last executing test programs:

3m19.256254386s ago: executing program 1 (id=824):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"})

3m19.035102744s ago: executing program 1 (id=825):
syz_io_uring_setup(0x6e8c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
openat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x0)
sendfile(r5, r3, 0x0, 0x100000000)

3m18.776941941s ago: executing program 1 (id=826):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r1, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x80000000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1}}], 0x1, 0x5d2dd0c54751f8e3)

3m18.40362139s ago: executing program 1 (id=827):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0x20004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

3m17.27104875s ago: executing program 1 (id=831):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0)

3m15.981791243s ago: executing program 1 (id=834):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)

3m0.323063133s ago: executing program 32 (id=834):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)

40.372046687s ago: executing program 0 (id=1242):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0xc3, 0x4)
recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/138, 0x8a}, 0x9}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

39.247608745s ago: executing program 0 (id=1251):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x2180}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

38.320262811s ago: executing program 5 (id=1258):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept$alg(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x10000051}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, 0x0)
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

38.311607875s ago: executing program 0 (id=1259):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac2(0x6, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x0)
r6 = openat$smackfs_cipsonum(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$smackfs_cipsonum(r6, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000003d500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0)

38.214751609s ago: executing program 4 (id=1260):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32, @ANYBLOB="140002"], 0x48}}, 0x0)

37.976563122s ago: executing program 5 (id=1261):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffdf, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x78}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x722}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4041}, 0x10)

37.821981068s ago: executing program 4 (id=1263):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x70bd25, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000885}, 0x0)

37.509770649s ago: executing program 5 (id=1265):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
pwrite64(r1, 0x0, 0x0, 0x9)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x0, 0x0, 0x401, 0x8001, 0x401402}, 0x4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0)

37.508933668s ago: executing program 4 (id=1266):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="2b000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002a0107000500a3000000000008000c00640000"], 0x7c}}, 0x0)

37.253476528s ago: executing program 5 (id=1267):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2f4ba8e5a767240cc9602d", 0xb}], 0x1}}], 0x1, 0x4400c060)
sendto$inet6(r0, &(0x7f0000000000)="b6f97509ce7919ce4a432c54e80f4121a8", 0x11, 0x44003b00, 0x0, 0x0)

37.078407284s ago: executing program 5 (id=1268):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='ns\x00')
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x800)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
syz_io_uring_setup(0xd3a, 0x0, &(0x7f0000000280), &(0x7f0000000140), 0x0)

36.984205222s ago: executing program 4 (id=1269):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x62a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000f40)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@dccp={{0x5, 0x4, 0x1, 0x1, 0x24, 0x68, 0x0, 0xb, 0x21, 0x0, @local, @remote}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x9, 0x7, "8650d0", 0x7, "2be280"}}}}, 0x32)

34.50570976s ago: executing program 3 (id=1272):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/138, 0x8a}, 0x9}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

34.139885185s ago: executing program 0 (id=1273):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8800)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500030000000500", @ANYRES8=r0], 0x7c}}, 0x24000004)

33.94881487s ago: executing program 3 (id=1274):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0x98}}, 0x0)

33.92727392s ago: executing program 5 (id=1275):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffd6, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e1050000008906", 0x18}, {&(0x7f0000000f00)="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", 0x15b}], 0x2}, 0x0)

33.843522909s ago: executing program 4 (id=1276):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0x11, 0x9, r1, 0x1, 0x10, 0x6, @local}, 0x14)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0)

33.675004062s ago: executing program 0 (id=1277):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}})

33.642701565s ago: executing program 3 (id=1278):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2f4ba8e5a767240cc9602d", 0xb}], 0x1}}], 0x1, 0x4400c060)
sendto$inet6(r0, &(0x7f0000000000)="b6f97509ce7919ce4a432c54e80f4121a8", 0x11, 0x44003b00, 0x0, 0x0)

33.139964378s ago: executing program 4 (id=1279):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8004)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000)
r2 = socket$igmp(0x2, 0x3, 0x2)
socket$rxrpc(0x21, 0x2, 0xa)
r3 = socket(0x10, 0x803, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xd0, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x20, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075a, 0x81}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x6cf41, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
listen(r5, 0x800)
accept4(r5, 0x0, 0x0, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000000400000004d600000300000000000000", @ANYRES32, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
write$tun(r6, 0x0, 0x78)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0)

33.138644561s ago: executing program 3 (id=1280):
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f00000003c0)="d970a9b192ddf48c664aaf0cfa972e44df5f298574937ca37c93cbc72d9b2de5f7837d38ce87aeac93b74ea6640a4526a3ccad015a20bccd05f4854ce3281fccef72daed3f9f3e3170da12d61cbac563c8ecad7a7b20ace4e4a3ac025cc633725325", 0x62, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x27)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"})
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x5, 0x1)
setuid(0xee01)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

32.681699983s ago: executing program 0 (id=1281):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4044)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket(0x14, 0x2, 0x4)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
getsockname$packet(r2, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r1, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a3000000000080003400000000814"], 0x78}}, 0x0)

30.826481482s ago: executing program 3 (id=1284):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/138, 0x8a}, 0x9}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

30.490230454s ago: executing program 3 (id=1286):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
socket$kcm(0x29, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a01040000000000000000010080032c000000030a05000000000000000000010000000900010073797a30000000000900030073797a320000000078000000060a010400000000000000000100100008000b400000000050000480340001800b000100657874686472000024000280080001400000000e0800034000000000080004400000002205000200890000001800018011000100666c6f775f6f66666c6f6164000000000900010073797a30000000001400000011000100"/221], 0xe0}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, 0x0, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x229c, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x2268, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x2210, 0x1, [@m_csum={0x128, 0xb, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cf4, 0x5, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0x1, 0x1, 0x4, 0x24000, 0x1, 0x7}, {0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x2, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x9, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0xa, 0x2, 0x4, 0x8001, 0x6, 0x6}, {0xe46, 0x4, 0x7, 0xc, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x1, 0x7, 0x5}, {0x5, 0x4d5, 0x10007, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0xc}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x11, 0x2}, {0x2, 0x2, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0x5, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x4, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x1, 0x10080, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x2a81, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x8, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x9, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x67ac, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x4, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x4040, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x7, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x1, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x1, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x4000002, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x7fe, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x9, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x2, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x0, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x12, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0xa}, {0xffffffff, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x92, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0x9, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0xc, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0x8, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x2, 0x1}], [{0x4}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x5}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x3}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x4, 0x1d9, 0x6f37, 0x3, 0x1}, {0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3001}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x5}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0xa2, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x2, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x4, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0e, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0xc, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x7, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x100}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x6, 0x4c81ae93, 0x5d4c}, {0x101, 0xffffffff, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x6, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x10, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x86a7, 0x1dbe, 0x6e41, 0x8, 0x7, 0x101}, {0x7, 0xfffffffe, 0x2, 0x7, 0x7, 0xdd9a}, {0x3, 0x3, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x10001, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0xffffffff, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0x7}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x8000002, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x5, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x401, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45124, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xb, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0x2, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x9, 0x3, 0xfffffd94}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0xfffffffc, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x9, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0x7fffffff, 0x2}, {0x28a, 0x5, 0x9, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, {0x1, 0x1, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x0, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xe, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x6, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7b, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0x80e02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0xfffffff8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x25, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff460197"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x88, 0xb, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x4, 0x400}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x10c, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0xde, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9a8974697a5f320053b221f97769a90b0caea859a8a0cbe58102aaff47f853d9ee7bf8f72ca959b7262a0819604a2d6ba6413d1e50f9c88ed91e089a5c2afb38e863f46d780a1b627ed66d93754d9a23cc9588ffebf1dd4753859e1a9c0d2ed16fd969b8d5943a06cfc9b822dcf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x25c, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x10000000, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x1, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0xee, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd44241a7ca22609226f1108b4d2467c57efec0af77b76e2326fcb8b5c378501c0d2a914d28304beac051584d3f064e9f573a85b5b42c8dd95d94696b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x229c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0], 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)

18.473712112s ago: executing program 33 (id=1275):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffd6, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e1050000008906", 0x18}, {&(0x7f0000000f00)="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", 0x15b}], 0x2}, 0x0)

17.943397395s ago: executing program 34 (id=1279):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8004)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000)
r2 = socket$igmp(0x2, 0x3, 0x2)
socket$rxrpc(0x21, 0x2, 0xa)
r3 = socket(0x10, 0x803, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xd0, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x20, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075a, 0x81}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x6cf41, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
listen(r5, 0x800)
accept4(r5, 0x0, 0x0, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000000400000004d600000300000000000000", @ANYRES32, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
write$tun(r6, 0x0, 0x78)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0)

16.96226268s ago: executing program 35 (id=1281):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4044)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket(0x14, 0x2, 0x4)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
getsockname$packet(r2, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r1, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a3000000000080003400000000814"], 0x78}}, 0x0)

15.018195816s ago: executing program 36 (id=1286):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
socket$kcm(0x29, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a01040000000000000000010080032c000000030a05000000000000000000010000000900010073797a30000000000900030073797a320000000078000000060a010400000000000000000100100008000b400000000050000480340001800b000100657874686472000024000280080001400000000e0800034000000000080004400000002205000200890000001800018011000100666c6f775f6f66666c6f6164000000000900010073797a30000000001400000011000100"/221], 0xe0}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, 0x0, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x229c, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x2268, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x4, 0x4, 0xd9, 0x3ff}, {0x8, 0x98, 0x8, 0x3}, {0x4, 0x3, 0x9, 0xfffffff4}, {0x5, 0x1, 0x2, 0x6}]}}, @TCA_BPF_ACT={0x2210, 0x1, [@m_csum={0x128, 0xb, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x7, 0xc, 0x8000}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x20000000, 0x4, 0x1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x20000000, 0x7ff, 0xfffffe5a}, 0x5f}}]}, {0xa6, 0x6, "7248d3ec12973d09fcd027791dae7e2f903439d3a94e9eb7adf72919ec4c43895d5713f19521b6324a537841f1ebc41db34c02bab7cd31fca7f71778c8a4c2b2b35c29cc299424d4bdb1f7005f8e0bcf48d1627fcf40755ab429e041fefbed1968b849aa35d510281cfa8dd35c3b334b628a8f94a14fae1c71694d35b1ee1e35c959b609e0f82b156b61bf6a460ac478758b430e9f29ada12c95a015637c0cc3394b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1cf4, 0x5, 0x0, 0x0, {{0xa}, {0x1ca4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0xfffffff8, 0x5, 0x8, 0x1}, 0xa, 0x2, [{0x1, 0x1, 0x4, 0x24000, 0x1, 0x7}, {0xfffffffd, 0x8, 0x5, 0x7023, 0x7ff, 0x3}]}, [{0x8, 0x2, 0x2, 0x9, 0x2, 0x5}, {0xffffffff, 0x1571, 0x7, 0x2, 0x1, 0x6}, {0x1, 0x7, 0x0, 0x2, 0x3, 0x8}, {0x80000001, 0x8, 0x8, 0x4, 0x1, 0x73}, {0x3, 0x6, 0xe, 0x7, 0x7918f95c, 0x4}, {0x1b, 0x9, 0x62b1dada, 0xfff, 0x7fff, 0x6b}, {0x9, 0x3, 0x1, 0x10001, 0x44, 0x3}, {0x4, 0x4, 0x1, 0xe31, 0x4, 0x68}, {0xffff7b7a, 0x5, 0xffffffff, 0x9, 0x10, 0x1}, {0x1126, 0x4, 0xffffffff, 0x0, 0x2}, {0x40, 0x7, 0xbcc, 0x7, 0x0, 0x3ff}, {0xa, 0x2, 0x4, 0x8001, 0x6, 0x6}, {0xe46, 0x4, 0x7, 0xc, 0x2, 0x57}, {0x7, 0x3d27, 0x4, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x3, 0x1, 0x7, 0x5}, {0x5, 0x4d5, 0x10007, 0x2, 0x5, 0x9}, {0x8, 0x2, 0xa5, 0x8, 0xfff, 0x7}, {0x3, 0x5, 0x8001, 0xc}, {0x200, 0x2, 0x1, 0x8, 0xff, 0x5c7b}, {0x28, 0x7, 0x6, 0x11, 0x2}, {0x2, 0x2, 0xffff8000, 0x6, 0x0, 0x3a}, {0x800, 0x2, 0x7, 0x5, 0x7fffffff, 0x8}, {0xc9, 0x3, 0xb, 0x3, 0x7fffffff, 0xff}, {0x5, 0x5c4, 0x9, 0x0, 0xfffffbff, 0xfffffff7}, {0x1fffc000, 0xffffbf54, 0xea, 0x6, 0x8d7, 0x1}, {0x8, 0x5, 0x6c2, 0x8, 0x7ff, 0x3}, {0x0, 0x3, 0x5, 0x40, 0x4, 0x6}, {0xffffffff, 0x730, 0x4, 0x8001, 0xe0, 0x1ff}, {0xfffffff7, 0x3, 0x8, 0x62f3, 0x4, 0x3}, {0x800, 0x1, 0x1ff, 0x35547e4, 0x6, 0x1000}, {0x1, 0x5, 0x0, 0x4, 0x81, 0x9}, {0x400, 0x101, 0x9, 0x0, 0x2, 0x3}, {0x4, 0x7, 0x401, 0xb, 0x1}, {0x1317, 0x1, 0x0, 0x80000001, 0x7, 0x94d}, {0x2, 0x40, 0x6, 0x19c, 0x9, 0x5}, {0x1, 0xc0fa, 0x1, 0x10080, 0x0, 0xff}, {0x81, 0x0, 0x44c, 0x3, 0x1, 0x6}, {0x3, 0xff, 0x5eac1937, 0x100, 0x1}, {0xfffffffe, 0xfff, 0x4, 0x2, 0x28000, 0x7fffffff}, {0x5, 0x1, 0x8, 0x3, 0x1, 0x80}, {0x101, 0x889c, 0xb, 0x8000, 0x0, 0x5}, {0x8, 0x300, 0x1, 0x9, 0x5f80c74e, 0xa59}, {0x6, 0x4, 0x4, 0x4, 0x3, 0x2}, {0x8, 0x0, 0x1, 0x6, 0xade7, 0xfffffffc}, {0x574b, 0x7, 0x4, 0x8}, {0xc, 0x4, 0x8, 0xc1f, 0xf, 0x8000}, {0x5, 0x37f, 0x1000, 0x4, 0x1fc, 0x9}, {0xffff3ecd, 0xffffff45, 0x7f, 0xaee, 0xb, 0x7}, {0x3ff, 0x0, 0xc3, 0x7, 0x80}, {0xc9, 0x9, 0x1, 0x7b0a7f11, 0x200, 0x9}, {0x8, 0xf37, 0x80000001, 0xe, 0x2, 0x500}, {0x0, 0x3, 0x2a81, 0x8001, 0x2, 0x9}, {0x5, 0x6, 0x1000, 0xfffffff9, 0x8, 0x4}, {0x7, 0x1, 0x5, 0x9, 0xc34, 0x8001}, {0x4, 0x7, 0xcd89, 0x565f, 0x6, 0x1000}, {0x5, 0x3f29cd3c, 0x81, 0x6, 0x6, 0x1ef}, {0x6, 0x9, 0x2, 0x9, 0x1, 0x800}, {0x8ab, 0xd3a, 0x4, 0x3, 0xa, 0x3}, {0x80, 0x7fff, 0xc2c000, 0x1, 0x5f3c, 0x1}, {0x10000, 0x8, 0xffffffff, 0xcf, 0x2, 0x1}, {0x9, 0x86af, 0x7a, 0x3e, 0x1}, {0x2, 0x8000, 0x2, 0x7c, 0x80000001, 0xffffc3d8}, {0xa, 0xb, 0x4, 0x2, 0x4, 0x9}, {0x1, 0x7ff, 0x24, 0x1e, 0x7, 0x1}, {0xffffffff, 0x8, 0x0, 0x8001, 0x89, 0x3}, {0xc, 0x1, 0xfffff182, 0x400, 0x2, 0x7fff}, {0xcc, 0x8000, 0x9, 0xfffffff7, 0x4, 0xd08f}, {0xe, 0x9, 0x8, 0xb, 0x0, 0x8}, {0xdb15, 0x40, 0x46fe, 0x5, 0x4, 0x80}, {0x2, 0x200, 0x3, 0x7, 0xe0, 0xcbc1}, {0x7, 0x3, 0x0, 0xed0, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x67ac, 0xffffffc0, 0x8}, {0x7, 0x3, 0x5, 0xffffffff, 0x400}, {0x14a, 0x7, 0x0, 0x4df6, 0x2, 0x7}, {0x10, 0x0, 0x4, 0xfffffffc, 0x2, 0x101}, {0x4, 0x6, 0x608d, 0x9427, 0x9, 0x1}, {0x40, 0x3, 0x11, 0x9, 0x80000000, 0x8000}, {0x4, 0x3, 0x32c8, 0xef, 0x9346, 0x800}, {0xf, 0x4, 0xfa6, 0x1, 0x7ff, 0x5}, {0x8, 0x5, 0xc, 0x6, 0x4, 0x7}, {0x0, 0x400, 0x1ff, 0x53, 0x10, 0x7f}, {0x4, 0x8, 0x2, 0x7, 0x4040, 0x4}, {0x2, 0x6e, 0x4, 0x7, 0x2, 0xffff039d}, {0x6, 0x7, 0x80000000, 0x5, 0x6d, 0x8}, {0x9, 0x6, 0x7, 0xf1, 0x3, 0x1}, {0x10, 0x2, 0x745, 0xfffffff9, 0x7, 0x7}, {0x8, 0x9, 0x17e6, 0x8, 0x101, 0x9}, {0xd, 0x7, 0x61, 0x0, 0x916, 0xf8}, {0xfffff870, 0x2, 0x4, 0x89, 0x8, 0x8}, {0x1, 0x9, 0x0, 0x0, 0x6, 0x1}, {0x5a, 0xffff0000, 0x80000001, 0x81, 0x1, 0xfffffff4}, {0x1, 0x4, 0x3, 0x0, 0x4, 0xfffffffc}, {0x1, 0x2, 0xe, 0xcd33, 0x9, 0x8}, {0x1, 0x400, 0x1, 0xd, 0x80000001, 0xf}, {0xffff, 0x4, 0x3, 0x6b, 0x5, 0x3}, {0x2, 0x100000, 0x5, 0xcc, 0x88e, 0x2}, {0x7fffffff, 0x80, 0x5de1d231, 0x6, 0x3, 0x3}, {0x0, 0x6, 0x200, 0x4000002, 0x9, 0x9}, {0x400, 0xd, 0x5, 0x7, 0x0, 0xd9}, {0xf238, 0x4, 0x1, 0xffff, 0xf99, 0x8}, {0x3, 0x401, 0x1, 0xfffffffa, 0x8000}, {0x5, 0xfff, 0x8100000, 0x100, 0x3, 0x2}, {0x39, 0x5, 0x5, 0x9, 0xffffffff, 0x6}, {0x0, 0xb3df, 0x8, 0xffff, 0x2, 0xa1c7}, {0x7fe, 0x1, 0x2, 0xb8, 0x4, 0x7}, {0xc1, 0x6, 0x9, 0x6, 0x6}, {0x2, 0x8, 0xfffff001, 0x2, 0x10000, 0x53}, {0xd3, 0x10001, 0xf1, 0x9, 0xa9, 0x7b2f}, {0x76, 0x4, 0xb06e, 0x9, 0x2, 0x1}, {0xf, 0x1, 0x8, 0x9668, 0x1fcf, 0xb70}, {0x6, 0xffffffff, 0xfffffff5, 0x7, 0x80000001, 0x3}, {0x8, 0x8, 0x6ad, 0x1fa1, 0x29, 0x1ff}, {0x2e90, 0xffff, 0x58, 0xab, 0x3, 0x5}, {0x7, 0x5, 0x5, 0xffffffff, 0x1, 0x6}, {0xfbbb, 0x0, 0x7, 0x5, 0x8, 0x9}, {0x7, 0x5, 0x12, 0x1000, 0xc}, {0x401, 0xee1, 0xfffffe00, 0x0, 0x2, 0xa}, {0xffffffff, 0x480000, 0x282, 0x6, 0xffff2d43, 0x8}, {0x7, 0x4, 0x9, 0xac6, 0x6, 0x9}, {0xfffffff7, 0x0, 0xd, 0x2, 0x4, 0x6}, {0x7fff, 0x10001, 0x1000, 0xffff, 0x4, 0x4}, {0xffff, 0xecb, 0x92, 0x81, 0xfffffe01, 0x10001}, {0x9, 0x8e01, 0xc5, 0x9, 0x4000, 0x7f}, {0x2, 0x8, 0x5, 0x2, 0x0, 0x5}, {0x0, 0x3225, 0x41, 0x8, 0x1, 0x4}, {0x3, 0x8, 0xc, 0x1, 0x2c1d, 0x6}, {0xe, 0x1, 0xc, 0x8, 0x8, 0xfffffe01}, {0x1d, 0x2, 0x7, 0x0, 0x2, 0x1}], [{0x4}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x6f430f49ed6ac6bd}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x1, 0xf61cabe603c30892}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {}, {0x4, 0xc6ccb7e81ed9de50}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x5}, {0x2}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x3}, {0x4, 0x1}, {0x2}, {0x1}, {0xb28d00a83ffcc2c7}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x1}, {0x3, 0x2}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1}, {0x3, 0x119e686731f243b4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0xf9, 0xc, 0x0, 0x0, 0x6}, 0xc5, 0x5, [{0x4, 0x1d9, 0x6f37, 0x3, 0x1}, {0x0, 0x67497ca5, 0x6ba6, 0x80000000, 0x4, 0x3001}]}, [{0x1, 0x8, 0x8, 0x7, 0x5, 0xfffffe74}, {0x1, 0x6, 0x9, 0xfffffffe, 0x7, 0x9}, {0x0, 0x21a, 0x9, 0x1, 0x800, 0x40}, {0x6, 0x24, 0x111, 0xf, 0x1}, {0x7, 0x6a0, 0x400, 0xc7f, 0x5, 0x71}, {0xb40, 0x8, 0xe, 0x9, 0x45a47ecd, 0x5}, {0x3, 0x6b, 0x880, 0x8, 0x1, 0x1000}, {0x9, 0x3, 0xd, 0xfffffff7, 0x4a77, 0x10001}, {0x9, 0x8b5f, 0x2, 0x9, 0xf1a, 0x7}, {0x200, 0xf0000000, 0x3, 0xa6f, 0xb49, 0x7}, {0x8790, 0xffffffb0, 0x7, 0x8, 0xfffff000, 0xffff8000}, {0x3, 0x7, 0x9, 0x7313f36f, 0x1, 0x7ff}, {0xcd9, 0x5c, 0x3ff, 0x7, 0xc0e3, 0xf93e}, {0x4, 0xffffffff, 0xa2, 0xd, 0x3, 0x4}, {0x5, 0xf6, 0x7, 0x1, 0x5, 0x5}, {0x1, 0x1, 0xe, 0x7, 0x2}, {0x82, 0x7c17, 0x770c, 0x4, 0x1, 0x7fff}, {0x5, 0x9, 0x522, 0x7, 0xd23, 0x4}, {0x1, 0x8b29, 0x1, 0x8, 0x2, 0x8}, {0x9, 0x9, 0x9, 0xffff, 0x669, 0xe}, {0x8000, 0x0, 0x6, 0xfb13, 0x291, 0x6}, {0x6, 0x0, 0xc, 0x9}, {0x5658747, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x6, 0x89, 0x5, 0xea, 0x800, 0x7}, {0x4, 0xa, 0x6, 0x3, 0x4, 0x1ff}, {0x7e7, 0x1, 0xd, 0xb9, 0x8, 0x7ff}, {0x3, 0x2, 0x9, 0x7, 0xf72}, {0xe0e, 0x5, 0x800, 0x5, 0x44f5, 0x3}, {0x8, 0x9, 0x1, 0x2a, 0x4, 0x6}, {0x8, 0x9, 0x2, 0x7, 0x3, 0x3}, {0x5, 0x5, 0xc, 0x8, 0x9, 0xfffffffd}, {0x9, 0xe, 0x5, 0x5, 0xfffffe47}, {0x1, 0x7, 0xf, 0x1, 0x8, 0x7ef}, {0x0, 0x5ae, 0x10, 0x4, 0xd8f, 0x6}, {0x9, 0xc, 0x6, 0xd, 0x8, 0x5}, {0x10000, 0x2, 0x4, 0x80, 0x4, 0x100}, {0x100, 0xc, 0x10000, 0x9, 0x6, 0x7fff}, {0x6, 0x3ff800, 0x0, 0xd, 0x8, 0x1d}, {0x80000000, 0x4, 0x8, 0x7819, 0x400, 0x10}, {0x596, 0x1, 0x1, 0x6, 0x4c81ae93, 0x5d4c}, {0x101, 0xffffffff, 0xe, 0x1948, 0x111, 0x1ff}, {0x7, 0x3, 0x5f31, 0x8, 0x8, 0x8a6b}, {0xf1, 0xffffff80, 0x5, 0x6, 0x5, 0x10000}, {0x5, 0xfffff38e, 0x8, 0x0, 0x2, 0xda}, {0x7, 0x5, 0x95, 0x10f, 0xffffffff, 0x8001}, {0x1, 0x6, 0x0, 0x0, 0x1, 0xa}, {0x5, 0x1, 0x0, 0x0, 0x1000, 0x7}, {0x8, 0x2, 0x5, 0xf4, 0xf8, 0xe}, {0x80, 0x8f7, 0x5714, 0x6, 0x7fffffff, 0x7}, {0x8, 0x3, 0xb708, 0x80000001, 0x5, 0xff}, {0x6, 0x80000000, 0x354, 0x1ff, 0x3, 0x1}, {0x1, 0x10, 0x758, 0x1, 0xa, 0xfffffffa}, {0x9, 0x0, 0x5, 0xc15, 0x80000001, 0x9}, {0x3, 0x8, 0x4, 0x6, 0x9, 0x5}, {0x101, 0x9, 0x87, 0x1000, 0x8, 0x1}, {0x9, 0x0, 0xfffff000, 0x9, 0x10, 0x7}, {0x86a7, 0x1dbe, 0x6e41, 0x8, 0x7, 0x101}, {0x7, 0xfffffffe, 0x2, 0x7, 0x7, 0xdd9a}, {0x3, 0x3, 0x4, 0x5, 0x2, 0x7}, {0x2, 0x9, 0x2d, 0x10001, 0x2, 0x8}, {0xded8, 0x6, 0x9a3, 0xffff, 0x67, 0xa}, {0x4, 0x7, 0x1, 0xffffffff, 0xb, 0x9a2}, {0x21641a49, 0x3, 0x1ff, 0x40, 0x5, 0x2}, {0x18e000, 0x6, 0x8001, 0xffffffff, 0x10001, 0x1}, {0x0, 0x7fff, 0x0, 0xffffffb0, 0x0, 0x140000}, {0x9, 0x101, 0x80000000, 0x2, 0xc39, 0x7}, {0x5, 0x1, 0x8000, 0x4, 0x2, 0x3f3}, {0x7, 0x8000, 0x1, 0x0, 0x1, 0x3}, {0xf, 0x9, 0xb, 0x0, 0xfffffffc, 0xc}, {0x1, 0x5, 0x7, 0x8001, 0x0, 0xb}, {0x6b9, 0x4, 0x7, 0x4, 0x9, 0x2}, {0x8000002, 0x3, 0x4d147f5d, 0x3, 0x7fc00, 0x2}, {0x4, 0x1, 0x9, 0x3ff, 0x3, 0x81}, {0x101, 0x7fff, 0x5, 0x7fff, 0x8, 0x6}, {0x6cc, 0xd, 0xe880, 0x1, 0x3, 0x4}, {0x74f2, 0x1c, 0x5, 0x1aa, 0x1000, 0x7f}, {0x9, 0x1, 0x7fffffff, 0x1, 0x3, 0x6}, {0x100, 0x8, 0x4, 0x7, 0x4, 0x8000000}, {0x4, 0x926, 0x1ff, 0xfffffffb, 0x1, 0x3}, {0x5, 0x6, 0xb, 0x401, 0xfffeffff, 0x5}, {0x8, 0x5, 0x6ad, 0x0, 0x5, 0x7}, {0x7, 0x6348, 0xc20, 0xffff7fff, 0xfffffffe, 0x800}, {0x6, 0xa655, 0x7, 0xf4, 0x7, 0x10}, {0x6, 0x5, 0xffff, 0x40, 0x60a45124, 0xd}, {0xec, 0xffffffff, 0x1128, 0x192c, 0xb, 0x800}, {0x5, 0x9, 0x100, 0x8, 0xfffffffa, 0x8}, {0xfff, 0xfff, 0x4, 0x8001, 0x5, 0xe289}, {0xe, 0x1ff, 0x4, 0x4, 0x0, 0x8}, {0x1, 0x9, 0x9, 0x0, 0x6, 0xbfb5}, {0x40000, 0x96, 0xbe5, 0x1ff, 0x8, 0x9}, {0x0, 0x67, 0x2, 0x5, 0x10, 0x8}, {0x20000000, 0x0, 0x7, 0x7, 0x0, 0x8000}, {0x9, 0x4, 0x1, 0x9, 0x3, 0xfffffd94}, {0xb, 0x3, 0x0, 0x8, 0x8b4, 0x7}, {0x86f, 0x1, 0x1, 0x2, 0x3, 0x3}, {0x47, 0x6012, 0x8001, 0xfffffff8, 0xfffffffc, 0x5}, {0x0, 0x100, 0x9, 0x6, 0x5, 0x7}, {0xffffffff, 0x8, 0x5a6, 0x8000, 0x2, 0x2}, {0x2e, 0xc7c, 0x4, 0x8000, 0xd, 0xfff}, {0x9, 0x9, 0x0, 0x7, 0x3, 0x6}, {0x4, 0xb3, 0x1, 0x8, 0x7fffffff, 0x2}, {0x28a, 0x5, 0x9, 0x4, 0x7, 0x5}, {0x38, 0x4, 0x4, 0x6, 0x81, 0x3}, {0x80000000, 0x1000, 0x8, 0x5, 0x5, 0x2}, {0x400, 0xbb, 0x8, 0x5, 0x5, 0x2}, {0x8, 0x9, 0x1, 0xfff, 0x200, 0x471}, {0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, {0x1, 0x1, 0x3a, 0x3ff, 0x7, 0x1137}, {0x0, 0x0, 0x8000, 0x5, 0x5, 0x9}, {0x8001, 0x8e2, 0x7, 0x8, 0x4, 0x1b43}, {0x400, 0x4, 0xe, 0x6, 0x698, 0x6}, {0x6314, 0x0, 0x10001, 0x3ff, 0x8000, 0x7fff}, {0x6, 0x1, 0x5, 0x8, 0x88}, {0x2, 0xf22a, 0xe475, 0xa, 0x4, 0x744b8102}, {0x7, 0x2a6, 0x8, 0x5, 0x1, 0xd}, {0x5, 0x2, 0x5, 0x9, 0xd9eb12d, 0x5}, {0xd8, 0x1, 0x7, 0x3d, 0x100}, {0xe, 0x0, 0x10000, 0x3, 0x800, 0x6}, {0x68000000, 0x1, 0xfff, 0x3, 0x67, 0x8}, {0x101, 0x4, 0x6, 0x4, 0x1000, 0xfffffffe}, {0xa28d, 0x4, 0xffffff7b, 0xcf, 0x7fffffff, 0x2}, {0x80b, 0x54, 0x80e02, 0xd90a, 0xd, 0x3}, {0x7645, 0x2, 0x4c9, 0x800, 0x3, 0x1}, {0x8, 0x37, 0x3, 0x9, 0x2, 0x3}, {0x3, 0x3, 0xfffffff8, 0x3, 0x0, 0xfffffdbc}, {0xfffffffe, 0x1, 0xd89e, 0x1000, 0x3, 0xffff}, {0x9, 0xf574e1e, 0x3, 0x0, 0x8, 0xb}, {0xfffffff2, 0x8, 0x3, 0x6, 0x5, 0x7ff}], [{0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0xaf8bba8d0517b9e0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x46ad83950480526d}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x3}}]}, {0x25, 0x6, "ad708099198a0ec1c38872c6b6baebd4c106afa40a3f91a999ddfd290aff460197"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x88, 0xb, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x2, 0x4, 0x400}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0xff, 0xfe, 0x8}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x7, 0x2, 0x80}]}]}, {0x22, 0x6, "6d36347a1242181465b574a64f523ba2c253db69f9aaae8e13306c1ee24b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x10c, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0xde, 0x6, "69deacbdb4d5354b30928698782d736f79e7c689cee4c3027b569f62a841f2be5fc5fa659f7c79d435fdb9eb4130bd9a6e3eb3200751586ff5ebdbe62df3b5244259af3f5ab21497e550eb025982bb3aa9d76283e85cc2b6f4eba308b31283715dd3781e328e5a49c8fc610eb9a8974697a5f320053b221f97769a90b0caea859a8a0cbe58102aaff47f853d9ee7bf8f72ca959b7262a0819604a2d6ba6413d1e50f9c88ed91e089a5c2afb38e863f46d780a1b627ed66d93754d9a23cc9588ffebf1dd4753859e1a9c0d2ed16fd969b8d5943a06cfc9b822dcf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x25c, 0x15, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x72523fe1, 0x10000000, 0x0, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x4, 0x5, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x1, 0x20000004, 0xb, 0x3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4674, 0xa444, 0x2, 0x7d2b, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6366, 0x5, 0xc, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x2, 0x2, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x20000003, 0x6, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa3c, 0x967, 0x5, 0x6, 0x80000001}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x480, 0x3, 0x8001, 0x2d5}, 0x1}}]}, {0xee, 0x6, "d5ef8b5f42f53bb630ae6a50d648f8db0da6ec9de7b6ed4b891485781d2737a05144751ea216feb8fea7f028badf7d9963b01a1342cb62d463074d2b2a31fda8391398621e9540f33c7156ca45fda84d4f64296dcbd827f37628708490db199c49ad999ec23719dfa8575af2554fde2bc5a24ea7eca62ed49122be5e79147a6b087cda880c7b4cfd2a29f74807ee36fe5c6584c9e5aa2d114b4d0dbc2a672d21e1f20f6acee403ac8599a3095cd44241a7ca22609226f1108b4d2467c57efec0af77b76e2326fcb8b5c378501c0d2a914d28304beac051584d3f064e9f573a85b5b42c8dd95d94696b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x229c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0], 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)

3.347573949s ago: executing program 2 (id=1308):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0xd}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x2}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x60}}, 0x40040)

2.411300487s ago: executing program 2 (id=1309):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}})

1.437509094s ago: executing program 2 (id=1310):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f00000005c0)="2f4ba8e5a767240cc9602d", 0xb}], 0x2}}], 0x1, 0x4400c060)
sendto$inet6(r0, &(0x7f0000000000)="b6f97509ce7919ce4a432c54e8", 0xd, 0x44003b00, 0x0, 0x0)

1.268092158s ago: executing program 2 (id=1311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)

973.789547ms ago: executing program 2 (id=1312):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='ns\x00')
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x800)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, 0x28)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
syz_io_uring_setup(0xd3a, 0x0, &(0x7f0000000280), &(0x7f0000000140), 0x0)

0s ago: executing program 2 (id=1313):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
pwrite64(r1, 0x0, 0x0, 0x9)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x0, 0x0, 0x401, 0x8001, 0x401402}, 0x4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts.
[   90.699100][ T5578] cgroup: Unknown subsys name 'net'
[   90.961475][ T5578] cgroup: Unknown subsys name 'cpuset'
[   91.034401][ T5578] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   91.974319][   T48] cfg80211: failed to load regulatory.db
[   92.960245][ T5578] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   95.637737][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.668045][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.693580][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.718057][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.727839][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   95.752145][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.764003][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.782935][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.783017][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.783163][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.784290][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   95.786306][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.799402][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.802527][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   95.803994][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.837718][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   95.838722][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.841552][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   95.843344][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.862937][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.870642][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.871448][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.881404][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.885149][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.986324][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   97.945085][   T60] Bluetooth: hci3: command tx timeout
[   98.184281][   T60] Bluetooth: hci0: command tx timeout
[   98.184407][   T60] Bluetooth: hci1: command tx timeout
[   98.184495][   T60] Bluetooth: hci2: command tx timeout
[   98.184575][   T60] Bluetooth: hci4: command tx timeout
[   98.674213][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.674311][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.674449][ T5595] bridge_slave_0: entered allmulticast mode
[   98.677204][ T5595] bridge_slave_0: entered promiscuous mode
[   98.750865][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.750970][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.751114][ T5595] bridge_slave_1: entered allmulticast mode
[   98.753455][ T5595] bridge_slave_1: entered promiscuous mode
[   98.796566][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.796745][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.801290][ T5597] bridge_slave_0: entered allmulticast mode
[   98.807890][ T5597] bridge_slave_0: entered promiscuous mode
[   98.844967][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.845085][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.845600][ T5596] bridge_slave_0: entered allmulticast mode
[   98.847455][ T5596] bridge_slave_0: entered promiscuous mode
[   98.896753][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.896963][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.897137][ T5597] bridge_slave_1: entered allmulticast mode
[   98.899253][ T5597] bridge_slave_1: entered promiscuous mode
[   98.943715][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.944420][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.944918][ T5596] bridge_slave_1: entered allmulticast mode
[   98.960103][ T5596] bridge_slave_1: entered promiscuous mode
[   98.988914][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.989039][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.989202][ T5599] bridge_slave_0: entered allmulticast mode
[   98.991347][ T5599] bridge_slave_0: entered promiscuous mode
[   99.029501][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.029622][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.029751][ T5598] bridge_slave_0: entered allmulticast mode
[   99.032326][ T5598] bridge_slave_0: entered promiscuous mode
[   99.081301][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.081553][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.081685][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.081846][ T5599] bridge_slave_1: entered allmulticast mode
[   99.085784][ T5599] bridge_slave_1: entered promiscuous mode
[   99.132357][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.132480][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.132647][ T5598] bridge_slave_1: entered allmulticast mode
[   99.140716][ T5598] bridge_slave_1: entered promiscuous mode
[   99.176841][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.204498][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.229278][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.272475][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.297140][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.323705][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.352242][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.377730][ T5595] team0: Port device team_slave_0 added
[   99.380298][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.408918][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.435106][ T5595] team0: Port device team_slave_1 added
[   99.454991][ T5597] team0: Port device team_slave_0 added
[   99.480730][ T5596] team0: Port device team_slave_0 added
[   99.525197][ T5597] team0: Port device team_slave_1 added
[   99.545991][ T5596] team0: Port device team_slave_1 added
[   99.568284][ T5599] team0: Port device team_slave_0 added
[   99.588530][ T5598] team0: Port device team_slave_0 added
[   99.607926][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.607938][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.607957][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.611803][ T5599] team0: Port device team_slave_1 added
[   99.668814][ T5598] team0: Port device team_slave_1 added
[   99.688260][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.688277][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.688305][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.737590][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.737635][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.737711][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.792340][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.792352][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.792371][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.856126][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.856141][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.856163][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.897831][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.897882][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.897970][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.961047][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.961060][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.961079][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.962313][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.962329][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.962357][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.027747][ T5603] Bluetooth: hci3: command tx timeout
[  100.034975][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.034990][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.035014][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.039657][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.039723][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.039799][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.263973][ T5603] Bluetooth: hci4: command tx timeout
[  100.264020][   T60] Bluetooth: hci2: command tx timeout
[  100.264060][ T5608] Bluetooth: hci0: command tx timeout
[  100.264212][ T5603] Bluetooth: hci1: command tx timeout
[  100.573193][ T5595] hsr_slave_0: entered promiscuous mode
[  100.576863][ T5595] hsr_slave_1: entered promiscuous mode
[  100.637013][ T5597] hsr_slave_0: entered promiscuous mode
[  100.638016][ T5597] hsr_slave_1: entered promiscuous mode
[  100.638820][ T5597] debugfs: 'hsr0' already exists in 'hsr'
[  100.638911][ T5597] Cannot create hsr debugfs directory
[  100.694667][ T5596] hsr_slave_0: entered promiscuous mode
[  100.695686][ T5596] hsr_slave_1: entered promiscuous mode
[  100.696427][ T5596] debugfs: 'hsr0' already exists in 'hsr'
[  100.696444][ T5596] Cannot create hsr debugfs directory
[  100.770041][ T5599] hsr_slave_0: entered promiscuous mode
[  100.771008][ T5599] hsr_slave_1: entered promiscuous mode
[  100.771720][ T5599] debugfs: 'hsr0' already exists in 'hsr'
[  100.771737][ T5599] Cannot create hsr debugfs directory
[  100.801416][ T5598] hsr_slave_0: entered promiscuous mode
[  100.802411][ T5598] hsr_slave_1: entered promiscuous mode
[  100.803046][ T5598] debugfs: 'hsr0' already exists in 'hsr'
[  100.803062][ T5598] Cannot create hsr debugfs directory
[  101.849818][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  101.907229][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  101.922807][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  101.968027][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.969950][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  101.991409][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  102.023585][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  102.066097][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  102.104295][ T5603] Bluetooth: hci3: command tx timeout
[  102.199043][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  102.229158][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  102.244864][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  102.267342][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  102.271395][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  102.308461][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  102.332485][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  102.343973][ T5603] Bluetooth: hci4: command tx timeout
[  102.344003][ T5603] Bluetooth: hci0: command tx timeout
[  102.344013][ T5608] Bluetooth: hci2: command tx timeout
[  102.344385][   T60] Bluetooth: hci1: command tx timeout
[  102.378978][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  102.518841][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  102.547897][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  102.550508][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  102.587646][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  102.596411][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  102.629082][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  102.661788][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  102.690043][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  102.811796][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  102.847702][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  102.865917][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  102.910789][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  102.924473][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  102.947640][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  102.994498][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  103.012574][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.101820][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.171007][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  103.208405][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  103.211598][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  103.259035][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  103.282034][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  103.319490][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  103.337864][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  103.370809][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  103.396885][ T5595] 8021q: adding VLAN 0 to HW filter on device team0
[  103.451960][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.466024][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.469446][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.542774][ T1411] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.542928][ T1411] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.638650][ T5599] 8021q: adding VLAN 0 to HW filter on device team0
[  103.680867][  T828] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.681008][  T828] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.731241][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.762643][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.762791][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.860075][ T5597] 8021q: adding VLAN 0 to HW filter on device team0
[  103.908678][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.932650][ T1411] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.932885][ T1411] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.043645][  T828] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.052628][  T828] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.120191][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[  104.184012][   T60] Bluetooth: hci3: command tx timeout
[  104.237331][  T828] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.237560][  T828] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.292706][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.329938][  T828] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.330561][  T828] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.424485][   T60] Bluetooth: hci2: command tx timeout
[  104.424517][   T60] Bluetooth: hci1: command tx timeout
[  104.424541][   T60] Bluetooth: hci0: command tx timeout
[  104.424563][   T60] Bluetooth: hci4: command tx timeout
[  104.527401][ T5598] 8021q: adding VLAN 0 to HW filter on device team0
[  104.596713][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.596845][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.699453][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.727647][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.276331][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.424731][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.733361][ T5595] veth0_vlan: entered promiscuous mode
[  105.833608][ T5595] veth1_vlan: entered promiscuous mode
[  106.013211][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.177476][ T5595] veth0_macvtap: entered promiscuous mode
[  106.242479][ T5595] veth1_macvtap: entered promiscuous mode
[  106.326054][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.363656][ T5599] veth0_vlan: entered promiscuous mode
[  106.388156][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.413237][ T5597] veth0_vlan: entered promiscuous mode
[  106.433703][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.457745][ T5599] veth1_vlan: entered promiscuous mode
[  106.488221][   T88] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.492601][ T5597] veth1_vlan: entered promiscuous mode
[  106.509108][   T88] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.532671][   T88] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.555965][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.559590][   T88] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.847351][ T5596] veth0_vlan: entered promiscuous mode
[  106.880345][ T5599] veth0_macvtap: entered promiscuous mode
[  106.965907][ T5597] veth0_macvtap: entered promiscuous mode
[  106.968932][ T5596] veth1_vlan: entered promiscuous mode
[  106.970935][ T5599] veth1_macvtap: entered promiscuous mode
[  107.023243][ T5597] veth1_macvtap: entered promiscuous mode
[  107.033526][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.033550][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.131247][ T5598] veth0_vlan: entered promiscuous mode
[  107.188786][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.209531][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.209552][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.211526][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.221855][ T5598] veth1_vlan: entered promiscuous mode
[  107.250274][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.321634][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.365470][   T88] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.369257][   T88] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.373140][   T88] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.411070][   T88] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.413335][ T5596] veth0_macvtap: entered promiscuous mode
[  107.433297][   T88] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.443000][   T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.472801][   T88] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.519136][   T88] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.546856][ T5596] veth1_macvtap: entered promiscuous mode
[  107.998499][ T5598] veth0_macvtap: entered promiscuous mode
[  108.149169][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.151156][ T5598] veth1_macvtap: entered promiscuous mode
[  108.219342][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.219364][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.245747][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.419496][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.935648][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.938477][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.248533][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.254288][ T1411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.254306][ T1411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.480771][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.518896][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.712050][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.749471][ T5801] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET)
[  109.751080][ T1411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.751099][ T1411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.751255][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.875800][ T1411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.145382][ T1411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.150786][ T1411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.150804][ T1411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.370132][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'.
[  110.684893][ T5805] team0: Port device team_slave_0 removed
[  111.147339][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.147360][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.600496][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.600514][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.903107][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.903129][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.112839][ T1411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.112861][ T1411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.352976][ T5839] loop8: detected capacity change from 0 to 8
[  117.447425][ T5839] Dev loop8: unable to read RDB block 8
[  117.447471][ T5839]  loop8: unable to read partition table
[  117.447695][ T5839] loop8: partition table beyond EOD, truncated
[  117.447731][ T5839] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  117.841796][ T5843] netlink: 'syz.0.18': attribute type 2 has an invalid length.
[  119.354347][ T5855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20'.
[  120.559189][ T5852] infiniband syz2: set down
[  120.559211][ T5852] infiniband syz2: added ipvlan0
[  120.569206][ T5852] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  120.575076][ T5852] infiniband syz2: Couldn't open port 1
[  120.575592][ T5852] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  120.575628][ T5852] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  120.575672][ T5852] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  120.671734][ T5852] RDS/IB: syz2: added
[  120.672496][ T5852] smc: adding ib device syz2 with port count 1
[  120.672695][ T5852] smc:    ib device syz2 port 1 has no pnetid
[  123.915408][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'.
[  124.198725][ T5886] team0: Port device team_slave_0 removed
[  124.400104][ T5894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.35'.
[  126.235953][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'.
[  127.544864][ T5928] team_slave_0: entered allmulticast mode
[  127.655110][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[  127.714073][ T5934] team_slave_0: entered promiscuous mode
[  128.683579][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'.
[  130.592113][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'.
[  133.206229][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  133.234361][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  135.006116][ T6002] binder: 6001:6002 ioctl c0306201 200000000640 returned -22
[  135.606318][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'.
[  136.268244][ T6008] tipc: Started in network mode
[  136.268269][ T6008] tipc: Node identity 84e, cluster identity 4711
[  136.268299][ T6008] tipc: Node number set to 2126
[  136.562351][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'.
[  138.706564][ T6044] binder: 6043:6044 ioctl c0306201 200000000640 returned -22
[  139.657198][ T6062] Zero length message leads to an empty skb
[  141.630572][ T6079] tipc: Started in network mode
[  141.630596][ T6079] tipc: Node identity 84e, cluster identity 4711
[  141.630611][ T6079] tipc: Node number set to 2126
[  145.501719][   T36] audit: type=1326 audit(1783988885.195:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6094 comm="syz.2.106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa65d14de59 code=0x0
[  145.952323][ T6096] syzkaller0: entered promiscuous mode
[  145.952351][ T6096] syzkaller0: entered allmulticast mode
[  146.321636][   T36] audit: type=1326 audit(1783988886.035:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6101 comm="syz.3.108" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25435cde59 code=0x0
[  146.420639][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'.
[  148.548039][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'.
[  148.708718][ T6137] netlink: 64 bytes leftover after parsing attributes in process `syz.3.121'.
[  150.158755][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'.
[  151.186171][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'.
[  151.638480][ T6170] team0: Port device team_slave_0 removed
[  151.716340][ T6181] netlink: 80 bytes leftover after parsing attributes in process `syz.0.141'.
[  151.716365][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'.
[  151.716380][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'.
[  152.519820][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'.
[  153.863830][ T5603] Bluetooth: hci4: command 0x0405 tx timeout
[  154.077619][ T6211] capability: warning: `syz.4.152' uses deprecated v2 capabilities in a way that may be insecure
[  154.869863][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'.
[  155.836229][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'.
[  160.803463][ T6251] netlink: 'syz.3.163': attribute type 1 has an invalid length.
[  160.803483][ T6251] netlink: 'syz.3.163': attribute type 2 has an invalid length.
[  162.548565][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.170'.
[  163.603079][   T36] audit: type=1326 audit(1783988903.315:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6286 comm="syz.0.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb21ba0de59 code=0x0
[  168.851524][ T6298] netlink: 168 bytes leftover after parsing attributes in process `syz.0.181'.
[  175.765622][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'.
[  178.721567][ T5822] kernel read not supported for file /116/task (pid: 5822 comm: kworker/1:7)
[  178.878736][ T5603] Bluetooth: hci4: unexpected event for opcode 0x2007
[  181.047919][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'.
[  182.497134][ T6380] siw: device registration error -23
[  189.414015][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'.
[  190.832235][   T36] audit: type=1400 audit(1783988930.535:5): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=6466 comm="syz.3.234" key_serial=222220340 key_desc="_uid_ses.0"
[  190.872555][   T36] audit: type=1400 audit(1783988930.565:6): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6466 comm="syz.3.234" name="47" dev="tmpfs" ino=254
[  194.904666][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  194.904753][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  195.344503][ T6504] Bluetooth: MGMT ver 1.23
[  195.344549][ T6504] Bluetooth: hci0: unsupported parameter 255
[  195.344569][ T6504] Bluetooth: hci0: unsupported parameter 255
[  196.207574][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'.
[  196.269487][   T36] audit: type=1326 audit(1783988935.965:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6519 comm="syz.3.252" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25435cde59 code=0x0
[  196.862406][ T6533] =======================================================
[  196.862406][ T6533] WARNING: The mand mount option has been deprecated and
[  196.862406][ T6533]          and is ignored by this kernel. Remove the mand
[  196.862406][ T6533]          option from the mount to silence this warning.
[  196.862406][ T6533] =======================================================
[  197.174504][ T6533] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  200.308752][ T6520] team0: Port device team_slave_0 removed
[  200.406473][ T5865] kernel read not supported for file /185/task (pid: 5865 comm: kworker/0:7)
[  203.259959][ T5865] kernel read not supported for file /139/task (pid: 5865 comm: kworker/0:7)
[  203.581380][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'.
[  206.354663][ T5723] kernel read not supported for file /152/task (pid: 5723 comm: kworker/1:4)
[  206.686246][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'.
[  206.858736][ T6620] 9p: Bad value for 'rfdno'
[  207.100202][ T6628] syz_tun: entered allmulticast mode
[  207.551835][ T6633] syz_tun: left allmulticast mode
[  207.835105][ T5732] kernel read not supported for file /171/task (pid: 5732 comm: kworker/0:6)
[  208.994516][ T6652] 9p: Bad value for 'rfdno'
[  209.138631][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'.
[  209.358874][ T6654] team0: Port device team_slave_0 removed
[  209.692742][ T6665] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  209.824021][ T5710] kernel read not supported for file /122/task (pid: 5710 comm: kworker/0:4)
[  211.198720][ T6674] syz.1.311 (6674) used greatest stack depth: 17152 bytes left
[  211.660746][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.319'.
[  211.854606][ T5732] kernel read not supported for file /131/task (pid: 5732 comm: kworker/0:6)
[  211.935671][ T6707] syz_tun: entered allmulticast mode
[  212.175763][ T6712] loop8: detected capacity change from 0 to 8
[  212.302533][ T6712] Dev loop8: unable to read RDB block 8
[  212.302582][ T6712]  loop8: unable to read partition table
[  212.302797][ T6712] loop8: partition table beyond EOD, truncated
[  212.302830][ T6712] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  212.433944][ T6713] vcan0: tx drop: invalid sa for name 0x0000000000000005
[  213.577563][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.335'.
[  217.520317][ T6773] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  219.078158][ T6119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.368154][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'.
[  220.475437][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  220.759858][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  220.763634][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  220.785973][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  220.787440][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  221.845572][ T6119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.123849][ T5613] Bluetooth: hci2: command 0x0406 tx timeout
[  222.975936][ T6824] random: crng reseeded on system resumption
[  223.173825][ T5613] Bluetooth: hci3: command 0x0406 tx timeout
[  223.173865][ T5613] Bluetooth: hci0: command 0x0406 tx timeout
[  223.173891][ T5613] Bluetooth: hci1: command 0x0406 tx timeout
[  223.835926][ T5603] Bluetooth: hci4: command tx timeout
[  225.448966][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'.
[  225.712273][ T6119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.931271][ T6852] netlink: 'syz.2.365': attribute type 1 has an invalid length.
[  225.931476][ T6852] netlink: 'syz.2.365': attribute type 2 has an invalid length.
[  225.961033][ T5600] Bluetooth: hci4: command tx timeout
[  228.138595][ T5600] Bluetooth: hci4: command tx timeout
[  228.537219][ T6119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.638353][ T6865] syz_tun: entered allmulticast mode
[  228.640167][ T6863] syz_tun: left allmulticast mode
[  230.202270][ T5600] Bluetooth: hci4: command tx timeout
[  230.830478][ T6862] warning: `syz.1.368' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  231.306013][ T6890] netlink: 'syz.4.376': attribute type 1 has an invalid length.
[  231.306035][ T6890] netlink: 'syz.4.376': attribute type 2 has an invalid length.
[  232.367359][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'.
[  232.502734][ T6900] 9p: Bad value for 'wfdno'
[  233.757875][ T6908] syz_tun: entered allmulticast mode
[  233.814736][ T6908] syz_tun: left allmulticast mode
[  235.431101][ T6936] netlink: 'syz.1.388': attribute type 1 has an invalid length.
[  235.431123][ T6936] netlink: 'syz.1.388': attribute type 2 has an invalid length.
[  236.767714][ T6119] bridge_slave_1: left allmulticast mode
[  236.767842][ T6119] bridge_slave_1: left promiscuous mode
[  236.791293][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.962751][ T6939] 9p: Bad value for 'wfdno'
[  237.042318][ T6119] bridge_slave_0: left allmulticast mode
[  237.042356][ T6119] bridge_slave_0: left promiscuous mode
[  237.075733][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.816925][ T6954] 9p: Bad value for 'rfdno'
[  240.167577][ T6974] netlink: 'syz.1.401': attribute type 1 has an invalid length.
[  240.167622][ T6974] netlink: 'syz.1.401': attribute type 2 has an invalid length.
[  241.474885][ T6979] 9p: Bad value for 'wfdno'
[  242.341113][ T6986] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  244.204527][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.265148][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.305629][ T6119] bond0 (unregistering): Released all slaves
[  244.605837][ T6958] syz_tun: entered allmulticast mode
[  244.738434][ T6958] syz_tun: left allmulticast mode
[  245.112901][ T6994] 9p: Bad value for 'rfdno'
[  245.323154][ T7000] syz_tun: entered allmulticast mode
[  245.606777][ T7000] syz_tun: left allmulticast mode
[  248.189402][ T7028] netlink: 'syz.2.413': attribute type 1 has an invalid length.
[  248.189449][ T7028] netlink: 'syz.2.413': attribute type 2 has an invalid length.
[  249.723860][ T7041] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  251.486470][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1
[  251.487226][ T7054] syz_tun: entered allmulticast mode
[  251.511880][ T7054] syz_tun: left allmulticast mode
[  254.334902][ T7088] netlink: 'syz.3.426': attribute type 1 has an invalid length.
[  254.334949][ T7088] netlink: 'syz.3.426': attribute type 2 has an invalid length.
[  255.867590][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  255.867666][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  256.187726][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2
[  257.740758][ T7130] netlink: 'syz.1.438': attribute type 1 has an invalid length.
[  257.740813][ T7130] netlink: 'syz.1.438': attribute type 2 has an invalid length.
[  259.992689][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.992830][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.993042][ T6792] bridge_slave_0: entered allmulticast mode
[  260.177987][ T6792] bridge_slave_0: entered promiscuous mode
[  260.220229][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.221173][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.221418][ T6792] bridge_slave_1: entered allmulticast mode
[  260.312232][ T6792] bridge_slave_1: entered promiscuous mode
[  260.851455][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.903369][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.507343][ T7161] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  262.596312][   T36] audit: type=1400 audit(1783989002.305:8): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=7174 comm="syz.4.450" key_serial=222220340 key_desc="_uid_ses.0"
[  262.602588][   T36] audit: type=1400 audit(1783989002.315:9): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7174 comm="syz.4.450" name="91" dev="tmpfs" ino=485
[  262.753986][ T6119] hsr_slave_0: left promiscuous mode
[  262.793846][ T6119] hsr_slave_1: left promiscuous mode
[  262.794987][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.795105][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.016756][ T7183] netlink: 'syz.3.451': attribute type 1 has an invalid length.
[  263.016780][ T7183] netlink: 'syz.3.451': attribute type 2 has an invalid length.
[  263.919401][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.920921][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.605315][ T6119] veth1_macvtap: left promiscuous mode
[  265.605569][ T6119] veth0_macvtap: left promiscuous mode
[  265.605770][ T6119] veth1_vlan: left promiscuous mode
[  265.607604][ T6119] veth0_vlan: left promiscuous mode
[  266.468347][ T7207] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  268.480473][   T36] audit: type=1400 audit(1783989008.195:10): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=7219 comm="syz.2.462" key_serial=222220340 key_desc="_uid_ses.0"
[  268.512612][   T36] audit: type=1400 audit(1783989008.205:11): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7219 comm="syz.2.462" name="92" dev="tmpfs" ino=484
[  268.805590][ T7230] netlink: 'syz.4.465': attribute type 1 has an invalid length.
[  268.805642][ T7230] netlink: 'syz.4.465': attribute type 2 has an invalid length.
[  270.604386][ T7244] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  273.503813][ T6119] team0 (unregistering): Port device team_slave_1 removed
[  274.108072][ T6792] team0: Port device team_slave_0 added
[  274.128107][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3
[  274.147078][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.226448][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'.
[  274.332186][   T36] audit: type=1400 audit(1783989014.045:12): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=7265 comm="syz.1.476" key_serial=222220340 key_desc="_uid_ses.0"
[  274.333415][   T36] audit: type=1400 audit(1783989014.045:13): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7265 comm="syz.1.476" name="88" dev="tmpfs" ino=462
[  274.410280][   T36] audit: type=1400 audit(1783989014.115:14): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=7265 comm="syz.1.476" path="/dev/dri/card0" dev="devtmpfs" ino=627
[  274.683286][ T6792] team0: Port device team_slave_1 added
[  274.721436][ T5724] kernel read not supported for file /255/task (pid: 5724 comm: kworker/1:5)
[  274.802270][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.802285][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.802308][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.849068][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.849084][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.849112][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.112662][ T7277] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  276.704257][ T6792] hsr_slave_0: entered promiscuous mode
[  276.710661][ T6792] hsr_slave_1: entered promiscuous mode
[  276.728497][ T6792] debugfs: 'hsr0' already exists in 'hsr'
[  276.728524][ T6792] Cannot create hsr debugfs directory
[  277.126933][ T7303] process 'syz.4.487' launched './file0' with NULL argv: empty string added
[  278.311770][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.920290][ T5731] kernel read not supported for file /312/task (pid: 5731 comm: kworker/0:5)
[  280.289666][ T7327] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  281.422901][ T7339] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  282.048531][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  282.082773][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  282.091562][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  282.300195][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  282.301391][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  283.645372][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.691714][ T7363] 9pnet_fd: Insufficient options for proto=fd
[  283.791046][ T7365] trusted_key: syz.1.501 sent an empty control message without MSG_MORE.
[  284.373317][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'.
[  284.492501][ T7382] netlink: 75 bytes leftover after parsing attributes in process `syz.4.508'.
[  284.961754][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'.
[  285.803401][ T5600] Bluetooth: hci5: command tx timeout
[  285.850289][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.850337][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.872523][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.872553][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.277959][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.278083][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.331226][ T5732] syz2: Port: 1 Link ACTIVE
[  287.863841][ T5600] Bluetooth: hci5: command tx timeout
[  289.155465][ T7416] overlayfs: conflicting lowerdir path
[  290.268134][ T5600] Bluetooth: hci5: command tx timeout
[  290.417474][   T36] audit: type=1400 audit(1783989030.115:15): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=7423 comm="syz.1.514" key_serial=222220340 key_desc="_uid_ses.0"
[  290.422588][   T36] audit: type=1400 audit(1783989030.135:16): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7423 comm="syz.1.514" name="98" dev="tmpfs" ino=514
[  290.434456][   T36] audit: type=1400 audit(1783989030.145:17): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=7423 comm="syz.1.514" path="/dev/dri/card0" dev="devtmpfs" ino=627
[  291.000028][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.245057][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.521'.
[  292.278544][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.278683][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.394013][ T5600] Bluetooth: hci5: command tx timeout
[  293.168062][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.168091][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.526265][ T7466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.525'.
[  295.174233][   T36] audit: type=1400 audit(1783989034.895:18): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=7481 comm="syz.4.527" key_serial=222220340 key_desc="_uid_ses.0"
[  295.179335][   T36] audit: type=1400 audit(1783989034.895:19): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7481 comm="syz.4.527" name="118" dev="tmpfs" ino=624
[  295.231016][   T36] audit: type=1400 audit(1783989034.945:20): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=7481 comm="syz.4.527" path="/dev/dri/card0" dev="devtmpfs" ino=627
[  295.419858][ T7486] random: crng reseeded on system resumption
[  296.702378][ T7512] overlayfs: conflicting lowerdir path
[  297.594357][  T828] bridge_slave_1: left allmulticast mode
[  297.594402][  T828] bridge_slave_1: left promiscuous mode
[  297.594649][  T828] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.771741][  T828] bridge_slave_0: left allmulticast mode
[  297.771776][  T828] bridge_slave_0: left promiscuous mode
[  297.772048][  T828] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.824821][ T7517] netlink: 44 bytes leftover after parsing attributes in process `syz.2.536'.
[  300.035372][ T7540] netlink: 'syz.4.540': attribute type 1 has an invalid length.
[  300.035428][ T7540] netlink: 'syz.4.540': attribute type 2 has an invalid length.
[  302.239960][  T828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.282485][ T7558] random: crng reseeded on system resumption
[  303.234264][  T828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  303.319414][ T7568] 9p: Bad value for 'wfdno'
[  303.358711][  T828] bond0 (unregistering): Released all slaves
[  303.809317][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.813932][ T7343] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.814173][ T7343] bridge_slave_0: entered allmulticast mode
[  303.839479][ T7343] bridge_slave_0: entered promiscuous mode
[  303.862398][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.862538][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.866189][ T7343] bridge_slave_1: entered allmulticast mode
[  303.897872][ T7343] bridge_slave_1: entered promiscuous mode
[  305.259072][ T7343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.361460][ T7343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.455783][ T7343] team0: Port device team_slave_0 added
[  305.459473][ T7343] team0: Port device team_slave_1 added
[  305.698067][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'.
[  305.720924][ T7595] netlink: 44 bytes leftover after parsing attributes in process `syz.3.554'.
[  305.752561][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'.
[  305.843983][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.844010][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.844040][ T7343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.926680][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.926695][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.926720][ T7343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.547703][ T7606] overlayfs: overlapping lowerdir path
[  306.614754][ T7607] overlayfs: conflicting lowerdir path
[  307.503633][ T7343] hsr_slave_0: entered promiscuous mode
[  307.530308][ T7343] hsr_slave_1: entered promiscuous mode
[  307.542887][ T7343] debugfs: 'hsr0' already exists in 'hsr'
[  307.542914][ T7343] Cannot create hsr debugfs directory
[  308.857883][ T7619] 9p: Bad value for 'wfdno'
[  310.617502][  T828] hsr_slave_0: left promiscuous mode
[  311.520246][  T828] hsr_slave_1: left promiscuous mode
[  311.521318][  T828] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.629346][  T828] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.651356][ T7651] netlink: 44 bytes leftover after parsing attributes in process `syz.4.565'.
[  311.654110][ T7652] random: crng reseeded on system resumption
[  311.723047][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'.
[  312.726550][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'.
[  314.618706][  T828] team0 (unregistering): Port device team_slave_1 removed
[  314.706387][  T828] team0 (unregistering): Port device team_slave_0 removed
[  314.866139][ T7678] netlink: 'syz.4.571': attribute type 1 has an invalid length.
[  314.866185][ T7678] netlink: 'syz.4.571': attribute type 2 has an invalid length.
[  317.261929][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  317.262038][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  317.439832][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'.
[  319.925995][ T7716] netlink: 'syz.1.582': attribute type 1 has an invalid length.
[  319.926018][ T7716] netlink: 'syz.1.582': attribute type 2 has an invalid length.
[  321.608961][ T7343] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  321.775901][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  321.782686][ T7343] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  322.069320][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  322.172439][ T7343] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  322.330579][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  322.518791][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'.
[  323.798226][ T7343] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  323.901716][ T7343] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  324.363404][ T7770] syzkaller1: entered promiscuous mode
[  324.363432][ T7770] syzkaller1: entered allmulticast mode
[  325.360106][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'.
[  325.547638][ T7343] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.568901][ T7343] 8021q: adding VLAN 0 to HW filter on device team0
[  325.634319][ T7343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  325.634343][ T7343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  325.690685][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.690913][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.760043][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.760175][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.437572][ T7809] netlink: 104 bytes leftover after parsing attributes in process `syz.3.608'.
[  328.159109][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'.
[  328.778467][ T7343] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.054942][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'.
[  329.197931][ T7343] veth0_vlan: entered promiscuous mode
[  329.218603][ T7343] veth1_vlan: entered promiscuous mode
[  329.379020][ T7343] veth0_macvtap: entered promiscuous mode
[  329.411541][ T7343] veth1_macvtap: entered promiscuous mode
[  329.451710][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.478316][ T7343] batman_adv: batadv0: Interface activated: batadv_slave_1
[  329.498628][   T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.498890][   T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.498931][   T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.498969][   T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.003941][ T7853] netlink: 'syz.3.623': attribute type 1 has an invalid length.
[  330.003963][ T7853] netlink: 'syz.3.623': attribute type 2 has an invalid length.
[  331.315290][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.315313][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.597353][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.597375][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.380015][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'.
[  333.703530][ T7897] syz_tun: entered allmulticast mode
[  333.732180][ T7894] syz_tun: left allmulticast mode
[  334.491865][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'.
[  334.526400][ T7909] netlink: 64 bytes leftover after parsing attributes in process `syz.2.646'.
[  335.359054][ T7928] netlink: 'syz.0.651': attribute type 1 has an invalid length.
[  335.359076][ T7928] netlink: 'syz.0.651': attribute type 2 has an invalid length.
[  336.559739][ T7935] netlink: 'syz.4.655': attribute type 10 has an invalid length.
[  337.705047][ T7948] random: crng reseeded on system resumption
[  338.116174][ T7958] netlink: 64 bytes leftover after parsing attributes in process `syz.3.659'.
[  338.438042][ T7964] syzkaller0: entered promiscuous mode
[  338.438070][ T7964] syzkaller0: entered allmulticast mode
[  338.801714][ T7972] netlink: 'syz.1.664': attribute type 1 has an invalid length.
[  338.801737][ T7972] netlink: 'syz.1.664': attribute type 2 has an invalid length.
[  340.158053][ T7962] tipc: Started in network mode
[  340.158093][ T7962] tipc: Node identity e238c522e0cd, cluster identity 4711
[  340.158633][ T7962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.390916][ T7961] tipc: Resetting bearer <eth:syzkaller0>
[  340.782558][ T7961] tipc: Disabling bearer <eth:syzkaller0>
[  342.492543][ T7998] netlink: 64 bytes leftover after parsing attributes in process `syz.1.672'.
[  344.450886][ T8018] netlink: 'syz.1.677': attribute type 1 has an invalid length.
[  344.450908][ T8018] netlink: 'syz.1.677': attribute type 2 has an invalid length.
[  345.249856][ T5724] kernel read not supported for file /47/task (pid: 5724 comm: kworker/1:5)
[  345.477318][ T8032] random: crng reseeded on system resumption
[  348.062588][ T5732] kernel read not supported for file /431/task (pid: 5732 comm: kworker/0:6)
[  348.124905][ T8061] netlink: 'syz.0.691': attribute type 1 has an invalid length.
[  348.124953][ T8061] netlink: 'syz.0.691': attribute type 2 has an invalid length.
[  348.900631][ T8068] random: crng reseeded on system resumption
[  352.590190][ T8089] lo: entered allmulticast mode
[  352.600322][ T8088] lo: left allmulticast mode
[  353.000726][ T8094] netlink: 'syz.4.700': attribute type 1 has an invalid length.
[  353.000777][ T8094] netlink: 'syz.4.700': attribute type 2 has an invalid length.
[  354.271023][ T5732] kernel read not supported for file /417/task (pid: 5732 comm: kworker/0:6)
[  354.367543][ T8106] 9p: Bad value for 'wfdno'
[  354.587400][ T8109] netlink: 'syz.4.705': attribute type 1 has an invalid length.
[  354.587453][ T8109] netlink: 'syz.4.705': attribute type 2 has an invalid length.
[  357.212180][ T8132] random: crng reseeded on system resumption
[  358.737187][   T31] kernel read not supported for file /484/task (pid: 31 comm: kworker/1:0)
[  360.447524][ T8159] syz_tun: entered allmulticast mode
[  360.450869][ T8158] syz_tun: left allmulticast mode
[  362.102950][   T31] kernel read not supported for file /449/task (pid: 31 comm: kworker/1:0)
[  367.131986][ T5732] kernel read not supported for file /496/task (pid: 5732 comm: kworker/0:6)
[  371.339171][ T5822] kernel read not supported for file /104/task (pid: 5822 comm: kworker/1:7)
[  371.656098][ T8259] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  378.988892][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  378.988965][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  380.784108][ T5600] Bluetooth: hci5: link tx timeout
[  380.784294][ T5600] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  382.731933][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'.
[  382.732028][ T8351] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  382.732157][ T8351] batman_adv: batadv0: Removing interface: batadv_slave_0
[  382.904462][ T5608] Bluetooth: hci5: command 0x0406 tx timeout
[  383.447966][ T8351] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  383.447996][ T8351] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.809558][ T5732] kernel read not supported for file /535/task (pid: 5732 comm: kworker/0:6)
[  389.108929][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'.
[  389.499750][ T5822] kernel read not supported for file /515/task (pid: 5822 comm: kworker/1:7)
[  392.774627][   T10] kernel read not supported for file /459/task (pid: 10 comm: kworker/0:1)
[  395.575346][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'.
[  396.479145][ T5724] kernel read not supported for file /557/task (pid: 5724 comm: kworker/1:5)
[  398.990004][ T8501] 9p: Bad value for 'wfdno'
[  399.442986][ T5724] kernel read not supported for file /535/task (pid: 5724 comm: kworker/1:5)
[  401.699921][ T8530] netlink: 'syz.4.845': attribute type 1 has an invalid length.
[  401.699969][ T8530] netlink: 'syz.4.845': attribute type 2 has an invalid length.
[  403.290970][ T8541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'.
[  404.163544][ T5822] kernel read not supported for file /587/task (pid: 5822 comm: kworker/1:7)
[  407.412464][ T8573] netlink: 'syz.3.859': attribute type 1 has an invalid length.
[  407.412538][ T8573] netlink: 'syz.3.859': attribute type 2 has an invalid length.
[  408.636474][ T5732] kernel read not supported for file /550/task (pid: 5732 comm: kworker/0:6)
[  408.736823][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'.
[  411.879367][ T8607] netlink: 'syz.2.870': attribute type 1 has an invalid length.
[  411.879439][ T8607] netlink: 'syz.2.870': attribute type 2 has an invalid length.
[  413.221983][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'.
[  414.572050][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  414.622730][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  414.631902][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  414.653496][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  414.658220][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  415.035485][ T8645] netlink: 'syz.3.884': attribute type 1 has an invalid length.
[  415.035508][ T8645] netlink: 'syz.3.884': attribute type 2 has an invalid length.
[  415.942112][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.887'.
[  417.026766][ T5608] Bluetooth: hci4: command tx timeout
[  418.212724][ T5822] kernel read not supported for file /617/task (pid: 5822 comm: kworker/1:7)
[  419.064016][ T5608] Bluetooth: hci4: command tx timeout
[  419.167008][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.900'.
[  420.304911][ T8498] syz_tun (unregistering): left allmulticast mode
[  421.150854][ T5608] Bluetooth: hci4: command tx timeout
[  422.415548][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'.
[  423.130454][ T1411] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.342840][ T5608] Bluetooth: hci4: command tx timeout
[  425.094584][ T5865] kernel read not supported for file /598/task (pid: 5865 comm: kworker/0:7)
[  425.536357][ T1411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.818767][ T8748] netlink: 'syz.3.921': attribute type 4 has an invalid length.
[  426.275124][ T1411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.101428][ T1411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.293928][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.925'.
[  428.787320][    T9] kernel read not supported for file /201/task (pid: 9 comm: kworker/0:0)
[  428.831328][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.833034][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.833276][ T8632] bridge_slave_0: entered allmulticast mode
[  428.879342][ T8632] bridge_slave_0: entered promiscuous mode
[  428.946156][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.946372][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.946576][ T8632] bridge_slave_1: entered allmulticast mode
[  428.995777][ T8632] bridge_slave_1: entered promiscuous mode
[  429.376090][ T8632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.402245][ T8632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.776587][ T8632] team0: Port device team_slave_0 added
[  430.057530][ T8810] netlink: 'syz.2.938': attribute type 1 has an invalid length.
[  430.057554][ T8810] netlink: 'syz.2.938': attribute type 2 has an invalid length.
[  431.162900][ T8632] team0: Port device team_slave_1 added
[  432.885582][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.885600][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.885627][ T8632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.966715][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.966731][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.966757][ T8632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.153080][    T9] kernel read not supported for file /208/task (pid: 9 comm: kworker/0:0)
[  433.256085][ T1411] bridge_slave_1: left promiscuous mode
[  433.256427][ T1411] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.420113][ T1411] bridge_slave_0: left allmulticast mode
[  433.693093][ T1411] bridge_slave_0: left promiscuous mode
[  433.693565][ T1411] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.300823][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'.
[  438.562612][ T8868] netlink: 'syz.3.950': attribute type 1 has an invalid length.
[  438.562658][ T8868] netlink: 'syz.3.950': attribute type 2 has an invalid length.
[  439.174564][ T1411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  439.324729][ T1411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  439.351303][ T1411] bond0 (unregistering): Released all slaves
[  439.495873][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1
[  439.537174][ T8632] hsr_slave_0: entered promiscuous mode
[  439.540360][ T8632] hsr_slave_1: entered promiscuous mode
[  439.549313][ T8632] debugfs: 'hsr0' already exists in 'hsr'
[  439.549351][ T8632] Cannot create hsr debugfs directory
[  440.752471][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  440.770149][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  444.912543][ T8632] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  445.409753][ T8632] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  446.166942][ T8914] netlink: 'syz.2.961': attribute type 1 has an invalid length.
[  446.166986][ T8914] netlink: 'syz.2.961': attribute type 2 has an invalid length.
[  447.521866][ T8632] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  447.640543][ T8632] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  447.648833][ T8632] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  448.823943][ T8632] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  448.825717][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'.
[  449.138655][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2
[  449.139169][ T8632] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  449.451976][ T8632] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  453.850889][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'.
[  455.677856][ T8632] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.867181][ T8632] 8021q: adding VLAN 0 to HW filter on device team0
[  456.964206][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.964426][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  457.168352][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.168521][ T6119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.316628][ T1411] hsr_slave_0: left promiscuous mode
[  459.363714][ T1411] hsr_slave_1: left promiscuous mode
[  459.367176][ T1411] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.367202][ T1411] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.416579][ T1411] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.416607][ T1411] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.549283][ T1411] veth1_macvtap: left promiscuous mode
[  459.549383][ T1411] veth0_macvtap: left promiscuous mode
[  459.578237][ T1411] veth1_vlan: left promiscuous mode
[  459.578436][ T1411] veth0_vlan: left promiscuous mode
[  459.944770][ T9028] syz2: rxe_newlink: already configured on ipvlan0
[  465.385658][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'.
[  465.884309][ T1411] team0 (unregistering): Port device team_slave_1 removed
[  466.118153][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3
[  469.001460][ T8632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.695499][ T9102] syz2: rxe_newlink: already configured on ipvlan0
[  472.105481][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4
[  474.147563][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'.
[  476.424610][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  476.474584][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  476.476240][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  476.478877][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  476.493720][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  479.595444][ T5608] Bluetooth: hci1: command tx timeout
[  480.561635][ T9188] syz2: rxe_newlink: already configured on ipvlan0
[  481.623779][ T5608] Bluetooth: hci1: command tx timeout
[  483.344407][ T9202] syzkaller1: entered promiscuous mode
[  483.344438][ T9202] syzkaller1: entered allmulticast mode
[  483.810676][ T5608] Bluetooth: hci1: command tx timeout
[  485.863812][ T5608] Bluetooth: hci1: command tx timeout
[  487.713426][ T9240] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  489.825022][ T9263] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1033'.
[  491.362892][ T9287] 9p: Bad value for 'wfdno'
[  493.545575][ T9308] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  496.090063][ T9323] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1045'.
[  496.470934][ T9347] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1049'.
[  496.717989][ T9350] 9p: Bad value for 'wfdno'
[  497.446236][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.446560][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.446738][ T9143] bridge_slave_0: entered allmulticast mode
[  497.449905][ T9143] bridge_slave_0: entered promiscuous mode
[  497.481622][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.483453][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.498572][ T9143] bridge_slave_1: entered allmulticast mode
[  497.501662][ T9143] bridge_slave_1: entered promiscuous mode
[  497.569589][ T9143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  497.583477][ T9143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  498.964064][ T9143] team0: Port device team_slave_0 added
[  498.979683][ T9143] team0: Port device team_slave_1 added
[  499.337147][ T9392] 9p: Bad value for 'wfdno'
[  499.656698][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.656717][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.656745][ T9143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.670449][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.670467][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.670497][ T9143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.304875][ T9407] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1059'.
[  500.893976][ T9143] hsr_slave_0: entered promiscuous mode
[  500.898807][ T9143] hsr_slave_1: entered promiscuous mode
[  500.899795][ T9143] debugfs: 'hsr0' already exists in 'hsr'
[  500.899821][ T9143] Cannot create hsr debugfs directory
[  501.561070][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  501.561148][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  501.654187][  T828] bridge_slave_1: left allmulticast mode
[  501.654224][  T828] bridge_slave_1: left promiscuous mode
[  501.654503][  T828] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.799289][  T828] bridge_slave_0: left allmulticast mode
[  501.799325][  T828] bridge_slave_0: left promiscuous mode
[  501.799598][  T828] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.353717][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'.
[  503.353749][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1074'.
[  503.407611][  T828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  503.664616][  T828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  503.741227][ T9441] usb usb8: usbfs: process 9441 (syz.4.1075) did not claim interface 0 before use
[  504.480032][  T828] bond0 (unregistering): Released all slaves
[  504.750030][ T9448] netlink: 'syz.3.1079': attribute type 1 has an invalid length.
[  504.750053][ T9448] netlink: 'syz.3.1079': attribute type 2 has an invalid length.
[  507.735349][  T828] hsr_slave_0: left promiscuous mode
[  507.787993][  T828] hsr_slave_1: left promiscuous mode
[  507.790323][  T828] batman_adv: batadv0: Removing interface: batadv_slave_0
[  507.880557][ T9481] 9p: Bad value for 'wfdno'
[  507.890897][  T828] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.632540][ T9493] usb usb8: usbfs: process 9493 (syz.2.1088) did not claim interface 0 before use
[  510.836371][  T828] team0 (unregistering): Port device team_slave_1 removed
[  510.914752][  T828] team0 (unregistering): Port device team_slave_0 removed
[  511.151283][ T9512] 9p: Bad value for 'wfdno'
[  511.192777][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5
[  513.077782][ T9534] usb usb8: usbfs: process 9534 (syz.3.1102) did not claim interface 0 before use
[  516.080862][ T9555] 9p: Bad value for 'wfdno'
[  516.967232][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'.
[  518.517858][ T9585] usb usb8: usbfs: process 9585 (syz.2.1112) did not claim interface 0 before use
[  521.234406][ T9143] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  521.349982][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  521.359123][ T9143] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  521.593910][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  521.602352][ T9143] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  521.796450][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  521.797740][ T9143] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  521.871113][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  522.417680][ T9143] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.540395][ T9143] 8021q: adding VLAN 0 to HW filter on device team0
[  522.576898][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.578217][ T6161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  522.704478][ T1411] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.704650][ T1411] bridge0: port 2(bridge_slave_1) entered forwarding state
[  523.368687][ T9647] usb usb8: usbfs: process 9647 (syz.4.1123) did not claim interface 0 before use
[  524.103673][ T5608] Bluetooth: hci5: command 0x0406 tx timeout
[  525.879656][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'.
[  526.906937][ T9143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  527.468634][ T9143] veth0_vlan: entered promiscuous mode
[  527.503873][ T9143] veth1_vlan: entered promiscuous mode
[  527.674017][ T9143] veth0_macvtap: entered promiscuous mode
[  527.698667][ T9143] veth1_macvtap: entered promiscuous mode
[  527.830109][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  527.956235][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  528.090532][ T6119] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.092567][ T6119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  528.092840][ T6119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  528.149052][ T6119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.452243][ T9708] 9p: Bad value for 'wfdno'
[  529.761655][ T9711] usb usb8: usbfs: process 9711 (syz.3.1135) did not claim interface 0 before use
[  530.440404][ T9131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.440425][ T9131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.632120][ T1389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.632141][ T1389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.555402][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'.
[  531.555481][ T9736] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  531.555635][ T9736] batman_adv: batadv0: Removing interface: batadv_slave_0
[  532.417688][ T9736] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  532.417717][ T9736] batman_adv: batadv0: Removing interface: batadv_slave_1
[  534.258951][ T9780] 9p: Bad value for 'wfdno'
[  535.798539][ T9791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  535.799441][ T9791] syzkaller0: entered promiscuous mode
[  535.799464][ T9791] syzkaller0: entered allmulticast mode
[  536.656076][ T9794] tipc: Resetting bearer <eth:syzkaller0>
[  536.969278][ T9789] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  537.206659][ T9788] tipc: Resetting bearer <eth:syzkaller0>
[  538.656647][ T9818] 9p: Bad value for 'wfdno'
[  538.741758][ T9788] tipc: Disabling bearer <eth:syzkaller0>
[  538.904038][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1163'.
[  538.907315][ T5723] tipc: Node number set to 49661218
[  539.046515][ T9824] 8021q: adding VLAN 0 to HW filter on device bond1
[  542.151972][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.192140][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.589201][ T9888] Driver unsupported XDP return value 0 on prog  (id 124) dev N/A, expect packet loss!
[  543.831003][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1184'.
[  545.095929][ T9871] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  545.098699][ T9874] syzkaller0: entered promiscuous mode
[  545.098733][ T9874] syzkaller0: entered allmulticast mode
[  545.211098][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.212170][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.221588][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.221713][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  545.375694][ T9871] tipc: Resetting bearer <eth:syzkaller0>
[  545.486072][ T9908] 9p: Bad value for 'wfdno'
[  545.711776][ T9871] tipc: Disabling bearer <eth:syzkaller0>
[  546.258219][ T9927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1196'.
[  546.260649][ T9927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1196'.
[  549.403051][ T5600] Bluetooth: hci1: link tx timeout
[  549.403279][ T5600] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  550.940275][T10007] vlan2: entered allmulticast mode
[  550.941345][T10007] bond0: entered allmulticast mode
[  550.941364][T10007] bond_slave_0: entered allmulticast mode
[  550.941393][T10007] bond_slave_1: entered allmulticast mode
[  551.463940][ T9985] Bluetooth: hci1: command 0x0406 tx timeout
[  551.844426][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'.
[  554.748492][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1249'.
[  555.180933][T10093] syzkaller0: entered promiscuous mode
[  556.351401][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1260'.
[  556.359591][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'.
[  556.989407][T10137] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1266'.
[  557.742054][T10146] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  560.502262][T10162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1273'.
[  560.693342][T10170] syzkaller0: entered promiscuous mode
[  560.693375][T10170] syzkaller0: entered allmulticast mode
[  561.178723][T10179] netlink: 'syz.4.1279': attribute type 1 has an invalid length.
[  562.798238][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'.
[  562.986090][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  562.986160][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  563.823015][T10204] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  575.945688][ T9985] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  575.953449][ T9985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  575.992539][ T9985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  576.047710][ T9985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  576.048455][ T9985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  576.460571][ T9985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  576.492480][ T9985] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  576.504629][ T9985] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  576.558918][ T9985] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  576.559724][ T9985] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  577.398356][ T9985] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  577.430249][ T9985] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  577.451627][ T9985] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  577.479813][ T9985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  577.480559][ T9985] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  578.183755][ T5608] Bluetooth: hci4: command tx timeout
[  578.672435][ T5608] Bluetooth: hci6: command tx timeout
[  579.547274][T10289] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  579.633891][ T5608] Bluetooth: hci7: command tx timeout
[  579.782113][   T36] audit: type=1800 audit(1783989319.415:21): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1286" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  579.914583][T10206] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  579.914629][T10206] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  579.914684][T10206] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  580.267393][ T5608] Bluetooth: hci4: command tx timeout
[  580.478943][ T9985] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  580.522526][ T9985] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  580.534946][ T9985] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  580.543490][ T9985] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  580.559825][ T9985] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  580.744218][ T5608] Bluetooth: hci6: command tx timeout
[  581.730625][ T5608] Bluetooth: hci7: command tx timeout
[  582.594204][ T5608] Bluetooth: hci4: command tx timeout
[  582.624862][ T5608] Bluetooth: hci8: command tx timeout
[  582.741901][ T1389] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.823660][ T5608] Bluetooth: hci6: command tx timeout
[  583.750057][ T1389] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.783675][ T5608] Bluetooth: hci7: command tx timeout
[  584.587077][ T1389] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.664032][ T5608] Bluetooth: hci8: command tx timeout
[  584.667296][ T5608] Bluetooth: hci4: command tx timeout
[  584.903845][ T5608] Bluetooth: hci6: command tx timeout
[  585.045631][ T1389] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.863698][ T5608] Bluetooth: hci7: command tx timeout
[  586.574187][ T1389] bridge_slave_1: left promiscuous mode
[  586.574467][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.695550][ T1389] bridge_slave_0: left allmulticast mode
[  586.695588][ T1389] bridge_slave_0: left promiscuous mode
[  586.695870][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.743849][ T5608] Bluetooth: hci8: command tx timeout
[  587.544585][ T1389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  587.605768][ T1389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  587.656168][ T1389] bond0 (unregistering): Released all slaves
[  587.696788][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'.
[  587.764257][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'.
[  587.764285][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'.
[  587.766495][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'.
[  587.766515][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'.
[  587.773125][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'.
[  587.773146][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'.
[  587.847787][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'.
[  587.847814][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'.
[  587.897897][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'.
[  588.016910][T10354] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.017193][T10354] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.824101][ T5608] Bluetooth: hci8: command tx timeout
[  589.073146][   T56] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  589.188875][   T56] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  589.242308][   T56] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  589.405103][   T56] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  589.428011][T10363] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  589.451865][T10273] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.452054][T10273] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.452207][T10273] bridge_slave_0: entered allmulticast mode
[  589.474984][T10273] bridge_slave_0: entered promiscuous mode
[  589.521697][T10273] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.521826][T10273] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.522012][T10273] bridge_slave_1: entered allmulticast mode
[  589.546582][T10273] bridge_slave_1: entered promiscuous mode
[  589.667917][T10273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  589.690505][T10262] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.690644][T10262] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.690785][T10262] bridge_slave_0: entered allmulticast mode
[  589.692975][T10262] bridge_slave_0: entered promiscuous mode
[  589.752784][T10273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  589.815893][T10262] bridge0: port 2(bridge_slave_1) entered blocking state
[  589.816032][T10262] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.816198][T10262] bridge_slave_1: entered allmulticast mode
[  589.820800][T10262] bridge_slave_1: entered promiscuous mode
[  590.082480][ T1389] tipc: Left network mode
[  590.082481][T10268] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.082602][T10268] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.082761][T10268] bridge_slave_0: entered allmulticast mode
[  590.093436][T10268] bridge_slave_0: entered promiscuous mode
[  590.300076][T10373] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  590.352406][T10268] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.352517][T10268] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.352688][T10268] bridge_slave_1: entered allmulticast mode
[  590.359629][T10268] bridge_slave_1: entered promiscuous mode
[  590.385955][T10273] team0: Port device team_slave_0 added
[  590.481488][T10262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  590.554240][T10273] team0: Port device team_slave_1 added
[  590.601423][T10262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  590.802820][T10268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  590.830740][T10301] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.832055][T10301] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.832512][T10301] bridge_slave_0: entered allmulticast mode
[  590.852893][T10301] bridge_slave_0: entered promiscuous mode
[  591.195489][T10268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  591.196908][T10273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  591.196922][T10273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  591.196956][T10273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  591.197631][T10301] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.197778][T10301] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.197983][T10301] bridge_slave_1: entered allmulticast mode
[  591.283046][T10301] bridge_slave_1: entered promiscuous mode
[  591.464981][ T5253] 8021q: adding VLAN 0 to HW filter on device eth5
[  591.616956][T10262] team0: Port device team_slave_0 added
[  591.638427][T10273] batman_adv: batadv0: Adding interface: batadv_slave_1
[  591.638440][T10273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  591.638460][T10273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  591.764326][T10262] team0: Port device team_slave_1 added
[  591.895600][T10268] team0: Port device team_slave_0 added
[  592.259146][T10301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  592.289669][T10268] team0: Port device team_slave_1 added
[  592.300099][T10301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  592.301583][T10262] batman_adv: batadv0: Adding interface: batadv_slave_0
[  592.301598][T10262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  592.301627][T10262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.410560][T10262] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.410573][T10262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  592.410593][T10262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.547371][T10268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  592.547383][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  592.547400][T10268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.795541][T10273] hsr_slave_0: entered promiscuous mode
[  592.796935][T10273] hsr_slave_1: entered promiscuous mode
[  592.798253][T10273] debugfs: 'hsr0' already exists in 'hsr'
[  592.798278][T10273] Cannot create hsr debugfs directory
[  592.801891][T10301] team0: Port device team_slave_0 added
[  592.830626][T10268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.830668][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  592.830735][T10268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.955141][T10301] team0: Port device team_slave_1 added
[  593.063401][T10403] __nla_validate_parse: 126 callbacks suppressed
[  593.063421][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'.
[  593.063451][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'.
[  593.063477][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'.
[  593.063500][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'.
[  593.124113][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'.
[  593.124151][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'.
[  593.124175][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'.
[  593.124199][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'.
[  593.124222][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'.
[  593.124246][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'.
[  593.484264][T10262] hsr_slave_0: entered promiscuous mode
[  593.485835][T10262] hsr_slave_1: entered promiscuous mode
[  593.487403][T10262] debugfs: 'hsr0' already exists in 'hsr'
[  593.487429][T10262] Cannot create hsr debugfs directory
[  593.545052][T10301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  593.545069][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  593.545098][T10301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  593.588692][T10406] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  593.743928][ T1389] hsr_slave_0: left promiscuous mode
[  593.763867][ T1389] hsr_slave_1: left promiscuous mode
[  593.829533][ T1389] veth1_macvtap: left promiscuous mode
[  593.829607][ T1389] veth0_macvtap: left promiscuous mode
[  593.829924][ T1389] veth1_vlan: left promiscuous mode
[  593.830044][ T1389] veth0_vlan: left promiscuous mode
[  594.403502][ T9131] smc: removing ib device syz2
[  594.975367][ T1389] team0 (unregistering): Port device team_slave_1 removed
[  595.190110][T10301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  595.190127][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  595.190156][T10301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  595.286997][T10268] hsr_slave_0: entered promiscuous mode
[  595.290064][T10268] hsr_slave_1: entered promiscuous mode
[  595.290902][T10268] debugfs: 'hsr0' already exists in 'hsr'
[  595.290918][T10268] Cannot create hsr debugfs directory
[  595.303224][    T9] ==================================================================
[  595.303236][    T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  595.303278][    T9] Read of size 1 at addr ffff8880613f9001 by task kworker/0:0/9
[  595.303291][    T9] 
[  595.303315][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  595.303338][    T9] Tainted: [L]=SOFTLOCKUP
[  595.303345][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  595.303356][    T9] Workqueue: infiniband ib_cache_event_task
[  595.303393][    T9] Call Trace:
[  595.303400][    T9]  <TASK>
[  595.303407][    T9]  dump_sta[  595.303407][    T9]  dump_stack_lvl+0xe8/0x150
[  595.303437][    T9]  print_address_description+0x55/0x1e0
[  595.303467][    T9]  ? __ethtool_get_link_ksettings+0x230/0x250
[  595.303493][    T9]  print_report+0x58/0x70
[  595.303522][    T9]  kasan_report+0x117/0x150
[  595.303543][    T9]  ? __ethtool_get_link_ksettings+0x230/0x250
[  595.303569][    T9]  __ethtool_get_link_ksettings+0x230/0x250
[  595.303594][    T9]  __ethtool_get_link_ksettings+0x11f/0x250
[  595.303617][    T9]  ib_get_eth_speed+0x180/0x7f0
[  595.303637][    T9]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  595.303659][    T9]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  595.303688][    T9]  ? lockdep_hardirqs_on+0x7a/0x110
[  595.303715][    T9]  ? mutex_lock_nested+0x152/0x1d0
[  595.303735][    T9]  ? rxe_query_port+0x7e/0x3d0
[  595.303758][    T9]  rxe_query_port+0x93/0x3d0
[  595.303777][    T9]  ib_query_port+0x16e/0x830
[  595.303797][    T9]  ib_cache_update+0x1ba/0xc50
[  595.303822][    T9]  ? trace_hrtimer_start+0x82/0x200
[  595.303851][    T9]  ? do_raw_spin_lock+0x12b/0x2f0
[  595.303889][    T9]  ? __pfx_ib_cache_update+0x10/0x10
[  595.303916][    T9]  ? process_scheduled_works+0xa20/0x14e0
[  595.303937][    T9]  ? process_scheduled_works+0xa20/0x14e0
[  595.303959][    T9]  ib_cache_event_task+0xd3/0x1c0
[  595.303995][    T9]  ? process_scheduled_works+0xa20/0x14e0
[  595.304019][    T9]  process_scheduled_works+0xa8e/0x14e0
[  595.304058][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[  595.304085][    T9]  ? assign_work+0x3cf/0x5d0
[  595.304107][    T9]  worker_thread+0xa47/0xfb0
[  595.304136][    T9]  kthread+0x388/0x470
[  595.304160][    T9]  ? __pfx_worker_thread+0x10/0x10
[  595.304178][    T9]  ? __pfx_kthread+0x10/0x10
[  595.304201][    T9]  ret_from_fork+0x514/0xb70
[  595.304227][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[  595.304252][    T9]  ? __switch_to+0xc89/0x1420
[  595.304275][    T9]  ? __pfx_kthread+0x10/0x10
[  595.304299][    T9]  ret_from_fork_asm+0x1a/0x30
[  595.304324][    T9]  </TASK>
[  595.304330][    T9] 
[  595.304343][    T9] Allocated by task 5599:
[  595.304353][    T9]  kasan_save_track+0x3e/0x80
[  595.304368][    T9]  __kasan_kmalloc+0x93/0xb0
[  595.304382][    T9]  __kvmalloc_node_noprof+0x5be/0x8a0
[  595.304398][    T9]  alloc_netdev_mqs+0xa9/0x12c0
[  595.304414][    T9]  rtnl_create_link+0x321/0xd70
[  595.304432][    T9]  rtnl_newlink_create+0x25f/0xb00
[  595.304447][    T9]  rtnl_newlink+0x167f/0x1bd0
[  595.304469][    T9]  rtnetlink_rcv_msg+0x802/0xc00
[  595.304493][    T9]  netlink_rcv_skb+0x226/0x4a0
[  595.304507][    T9]  netlink_unicast+0x7f5/0x990
[  595.304530][    T9]  netlink_sendmsg+0x813/0xb40
[  595.304545][    T9]  sock_sendmsg_nosec+0x13a/0x180
[  595.304565][    T9]  __sys_sendto+0x41e/0x5d0
[  595.304589][    T9]  __x64_sys_sendto+0xde/0x100
[  595.304612][    T9]  do_syscall_64+0x174/0x580
[  595.304636][    T9]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.304652][    T9] 
[  595.304656][    T9] Freed by task 1389:
[  595.304664][    T9]  kasan_save_track+0x3e/0x80
[  595.304678][    T9]  kasan_save_free_info+0x40/0x50
[  595.304700][    T9]  __kasan_slab_free+0x5c/0x80
[  595.304714][    T9]  kfree+0x1c5/0x6c0
[  595.304736][    T9]  device_release+0xc4/0x1f0
[  595.304758][    T9]  kobject_put+0x222/0x550
[  595.304773][    T9]  netdev_run_todo+0xf56/0x10d0
[  595.304790][    T9]  default_device_exit_batch+0x966/0x9e0
[  595.304813][    T9]  ops_undo_list+0x4b4/0x8d0
[  595.304842][    T9]  cleanup_net+0x575/0x810
[  595.304868][    T9]  process_scheduled_works+0xa8e/0x14e0
[  595.304889][    T9]  worker_thread+0xa47/0xfb0
[  595.304910][    T9]  kthread+0x388/0x470
[  595.304938][    T9]  ret_from_fork+0x514/0xb70
[  595.304967][    T9]  ret_from_fork_asm+0x1a/0x30
[  595.304997][    T9] 
[  595.305002][    T9] The buggy address belongs to the object at ffff8880613f8000
[  595.305002][    T9]  which belongs to the cache kmalloc-cg-8k of size 8192
[  595.305021][    T9] The buggy address is located 4097 bytes inside of
[  595.305021][    T9]  freed 8192-byte region [ffff8880613f8000, ffff8880613fa000)
[  595.305042][    T9] 
[  595.305046][    T9] The buggy address belongs to the physical page:
[  595.305069][    T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x613f8
[  595.305088][    T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  595.305122][    T9] memcg:ffff88802d6ef7c1
[  595.305132][    T9] flags: 0x80000000000040(head|node=0|zone=1)
[  595.305153][    T9] page_type: f5(slab)
[  595.305173][    T9] raw: 0080000000000040 ffff88813ff0d640 dead000000000100 dead000000000122
[  595.305192][    T9] raw: 0000000000000000 0000000800020002 00000000f5000000 ffff88802d6ef7c1
[  595.305212][    T9] head: 0080000000000040 ffff88813ff0d640 dead000000000100 dead000000000122
[  595.305231][    T9] head: 0000000000000000 0000000800020002 00000000f5000000 ffff88802d6ef7c1
[  595.305250][    T9] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  595.305268][    T9] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  595.305279][    T9] page dumped because: kasan: bad access detected
[  595.305293][    T9] page_owner tracks the page as allocated
[  595.305301][    T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5599, tgid 5599 (syz-executor), ts 101018913335, free_ts 0
[  595.305337][    T9]  post_alloc_hook+0x1f9/0x250
[  595.305370][    T9]  get_page_from_freelist+0x262a/0x26a0
[  595.305392][    T9]  __alloc_frozen_pages_noprof+0x18d/0x380
[  595.305414][    T9]  allocate_slab+0x79/0x5e0
[  595.305440][    T9]  refill_objects+0x2d8/0x350
[  595.305467][    T9]  __pcs_replace_empty_main+0x330/0x690
[  595.305493][    T9]  __kvmalloc_node_noprof+0x703/0x8a0
[  595.305513][    T9]  alloc_netdev_mqs+0xa9/0x12c0
[  595.305536][    T9]  rtnl_create_link+0x321/0xd70
[  595.305559][    T9]  rtnl_newlink_create+0x25f/0xb00
[  595.305578][    T9]  rtnl_newlink+0x167f/0x1bd0
[  595.305607][    T9]  rtnetlink_rcv_msg+0x802/0xc00
[  595.305636][    T9]  netlink_rcv_skb+0x226/0x4a0
[  595.305653][    T9]  netlink_unicast+0x7f5/0x990
[  595.305682][    T9]  netlink_sendmsg+0x813/0xb40
[  595.305702][    T9]  sock_sendmsg_nosec+0x13a/0x180
[  595.305728][    T9] page_owner free stack trace missing
[  595.305735][    T9] 
[  595.305740][    T9] Memory state around the buggy address:
[  595.305752][    T9]  ffff8880613f8f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  595.305767][    T9]  ffff8880613f8f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  595.305782][    T9] >ffff8880613f9000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  595.305792][    T9]                    ^
[  595.305803][    T9]  ffff8880613f9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  595.305818][    T9]  ffff8880613f9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  595.305829][    T9] ==================================================================
[  595.395170][    T9] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  595.395195][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  595.395225][    T9] Tainted: [L]=SOFTLOCKUP
[  595.395232][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  595.395247][    T9] Workqueue: infiniband ib_cache_event_task
[  595.395283][    T9] Call Trace:
[  595.395292][    T9]  <TASK>
[  595.395300][    T9]  vpanic+0x56c/0xa60
[  595.395323][    T9]  ? rcu_is_watching+0x15/0xb0
[  595.395349][    T9]  ? __pfx_vpanic+0x10/0x10
[  595.395374][    T9]  panic+0xc5/0xd0
[  595.395393][    T9]  ? __pfx_panic+0x10/0x10
[  595.395414][    T9]  ? preempt_schedule_thunk+0x16/0x40
[  595.395442][    T9]  ? __ethtool_get_link_ksettings+0x230/0x250
[  595.395469][    T9]  ? preempt_schedule_thunk+0x16/0x40
[  595.395496][    T9]  ? __ethtool_get_link_ksettings+0x230/0x250
[  595.395523][    T9]  check_panic_on_warn+0x89/0xb0
[  595.395556][    T9]  ? __ethtool_get_link_ksettings+0x230/0x250
[  595.395583][    T9]  end_report+0x73/0x170
[  595.395606][    T9]  ? __ethtool_get_link_ksettings+0x230/0x250
[  595.395632][    T9]  kasan_report+0x128/0x150
[  595.395657][    T9]  ? __ethtool_get_link_ksettings+0x230/0x250
[  595.395689][    T9]  __ethtool_get_link_ksettings+0x230/0x250
[  595.395719][    T9]  __ethtool_get_link_ksettings+0x11f/0x250
[  595.395749][    T9]  ib_get_eth_speed+0x180/0x7f0
[  595.395773][    T9]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  595.395799][    T9]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  595.395831][    T9]  ? lockdep_hardirqs_on+0x7a/0x110
[  595.395864][    T9]  ? mutex_lock_nested+0x152/0x1d0
[  595.395887][    T9]  ? rxe_query_port+0x7e/0x3d0
[  595.395911][    T9]  rxe_query_port+0x93/0x3d0
[  595.395936][    T9]  ib_query_port+0x16e/0x830
[  595.395962][    T9]  ib_cache_update+0x1ba/0xc50
[  595.395998][    T9]  ? trace_hrtimer_start+0x82/0x200
[  595.396040][    T9]  ? do_raw_spin_lock+0x12b/0x2f0
[  595.396073][    T9]  ? __pfx_ib_cache_update+0x10/0x10
[  595.396105][    T9]  ? process_scheduled_works+0xa20/0x14e0
[  595.396130][    T9]  ? process_scheduled_works+0xa20/0x14e0
[  595.396158][    T9]  ib_cache_event_task+0xd3/0x1c0
[  595.396191][    T9]  ? process_scheduled_works+0xa20/0x14e0
[  595.396215][    T9]  process_scheduled_works+0xa8e/0x14e0
[  595.396254][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[  595.396281][    T9]  ? assign_work+0x3cf/0x5d0
[  595.396307][    T9]  worker_thread+0xa47/0xfb0
[  595.396346][    T9]  kthread+0x388/0x470
[  595.396378][    T9]  ? __pfx_worker_thread+0x10/0x10
[  595.396402][    T9]  ? __pfx_kthread+0x10/0x10
[  595.396433][    T9]  ret_from_fork+0x514/0xb70
[  595.396465][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[  595.396495][    T9]  ? __switch_to+0xc89/0x1420
[  595.396522][    T9]  ? __pfx_kthread+0x10/0x10
[  595.396558][    T9]  ret_from_fork_asm+0x1a/0x30
[  595.396587][    T9]  </TASK>
[  595.397198][    T9] Kernel Offset: disabled