 02 00 00 74 05 e8 90 38 18 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> e4 87 de f5 65 8b 05 0d c0 67 07 85 c0 74 18 5b 41 5e c3 cc cc
[  572.949795][    C1] RSP: 0018:ffffc9000c1f67e8 EFLAGS: 00000206
[  572.955870][    C1] RAX: 0000000000000006 RBX: 0000000000000292 RCX: 0000000080000001
[  572.963851][    C1] RDX: 0000000000000006 RSI: ffffffff8df2c159 RDI: 0000000000000001
[  572.971913][    C1] RBP: 0000000000000000 R08: ffffffff9011b3b7 R09: 1ffffffff2023676
[  572.980501][    C1] R10: dffffc0000000000 R11: fffffbfff2023677 R12: ffff888089000000
[  572.988478][    C1] R13: ffff888088c00000 R14: ffffffff9a509c70 R15: 000000000000034e
[  572.996469][    C1]  debug_check_no_obj_freed+0x52e/0x550
[  573.002033][    C1]  __free_pages_ok+0x5a1/0xc50
[  573.006806][    C1]  pfifo_fast_change_tx_queue_len+0x965/0xa40
[  573.012887][    C1]  ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10
[  573.019489][    C1]  dev_qdisc_change_tx_queue_len+0x3a8/0x510
[  573.025477][    C1]  ? __pfx_dev_qdisc_change_tx_queue_len+0x10/0x10
[  573.031994][    C1]  netif_change_tx_queue_len+0x179/0x280
[  573.037635][    C1]  ? __pfx_netif_change_tx_queue_len+0x10/0x10
[  573.043798][    C1]  ? netif_change_flags+0xe8/0x1a0
[  573.048922][    C1]  do_setlink+0x112d/0x4590
[  573.053456][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  573.059619][    C1]  ? __pfx_do_setlink+0x10/0x10
[  573.064489][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  573.069441][    C1]  ? rcu_is_watching+0x15/0xb0
[  573.074215][    C1]  ? __mutex_trylock_common+0x158/0x260
[  573.079776][    C1]  ? __pfx___mutex_trylock_common+0x10/0x10
[  573.085678][    C1]  ? rcu_is_watching+0x15/0xb0
[  573.090456][    C1]  ? trace_contention_end+0x3d/0x150
[  573.095921][    C1]  ? __mutex_lock+0x319/0x1300
[  573.100700][    C1]  ? __pfx___nla_validate_parse+0x10/0x10
[  573.106438][    C1]  ? rtnl_newlink+0x883/0x1bb0
[  573.111219][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  573.116265][    C1]  ? ns_capable+0x89/0xe0
[  573.120700][    C1]  rtnl_newlink+0x14ca/0x1bb0
[  573.125480][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  573.130520][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.136605][    C1]  ? kasan_quarantine_put+0xbb/0x1f0
[  573.141907][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  573.147121][    C1]  ? kmem_cache_free+0x187/0x630
[  573.152092][    C1]  ? nlmon_xmit+0xb0/0x100
[  573.156526][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  573.161683][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  573.166979][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  573.172186][    C1]  ? __dev_queue_xmit+0x2b6/0x3920
[  573.177314][    C1]  ? __local_bh_enable_ip+0xd0/0x130
[  573.182694][    C1]  ? __dev_queue_xmit+0x2b6/0x3920
[  573.187817][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  573.192860][    C1]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  573.197811][    C1]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  573.203112][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  573.208669][    C1]  ? ref_tracker_free+0x693/0x840
[  573.213699][    C1]  ? __copy_skb_header+0xa3/0x4a0
[  573.218735][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  573.224130][    C1]  netlink_rcv_skb+0x232/0x4b0
[  573.229116][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  573.234584][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  573.240239][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  573.245570][    C1]  netlink_unicast+0x80f/0x9b0
[  573.250377][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  573.255776][    C1]  ? netlink_sendmsg+0x650/0xb40
[  573.260732][    C1]  ? skb_put+0x11b/0x210
[  573.265137][    C1]  netlink_sendmsg+0x813/0xb40
[  573.269950][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  573.275690][    C1]  ? aa_sock_msg_perm+0xf1/0x1b0
[  573.280640][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  573.285938][    C1]  ____sys_sendmsg+0x972/0x9f0
[  573.290735][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  573.296065][    C1]  ? import_iovec+0x73/0xa0
[  573.300593][    C1]  ___sys_sendmsg+0x2a5/0x360
[  573.305291][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  573.310500][    C1]  ? futex_wake+0x4ac/0x580
[  573.315021][    C1]  ? __fget_files+0x2a/0x420
[  573.319613][    C1]  ? __fget_files+0x3a0/0x420
[  573.324307][    C1]  __x64_sys_sendmsg+0x1bd/0x2a0
[  573.329267][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  573.334738][    C1]  ? rcu_is_watching+0x15/0xb0
[  573.339609][    C1]  do_syscall_64+0x14d/0xf80
[  573.344213][    C1]  ? trace_irq_disable+0x3b/0x150
[  573.349253][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.355318][    C1]  ? clear_bhb_loop+0x40/0x90
[  573.360016][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.365949][    C1] RIP: 0033:0x7f86a999c819
[  573.370389][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.390005][    C1] RSP: 002b:00007f86a7791028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  573.398457][    C1] RAX: ffffffffffffffda RBX: 00007f86a9c16270 RCX: 00007f86a999c819
[  573.406436][    C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  573.414415][    C1] RBP: 00007f86a9a32c91 R08: 0000000000000000 R09: 0000000000000000
[  573.422565][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  573.430537][    C1] R13: 00007f86a9c16308 R14: 00007f86a9c16270 R15: 00007ffd2f825ca8
[  573.438522][    C1]  </TASK>
[  573.441714][    C1] Kernel Offset: disabled
[  573.446032][    C1] Rebooting in 86400 seconds..