last executing test programs:

5.206034007s ago: executing program 4 (id=1074):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x100000, 0x40000}, 0xc)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010a0000000400e5000c000a"], 0x24}}, 0x80)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0xe, &(0x7f0000002d00)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000}, 0x10}, 0x94)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x1e, 0x4, 0x0)
r4 = socket$kcm(0x1e, 0x7, 0x0)
write$cgroup_subtree(r4, 0x0, 0xfdef)
socket$kcm(0x1e, 0x4, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1b, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000008000000000000000900850018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083200000bf090000000000005509010000000000950000000000000018440000030000000000000000010000850000002700000495000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x45}, 0x94)
socketpair(0x1e, 0x2, 0x4, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r3, 0x0, 0x24000010)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
connect$llc(r6, &(0x7f0000000100)={0x1a, 0x10e, 0x6, 0xb, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000080), 0x0}, 0x20)
ioctl(r7, 0xffff, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x400c084)

5.196088515s ago: executing program 0 (id=1075):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f0000000200)=[{0x28, 0xfd, 0x0, 0xffffefff}, {0x6, 0x7f, 0x0, 0x6}]}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
syz_emit_ethernet(0x52, &(0x7f0000002440)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@empty}]}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x3}}}}}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtaction={0x0, 0x30, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{0x0, 0x1, [@m_police={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x9}, @TCA_POLICE_RESULT={0x0, 0x5, 0x7ff}, @TCA_POLICE_TBF={0x0, 0x1, {0x841b, 0x7ffffffffffffff8, 0x8, 0x3, 0x7, {0x8, 0x1, 0x4, 0x64b, 0xa2b5, 0x40}, {0x4, 0x0, 0x9, 0x0, 0xf, 0x1}, 0x9, 0x30, 0x2}}, @TCA_POLICE_RATE={0x0, 0x2, [0x41, 0x3, 0x1, 0x7fffffff, 0x3, 0x7, 0xffffff5b, 0x6, 0x9, 0xfffffff8, 0x22, 0x3, 0xec8, 0x0, 0x4, 0x9, 0xe, 0x1, 0x3ff, 0xd, 0x8, 0x7f, 0x8, 0x9, 0xfff, 0x101, 0x2, 0x800, 0x906, 0x80000000, 0x4, 0x1, 0xffff, 0x7, 0x7fffffff, 0x12, 0x3, 0x3, 0x6bd, 0xfff, 0x200, 0x7fff, 0x2, 0x2, 0x81, 0x5, 0xd41, 0x0, 0x8, 0x8000, 0x7, 0x0, 0x1000, 0xfffffffc, 0x57, 0x21fdd1a5, 0x4, 0x9, 0x6, 0xffff, 0x6, 0x0, 0x5, 0x1, 0x3, 0x2, 0x13d, 0x5, 0x9, 0x9, 0x6, 0xffff, 0xef0f, 0xb8e9, 0x1, 0x0, 0x8, 0x4, 0x6, 0x5, 0x1000, 0x9, 0x2, 0x4, 0x0, 0xfff, 0xfffffffe, 0x200, 0x7036, 0x3, 0x8001, 0x7, 0x200, 0xd9, 0x9, 0x5, 0x7, 0x5f, 0x7fff, 0x9, 0xfffffffc, 0x800, 0xd, 0x7, 0x1, 0x8, 0x9, 0x7, 0x0, 0x81, 0x3, 0x3, 0x714, 0x773d, 0xf7, 0x4, 0x1ff, 0x9, 0x0, 0x2, 0xc0, 0x4, 0x7ff, 0x7, 0xc, 0xffffffff, 0xfffffffa, 0x9, 0x2, 0x508, 0x7, 0x1, 0x3ff, 0x2, 0x81, 0x8, 0x8000, 0xcc3d, 0x0, 0x4, 0x4, 0x6, 0x3, 0x7, 0x1, 0x2a2, 0x3, 0x9, 0x8001, 0x5, 0x1000, 0x0, 0x3, 0x4e, 0x80, 0x4, 0x800, 0x62f6, 0x7fffffff, 0x6, 0x5c14, 0x3, 0x5, 0x8, 0x8, 0x7fff, 0x8, 0x7, 0x3, 0x0, 0x1, 0x7, 0x6, 0x4, 0xfffffff0, 0x1, 0x7, 0x74dd, 0x8, 0x7, 0x8, 0xffffffff, 0x48, 0x3, 0x7, 0x8, 0x101, 0x4, 0x400, 0x7, 0xcdd, 0x3, 0x0, 0x9, 0x1b, 0x7, 0x5ed, 0x1, 0xffff, 0xfff, 0x8, 0x3, 0xd2fb8364, 0x2, 0x92, 0x7, 0x6, 0x6, 0xc, 0x8, 0xff, 0xfffffe01, 0x7fffffff, 0x2, 0x8, 0x4929, 0x7, 0xe858, 0x8, 0x14000000, 0xffff, 0x3ff, 0x3ff, 0x2, 0x2, 0x1, 0xfffffffc, 0x42, 0x0, 0x80000000, 0xd, 0x7, 0x98ae, 0x1, 0x1, 0x3, 0x5, 0x7, 0x80000000, 0x4a4, 0x35e634f2, 0x9, 0x10001, 0x8, 0xfffffffe, 0x101, 0xcc, 0x5, 0x9, 0x8354, 0x2, 0x8e, 0xd, 0xa, 0x4, 0xc]}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0xfffffffffffffffb}], [@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x6, 0xffffffff, 0x6, 0x4, 0x1, 0x1ccd, 0xf9, 0x701, 0x1, 0x1b66eb85, 0x5, 0x9, 0x1, 0x2332627b, 0x21, 0x0, 0x1e1f, 0x1, 0x1, 0x4, 0x9, 0xfffffffa, 0x3, 0x1, 0x0, 0x2, 0x5, 0x5, 0x59, 0x7, 0x1, 0x2, 0xfffffffc, 0x4c22, 0x6c8, 0x23, 0x5, 0x40, 0x4, 0x3, 0x8d, 0x3, 0x5, 0x5, 0x7, 0x3, 0x7fffffff, 0x7fff, 0x6, 0xffffffff, 0x6, 0xd94d, 0xff, 0x1, 0x3, 0x0, 0x1, 0x5, 0xaf800000, 0xfffffff7, 0x3f37, 0x6, 0x7, 0x9e5, 0x9, 0x7, 0x0, 0x5, 0xa, 0x10, 0x27, 0x7ff, 0xe9, 0x1c00, 0x5, 0x448fbed, 0xe19, 0x4, 0x1, 0x73, 0x7, 0x4, 0x5, 0x3, 0xc1, 0x0, 0xff, 0xffffffff, 0x3, 0x9, 0xf, 0x5, 0x9, 0xfffffffd, 0x2, 0x800, 0x6, 0x5, 0x7, 0x0, 0x5, 0x5, 0x9, 0x4, 0x4, 0xfc7, 0x8, 0x6, 0x5, 0x1, 0x793, 0x9, 0x5, 0x1, 0x6, 0x9, 0x2, 0xff, 0x7, 0x4, 0x2, 0x3, 0x3, 0x70f, 0xffff, 0x8, 0x5ae88682, 0xdb4, 0x10000, 0x0, 0x7, 0xa, 0x7, 0x5, 0x9cb, 0x0, 0x800000, 0x4, 0x1, 0xd, 0x5, 0x9, 0x7, 0x1, 0x5, 0x9, 0x4, 0x1, 0x4, 0xfffffffc, 0x4, 0x10, 0x2, 0x1c000000, 0xbd8a, 0x9, 0xf09, 0xffffffff, 0x3ff, 0x1000, 0x7, 0xa, 0x8000000, 0x8, 0x29, 0x40, 0x8001, 0x10001, 0x37d5000, 0x2897484c, 0x10, 0x7fff, 0x6, 0x4, 0x3, 0x0, 0x401, 0x6, 0x3, 0x2, 0xa, 0xd, 0x1, 0x0, 0x3, 0x0, 0x0, 0x8, 0x429c, 0x3, 0x8001, 0x9, 0x2, 0x0, 0x8, 0x8000, 0x8, 0x6, 0x1, 0x34, 0xffff, 0x4, 0x9, 0xfffffffc, 0xffffffff, 0x1, 0x7, 0x84, 0x104c00, 0x1, 0x7, 0x8, 0x80, 0x3, 0x6, 0xf8, 0x2, 0x5, 0xb47b, 0x1, 0x8, 0x80000000, 0xfffff001, 0x9, 0x9e, 0x4, 0x800, 0x280, 0x5, 0x7fffffff, 0x8, 0x5, 0x9, 0xf8, 0x3ff, 0x5, 0x9, 0x7, 0xba, 0x7fff, 0x3, 0x1000, 0x3, 0x4, 0x0, 0x8, 0x5a9f, 0x27, 0x7, 0x8, 0x7, 0x2, 0x4, 0x6, 0x4, 0xc]}, @TCA_POLICE_TBF={0x0, 0x1, {0x401, 0x5, 0x5, 0x5, 0x4, {0x7b, 0x1, 0xfffc, 0xff, 0x3, 0x80000001}, {0x5, 0x2, 0x8, 0x8001, 0x4486, 0x6}, 0x8, 0x2}}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0xd0f}], [@TCA_POLICE_AVRATE={0x0, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x401}, @TCA_POLICE_RATE64={0x0, 0x8, 0x4}, @TCA_POLICE_TBF={0x0, 0x1, {0xb, 0x3, 0x28, 0x23e161d8, 0x40, {0x40, 0x0, 0xfffe, 0x1, 0x8, 0x10001}, {0xe4, 0x1, 0x2, 0x1, 0x3, 0x4}, 0x41, 0xe, 0x9a}}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x5}], [@TCA_POLICE_RATE64={0x0, 0x8, 0x5}, @TCA_POLICE_RATE={0x0, 0x2, [0x10000, 0xffffffff, 0x69e, 0x1, 0xe, 0xd5dd, 0x0, 0x81, 0xe8, 0x6, 0x8000, 0x3ff, 0x40, 0x6, 0x2, 0x9, 0x10, 0xd956, 0x9, 0x0, 0x1ff, 0xfffffff9, 0x9, 0xb, 0x6, 0xc5d4, 0x7, 0x3, 0x2, 0x8, 0x0, 0x7fffffff, 0x2, 0x3, 0x7fffffff, 0x800, 0x8, 0x6, 0xffff, 0x9, 0x2, 0x2800000, 0x1, 0x8, 0x7fff, 0x7f, 0xb288, 0xb, 0x7, 0x400, 0x1, 0x3, 0xb8ce, 0x8, 0x0, 0x9, 0x2, 0x4, 0x7f, 0x1, 0x6b3b, 0x10001, 0x9, 0x8001, 0x8, 0x10000, 0x40000, 0xdb5, 0xe, 0x3, 0x1, 0x8, 0xeeb, 0x1, 0x6, 0x1, 0x4, 0x3, 0x5869, 0x2, 0x6, 0x401, 0x62ca, 0x0, 0x1, 0x7b4a, 0x2, 0x1ff, 0x9a, 0xffffffff, 0x62, 0x7f, 0x8, 0x2, 0xff, 0x80, 0x2, 0x5, 0x6, 0x6, 0x3, 0x9, 0x22, 0x9b47, 0xffffffe1, 0x7, 0x7fffffff, 0x1, 0x744c, 0x4, 0x4, 0x2, 0x615b, 0x6, 0x3, 0xd, 0x5, 0x1, 0x7fff, 0x6, 0x2, 0x9, 0x8, 0xd, 0x3, 0x1ff, 0x4, 0x5, 0x8, 0x81, 0x4, 0xc25, 0x40, 0x1, 0x6, 0x4765, 0x3, 0x10000, 0x1, 0x31, 0x2, 0x4, 0x357e, 0x8, 0x3, 0x48, 0x9, 0x1, 0xffffff54, 0xd336, 0x9, 0x8, 0xf, 0xfffffff8, 0xe28, 0x9, 0x8, 0xe6, 0x6, 0x88a3, 0x200, 0x5, 0x7, 0x3, 0x3, 0xd, 0x80000000, 0x8, 0xcc, 0x5, 0xc5b, 0xffff7f28, 0x0, 0x0, 0x400, 0x8, 0xffff, 0x86c, 0x81, 0x3, 0x7, 0x2, 0x7, 0x60, 0x1, 0x5d80d628, 0x2, 0x6, 0xfffffffe, 0x7fffffff, 0x0, 0x1, 0x672, 0x2, 0x2, 0x3, 0x401, 0x0, 0x2, 0xb321, 0x0, 0xf, 0x200, 0x1, 0xffff, 0xb, 0x3, 0x6, 0x9, 0x6, 0x5, 0x7fff, 0x8, 0x401, 0x6, 0x6, 0x51c9, 0x6, 0x2, 0xe4, 0x8, 0x3, 0x5, 0x2, 0x4, 0xffffffc0, 0x4, 0xa2, 0x5, 0x5, 0x3, 0x0, 0xef09, 0x7, 0x1, 0x6b840, 0xfffffffb, 0xfffff486, 0x8, 0x3ff, 0x0, 0x6, 0x9, 0x2, 0x4, 0xf431, 0x1a6, 0xffff, 0x2, 0x4, 0x8, 0x4, 0x80, 0x3, 0x3, 0xfffff92f]}, @TCA_POLICE_TBF={0x0, 0x1, {0x1c000, 0x8, 0x70b92652, 0x5, 0x3, {0x5, 0x0, 0xffff, 0x2, 0x4, 0x19}, {0xe, 0x0, 0x0, 0x2, 0xf800, 0x2}, 0x9, 0x4, 0xfb}}, @TCA_POLICE_RATE={0x0, 0x2, [0x10000, 0xd341, 0x401, 0x7, 0x4, 0xffff957b, 0x9, 0x800, 0xffffffff, 0x20, 0x5, 0x8, 0x0, 0x101, 0x3, 0x10001, 0x9, 0xc298, 0x7fffffff, 0x6, 0x9, 0x12, 0x6, 0x7, 0x8, 0x7f, 0x3, 0x1, 0x6, 0x4, 0xffff, 0x5, 0xb5a0, 0x81, 0x5, 0x8, 0x80, 0x5, 0x81, 0x8, 0x3, 0x1, 0x9, 0x10001, 0x99, 0x8, 0x30000, 0x5c86, 0x800, 0x1, 0x0, 0xf2, 0x3, 0x9, 0x7, 0x2, 0x800000, 0x4, 0x1, 0x8, 0x2, 0x7f6a, 0x7, 0x6, 0x80000000, 0x80000001, 0x3, 0x6, 0x6, 0x9, 0x3, 0x200, 0x905a, 0x3, 0x3, 0x7f, 0x0, 0xfff, 0x8, 0x8001, 0x4, 0x3, 0xd, 0x0, 0x9, 0x1ff0000, 0x9, 0xffffffff, 0x7f, 0x5, 0x3, 0x3, 0x7, 0x9, 0x4, 0x0, 0x5, 0x44b2, 0x2, 0xffff, 0x7, 0x4, 0x200, 0x0, 0x80000001, 0xaf89, 0x8e, 0x10000, 0x9, 0x9, 0x101, 0x6, 0x80, 0xffffffff, 0xffffffca, 0x368d, 0x3, 0x1ff, 0xa50, 0xea, 0xc, 0x8, 0xd, 0x8, 0x7, 0x8, 0x42bf, 0x0, 0xfffff000, 0x8, 0x2, 0x0, 0x4, 0x7, 0x4, 0x1ff, 0x6, 0x1, 0x3, 0xea, 0x0, 0xd, 0x0, 0xa, 0xfffffffd, 0xb, 0x947, 0xfffffffc, 0x9, 0x1000, 0x5, 0xb, 0x5, 0x4, 0x9, 0xfffffff7, 0x7ff, 0x7, 0x5, 0x5, 0x9, 0x9, 0x5, 0x7fff, 0x80, 0x1ff, 0x6, 0x3ff, 0x7ff, 0xca7, 0x6, 0x2, 0x9, 0x1, 0xe, 0x0, 0xb, 0x6, 0xe3dc, 0xc14, 0x6, 0x5, 0x0, 0xdb, 0x1, 0x1, 0x5, 0x5, 0x4, 0x9, 0x6, 0xfffffffa, 0x80, 0x8, 0x0, 0x10000, 0x4, 0x2, 0x4c2, 0xfd, 0xff, 0xfffffffe, 0x5, 0x37d1, 0x2, 0x6e, 0x3, 0x4, 0xffffffff, 0xffff72a7, 0xffffff01, 0x4f, 0x2, 0x100000, 0x5, 0xfffffff9, 0xffff, 0x1ff, 0x3, 0x6, 0xae, 0x1, 0x1, 0x5, 0xa4, 0x5, 0x4, 0x3, 0x8b7, 0x1, 0x8, 0x10001, 0xffff, 0x4, 0x2ffa, 0x80000000, 0x8, 0x5, 0xffff, 0x5, 0x4, 0x2, 0x6, 0x0, 0x0, 0x2, 0x6, 0x4, 0x1ff, 0x3, 0x100, 0x40700000, 0xfff, 0x8, 0x5, 0x9]}]]}, {0x0, 0x6, "e22e179e81c8a96dc0929a9ebc44382bdecdb94f5faee46dd2431a4e4e5c6bb467c33a01c8ca77eb2904dfb0098efdd23d9bcba330ab9f1cf66cc88afae16e892802de12c1d2b5b6f3f4485416682fa35d4840306dd91d02f7d3644e72761999623b6a9a20f3b36d75e18c9c0207397422d4e9950e04c85a19c38d3ee8a28ed3f21f1afd351a0f49ede3"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x5}}}}, @m_sample={0x0, 0x17, 0x0, 0x0, {{}, {}, {0x0, 0x6, "75911bd0a175e7c5ba8c286a6f5fc77ac3496cd4e22e"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1, 0x3}}}}, @m_mpls={0x0, 0x1a, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x0, 0x4, 0x6}, @TCA_MPLS_LABEL={0x0, 0x5, 0x665d8}, @TCA_MPLS_PROTO={0x0, 0x4, 0x70df}]}, {0x0, 0x6, "fbc24010163c52f5740ff141a420ce5903cf5a0ab9aa0062b1737373792a65f81932f365aed5a1d918310364fdefe672045a12b9fb3b2becf4947b240a90a9f0f4a57163e537f6d020ff0e4c18ac85fc6499f7d2fee8b0a3d5a97e2dbcf63119594dae52a1bc1cce804f7cd3bb59cfe5e85f8a3e16b9fb090d65957f43ef8cb170994346840463da476479bd9d03090de18ec1ce68b26e5041ce509cae22da627b7d"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}, @m_simple={0x0, 0x11, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x0, 0x2, {0x79, 0x9, 0x0, 0xc268, 0xfffffffe}}, @TCA_DEF_PARMS={0x0, 0x2, {0x1000, 0x3, 0x5, 0x9, 0xb}}, @TCA_DEF_DATA={0x0, 0x3, '\x00'}, @TCA_DEF_DATA={0x0, 0x3, 'batadv_slave_0\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x80000000, 0x10001, 0x5, 0x5, 0xfffffff5}}, @TCA_DEF_DATA={0x0, 0x3, '(]\\`@^\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0xbbec, 0x8, 0x7, 0x4, 0x3}}, @TCA_DEF_PARMS={0x0, 0x2, {0x1, 0x8, 0x4, 0x3, 0x7}}]}, {0x0, 0x6, "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"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x3}}}}]}, {0x0, 0x1, [@m_police={0x0, 0x1f, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0xdab2}, @TCA_POLICE_RATE64={0x0, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0xf, 0x5, 0x6, 0xd9, 0x401, 0x8, 0x0, 0x10, 0x80000001, 0x800, 0x5, 0x3, 0x0, 0x2385, 0x4, 0x7, 0x9, 0x80000000, 0x7, 0x0, 0x2fd, 0x7, 0x10000, 0x401, 0xe, 0x4, 0x1, 0x7, 0x9, 0xc, 0x1ff, 0x8, 0x5, 0x101, 0x52, 0xe8c, 0x9, 0xd9, 0x4, 0x9, 0x0, 0x3, 0x80000000, 0x200, 0x3, 0x10001, 0x3, 0x7ff, 0x9, 0x373, 0x9, 0x3ff, 0x0, 0x8, 0x9, 0x10000, 0x1039, 0x10001, 0x100, 0x6, 0x7, 0x800, 0x9, 0x5, 0x2807, 0x6, 0xfffffffb, 0x16, 0x7, 0x7fffffff, 0xa, 0x6, 0x1, 0x3b53, 0x3, 0x1, 0x9eef, 0x55aa, 0xffff6f3c, 0x4, 0x9, 0x4, 0x9, 0x1, 0x30d, 0x1, 0x6, 0x6, 0x7fffffff, 0x5, 0x0, 0xf49d, 0x1, 0x1, 0x6b, 0x5, 0x8, 0xe, 0x1, 0x1, 0x9, 0xc00000, 0x0, 0x4, 0x9, 0xdc8, 0x3, 0xab, 0xfffffffa, 0xfffffffa, 0x9, 0x9, 0x80000001, 0x1, 0x32c, 0x70d, 0x5, 0xfffffffd, 0x4, 0x80000001, 0x0, 0x4, 0x9, 0x6, 0x400, 0x0, 0x101, 0xfffffffb, 0xefd, 0xfffff9a6, 0x6, 0x5, 0x4, 0xa1f, 0x1, 0x9206, 0x8001, 0x6, 0x7, 0x4, 0x9d, 0x7, 0x2, 0xf3, 0x5, 0x7fff, 0x4, 0x1, 0xa, 0x1, 0x3, 0x3, 0x2, 0x8, 0xffff, 0xfffffffe, 0x6, 0x4, 0x1, 0x78, 0x5, 0x0, 0xf, 0x7, 0x10001, 0xfffffff0, 0x800, 0x9, 0xffff, 0x0, 0x101, 0x4, 0x6, 0x6, 0x7, 0x0, 0x5, 0x4, 0x9, 0x9, 0x26, 0xa, 0x4, 0x3, 0x6, 0xffffffe7, 0x2, 0x7, 0xffff, 0x0, 0x101, 0xf, 0x0, 0x101, 0x9, 0x2, 0x0, 0xfff, 0x281, 0x5, 0x9, 0xfffffffb, 0xe, 0x4, 0x8001, 0x1, 0x0, 0x2f, 0xe, 0x4f6, 0x0, 0xff, 0x5, 0x7, 0x40, 0x0, 0x3f, 0x5, 0x3, 0x6ab4, 0x9b, 0x3, 0x24, 0x3, 0x80000001, 0x7, 0x6, 0x2, 0x3ff, 0x8001, 0x5, 0x1ff, 0x2, 0x2, 0x9, 0xd409, 0x4b, 0x9, 0xfffffffd, 0x1, 0xaf, 0xf2d, 0x5, 0x6, 0x2, 0x81, 0xfffffffc, 0x2, 0x5, 0x2, 0x80000001, 0x9, 0x0, 0x5, 0x0, 0x7]}, @TCA_POLICE_RATE={0x0, 0x2, [0x2, 0x10, 0x7, 0x7, 0x0, 0x6, 0xb3a, 0x8, 0x7723, 0xffffffff, 0x81, 0x1, 0x6, 0x8, 0x0, 0x1, 0xfffffff2, 0x1ff, 0x19, 0xffffffff, 0x3, 0xf, 0x5, 0x9, 0xffff, 0xffffffff, 0x1, 0x9, 0xfffffff0, 0x9200, 0x370, 0x4, 0x7, 0x5, 0x7f, 0x3, 0x7, 0x6, 0x4, 0x3, 0xa, 0xf, 0x6, 0x6, 0x3390, 0x8000000, 0xe77, 0x3, 0x1, 0x3ff, 0xc0000, 0x0, 0x81, 0x9, 0x3, 0x10000000, 0x82, 0x401, 0x81, 0x9, 0x6, 0x400, 0x7, 0x2, 0x5b0ad20c, 0x0, 0xfe, 0x8, 0x9a, 0xff, 0x1, 0x100000, 0x9, 0x9, 0x4, 0x1, 0x9, 0x7, 0xf0, 0x1, 0x3, 0x211b417f, 0x4, 0x8, 0x8001, 0x5, 0x1, 0x3ff, 0x1620, 0x4, 0xffffffff, 0x9, 0x9, 0x101, 0x1762, 0xfffffff8, 0x80, 0x6, 0x5, 0x1, 0xa0, 0x1000, 0xff, 0x4, 0x9, 0x1ff, 0x8000, 0xb, 0x38c, 0x4c1, 0x9, 0x3, 0x5, 0x4a6, 0x0, 0xa, 0x1, 0x0, 0x8001, 0x8, 0xfffffffe, 0x40, 0x7, 0x9, 0x18, 0xffffffff, 0x1, 0x5, 0x8, 0xffffffff, 0x1ff, 0x1869, 0x101, 0xfffffffa, 0x101, 0x200, 0x9, 0x80000000, 0x4b, 0x93ea, 0x8, 0x23a1, 0x7, 0x5, 0x2000, 0x5, 0x7, 0x80000000, 0x1d, 0x7, 0x2, 0x2, 0x3, 0x400, 0x84d2, 0x5, 0x8, 0x8001, 0xf6, 0x2, 0x2, 0xe, 0x81, 0x101, 0xfffffffc, 0x4, 0xd5b, 0x51c, 0xa2, 0x108b, 0x2, 0x0, 0x4, 0x2, 0x8, 0xb72, 0x3, 0x2, 0x1, 0xffffde6f, 0x2, 0xa, 0x10000, 0x7, 0x1, 0x7, 0xff, 0xfffffffc, 0x0, 0x7ff, 0x4, 0xf5c5, 0x0, 0x3, 0x0, 0xfffffffd, 0x3, 0x3, 0x9, 0x7b59, 0xc00, 0x6, 0x400, 0x0, 0x9, 0x8, 0x4, 0x4, 0x3, 0x9, 0x5, 0xa, 0x8, 0x2, 0x0, 0x7, 0x6, 0x0, 0x67b5, 0x1, 0x58a3, 0x1ff, 0x2, 0xec3b, 0xffffffff, 0x3, 0xd6, 0xc3, 0x0, 0x3, 0xa29c, 0x0, 0xca5, 0xfffffff9, 0x2, 0x4, 0x6, 0x0, 0x80000001, 0x9, 0x3, 0x5, 0x32a, 0x80000, 0x7fffffff, 0x7, 0x80000001, 0x5, 0x1, 0xd47, 0x9, 0x10, 0x634, 0x5, 0x7fffffff, 0x7]}, @TCA_POLICE_TBF={0x0, 0x1, {0x6, 0xffffffffffffffff, 0x2, 0x1, 0x2, {0xed, 0x0, 0x7, 0x9, 0xf5, 0xffff}, {0x9, 0x3, 0x401, 0x400, 0x4, 0x3}, 0xfffffffe, 0x6a2, 0xa05}}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x6}], [@TCA_POLICE_RESULT={0x0, 0x5, 0x7}], [@TCA_POLICE_PEAKRATE={0x0, 0x3, [0x6, 0x3, 0x9, 0x3, 0x7, 0x9, 0x2, 0x3000, 0x80, 0x9, 0x401, 0x2, 0x1, 0x5, 0xa3, 0x2, 0xc, 0x1ff, 0x8001, 0x779c, 0x6, 0x8, 0x1, 0xffffffff, 0x0, 0x2, 0x8, 0x0, 0x7, 0x7fff, 0x10, 0x0, 0x4, 0x9, 0xfffffffb, 0x79df, 0xe, 0xffffffff, 0x4, 0x8, 0x8, 0x86, 0xd18, 0x5a2, 0xff, 0x4, 0xf, 0xb, 0x6, 0x5, 0x10, 0x9f, 0x2, 0x0, 0x3d6a8081, 0xa8eb, 0xffff5505, 0xffff, 0x100, 0x6, 0x2, 0x1, 0x9, 0x4, 0x7fffffff, 0x4000, 0xfffffff8, 0x6, 0x3, 0x0, 0x100, 0xfff, 0x40, 0x3, 0xebb0, 0x640a, 0x9, 0x2, 0x8, 0x4, 0x1, 0xbe, 0xa6, 0xff, 0x8, 0x0, 0x8, 0x7f, 0x0, 0x101, 0x9, 0x7fffffff, 0xfffffffb, 0x9, 0x9, 0x3, 0x0, 0x1, 0x1, 0x80000000, 0x7, 0x7f, 0xfffffff3, 0xc, 0x3, 0x6, 0x3a70000, 0x2, 0x24e2, 0x9, 0xffffffff, 0x1, 0x920f, 0x10, 0x2d5a, 0x6, 0x5, 0x3, 0x3, 0x7, 0x80000001, 0x4, 0xfffffffe, 0x200, 0xc, 0x8, 0x5, 0x3, 0x7, 0x5, 0x1, 0x40, 0x10000, 0xf9, 0x5, 0x7, 0x8, 0x2, 0x8, 0x6, 0x4, 0x100, 0x400, 0x7fff, 0x2cd2, 0x101, 0x8001, 0x0, 0x70, 0x1, 0xe0, 0x3, 0x4, 0x7210, 0x71b, 0x3, 0x8001, 0x35c3, 0xfffffffc, 0x0, 0x294, 0x6, 0x3ff, 0x2, 0x6, 0x3, 0x21b, 0x0, 0x10001, 0x8, 0xf7, 0x8, 0x1, 0xe, 0xf, 0xd, 0x1ff, 0x5, 0xfffffff8, 0x80000001, 0x5, 0x2, 0x7, 0xfffffff7, 0x10000, 0x4, 0x1, 0x80, 0x1, 0x0, 0x100, 0x8, 0xfffffff9, 0xae8, 0x9c0, 0x85, 0x10001, 0x401, 0x401, 0x1, 0x2, 0x8, 0x3ff, 0x2, 0x1, 0x1, 0x7, 0x0, 0x80000000, 0x7, 0x0, 0x1, 0xc9e3, 0x3, 0xffff, 0x2848, 0x0, 0x0, 0x0, 0xffffffff, 0xf, 0xa3fc, 0xdb1, 0x90f, 0x6, 0xbdb, 0x10, 0x800, 0x9, 0x1, 0x100, 0x0, 0x8, 0x2, 0x6, 0xc, 0x1, 0x0, 0x3, 0x413, 0x80, 0x56, 0x3ff, 0x0, 0x200, 0x8, 0x1, 0x0, 0x4, 0x4, 0x3, 0xfffffbff, 0xd4e5, 0x81, 0x2, 0x7]}, @TCA_POLICE_TBF={0x0, 0x1, {0xe938, 0x3, 0x9, 0x3, 0x7fff, {0x5, 0x0, 0x6, 0x8, 0x9, 0x100}, {0x0, 0x1, 0x101, 0xc, 0x400, 0x1}, 0x400, 0x3, 0x5}}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x2}, @TCA_POLICE_RATE64={0x0, 0x8, 0x7fffffff}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x2}], [@TCA_POLICE_RESULT={0x0, 0x5, 0x8000}, @TCA_POLICE_RATE64={0x0, 0x8, 0x7fffffff}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x1, 0x4, 0x5, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x1, 0x7, 0x5, 0x1, 0x8, 0x225, 0x2, 0x5, 0xff8, 0x57, 0x6, 0xfff, 0x0, 0x8, 0x3, 0x80, 0x100, 0x80, 0x6, 0x0, 0x8554, 0x2, 0xd3, 0x4, 0x7fffffff, 0x3, 0xfffffffb, 0x8, 0xf, 0x80000001, 0x80000000, 0xa9, 0x3ff, 0x8000, 0x7, 0x3, 0x7eca4b86, 0x4, 0x1, 0x6, 0x3, 0x5, 0x390e, 0x10000, 0x6f, 0x6, 0x8, 0xfffffff9, 0x4, 0x3, 0x8, 0x8, 0x1ff, 0x80000001, 0xff, 0x3, 0x5a3b, 0x81, 0x3, 0x5, 0x0, 0x7, 0x6, 0x4, 0x8000, 0x6, 0x0, 0x7fffffff, 0xbe, 0x8000, 0x3, 0x80, 0x9, 0xb9a, 0x5, 0x400, 0x400, 0x9, 0x84, 0x2, 0xe8baab8, 0xffffffff, 0x34, 0x5b, 0x4, 0xe4, 0x8, 0x3, 0x5, 0x9, 0x6, 0x6, 0x6, 0x0, 0xffffff00, 0x10001, 0x9, 0x2f9, 0xe, 0xd65d, 0x473d, 0xe, 0x5, 0x5, 0x7, 0x800, 0x3, 0x8, 0x0, 0xa217, 0xea, 0x3, 0x6, 0x1, 0x6, 0x0, 0x8, 0x1, 0xfffffff9, 0x40, 0xff, 0x1, 0x0, 0xfffffffc, 0x2, 0xf12a, 0x6, 0x80000001, 0x9, 0xe, 0x4, 0xfffc0000, 0x7fffffff, 0x1, 0x3, 0x91, 0xe25d, 0x5, 0x9, 0x3, 0x2, 0x5, 0x7, 0x4, 0x6, 0x4, 0x8, 0x4, 0xf1, 0x9, 0x8, 0x7, 0x7, 0x2, 0x9, 0x6, 0x4, 0x789, 0x80000001, 0xd, 0x80000001, 0x2a, 0x101, 0x5, 0x1, 0x5, 0x5, 0x6, 0x3, 0x25a6, 0x4, 0xe, 0x4, 0x1, 0x5, 0x5, 0x9, 0x8, 0x4, 0x0, 0xf, 0x7, 0x1, 0x2, 0x3, 0x0, 0x0, 0x1000, 0x401, 0x4, 0x5, 0x1, 0x8001, 0x5, 0x3, 0x7, 0x100, 0x7, 0x324e, 0x1, 0x7ff, 0xfffffffc, 0x401, 0x4, 0x8, 0xb, 0x0, 0x4, 0x6, 0x1, 0xfffffff8, 0x5, 0x0, 0x8000, 0x3, 0x2, 0x80, 0xc, 0x7fffffff, 0x1, 0xdb, 0x7, 0x31, 0x1, 0x5, 0xcd12, 0x0, 0x2, 0xfffffff9, 0x6, 0x1b7ca6f, 0xfffffff8, 0x9, 0x8, 0x7ff, 0x2, 0x6051e434, 0x6, 0xf835, 0x0, 0xe7, 0x5, 0x7, 0x5, 0x4, 0xe749, 0x5]}]]}, {0x0, 0x6, "c3ecd978f44115842989758ab26aa05069cf963ec849e9ec2b50cb69dd36a0c173c7907831b73322f05ca108639e056e316e202109c2f33004c999463d0ed6830c2367a9cad57b1bf3c0da4620bbe79ff1af40b34d32e5f0b4f8bd54ae9558702c9fb785d944e4720d48699119e07962d46828f6b8af857722c417a4db53af1639109f3701b5b62de8f0bb9caf55bd05c3675a02ff3fbe75cd5d77a632c18fb6d7c7479ba72da95ad2a52bacaccde5f614d7e3"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}]}, {0x0, 0x1, [@m_xt={0x0, 0x18, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x0, 0x6, {0x97, 'mangle\x00', 0x5, 0xf}}, @TCA_IPT_TARG={0x0, 0x6, {0x7, 'security\x00', 0x4, 0xffff, "104e0bf5aed6fe94390f8bc180584b8fb612f1b652366a2a5b5f66b042774444121efff038eebb8df07cdca7539a27917b3278e1448dae0e989b"}}, @TCA_IPT_TARG={0x0, 0x6, {0x7, 'mangle\x00', 0x3, 0x8, "695fe9243f6b7f6095843a8b385d125b08f4d896a604c07f9e6b"}}]}, {0x0, 0x6, "cab35f18e80ec06f7923151ef7d3eb9fcbcc3e3b77db1a67901ffb30d5b35d1b31d2342344f93218db6c965a8f3b2b1690880a45a0511425d13ae88ca4a5b8d05d13fd1a9a2ff094f8683c6a1ebcd4c5f9c6b4ef1fa195cb25305c961fba0891cf9dbf768905fb7eaaa7efad518a9bcbcc7a3994e4f6d409bfeed68df1c2eed9326e15f6d61912b5c42f6d179987a587f36f12b9b769c0a2fd0962be4f07f8183eb6889bd8577bac26ff85a6cb20be2077a67ee1f6612db1f443201109cff2b65f9b9e9a361449"}, {}, {0x0, 0x8, {0x3, 0x1}}}}, @m_bpf={0x0, 0x11, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x0, 0x4, [{0xf, 0x6, 0xa0, 0x6}, {0x1, 0x9, 0x5, 0x6c}, {0x7, 0x0, 0x7, 0x400}, {0x4, 0xe, 0x2, 0xff}, {0x7c7, 0x80, 0x3, 0x5}, {0x3, 0x51, 0x9, 0x4b}, {0xd, 0x2, 0x3, 0x1df0}]}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x1}, @TCA_ACT_BPF_FD={0x0, 0x5, r4}, @TCA_ACT_BPF_OPS_LEN, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x3}]}, {0x0, 0x6, "8605e4051f7ec3212608002402dab0647e54b36c3df11a0e827524e0c8a0e73280b70b925382abafbf4a97e5f4a4fe2887fa62449d32d43e7743329eabbe183275be33b85f1918dbac155df8cdae9c3f45d8c0c7e6ed340d87bdd87d9c414ae88e90a206d9"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x1}}}}, @m_nat={0x0, 0x1a, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x1, 0x6, 0x10000011, 0x9, 0x7635b94e}, @rand_addr=0x64010101, @private=0xa010100, 0xffffffff}}, @TCA_NAT_PARMS={0x0, 0x1, {{0xffffff1a, 0x9c, 0x0, 0x0, 0x28f}, @multicast1, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x0, 0x2, 0x3, 0x1, 0x4000000}, @remote, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x3, 0x6, 0x20000000, 0x25, 0x4}, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0xc, 0xe3, 0x6, 0x3, 0x2}, @multicast2, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x1ff, 0x3, 0x10000005, 0x628, 0x6}, @multicast2, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x8c, 0x81, 0x0, 0x3ff, 0xe}, @broadcast, @rand_addr=0x64010102, 0xff000000, 0x1}}]}, {0x0, 0x6, "b02e8fc396d4b632b42360f2475a74d85096abaac09e78fffe1a4d4865b63153616b0bedff5dc990f7305429eba2402ceffa5e59df23dddf0cb80057fb3f696dd1dcce74fe3f59ace3b84d8f272faef0b1a53828a2da8775ad808c4901cc354352831b37ff0d56536cba6a7a281d9bb8fac840179d312eea8dca27336875161dcbebcad6c9994b1b0264e1d814a526e8922108de480cb96219b7601402ad288f1e4f8ab759f85a5aa34a1aea5470f0b11ff6a63964957d9ba73ebf67a13d61096d6de92df4"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x0, 0x2}}}}]}]}, 0x21}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x34, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x24, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0xa3, 0x0, 0x0, @u64=0x5}]}]}, 0x34}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xa, 0x4}, {0xf, 0xfff3}, {0xfff3, 0x7}}, [{0x4}, {0x4}]}, 0x2c}}, 0x4c840)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x6, 0x4, 0x4, 0xa, 0x50c, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0x43, 0x7, 0x1, 0x0, "414b786475449951cdad5e2e616a2d9b77752ab3fc16e865dbda613fbc32b3c12fa6ee3f9780a6645dc4dfbe76de1968723c3ef771fef7d203a8f758c9b938"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x40051}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0xa5dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xffe0, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

5.037416614s ago: executing program 4 (id=1077):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071110b00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x2, 0xd, 0x4})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002e80)={r0, 0xe0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000002c00)=[0x0, 0x0], 0x0, 0xdd, &(0x7f0000002c40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000002cc0), &(0x7f0000002d00), 0x8, 0x70, 0x8, 0x8, &(0x7f0000002d40)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003040)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa92}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa7c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0xb, 0x7, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f0000000340)='GPL\x00', 0x2390f98e, 0x0, 0x0, 0x40f00, 0x4, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0xc, 0x5, 0x25a5472f}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000002fc0)=[r1, r1, 0xffffffffffffffff, r1], &(0x7f0000003000)=[{0x1, 0x5, 0x2, 0x4}, {0x3, 0x2, 0x3, 0xb}, {0x2, 0x2, 0x0, 0x4}], 0x10, 0x2}, 0x94)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x3c, r6, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$XFS_IOC_GOINGDOWN(r7, 0x8004587d, &(0x7f0000000180)=0x5)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

4.870454257s ago: executing program 4 (id=1078):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r2, 0x701, 0x2, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4c018}, 0x4004004)
ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f00000000c0)={0x94000000, 0x0, 0x0, 0x9, 0x1936432d, 0x7, 0xdfcb, 0xee})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04003800128009000100766c616e000000002800028006000100040000001c0004800c00010000000080670000000c000600000000000000000008000500", @ANYRES32=r3], 0x60}}, 0x8000002)

4.663326145s ago: executing program 0 (id=1079):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000)
sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)
recvmsg$qrtr(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000002c0)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x100)

4.663084344s ago: executing program 4 (id=1080):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000004c0)={{0x2, 0x4e21, @broadcast}, {0x306, @multicast}, 0x28, {0x2, 0x4e24, @broadcast}, 'veth0_macvtap\x00'})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x6100204)
r2 = epoll_create(0xa67)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000000})
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1)

4.445612717s ago: executing program 4 (id=1082):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r2, 0x0)
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20)
recvmmsg(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000680)=""/236, 0xf1}], 0x1, 0x0, 0xffffffffffffffea}, 0xc743}], 0x2, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
listen(r2, 0xfffffff0)

3.997339479s ago: executing program 4 (id=1084):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f00000004200048c48a0291", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @none}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe)
sendto$inet6(r2, &(0x7f0000000040)='T', 0x1, 0x4001, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0x0)
shutdown(r2, 0x1)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000340), &(0x7f00000003c0)=0x4)
r5 = socket$inet(0x2, 0x3, 0x1)
setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$inet(r5, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x810, 0xffffffffffffffff, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000400))
bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10)
bind$tipc(r6, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10)
bind$tipc(r6, 0x0, 0x0)

3.798666179s ago: executing program 1 (id=1087):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=<r6=>r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0)
splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, &(0x7f0000000580))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feff"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = socket(0x15, 0x5, 0x0)
connect$unix(r8, &(0x7f00000003c0)=@abs={0xa}, 0x6e)
getsockname$llc(r8, 0x0, &(0x7f0000000040))
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
socket$inet_tcp(0x2, 0x1, 0x0)
recvmsg$can_bcm(r1, &(0x7f00000007c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000440)=""/255, 0xff}], 0x2, &(0x7f00000006c0)=""/198, 0xc6}, 0x40000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)

3.618345049s ago: executing program 0 (id=1088):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071110b00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x2, 0xd, 0x4})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002f40)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, r1, 0x2, '\x00', 0x0, r1, 0x4, 0x2, 0x1}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003040)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa92}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa7c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0xb, 0x7, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f0000000340)='GPL\x00', 0x2390f98e, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0xc, 0x5, 0x25a5472f}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000002fc0)=[r1, r1, r5, r1], &(0x7f0000003000)=[{0x1, 0x5, 0x2, 0x4}, {0x3, 0x2, 0x3, 0xb}, {0x2, 0x2, 0x0, 0x4}], 0x10, 0x2}, 0x94)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x3c, r6, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$XFS_IOC_GOINGDOWN(r7, 0x8004587d, &(0x7f0000000180)=0x5)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

3.110265727s ago: executing program 0 (id=1091):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r1=>0x0})
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10)
bind$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x104, 0xff, 0x8, 0xc, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r3 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @private=0xa010102}, 0x10)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001c1}, 0x4800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$nci(r4, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x80, {0x0, 0x35, "759b0dc05507dde603913e07b7a5a636d91c55b591bce746d98a69eb6998deb6e7b0525dbcfe216381e39f3584743ed6d2b932ad17"}}, 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5)
write$nci(0xffffffffffffffff, &(0x7f0000000380)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x1}, 0x4)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000003c0)={0x1, 0x58, "60b38c9ed6efc52fc92261d7b62afe6fa6aded18e808816a4f6e2ad1f86df81302e5eef53be473e5453b7985a5f85c1c8171bb6cd7550b39c9e9ff3f56993b69daa3150dff7a4efaef930300a2bda9498815ab56d0f99546"})
preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/238, 0xee}], 0x1, 0x2, 0x101)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r5)
sendmsg$L2TP_CMD_NOOP(r5, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x101}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x401}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x75}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7fff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000700)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f0000000740)=""/154, &(0x7f0000000800)=0x9a)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r7)
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r9, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xe}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r3}, 0x8)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000009c0)=<r10=>0x0)
r11 = getgid()
setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000a00)={r10, 0xee00, r11}, 0xc)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5754}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x90)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=@ipv6_newrule={0x6c, 0x20, 0x10, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x63, 0x2, 0x0, 0x0, 0x6, 0x10000}, [@FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)

2.470039022s ago: executing program 1 (id=1094):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0xffffffff}, 0x10)
bind$tipc(r1, 0x0, 0x0)
close(r1)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
pwritev(r0, &(0x7f0000000f00)=[{&(0x7f0000000d80)="00214717a70700000000030640710a069d313ebb9b49", 0x16}], 0x1, 0x7, 0xfffffff9)

2.274593643s ago: executing program 1 (id=1095):
syz_emit_ethernet(0x5e, &(0x7f0000000840)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "922d96", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000ac0)=@allocspi={0xf8, 0x16, 0x339, 0x0, 0x0, {{{@in=@multicast1, @in6=@mcast1}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x2}, {0x0, 0x0, 0x9}, 0x70bd2a, 0x0, 0xa, 0x1}, 0x0, 0x8}}, 0xf8}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e1d, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0xce, &(0x7f0000000280)=0x6, 0x4)
sendmmsg$inet6(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0)
r8 = socket(0x10, 0x803, 0x2)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYRES16=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20044818)

2.273024161s ago: executing program 2 (id=1096):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="880000000d0a010800000000000000000a0000080900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000a80410001"], 0x88}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d20", 0x18}], 0x2}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010025bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001750c000300088b955cc9306eea05001100"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x60040090)

2.16828912s ago: executing program 2 (id=1097):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f0000000002000000000000000000000000140020"], 0x64}}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) (async)
r5 = socket(0x2, 0x2, 0x1)
connect$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0x1, @broadcast}}, 0x1e)
bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000240)={0xa, 0x4e21, 0x7e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x2000006}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r6], 0xcdeb}, 0x8005)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x438, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x3, 0x75, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x40, 0x9, 0x3, '\x00', 'syz0\x00', {0x6}}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xf8f, 0x7, 0x2}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:public_content_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)

2.059250413s ago: executing program 1 (id=1098):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f00000004c0)="f1", 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@uncond, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xd, 0x24000, 0x7, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x3, 0x0, [0x1, 0x401, 0x101, 0x1ff, 0x3, 0xce, 0x400, 0x2, 0x0, 0xd34, 0x800, 0x6, 0x3ff, 0x7ff, 0xd0e, 0x100], 0x10}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x7, 0x5, 0xfffffffc, '\x00', 'syz1\x00', {0xe3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000210400008000fedbdf259176db00", @ANYRES32=0x0, @ANYBLOB="adffa888e16000001c0012800b00010062726964676500000c0002800500180001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x2)
r3 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f00000001c0), 0x4)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000070000400f00010073797a30000000000900020073797a320002000048000480440001800c0001007061796c6f61640034000280000007400000000108000240000000020800054000000000080008400000000108000640000000020800034000000000140000001100010200000000000000000000a708"], 0x9c}}, 0x49090)

1.998972317s ago: executing program 0 (id=1100):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x18, 0xcc040}, 0x64004084)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000840), &(0x7f0000000880)=0x4)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.866795474s ago: executing program 2 (id=1101):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071110b00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x2, 0xd, 0x4})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002f40)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, r1, 0x2, '\x00', 0x0, r1, 0x4, 0x2, 0x1}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003040)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa92}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa7c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0xb, 0x7, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f0000000340)='GPL\x00', 0x2390f98e, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0xc, 0x5, 0x25a5472f}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000002fc0)=[r1, r1, r5, r1], &(0x7f0000003000)=[{0x1, 0x5, 0x2, 0x4}, {0x3, 0x2, 0x3, 0xb}, {0x2, 0x2, 0x0, 0x4}], 0x10, 0x2}, 0x94)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x3c, r6, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$XFS_IOC_GOINGDOWN(r7, 0x8004587d, &(0x7f0000000180)=0x5)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.820323996s ago: executing program 3 (id=1102):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18f5ffffff00000000001fa353264e977cc81500000000cde585821efa4f8fbacc57c970a9fc033555abad262bee3056c51fb0fc707443d1fdba02ec1ac1b263e72c5ae3640431f8afc86e26ac33751619965c454c8d58101c21113ec5371fcdcc1f696546f9b22288ce8195c1096d2b593f92cd3ab2b0e32e61d0a27a94f6eb115ea74fcb42e5bae57141"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x0)
close(r1) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async, rerun: 32)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000080)=@fragment={0x5e, 0x0, 0x81, 0x0, 0x0, 0x5, 0x65}, 0x8) (async, rerun: 32)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000040)=0x1, 0xb) (async)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', <r6=>0x0, 0x7, 0x80, 0x0, 0x3, {{0x31, 0x4, 0x2, 0x0, 0xc4, 0x65, 0x0, 0xb, 0x29, 0x0, @private=0xa010101, @loopback, {[@lsrr={0x83, 0x7, 0x15, [@broadcast]}, @timestamp_addr={0x44, 0x24, 0x36, 0x1, 0x8, [{@rand_addr=0x64010100, 0x5}, {@multicast2, 0x9}, {@loopback, 0x10000000}, {@broadcast, 0x4}]}, @generic={0x7, 0xd, "f5e723e4632f2a0678cd31"}, @timestamp_prespec={0x44, 0x3c, 0x94, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xac75}, {@empty, 0xf9}, {@rand_addr=0x64010102, 0x3}, {@empty, 0x1}, {@empty, 0x63}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x9a}]}, @timestamp_addr={0x44, 0x3c, 0xad, 0x1, 0x2, [{@multicast2}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0x7}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x1}, {@multicast1, 0x6}]}]}}}}})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6gre0\x00', <r9=>0x0, 0x29, 0xf4, 0x3, 0x6, 0x17, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x10, 0xff, 0x4}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'gretap0\x00', &(0x7f00000006c0)={'gretap0\x00', <r10=>0x0, 0x40, 0x7800, 0xfb, 0xfffffff6, {{0x2b, 0x4, 0x1, 0x2f, 0xac, 0x68, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp_prespec={0x44, 0xc, 0xfd, 0x3, 0x3, [{@local, 0x3}]}, @timestamp_addr={0x44, 0x14, 0xb5, 0x1, 0x8, [{@multicast1, 0x2}, {@local, 0x101}]}, @ssrr={0x89, 0x17, 0x2a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010102, @loopback, @local]}, @timestamp_prespec={0x44, 0x44, 0xeb, 0x3, 0x9, [{@local, 0x8001}, {@multicast1, 0x8}, {@multicast2, 0x3}, {@loopback, 0x2ffd}, {@remote, 0xa}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1}, {@local, 0x8}, {@broadcast, 0x8}]}, @lsrr={0x83, 0x1b, 0x1c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @private=0xa010100, @local]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000840)={'gretap0\x00', &(0x7f0000000800)={'sit0\x00', <r11=>0x0, 0x1, 0x80, 0xa, 0x8, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@noop]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)={'batadv0\x00', <r12=>0x0}) (async)
getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000008c0)={@empty, @local, <r13=>0x0}, &(0x7f0000000900)=0xc) (async, rerun: 64)
getsockopt$inet_mreqn(r3, 0x0, 0x40, &(0x7f0000000940)={@loopback, @local, <r14=>0x0}, &(0x7f0000000980)=0xc) (async, rerun: 64)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000009c0)={@private2, <r15=>0x0}, &(0x7f0000000a00)=0x14) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a40)={'veth1_vlan\x00', <r16=>0x0}) (rerun: 32)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000a80)={<r17=>0x0, @initdev, @broadcast}, &(0x7f0000000ac0)=0xc)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000d00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r5, @ANYBLOB="020028bd7000fedbdf250900000084000180080003000300000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020070696d72656730000000000000000000140002007665746831000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020070696d3672656730000000000000000008000100", @ANYRES32=r10, @ANYBLOB="080003000000000014000200736974300000000000000000000000004800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d3672656700000000000000000008000100", @ANYRES32=r11, @ANYBLOB="0500ff03360000c01000b9e351", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="4400018014000200726f73653000000000000000000000000800030001000000140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000004800018008000100", @ANYRES32=r15, @ANYBLOB="1400020070696d7265673000000000000000000014000200766c616e3000000000000000000000001400020076657468315f766972745f776966690030000180140002007866726d30000000000000000000000008000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="0800030001000000"], 0x19c}, 0x1, 0x0, 0x0, 0x20004014}, 0x4000) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'geneve1\x00', &(0x7f0000000140)=@ethtool_rxfh={0x47, 0xb, 0x3aa, 0xff, 0x4, "976b2a", 0x8000}})
sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e21, 0x7fffc, @mcast2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x18}, 0x40e0) (async)
r18 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r18, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

1.733666616s ago: executing program 1 (id=1103):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r5, 0x0, 0x80)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080))
sendfile(r1, r4, 0x0, 0x20000000002)

1.719465009s ago: executing program 2 (id=1104):
write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x8863}, @void, @ipv6=@tipc_packet={0x7, 0x6, "105d45", 0x374, 0x6, 0x0, @private1, @rand_addr=' \x01\x00', {[@dstopts={0x87, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x10}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x3, [0x6f, 0x7]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x4, [0x80000000, 0x5, 0x6, 0x80000001, 0x4]}}]}, @hopopts={0x32, 0x1e, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7f, 0xb0, "5abab1d0efd42b3d8ae178148ef421effbf83f971252c7f42d44f08c4f67473d4b8096dcff94dc8ce1fc928272549ec1cfeee632972202fcf657f69d6d5721fc980c30421b0c1f0e2345a1c88e3082f089ece541db9dda9599d2423723245f9200d81a413c9310579ba1c33bf174849a4aa225fdbd34a19565c5c8b18e4d0f1ab5913f7e6dd2aab2b5f42da1142620e6dfa8584e50384ca1bb9b288b69349edac930f3c8beeb3098ba70217bf8bc6a73"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x10}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @empty}]}, @srh={0x5c, 0xa, 0x4, 0x5, 0xc6, 0x20, 0x1000, [@empty, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback]}, @hopopts={0x3a, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @routing={0x2, 0xc, 0x2, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @empty, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x4, 0x16, '\x00', [@jumbo={0xc2, 0x4, 0xc763}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x800}, @generic={0x2, 0xa7, "7a24b123c590f8ce8e554723ab61919fda272d8431e8147defd3030955dce8e2188f32e7d0f12002cbb52230543ecadca95c3aaaa6882699067873b52445195680665884c6d6d8b979f7fb3a39895a27ea022744615f1af4839c54a54f59d41ced3b4d9ab5ed7565d4a737bfe3fdf54cdd45d0e5ecc8bddcc0e71ef7ab451657ac8fd653511b1357003739b49e332605837d80787f31c79044a5905e640da65bf8db1b71d90917"}]}, @hopopts={0x4, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}, @hopopts={0x2e, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x0, 0x0, '\x00', [@pad1, @pad1]}], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x8, 0x0, 0x1, 0x6d, 0x4, 0x1, 0x4e21, 0x4e21, 0x1, 0x3}, [{0x1, 0x40, 0x7f, 0xf747, 0x10, 0x9, 0x8, 0x1000}]}}}}, 0x3a0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000480)={0x9, 0x7f, 0x5, 0x10001, 0xba})
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000005c0)={<r1=>r0, &(0x7f00000004c0)=']{[4\x00', 0xa040, &(0x7f0000000500)={@align=0x5, {0x3, 0x81, 0x5, 0x10000}}, 0x7, &(0x7f0000000540), &(0x7f0000000580)=0x2})
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000007c0)={&(0x7f0000000600), 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x10c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa00}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x94, 0x7, 0x1, 0x0, "76b17e40766ecbf9532266149418ada3b8980770fff227fee1e18a6543e9694d70c5457189c3f50d9568a9dfe4d3207ac795c928abedcff6545e57e161ae6acbdd1bdad2ce235c2e16367367a0866e643be7b714df039a82f65df8169a3837d90b5f1a55ad23487fcac4122e377138c1c7bd5ed93d9b96abc720b07af0b0337e65b5277c14894c9241e0511e7ef33992"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000012}, 0x4000000)
pwrite64(r0, &(0x7f0000000800)="ea82e8759690154458d6f25aef5d5f261c20155d2f381222312addb6ca5964454e29a0cb3cb17bd3f35931a925be7f4e03d4e47270b79da70568480ac25e53bf0f7be8600934c47dc680b2c446a7a2e596581ca0bad2cc572853a0ceb3290c3871d9e49e5e6d8208cc927d4f6ec63327f2aa3fc445f30b64e0407d0e43b077f59d2e0e68c1cf95399ac197bd99fb89152ec722be9e86561757a0bbda05577a52d8d44a897ff690c43b8176092868beb6007dbf35d09d94fdfa60ae88d1869e560ce630e0b7f779cada329ceda1e8b7ce503971dfc35df876b32c23c611085e9b9438214b519f1d88bf95ced095af07", 0xef, 0x9)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000900)={0x4, 0xfb})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000a40)={<r3=>r2, &(0x7f0000000940)=' \x01\x00', 0x1000, &(0x7f0000000980)={@_ha_fsid={[0x5cc4, 0xda]}, {0x4, 0x1000, 0x5, 0x2}}, 0x50e, &(0x7f00000009c0), &(0x7f0000000a00)=0x81})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x8, <r4=>0x0}, 0x8)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x0, r0}, 0x18)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000c40)={<r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r1, <r7=>0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r1}, 0x20)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xfffffff8, '\x00', 0x0, r1, 0x0, 0x1, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1c, 0x5, &(0x7f0000000a80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000ac0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x23, r1, 0x8, &(0x7f0000000b00)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0xb, 0x800, 0x3}, 0x10, r4, r1, 0x5, &(0x7f0000000e00)=[r0, r0, r5, r6, r0, r0, r7, r0, r1, r8], &(0x7f0000000e40)=[{0x3, 0x2, 0xc, 0x6}, {0x4, 0x4, 0xa, 0x8}, {0x0, 0x1, 0xd, 0x7}, {0x4, 0x1, 0x7, 0xb}, {0x3, 0x3, 0x1, 0x3}], 0x10, 0x100}, 0x94)
r9 = socket$key(0xf, 0x3, 0x2)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612)
r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000f80)=0xffffffffffffff01)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001000), r3)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000001040)={0xf8, r11, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xb7, 0xa9, @random="51cc80a7a0496218627471794c6de4124d2e3b75649a97f90d94b76e8b31da391945e91466fab852c5bbb642a032615fc16fdf0e467047d9776577a89252c2e14641d5a10b0e6db0dddeae15e9d3e59f3224f51fc557d3db5fea1fc8b60e4a007ec214e9cb5f75ea4efb469d60cd96bfb849b379d2371aa3f94de4a44f1aa738fd72809e7b69ac6d7e5f496434246e2c59053453042a8f84ba8c19a137f04e89784392047288f0f6a269f8925953ad56e5e6ad"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x758}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004004}, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), r3)
sendmsg$TIPC_NL_LINK_GET(r12, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xa8, r13, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b57d189}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff3d3c}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x408c0)
write$cgroup_int(r3, &(0x7f0000001380)=0x10001, 0x12)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r6, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000014c0)=[0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0], 0x0, 0x11, &(0x7f0000001580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000001640)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r6, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001840)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0], <r15=>0x0, 0x75, &(0x7f0000001900)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0x89, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0xa, 0x10, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x2, 0xc, 0x8, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000001440)='syzkaller\x00', 0x9, 0x13, &(0x7f0000001480)=""/19, 0x41100, 0x22, '\x00', r14, @fallback=0x21, r3, 0x8, &(0x7f00000017c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0xa, 0x7, 0x200}, 0x10, r15, r6, 0x0, 0xfffffffffffffffc, 0x0, 0x10, 0x1000}, 0x94)
ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000001c00))
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x8, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4c001)

1.573581107s ago: executing program 3 (id=1105):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x6, 0x2}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 32)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async, rerun: 64)
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) (rerun: 64)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f00000000c0)=0x2, 0x12)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
r4 = socket$pptp(0x18, 0x1, 0x2) (rerun: 64)
write(r4, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/143, 0x8f}], 0x1, &(0x7f0000000240)=""/124, 0x7c}, 0xc0000003) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000d0aaa3a440ae652808fc850296476d292055b0c7541ab13907734ca83c3b13ae1db51df71a131e4be41fcd7545c256e2946d54841a086e6774c44e20cfed7e62a50e905f69b6d690d656ef2b6edb926cd817b7fd77e70b39811895e82cddae746e7cea", @ANYRES8=r5, @ANYBLOB="0180000000000000000000000000000000000b00000000030014"], 0x28}}, 0x40000)

1.342622933s ago: executing program 2 (id=1106):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in=@dev}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711837000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001d00)={r3, &(0x7f0000000080), 0x0}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r4}, &(0x7f00000009c0), &(0x7f0000000a00)=r5}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3f80000, '\x00', r1, r5, 0x4, 0x1, 0x2}, 0x50)
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000e45cd103d243b7e600000000a597faf80db69f25c6e06ac6"], 0x48}}, 0x410)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000820200"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000003000400000000000000651b7572c041058fc868119a031323ef9d8d50ea54179c5aaf785ad40b7151"], 0x48}}, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
clock_gettime(0xe2d1b348b6c14161, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@llu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.318850169s ago: executing program 3 (id=1107):
syz_emit_ethernet(0x0, 0x0, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000500)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010100000000000000000500010a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000340)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000380)="deb2ec109fc865491a953e55b5e608517573f0837da2987cad95e98597be2e490c3fcceaee76583cf762030785b15ea1f1f43ec0dc5b6e0668848d80e206c8396b413cf13ee531b8897f4087b73050021d91a89b29dfc612091cc2fc42c578ce008d2f6f1757196611df519f4960739f5547ef65fff137ec0e60c34ec6b3ab818084da0a28a3d63bbdbe0aa7107789", 0x8f}, {&(0x7f0000000540)="43fb284173aa13c62c548ada7386de79a58789df86559ead1a9fad094f2840ebb0ae59d36502d64a1b8b107fbaf3e60f4be189acc78606f783fd5257a68062ab0b561954ba7c9f0352a735df7d135f69cc688d1c15797614fdd12c975f26ab0296901892ea5a6205be5d48a26b374e9a778856b8bdef70ef701565415b3eb762eca3e70b3ad299317194aa20f88d18b32e050e9309bcb7dd848ac4b6a3e7518e1929774b0ae96da8e63b9ad0028f2b1d158b1f018a3f501e2a003bb6f629cb90d9cb6e4bdb2c8d9b2f23e541efca2fd4673352", 0xd3}, {&(0x7f0000000640)="d637300f3ad456d55ec55bd8105110c9df7f668090710d7e14725b0efdd389313c5b0a8a9cbf168252297071fd91e5e1d9728245e4a5f6d27d8e05c3c27eed5e8f8854f45b1a3ffb6068a765614ec0baae9230fc024bbed05ecdae7c3f2a768b466eee3b3b4e28b77a8d0955b2598bb69aa8561e03a853ef901fcf1fc724e84358d303d16dfa5b", 0x87}], 0x3, &(0x7f0000000dc0)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x18, 0x9b, 0x0, 0xd, [0xa, 0x7fff, 0x2b5, 0x2, 0x5]}, @timestamp_prespec={0x44, 0x2c, 0xd, 0x3, 0x6, [{@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x3}, {@local, 0x9}, {@loopback, 0xffff}, {@multicast1, 0x103}]}, @end, @timestamp={0x44, 0x8, 0xbd, 0x0, 0x4, [0x4c08497e]}, @cipso={0x86, 0x3b, 0x3, [{0x0, 0x10, "f7a3e807c95521f5e9dc8417a348"}, {0x6, 0xb, "dbb7a17893d495f6c1"}, {0x1, 0x3, '='}, {0x0, 0x12, "1dc0bcc7cd681e63152bb04a4e698d08"}, {0x1, 0x5, '37i'}]}, @rr={0x7, 0xb, 0x3a, [@local, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @rand_addr=0x64010101}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@cipso={0x86, 0x3e, 0x0, [{0x1, 0xd, "88954974a55066958d0b01"}, {0x0, 0x9, "3acffc0a85288d"}, {0x6, 0x2}, {0x5, 0x11, "29e834b1635637e2760655d8d8f6e7"}, {0x2, 0xf, "e4db92866431c5bf0c78db711e"}]}, @rr={0x7, 0x1b, 0xa8, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @local, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xa6, 0x3, 0x0, [{@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x8}, {@empty, 0x8}]}, @generic={0x7, 0x6, "cda62e28"}, @end, @noop]}}}], 0x178}}, {{&(0x7f0000000a40)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="817d714f70f22f5427955852fab1121e21bd347e3e1c87dd5239f4ac2910e0ca16a4878ec3129c5a89fa325bd70a913ddf7a64fed7e8cb597cf13d10672fab61bf6c10a94706e467e80f", 0x4a}, {&(0x7f0000000b40)="510180c2eb6af3ff86735c3180f8a852e0f6945974056822d3acc696c3de6a6fbbf7eb340b8c5f8890c897dd764e995e845e7983a7ebdce1a2e69c047743ca903fc04d2b34f282c124e55eb630cb631f65d6a1df14897ebfb8ed3045dff0e760676296df1a72d87c67aa6500c46213e9a27daa924cdab7aecc6acfbb0f3149c8d673d8d4f2e6f1854756608eeaac30c882f74ab2", 0x94}], 0x2, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}}], 0x2, 0xfc0) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r3) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf2518000000140030801008018004000380080001000300000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x84) (async)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x16) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x1, 0xfd, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) (async)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={r7, 0xad}, &(0x7f0000000100)=0x8)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) (async)
r8 = socket$alg(0x26, 0x5, 0x0) (async)
r9 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r9, &(0x7f0000000d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000000000000000000000700000007271b7f000001ac1414aa0a010102ac2bbe33211553266e2b0470d02e391e0001640f7eb98a7501358f2ed7010101ac1e010164010105e0000002e00000"], 0x40}}], 0x2, 0x404c000) (async)
bind$alg(r8, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x27, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xc}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x7fff}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfffffffe}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xd}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x1}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xa74}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x5}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

1.082363583s ago: executing program 3 (id=1108):
r0 = socket(0x2, 0x80805, 0x0)
close(0x3)
r1 = socket(0x29, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x89}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
shutdown(r2, 0x0)
close(0x3)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r2, 0x22, 0x0, @void}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x4b, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)

907.549528ms ago: executing program 3 (id=1109):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25251, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000500)=[{0x2, 0x4, 0x9, 0x5}, {0x1, 0x1, 0x9, 0x3}, {0x5, 0x5, 0xe, 0xc}], 0x10, 0x1}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc01000000bf06cffa887d0000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9e"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800)
r4 = socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x7}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000400)=[{0x1, 0x2, {0x2}, {0x0, 0xff, 0x1}, 0xff, 0x2}], 0x20)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000051c0)=ANY=[@ANYBLOB="340000006800010000000000000000000a0001000000000006000700080000000c00086008000200ac14142208000500", @ANYRES32=r1, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4040040)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r9, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4)
r10 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r10, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18)

903.927965ms ago: executing program 2 (id=1110):
unshare(0x26020480)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x40, r6, 0x537, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x1f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)

505.422094ms ago: executing program 1 (id=1111):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESHEX=r2, @ANYRES8=r1, @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="40010000100013040000000000000000fe88000000000000000000000000000120010000000000000000000000000000fffd00004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640100000000000000000000000000000000002032000000fc0100000000000000000000000000000000000000000000070000000000000000000000008000000400000000000000f7b500000099c2ec00000004000000000000000800000000020000000000000000000001000000010000000800000000000000cc000000000000000800000000000000f8000000000000000300000000000000040000000200000100000000000000004f0012009de22371134745726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000006ec8700000000000000"], 0x140}}, 0x8cc4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x40010, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @local, 0x8}, 0x1c)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x8011)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000d5ccfa4eac6954989108b665690000000002000000000000000002000084080000000600000001000000030000000d0000000100000007"], &(0x7f0000000380)=""/3, 0x52, 0x3, 0x1}, 0x28)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000400)={r7, r7, 0x6, 0x0, 0x0, 0x9, 0x5f, 0xc08, 0x1012, 0xc3, 0x1, 0x5, 'syz0\x00'})
write$cgroup_subtree(r6, 0x0, 0xa32931d172a25d07)
socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0xd}, 0x20)

48.145531ms ago: executing program 3 (id=1112):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x4850, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f", 0x5, 0x20000001, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000940)=""/174, 0xae}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000200)=""/212, 0xd4}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f00000004c0)=""/186, 0xba}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000000840)=""/29, 0x1d}], 0xa, 0x0, 0x0, 0x407006}, 0x0)

0s ago: executing program 0 (id=1113):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts.
[   77.296727][ T5613] cgroup: Unknown subsys name 'net'
[   77.465039][ T5613] cgroup: Unknown subsys name 'cpuset'
[   77.475182][ T5613] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   79.195185][ T5613] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   81.482811][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.504243][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.515905][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.518504][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.525692][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.539656][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.549928][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.561382][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.569076][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.578053][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.581792][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.585822][ T5645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.594217][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.600985][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.609982][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.625844][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.627053][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.636636][ T5645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.647593][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.657336][ T5645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.666967][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.686018][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.694630][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.695214][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.710349][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.478046][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.488542][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.497110][ T5626] bridge_slave_0: entered allmulticast mode
[   83.506555][ T5626] bridge_slave_0: entered promiscuous mode
[   83.539757][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.548010][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.555638][ T5626] bridge_slave_1: entered allmulticast mode
[   83.563176][ T5626] bridge_slave_1: entered promiscuous mode
[   83.694185][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.712417][ T5634] Bluetooth: hci2: command tx timeout
[   83.721521][ T5634] Bluetooth: hci1: command tx timeout
[   83.721530][ T5628] Bluetooth: hci0: command tx timeout
[   83.749481][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.779378][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.787018][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.794361][ T5628] Bluetooth: hci4: command tx timeout
[   83.794543][ T5637] bridge_slave_0: entered allmulticast mode
[   83.800556][ T5634] Bluetooth: hci3: command tx timeout
[   83.808114][ T5637] bridge_slave_0: entered promiscuous mode
[   83.856580][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.864546][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.872140][ T5637] bridge_slave_1: entered allmulticast mode
[   83.879607][ T5637] bridge_slave_1: entered promiscuous mode
[   83.940522][ T5626] team0: Port device team_slave_0 added
[   83.957671][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.965427][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.973199][ T5625] bridge_slave_0: entered allmulticast mode
[   83.980384][ T5625] bridge_slave_0: entered promiscuous mode
[   83.989197][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.997235][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.004656][ T5625] bridge_slave_1: entered allmulticast mode
[   84.012108][ T5625] bridge_slave_1: entered promiscuous mode
[   84.039027][ T5626] team0: Port device team_slave_1 added
[   84.045165][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.052863][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.060276][ T5636] bridge_slave_0: entered allmulticast mode
[   84.067879][ T5636] bridge_slave_0: entered promiscuous mode
[   84.100592][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.120461][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.128090][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.135970][ T5636] bridge_slave_1: entered allmulticast mode
[   84.143309][ T5636] bridge_slave_1: entered promiscuous mode
[   84.171538][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.202941][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.212526][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.219916][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.227561][ T5635] bridge_slave_0: entered allmulticast mode
[   84.235284][ T5635] bridge_slave_0: entered promiscuous mode
[   84.254464][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.262175][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.290539][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.315299][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.324923][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.332262][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.339610][ T5635] bridge_slave_1: entered allmulticast mode
[   84.346992][ T5635] bridge_slave_1: entered promiscuous mode
[   84.364725][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.372077][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.399140][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.412923][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.449450][ T5637] team0: Port device team_slave_0 added
[   84.465314][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.499015][ T5637] team0: Port device team_slave_1 added
[   84.508677][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.522433][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.542921][ T5625] team0: Port device team_slave_0 added
[   84.589617][ T5625] team0: Port device team_slave_1 added
[   84.606004][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.613457][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.640333][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.664953][ T5636] team0: Port device team_slave_0 added
[   84.690260][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.697667][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.723737][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.736756][ T5635] team0: Port device team_slave_0 added
[   84.744618][ T5636] team0: Port device team_slave_1 added
[   84.766191][ T5626] hsr_slave_0: entered promiscuous mode
[   84.772997][ T5626] hsr_slave_1: entered promiscuous mode
[   84.788202][ T5635] team0: Port device team_slave_1 added
[   84.805437][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.812876][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.839501][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.852720][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.859690][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.886453][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.928571][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.935732][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.961994][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.975407][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.982551][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.008828][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.066079][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.073236][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.100068][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.136954][ T5637] hsr_slave_0: entered promiscuous mode
[   85.143542][ T5637] hsr_slave_1: entered promiscuous mode
[   85.149733][ T5637] debugfs: 'hsr0' already exists in 'hsr'
[   85.156143][ T5637] Cannot create hsr debugfs directory
[   85.164867][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.172214][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.199177][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.270421][ T5625] hsr_slave_0: entered promiscuous mode
[   85.276921][ T5625] hsr_slave_1: entered promiscuous mode
[   85.283623][ T5625] debugfs: 'hsr0' already exists in 'hsr'
[   85.289544][ T5625] Cannot create hsr debugfs directory
[   85.345479][ T5636] hsr_slave_0: entered promiscuous mode
[   85.352915][ T5636] hsr_slave_1: entered promiscuous mode
[   85.359278][ T5636] debugfs: 'hsr0' already exists in 'hsr'
[   85.365373][ T5636] Cannot create hsr debugfs directory
[   85.480416][ T5635] hsr_slave_0: entered promiscuous mode
[   85.487413][ T5635] hsr_slave_1: entered promiscuous mode
[   85.494296][ T5635] debugfs: 'hsr0' already exists in 'hsr'
[   85.500055][ T5635] Cannot create hsr debugfs directory
[   85.791940][ T5628] Bluetooth: hci1: command tx timeout
[   85.791950][ T5640] Bluetooth: hci2: command tx timeout
[   85.803570][ T5634] Bluetooth: hci0: command tx timeout
[   85.872148][ T5628] Bluetooth: hci4: command tx timeout
[   85.878271][ T5634] Bluetooth: hci3: command tx timeout
[   85.964231][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.977027][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.985556][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.997926][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.006493][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   86.017745][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.041906][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.054065][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.123218][ T5637] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.134216][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.144199][ T5637] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.155042][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.163992][ T5637] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.174721][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.184277][ T5637] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.194310][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.299707][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   86.309731][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.319215][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   86.330300][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.339019][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   86.349471][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.366289][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   86.375859][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.489912][ T5636] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.500477][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.508974][ T5636] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.525318][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.533681][ T5636] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.543774][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.552180][ T5636] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.563650][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.625757][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.706342][ T5626] 8021q: adding VLAN 0 to HW filter on device team0
[   86.722825][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.733001][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.745236][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.756212][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.765038][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.775483][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.792594][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.803804][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.820592][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.828408][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.850893][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.876867][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.884338][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.954742][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[   87.003735][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.010993][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.060474][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.067655][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.114860][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.136162][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.224835][ T5625] 8021q: adding VLAN 0 to HW filter on device team0
[   87.274035][ T5636] 8021q: adding VLAN 0 to HW filter on device team0
[   87.298158][  T135] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.305414][  T135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.350455][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.358022][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.374974][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.382492][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.418091][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.425391][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.460133][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.646503][ T5635] 8021q: adding VLAN 0 to HW filter on device team0
[   87.709252][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.717174][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.835072][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.842518][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.872872][ T5634] Bluetooth: hci2: command tx timeout
[   87.878897][ T5628] Bluetooth: hci0: command tx timeout
[   87.880915][ T5640] Bluetooth: hci1: command tx timeout
[   87.953203][ T5634] Bluetooth: hci3: command tx timeout
[   87.959409][ T5640] Bluetooth: hci4: command tx timeout
[   88.264208][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.544574][ T5626] veth0_vlan: entered promiscuous mode
[   88.613623][ T5626] veth1_vlan: entered promiscuous mode
[   88.688703][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.833795][ T5626] veth0_macvtap: entered promiscuous mode
[   88.885579][ T5626] veth1_macvtap: entered promiscuous mode
[   88.997051][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.026783][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.124758][   T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.162397][   T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.199805][   T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.242166][   T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.512820][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.526717][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.538084][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.557964][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.643057][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.654535][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.670005][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.726985][ T5637] veth0_vlan: entered promiscuous mode
[   89.766798][ T5626] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   89.794799][ T5635] veth0_vlan: entered promiscuous mode
[   89.814539][ T5637] veth1_vlan: entered promiscuous mode
[   89.863850][ T5636] veth0_vlan: entered promiscuous mode
[   89.904417][ T5625] veth0_vlan: entered promiscuous mode
[   89.915705][ T5635] veth1_vlan: entered promiscuous mode
[   89.945095][ T5636] veth1_vlan: entered promiscuous mode
[   89.952216][ T5640] Bluetooth: hci2: command tx timeout
[   89.957947][ T5634] Bluetooth: hci1: command tx timeout
[   89.961184][ T5628] Bluetooth: hci0: command tx timeout
[   90.023150][ T5625] veth1_vlan: entered promiscuous mode
[   90.032287][ T5628] Bluetooth: hci4: command tx timeout
[   90.032300][ T5634] Bluetooth: hci3: command tx timeout
[   90.123469][ T5637] veth0_macvtap: entered promiscuous mode
[   90.146016][ T5635] veth0_macvtap: entered promiscuous mode
[   90.169730][ T5637] veth1_macvtap: entered promiscuous mode
[   90.188930][ T5625] veth0_macvtap: entered promiscuous mode
[   90.204904][ T5635] veth1_macvtap: entered promiscuous mode
[   90.260140][ T5625] veth1_macvtap: entered promiscuous mode
[   90.282659][ T5636] veth0_macvtap: entered promiscuous mode
[   90.316218][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.350828][ T5636] veth1_macvtap: entered promiscuous mode
[   90.374707][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.439649][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.460182][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.505125][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.514344][   T77] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.536830][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.547107][   T77] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.556352][   T77] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.584685][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.596479][   T77] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.620998][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.658273][   T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.667690][   T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.684115][   T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.708586][ T5847] erspan0: entered promiscuous mode
[   90.715414][   T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.724645][   T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.744725][   T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.754416][   T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.810432][   T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.820203][   T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.855096][   T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.865138][   T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.890852][ T5846] erspan0: left promiscuous mode
[   90.909391][   T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.010405][ T5849] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET)
[   91.020731][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.029312][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.119900][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.140968][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.159704][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.185934][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.235729][ T5851] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12'.
[   91.270729][ T3387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.279621][ T3387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.378214][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.396816][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.408595][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.419029][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.483725][ T3387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.486637][ T5854] Bluetooth: MGMT ver 1.23
[   91.526236][ T3387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.563684][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.573339][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.457934][  T808] cfg80211: failed to load regulatory.db
[   92.462276][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'.
[   92.475059][ T5873] Driver unsupported XDP return value 0 on prog  (id 5) dev N/A, expect packet loss!
[   92.771197][ T5888] netlink: 724 bytes leftover after parsing attributes in process `syz.1.19'.
[   92.794199][ T5888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'.
[   92.815174][ T5888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'.
[   92.841958][ T5888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'.
[   93.037511][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'.
[   93.098603][ T5629] IPVS: starting estimator thread 0...
[   93.179656][ T5874] Bluetooth: hci0: Opcode 0x080f failed: -4
[   93.211263][ T5894] IPVS: using max 23 ests per chain, 55200 per kthread
[   93.525928][ T5896] Zero length message leads to an empty skb
[   94.198479][ T5927] syzkaller1: entered promiscuous mode
[   94.231443][ T5927] syzkaller1: entered allmulticast mode
[   94.417039][ T5939] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   94.430004][ T5935] bond1 (unregistering): Released all slaves
[   94.441809][ T5628] Bluetooth: hci0: command 0x080f tx timeout
[   94.490370][ T5938] bond1 (unregistering): Released all slaves
[   94.618370][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'.
[   94.639211][ T5938] netlink: 'syz.1.31': attribute type 7 has an invalid length.
[   94.665267][ T3387] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.666449][ T5938] netlink: 'syz.1.31': attribute type 7 has an invalid length.
[   94.679340][ T3387] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.699840][ T3387] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.710217][ T1174] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.266086][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'.
[   95.586200][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'.
[   95.649754][ T5990] sctp: [Deprecated]: syz.0.45 (pid 5990) Use of int in max_burst socket option.
[   95.649754][ T5990] Use struct sctp_assoc_value instead
[   95.763678][ T5995] trusted_key: syz.0.46 sent an empty control message without MSG_MORE.
[   96.060173][ T5723] bridge0: entered promiscuous mode
[   96.681305][ T5905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   97.337161][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'.
[   97.387923][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'.
[   97.388838][ T6034] netlink: 'syz.2.58': attribute type 4 has an invalid length.
[   97.410744][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'.
[   97.437652][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'.
[   97.442939][ T6036] netlink: 'syz.2.58': attribute type 4 has an invalid length.
[   97.682440][ T6041] tipc: Enabling <eth:lo> not permitted
[   97.688743][ T6041] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[   97.699716][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'.
[   97.920906][ T6050] netlink: 'syz.4.63': attribute type 3 has an invalid length.
[   98.131638][ T6065] netlink: 'syz.0.67': attribute type 8 has an invalid length.
[   98.150453][ T6066] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   98.464636][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'.
[   98.532788][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[   98.582554][ T6085] netlink: 96 bytes leftover after parsing attributes in process `syz.2.70'.
[   99.101736][ T6105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'.
[   99.126979][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.74'.
[   99.588169][ T6118] netlink: 'syz.2.80': attribute type 1 has an invalid length.
[  100.133706][ T6138] netem: change failed
[  100.177731][ T6136] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  100.203762][ T6136] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  100.251884][ T6142] netem: change failed
[  100.449849][ T6150] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  100.457911][ T6153] netlink: 'syz.4.87': attribute type 10 has an invalid length.
[  100.564379][ T6153] team0: Failed to send options change via netlink (err -105)
[  100.576426][ T6153] team0: Port device geneve1 added
[  100.866334][ T6164] bridge_slave_0: left allmulticast mode
[  100.873731][ T6164] bridge_slave_0: left promiscuous mode
[  100.885609][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.900414][ T6164] bridge_slave_1: left allmulticast mode
[  100.908493][ T6164] bridge_slave_1: left promiscuous mode
[  100.915490][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.937648][ T6164] bond0: (slave bond_slave_0): Releasing backup interface
[  100.950293][ T6164] bond0: (slave bond_slave_1): Releasing backup interface
[  100.964739][ T6164] team0: Port device team_slave_0 removed
[  100.976228][ T6164] team0: Port device team_slave_1 removed
[  100.983345][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.990903][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.003369][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.010955][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.020321][ T6164] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  101.445085][ T6191] can: request_module (can-proto-0) failed.
[  102.073135][ T6207] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.104940][ T6207] team0: Port device bond1 added
[  102.580687][ T6237] __nla_validate_parse: 5 callbacks suppressed
[  102.580707][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'.
[  102.738578][ T6239] netlink: 52 bytes leftover after parsing attributes in process `syz.2.103'.
[  102.818662][ T6244] netlink: 76 bytes leftover after parsing attributes in process `syz.2.103'.
[  102.862782][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.871848][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.017932][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.025278][ T6244] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.033113][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.040326][ T6244] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.104229][ T6244] netlink: 52 bytes leftover after parsing attributes in process `syz.2.103'.
[  103.289534][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.297845][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.493349][ T6270] netlink: 'syz.0.106': attribute type 1 has an invalid length.
[  103.566159][ T6270] netlink: 228 bytes leftover after parsing attributes in process `syz.0.106'.
[  103.713751][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'.
[  103.728839][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'.
[  103.793869][ T6294] netlink: 'syz.2.110': attribute type 10 has an invalid length.
[  103.824966][ T6294] netlink: 228 bytes leftover after parsing attributes in process `syz.2.110'.
[  103.999403][ T6300] xt_hashlimit: size too large, truncated to 1048576
[  104.076654][ T6304] netlink: 'syz.2.113': attribute type 49 has an invalid length.
[  104.273007][ T6308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.114'.
[  104.372129][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'.
[  104.455732][ T6319] netlink: 'syz.0.114': attribute type 10 has an invalid length.
[  104.475937][ T6308] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.522824][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.577511][ T6329] netlink: 'syz.2.118': attribute type 2 has an invalid length.
[  104.583476][ T6314] bond1: (slave bond0): Enslaving as an active interface with an up link
[  106.182777][ T6399] xt_TCPMSS: Only works on TCP SYN packets
[  106.570751][ T5821] IPVS: starting estimator thread 0...
[  106.645706][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.661943][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.682400][ T6423] IPVS: using max 26 ests per chain, 62400 per kthread
[  106.825649][ T1174] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.864815][ T1174] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.889307][ T1174] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.916361][ T1174] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.006518][ T6433] openvswitch: netlink: Flow key attr not present in new flow.
[  107.056357][ T6434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.308355][ T6446] warning: `syz.4.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.936234][ T6474] __nla_validate_parse: 8 callbacks suppressed
[  107.936255][ T6474] netlink: 76 bytes leftover after parsing attributes in process `syz.4.157'.
[  108.033799][ T6474] 
@0���: renamed from bond_slave_1 (while UP)
[  108.083557][ T6467] netlink: 'syz.4.157': attribute type 4 has an invalid length.
[  108.094872][ T6480] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[  108.110778][ T6480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.148784][ T6483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.160'.
[  108.177463][ T6467] netlink: 'syz.4.157': attribute type 4 has an invalid length.
[  108.197533][ T6483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.160'.
[  108.528591][   T10] IPVS: starting estimator thread 0...
[  108.535848][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'.
[  108.570554][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'.
[  108.620947][ T6500] netlink: 'syz.1.165': attribute type 3 has an invalid length.
[  108.639177][ T6500] netlink: 'syz.1.165': attribute type 3 has an invalid length.
[  108.647290][ T6495] IPVS: using max 27 ests per chain, 64800 per kthread
[  108.714205][ T6500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.165'.
[  108.776533][ T6508] netlink: 'syz.3.166': attribute type 2 has an invalid length.
[  108.798333][ T6508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.166'.
[  109.096889][ T6511] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  109.383984][ T6530] netlink: 80 bytes leftover after parsing attributes in process `syz.4.172'.
[  109.402811][ T6531] netlink: 80 bytes leftover after parsing attributes in process `syz.4.172'.
[  109.503131][ T6534] netlink: 'syz.2.173': attribute type 1 has an invalid length.
[  109.518307][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.2.173'.
[  109.810218][ T6547] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  109.828800][ T6548] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  110.127404][ T6562] netlink: 'syz.2.181': attribute type 21 has an invalid length.
[  110.154521][ T6562] IPv6: NLM_F_CREATE should be specified when creating new route
[  110.167262][ T6562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.175674][ T6562] IPv6: NLM_F_CREATE should be set when creating new route
[  110.183299][ T6562] IPv6: NLM_F_CREATE should be set when creating new route
[  110.190670][ T6562] IPv6: NLM_F_CREATE should be set when creating new route
[  110.288013][ T6565] netlink: 'syz.2.181': attribute type 21 has an invalid length.
[  110.315434][ T6565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.352858][ T6569] netlink: 'syz.1.183': attribute type 1 has an invalid length.
[  110.526168][ T6569] bond2: entered promiscuous mode
[  110.560325][ T6569] bond2: entered allmulticast mode
[  110.580631][ T6569] 8021q: adding VLAN 0 to HW filter on device bond2
[  110.619281][ T6571] erspan1: entered allmulticast mode
[  110.645359][ T6571] bond2: (slave erspan1): making interface the new active one
[  110.691261][ T6571] erspan1: entered promiscuous mode
[  110.730446][ T6571] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  110.750073][ T6580] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  110.903658][ T6569] syz.1.183 (6569) used obsolete PPPIOCDETACH ioctl
[  111.057835][ T6588] syzkaller0: entered promiscuous mode
[  111.068957][ T6588] syzkaller0: entered allmulticast mode
[  111.227701][ T6615] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.241983][ T6640] __nla_validate_parse: 6 callbacks suppressed
[  113.242002][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.198'.
[  113.495338][ T6645] netlink: 'syz.2.201': attribute type 1 has an invalid length.
[  113.521551][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'.
[  113.607181][ T6645] bond1: entered promiscuous mode
[  113.613402][ T6645] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.634681][ T6650] bridge1: the hash_elasticity option has been deprecated and is always 16
[  113.643600][ T6650] bridge1: entered allmulticast mode
[  113.786401][ T6659] veth3: entered promiscuous mode
[  113.807062][ T6659] veth3: entered allmulticast mode
[  113.850604][ T6659] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  113.958682][ T6663] veth3: entered promiscuous mode
[  114.218843][ T6676] netlink: 36 bytes leftover after parsing attributes in process `syz.0.209'.
[  114.655525][ T6690] macsec1: entered promiscuous mode
[  114.715079][ T6690] erspan0: entered promiscuous mode
[  114.782347][ T6690] erspan0: left promiscuous mode
[  114.829581][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'.
[  114.854141][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'.
[  114.969957][ T6690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.213'.
[  115.036492][ T6707] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  115.684616][ T6722] block nbd0: Unsupported socket: should be TCP or UNIX.
[  115.969691][ T6731] netlink: 'syz.4.224': attribute type 5 has an invalid length.
[  116.150921][ T6746] sctp: [Deprecated]: syz.3.228 (pid 6746) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.150921][ T6746] Use struct sctp_sack_info instead
[  116.853599][ T6781] netlink: 277 bytes leftover after parsing attributes in process `syz.2.238'.
[  116.937399][ T6779] syzkaller0: entered promiscuous mode
[  116.943345][ T6779] syzkaller0: entered allmulticast mode
[  116.958792][ T6779] tipc: Started in network mode
[  116.964156][ T6779] tipc: Node identity , cluster identity 4711
[  116.970656][ T6779] tipc: Failed to obtain node identity
[  116.977035][ T6779] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  117.158163][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'.
[  117.308563][ T6794] netlink: 456 bytes leftover after parsing attributes in process `syz.4.242'.
[  117.340043][ T6794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.242'.
[  119.200534][ T6813] team0: Mode changed to "activebackup"
[  119.467924][ T6835] __nla_validate_parse: 5 callbacks suppressed
[  119.467945][ T6835] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.252'.
[  119.536483][ T6838] bond2: option updelay: invalid value (18446744073709518847)
[  119.546582][ T6838] bond2: option updelay: allowed values 0 - 2147483647
[  119.561506][ T6838] bond2 (unregistering): Released all slaves
[  119.612971][ T6835] 5�: entered promiscuous mode
[  119.667443][ T6845] tipc: Started in network mode
[  119.677645][ T6845] tipc: Node identity 5abd52efbc89, cluster identity 4711
[  119.699198][ T6845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.820156][ T6849] syzkaller0: entered promiscuous mode
[  119.825976][ T6849] syzkaller0: entered allmulticast mode
[  119.834033][ T6849] tipc: Resetting bearer <eth:syzkaller0>
[  120.154888][ T6842] tipc: Resetting bearer <eth:syzkaller0>
[  120.480694][    T9] hid-generic 0005:04F3:0A11.0001: item fetching failed at offset 0/1
[  120.490643][    T9] hid-generic 0005:04F3:0A11.0001: probe with driver hid-generic failed with error -22
[  120.566111][ T6884] netlink: 52 bytes leftover after parsing attributes in process `syz.3.262'.
[  121.708847][ T6842] tipc: Disabling bearer <eth:syzkaller0>
[  121.730009][ T5629] tipc: Node number set to 3862188783
[  122.039668][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'.
[  122.081847][ T6895] macvlan2: entered allmulticast mode
[  122.089141][ T6895] veth1_vlan: entered allmulticast mode
[  122.172913][ T6895] No such timeout policy "syz1"
[  122.204206][ T6903] veth1_macvtap: renamed from vlan0
[  122.262578][ T6908] syzkaller0: entered promiscuous mode
[  122.303752][ T6908] syzkaller0: entered allmulticast mode
[  122.398100][ T6909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.414955][ T6908] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.449095][ T6907] tipc: Resetting bearer <eth:syzkaller0>
[  122.550603][ T6907] tipc: Disabling bearer <eth:syzkaller0>
[  122.556794][ T6921] netlink: 'syz.4.273': attribute type 1 has an invalid length.
[  122.808274][ T6934] netlink: 'syz.2.275': attribute type 2 has an invalid length.
[  122.819999][ T6921] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  123.381490][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.277'.
[  123.394874][ T6954] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.276'.
[  123.614863][ T6956] bond3: entered promiscuous mode
[  123.638027][ T6956] 8021q: adding VLAN 0 to HW filter on device bond3
[  124.690407][ T7032] netlink: 56 bytes leftover after parsing attributes in process `syz.1.290'.
[  124.723857][ T7035] netlink: 'syz.2.289': attribute type 178 has an invalid length.
[  124.752924][ T2171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.071545][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.113427][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.163870][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'.
[  125.296696][ T7056] netlink: 132 bytes leftover after parsing attributes in process `syz.2.293'.
[  125.374314][ T7063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.385917][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.418194][ T7063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.429227][ T7063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.455177][ T7063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.734999][ T7081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.792354][ T2171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.903662][ T7049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  126.144406][ T7097] netlink: 'syz.4.302': attribute type 1 has an invalid length.
[  126.239512][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'.
[  126.242577][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.302'.
[  126.250240][ T7102] netlink: 64 bytes leftover after parsing attributes in process `syz.2.304'.
[  126.285733][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'.
[  126.299351][ T5628] block nbd0: Wrong magic (0x0)
[  126.304063][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.309756][ T7102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.304'.
[  126.312294][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.333895][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'.
[  126.335341][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.302'.
[  126.533027][ T7093] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.568680][ T7093] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.689101][ T7127] netlink: 'syz.2.306': attribute type 3 has an invalid length.
[  126.937890][ T7098] netlink: 'syz.0.303': attribute type 3 has an invalid length.
[  126.953897][ T7098] netlink: 'syz.0.303': attribute type 3 has an invalid length.
[  126.956739][ T7132] scsi_nl_rcv_msg: discarding partial skb
[  126.978767][  T135] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.012049][  T135] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.049211][ T3387] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.088442][ T3387] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.141305][ T3387] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.180702][ T3387] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.227856][ T3387] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  127.267499][ T3387] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.354107][ T7145] netlink: 'syz.1.310': attribute type 1 has an invalid length.
[  127.441660][ T7147] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  128.325855][ T7184] netlink: 'syz.4.320': attribute type 61 has an invalid length.
[  128.407256][ T7178] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.440138][ T7178] 8021q: adding VLAN 0 to HW filter on device team0
[  128.543934][ T7178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.696317][ T7200] netlink: 'syz.3.322': attribute type 4 has an invalid length.
[  128.748520][ T7201] netlink: 'syz.3.322': attribute type 4 has an invalid length.
[  128.808114][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.818096][ T7178] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.832320][ T7178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.843021][ T7178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.865146][ T7178] veth1_vlan: left promiscuous mode
[  128.872613][ T7178] veth0_vlan: left promiscuous mode
[  128.878643][ T7178] veth0_vlan: entered promiscuous mode
[  128.898211][ T7178] veth1_vlan: entered promiscuous mode
[  128.927151][ T7178] veth1_macvtap: left promiscuous mode
[  128.934970][ T7178] veth0_macvtap: left promiscuous mode
[  128.943848][ T7178] veth0_macvtap: entered promiscuous mode
[  128.957271][ T7178] veth1_macvtap: entered promiscuous mode
[  128.975083][ T7178] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  128.984691][ T7213] netlink: 'syz.3.322': attribute type 4 has an invalid length.
[  128.987409][ T7178] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  129.016211][ T7178] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  129.025207][ T7178] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  129.040421][ T7178] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.052556][ T7178] bond2: left promiscuous mode
[  129.057731][ T7178] erspan1: left promiscuous mode
[  129.064146][ T7178] 8021q: adding VLAN 0 to HW filter on device bond2
[  129.078379][ T7178] bond3: left promiscuous mode
[  129.084093][ T7178] 8021q: adding VLAN 0 to HW filter on device bond3
[  129.195902][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.203252][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.250979][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.258238][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.447601][ T6992] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.458494][ T6992] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.479535][ T6992] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.500821][ T6992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.548872][ T7208] syzkaller0: entered promiscuous mode
[  129.558396][ T7208] syzkaller0: entered allmulticast mode
[  129.632913][ T6992] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.651862][ T6992] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.666018][ T6992] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.676101][ T6992] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.772960][ T5730] net_ratelimit: 25 callbacks suppressed
[  129.772980][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.799440][ T7125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.853662][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.879283][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.952071][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.970464][ T7251] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  130.006666][ T7251] __nla_validate_parse: 17 callbacks suppressed
[  130.006686][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'.
[  130.043970][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'.
[  130.169128][ T7251] veth5: entered allmulticast mode
[  130.197161][ T7251] bond2: (slave veth5): Enslaving as an active interface with an up link
[  130.257132][ T7262] dvmrp0: entered allmulticast mode
[  130.310309][ T7261] bond2 (unregistering): (slave veth5): Releasing backup interface
[  130.335650][ T7261] bond2 (unregistering): Released all slaves
[  130.591836][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.834750][ T7125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.843330][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.916145][ T6267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.345420][ T7303] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[  131.524118][ T7309] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  131.563331][ T7309] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  131.826347][ T7303] bond2: (slave gretap1): making interface the new active one
[  131.862420][ T7303] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  132.297487][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.354'.
[  132.525240][ T7351] netlink: 'syz.2.354': attribute type 1 has an invalid length.
[  132.596724][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'.
[  132.755057][ T7351] 8021q: adding VLAN 0 to HW filter on device bond3
[  133.093390][ T7377] Unsupported ieee802154 address type: 0
[  133.395637][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  133.467991][ T7385] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.361'.
[  133.710854][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'.
[  133.776026][ T7393] netlink: 'syz.3.363': attribute type 1 has an invalid length.
[  133.859935][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'.
[  133.914470][ T7402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.363'.
[  134.039923][ T7393] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.048383][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'.
[  134.066549][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.363'.
[  134.088702][ T7390] vlan0: entered promiscuous mode
[  134.101294][ T7390] bond2: entered promiscuous mode
[  134.124418][ T7390] vlan0: entered allmulticast mode
[  134.147555][ T7390] bond2: entered allmulticast mode
[  134.276706][ T7402] 8021q: adding VLAN 0 to HW filter on device batadv1
[  134.326551][ T7402] bond2: (slave batadv1): making interface the new active one
[  134.339888][ T7402] batadv1: entered promiscuous mode
[  134.347865][ T7402] batadv1: entered allmulticast mode
[  134.357026][ T7402] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  134.392623][ T7392] vti0: entered promiscuous mode
[  134.766149][ T7426] netlink: 'syz.1.370': attribute type 1 has an invalid length.
[  134.832298][ T5744] net_ratelimit: 18 callbacks suppressed
[  134.832319][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.991255][ T7121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.072477][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.080890][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.294105][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.302032][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.431731][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.447077][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.566243][ T7414] veth1_vlan: left allmulticast mode
[  135.605571][ T7424] __nla_validate_parse: 3 callbacks suppressed
[  135.605592][ T7424] netlink: 72 bytes leftover after parsing attributes in process `syz.1.370'.
[  135.627055][ T7424] netlink: 72 bytes leftover after parsing attributes in process `syz.1.370'.
[  135.759286][ T7429] syzkaller1: entered promiscuous mode
[  135.769686][ T7429] syzkaller1: entered allmulticast mode
[  135.801552][  T135] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.899522][ T3387] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.934747][ T3387] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.976719][ T3387] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.032994][ T7125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.089756][ T7453] geneve2: entered promiscuous mode
[  136.108340][  T135] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 55742 - 0
[  136.144764][  T135] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 55742 - 0
[  136.155386][  T135] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 55742 - 0
[  136.168853][  T135] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 55742 - 0
[  136.173699][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'.
[  136.192139][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.273767][ T7458] 8021q: adding VLAN 0 to HW filter on device bond4
[  136.325196][ T7465] erspan0: entered promiscuous mode
[  136.345091][ T7465] vlan2: entered promiscuous mode
[  136.399305][ T7471] syzkaller0: entered promiscuous mode
[  136.407357][ T7471] syzkaller0: entered allmulticast mode
[  136.443191][ T7474] xt_hashlimit: max too large, truncated to 1048576
[  136.478361][ T7474] Cannot find set identified by id 1 to match
[  137.071283][ T7125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.321565][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.520145][ T7509] xt_CT: You must specify a L4 protocol and not use inversions on it
[  137.871452][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.111332][ T7124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.187602][ T7527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.387'.
[  138.310732][ T7527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.387'.
[  139.275712][ T7580] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  139.675845][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'.
[  140.027086][ T7612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.400'.
[  140.191305][ T7124] net_ratelimit: 3 callbacks suppressed
[  140.191326][ T7124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.215725][ T7620] bridge0: port 3(syz_tun) entered blocking state
[  140.225685][ T7620] bridge0: port 3(syz_tun) entered disabled state
[  140.234663][ T7620] syz_tun: entered allmulticast mode
[  140.250451][ T7620] syz_tun: entered promiscuous mode
[  140.279721][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.404'.
[  140.671965][ T7635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.408'.
[  140.682479][  T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.725708][ T7636] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  140.913843][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.994487][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.015512][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.049146][ T7644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.078636][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.117397][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.231284][ T7124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.238383][ T7651] ip6gre1: entered promiscuous mode
[  141.257808][ T7651] ip6gre1: entered allmulticast mode
[  141.266967][   T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.279925][ T7653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  141.295533][ T5744] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.306301][   T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.325465][ T7651] erspan0: entered promiscuous mode
[  141.349492][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'.
[  141.381607][ T7655] netlink: 'syz.1.413': attribute type 2 has an invalid length.
[  141.511306][ T5730] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.630141][ T7666] team0: entered promiscuous mode
[  141.657526][ T7666] team_slave_0: entered promiscuous mode
[  141.683569][ T7666] team_slave_1: entered promiscuous mode
[  141.697172][ T7672] netlink: 'syz.2.417': attribute type 8 has an invalid length.
[  141.701147][ T7666] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  141.709232][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'.
[  141.730198][ T7669] ������: renamed from wg2 (while UP)
[  141.738742][ T7675] xt_CT: You must specify a L4 protocol and not use inversions on it
[  141.820567][ T7672] bond0: entered promiscuous mode
[  141.827231][ T7672] bond_slave_0: entered promiscuous mode
[  141.833746][ T7672] bond_slave_1: entered promiscuous mode
[  141.841755][ T7672] gretap0: entered promiscuous mode
[  141.860559][ T7672] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  141.871382][ T5730] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.875586][ T7672] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  141.889782][ T7672] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network
[  141.931231][ T7672] hsr1: entered promiscuous mode
[  142.080486][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'.
[  142.099207][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'.
[  142.142294][ T7692] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  142.193055][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'.
[  142.338139][ T7701] netlink: 'syz.2.428': attribute type 13 has an invalid length.
[  142.470617][ T7710] bridge1: entered promiscuous mode
[  142.478240][ T7710] bridge1: entered allmulticast mode
[  142.484485][ T7709] netlink: 32 bytes leftover after parsing attributes in process `syz.1.431'.
[  142.522860][ T7710] team0: Port device bridge1 added
[  142.552866][ T7716] bridge0: port 4(team0) entered blocking state
[  142.584636][ T7716] bridge0: port 4(team0) entered disabled state
[  142.624550][ T7716] team0: entered allmulticast mode
[  142.651831][ T7716] team_slave_0: entered allmulticast mode
[  142.667647][ T7716] team_slave_1: entered allmulticast mode
[  142.676783][ T7716] geneve1: entered allmulticast mode
[  142.687191][ T7716] team0: entered promiscuous mode
[  142.692991][ T7716] team_slave_0: entered promiscuous mode
[  142.703772][ T7716] team_slave_1: entered promiscuous mode
[  142.717301][ T7716] geneve1: entered promiscuous mode
[  142.820431][ T7725] netlink: 7056 bytes leftover after parsing attributes in process `syz.2.436'.
[  142.932604][ T7731] netlink: 104 bytes leftover after parsing attributes in process `syz.0.438'.
[  143.025801][ T7734] syzkaller0: entered promiscuous mode
[  143.051158][ T7734] syzkaller0: entered allmulticast mode
[  143.123477][ T7737] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.134890][ T7737] 8021q: adding VLAN 0 to HW filter on device team0
[  143.146044][ T7737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.194002][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.206529][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.220978][ T7737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  143.233377][ T7737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  143.253112][ T7737] veth1_vlan: left promiscuous mode
[  143.260079][ T7737] veth0_vlan: left promiscuous mode
[  143.267634][ T7752] xt_connbytes: Forcing CT accounting to be enabled
[  143.275781][ T7737] veth0_vlan: entered promiscuous mode
[  143.289370][ T7737] veth1_vlan: entered promiscuous mode
[  143.323414][ T7737] veth1_macvtap: left promiscuous mode
[  143.339547][ T7737] veth0_macvtap: left promiscuous mode
[  143.348603][ T7737] veth0_macvtap: entered promiscuous mode
[  143.357544][ T7737] veth1_macvtap: entered promiscuous mode
[  143.373030][ T7737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  143.381952][ T7737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  143.398571][ T7737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  143.419049][ T7737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  143.442033][ T7737] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.488925][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.496234][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.531583][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.538826][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.664984][   T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.676629][   T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.777732][   T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.790165][   T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.803924][   T58] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  143.815271][   T58] bond1: active interface up!
[  144.112791][ T7779] netlink: 'syz.4.447': attribute type 3 has an invalid length.
[  144.156282][ T7779] netlink: 666 bytes leftover after parsing attributes in process `syz.4.447'.
[  145.363747][    C0] net_ratelimit: 24 callbacks suppressed
[  145.363764][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.379247][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.397693][ T7121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.641291][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  146.301423][ T6989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.433506][ T7125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.442276][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.452034][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.530961][ T7738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.569959][ T7738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.789004][ T7826] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  146.878152][ T7832] __nla_validate_parse: 3 callbacks suppressed
[  146.878174][ T7832] netlink: 72 bytes leftover after parsing attributes in process `syz.4.454'.
[  146.901403][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.458'.
[  146.936270][ T7826] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  146.965206][ T7826] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  146.991992][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.027137][ T7847] netlink: 88 bytes leftover after parsing attributes in process `syz.2.460'.
[  147.130033][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.138921][ T7842] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.185368][ T7854] netlink: 277 bytes leftover after parsing attributes in process `syz.3.463'.
[  147.248330][ T7842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.263047][ T7842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.338045][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'.
[  147.367863][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.470124][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.520078][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.668640][ T7867] ieee802154 phy0 wpan0: encryption failed: -22
[  147.703360][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.466'.
[  147.847792][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.855612][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.963898][ T7858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.990683][ T7858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.178835][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.197621][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  148.228078][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.392477][ T7886] netlink: 'syz.1.469': attribute type 10 has an invalid length.
[  148.400608][ T7888] netlink: 'syz.1.469': attribute type 10 has an invalid length.
[  148.460404][ T7879] geneve2: left promiscuous mode
[  148.486081][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  148.496033][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.516096][ T7888] syz_tun: entered promiscuous mode
[  148.540142][ T7888] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  148.613928][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  148.650307][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.688506][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  148.728392][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  148.786185][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.856176][ T6989] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  148.905454][ T7909] x_tables: duplicate underflow at hook 2
[  148.918976][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.955834][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.003725][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.142044][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'.
[  149.223381][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'.
[  149.344023][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'.
[  149.372090][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'.
[  150.357842][ T7968] netlink: 'syz.1.490': attribute type 20 has an invalid length.
[  150.920778][ T8001] net_ratelimit: 12 callbacks suppressed
[  150.920800][ T8001] openvswitch: netlink: Tunnel attr 2 has unexpected len 1 expected 4
[  152.007501][ T8062] dummy0: mtu less than device minimum
[  152.134060][ T8064] __nla_validate_parse: 13 callbacks suppressed
[  152.134083][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.520'.
[  152.209813][ T8064] nbd: socks must be embedded in a SOCK_ITEM attr
[  152.345991][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'.
[  152.428056][ T8069] syzkaller0: entered promiscuous mode
[  152.436207][ T8069] syzkaller0: entered allmulticast mode
[  152.483482][ T8069] tipc: Started in network mode
[  152.510208][ T8069] tipc: Node identity , cluster identity 4711
[  152.537442][ T8069] tipc: Failed to obtain node identity
[  152.552306][ T8069] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  152.631972][ T8081] bond5: option lacp_rate: invalid value (128)
[  152.651289][ T8081] bond5 (unregistering): Released all slaves
[  152.744069][ T8094] x_tables: unsorted underflow at hook 2
[  152.777618][ T8095] Bluetooth: MGMT ver 1.23
[  152.835687][ T8095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.528'.
[  152.845044][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'.
[  152.991523][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  153.219698][ T8105] netlink: 'syz.4.533': attribute type 1 has an invalid length.
[  153.438622][ T8090] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  153.474957][ T8120] netlink: 'syz.0.535': attribute type 1 has an invalid length.
[  153.714859][ T8129] netlink: 'syz.2.538': attribute type 21 has an invalid length.
[  153.723347][ T8129] netlink: 156 bytes leftover after parsing attributes in process `syz.2.538'.
[  153.894227][ T8138] netlink: 256 bytes leftover after parsing attributes in process `syz.1.542'.
[  154.066423][ T5628] Bluetooth: hci4: link tx timeout
[  154.075844][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  154.088059][ T5628] Bluetooth: hci4: link tx timeout
[  154.094865][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  154.144621][ T8142] bridge0: port 1(syz_tun) entered blocking state
[  154.189270][ T8142] bridge0: port 1(syz_tun) entered disabled state
[  154.229517][ T8142] syz_tun: entered allmulticast mode
[  154.253132][ T8142] syz_tun: entered promiscuous mode
[  154.512464][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  154.671669][ T5628] Bluetooth: hci0: command 0x080f tx timeout
[  154.780276][ T8179] netlink: 'syz.4.554': attribute type 39 has an invalid length.
[  154.964455][ T8179] syz_tun (unregistering): left allmulticast mode
[  154.971927][ T8179] syz_tun (unregistering): left promiscuous mode
[  154.978514][ T8179] bridge0: port 3(syz_tun) entered disabled state
[  155.394714][ T8193] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  156.111274][ T5628] Bluetooth: hci4: command 0x0406 tx timeout
[  159.298629][ T8207] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  159.318407][ T8215] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.561'.
[  159.686388][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'.
[  159.758441][ T8237] netlink: 3 bytes leftover after parsing attributes in process `syz.3.570'.
[  159.791460][ T8237] openvswitch: netlink: Flow key attr not present in new flow.
[  159.803111][ T8240] netlink: 84 bytes leftover after parsing attributes in process `syz.2.571'.
[  159.832968][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'.
[  159.896644][ T8244] syzkaller1: entered promiscuous mode
[  159.913903][ T8244] syzkaller1: entered allmulticast mode
[  160.028136][ T8253] netlink: 52 bytes leftover after parsing attributes in process `syz.3.574'.
[  160.054210][ T8253] netlink: 'syz.3.574': attribute type 10 has an invalid length.
[  160.150614][ T8253] team0: Port device dummy0 added
[  160.338776][ T8253] netlink: 'syz.3.574': attribute type 10 has an invalid length.
[  160.596750][ T8253] team0: Port device dummy0 removed
[  160.679914][ T8253] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  160.998572][ T5634] block nbd1: Receive control failed (result -32)
[  161.007159][ T5628] block nbd1: Receive control failed (result -32)
[  161.045922][ T8256] nbd1: detected capacity change from 0 to 63
[  161.092784][ T8223] block nbd1: Dead connection, failed to find a fallback
[  161.133561][ T8223] block nbd1: shutting down sockets
[  161.178927][ T8223] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.245537][ T8223] Buffer I/O error on dev nbd1, logical block 0, async page read
[  161.283371][ T8223] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.322436][ T8223] Buffer I/O error on dev nbd1, logical block 1, async page read
[  161.373932][ T8223] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.405608][ T8223] Buffer I/O error on dev nbd1, logical block 2, async page read
[  161.424924][ T8223] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.456495][ T8223] Buffer I/O error on dev nbd1, logical block 3, async page read
[  161.485593][ T8223] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.510805][ T8223] Buffer I/O error on dev nbd1, logical block 0, async page read
[  161.526545][ T8223] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.539740][ T8223] Buffer I/O error on dev nbd1, logical block 1, async page read
[  161.551902][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  161.565592][ T8223] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.578118][ T8223] Buffer I/O error on dev nbd1, logical block 2, async page read
[  161.587458][ T8223] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.596997][ T8223] Buffer I/O error on dev nbd1, logical block 3, async page read
[  161.605744][ T8223] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.616516][ T8223] Buffer I/O error on dev nbd1, logical block 0, async page read
[  161.625447][ T8223] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  161.635092][ T8223] Buffer I/O error on dev nbd1, logical block 1, async page read
[  161.647665][ T8223] ldm_validate_partition_table(): Disk read failed.
[  161.661613][ T8223] Dev nbd1: unable to read RDB block 0
[  161.671813][ T8223]  nbd1: unable to read partition table
[  161.702645][ T8223] ldm_validate_partition_table(): Disk read failed.
[  161.748139][ T8223] Dev nbd1: unable to read RDB block 0
[  161.786949][ T8223]  nbd1: unable to read partition table
[  161.948628][ T8328] FAULT_INJECTION: forcing a failure.
[  161.948628][ T8328] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  161.987377][ T8327] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  161.998216][ T8328] CPU: 0 UID: 0 PID: 8328 Comm: syz.4.590 Not tainted syzkaller #0 PREEMPT(full) 
[  161.998244][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  161.998256][ T8328] Call Trace:
[  161.998264][ T8328]  <TASK>
[  161.998272][ T8328]  dump_stack_lvl+0xe8/0x150
[  161.998304][ T8328]  should_fail_ex+0x412/0x560
[  161.998336][ T8328]  _copy_from_user+0x2d/0xb0
[  161.998366][ T8328]  ____sys_sendmsg+0x308/0x9f0
[  161.998407][ T8328]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.998446][ T8328]  ? import_iovec+0x73/0xa0
[  161.998479][ T8328]  ___sys_sendmsg+0x2a5/0x360
[  161.998508][ T8328]  ? __lock_acquire+0x6b5/0x2cf0
[  161.998535][ T8328]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.998614][ T8328]  ? __fget_files+0x2a/0x420
[  161.998638][ T8328]  ? __fget_files+0x3a0/0x420
[  161.998674][ T8328]  __x64_sys_sendmsg+0x1bd/0x2a0
[  161.998707][ T8328]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.998747][ T8328]  ? __pfx_ksys_write+0x10/0x10
[  161.998786][ T8328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.998807][ T8328]  do_syscall_64+0x15f/0xf80
[  161.998826][ T8328]  ? trace_irq_disable+0x3b/0x140
[  161.998855][ T8328]  ? clear_bhb_loop+0x40/0x90
[  161.998881][ T8328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.998901][ T8328] RIP: 0033:0x7f904219cdd9
[  161.998920][ T8328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.998936][ T8328] RSP: 002b:00007f9043118028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.998959][ T8328] RAX: ffffffffffffffda RBX: 00007f9042415fa0 RCX: 00007f904219cdd9
[  161.998973][ T8328] RDX: 00000000000440e0 RSI: 0000200000000100 RDI: 0000000000000003
[  161.998986][ T8328] RBP: 00007f9043118090 R08: 0000000000000000 R09: 0000000000000000
[  161.998998][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.999009][ T8328] R13: 00007f9042416038 R14: 00007f9042415fa0 R15: 00007fffa9f73498
[  161.999041][ T8328]  </TASK>
[  162.323189][ T8339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.593'.
[  162.345048][ T8337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.592'.
[  162.416265][ T8337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.592'.
[  162.506187][ T8347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.595'.
[  162.821568][ T8362] syzkaller0: entered promiscuous mode
[  162.828484][ T8362] syzkaller0: entered allmulticast mode
[  162.838218][ T8362] tipc: Started in network mode
[  162.843506][ T8362] tipc: Node identity , cluster identity 4711
[  162.850173][ T8362] tipc: Failed to obtain node identity
[  162.858535][ T8362] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  163.081759][ T8374] hma(����kX�: entered promiscuous mode
[  163.175604][ T8379] FAULT_INJECTION: forcing a failure.
[  163.175604][ T8379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.194134][ T8379] CPU: 1 UID: 0 PID: 8379 Comm: syz.3.604 Not tainted syzkaller #0 PREEMPT(full) 
[  163.194162][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  163.194175][ T8379] Call Trace:
[  163.194188][ T8379]  <TASK>
[  163.194197][ T8379]  dump_stack_lvl+0xe8/0x150
[  163.194226][ T8379]  should_fail_ex+0x412/0x560
[  163.194258][ T8379]  _copy_to_user+0x31/0xb0
[  163.194290][ T8379]  simple_read_from_buffer+0xe1/0x170
[  163.194320][ T8379]  proc_fail_nth_read+0x1bb/0x230
[  163.194350][ T8379]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  163.194380][ T8379]  ? rw_verify_area+0x2a6/0x4d0
[  163.194407][ T8379]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  163.194435][ T8379]  vfs_read+0x20c/0xa70
[  163.194469][ T8379]  ? __pfx___mutex_lock+0x10/0x10
[  163.194490][ T8379]  ? __pfx_vfs_read+0x10/0x10
[  163.194520][ T8379]  ? __fget_files+0x2a/0x420
[  163.194549][ T8379]  ? __fget_files+0x3a0/0x420
[  163.194572][ T8379]  ? __fget_files+0x2a/0x420
[  163.194602][ T8379]  ksys_read+0x150/0x270
[  163.194627][ T8379]  ? __pfx_ksys_read+0x10/0x10
[  163.194658][ T8379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.194679][ T8379]  do_syscall_64+0x15f/0xf80
[  163.194697][ T8379]  ? trace_irq_disable+0x3b/0x140
[  163.194725][ T8379]  ? clear_bhb_loop+0x40/0x90
[  163.194750][ T8379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.194769][ T8379] RIP: 0033:0x7f687e35d60e
[  163.194789][ T8379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  163.194804][ T8379] RSP: 002b:00007f687c5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  163.194826][ T8379] RAX: ffffffffffffffda RBX: 00007f687c5f66c0 RCX: 00007f687e35d60e
[  163.194850][ T8379] RDX: 000000000000000f RSI: 00007f687c5f60a0 RDI: 0000000000000004
[  163.194863][ T8379] RBP: 00007f687c5f6090 R08: 0000000000000000 R09: 0000000000000000
[  163.194874][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.194886][ T8379] R13: 00007f687e616038 R14: 00007f687e615fa0 R15: 00007ffe11d1c3c8
[  163.194920][ T8379]  </TASK>
[  163.925665][ T8407] veth1_to_team: entered promiscuous mode
[  163.948480][ T8407] veth1_to_team: left promiscuous mode
[  164.476247][ T8419] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  165.101223][ T8438] netlink: 'syz.4.621': attribute type 1 has an invalid length.
[  165.134528][ T8432] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  165.211746][ T8445] __nla_validate_parse: 3 callbacks suppressed
[  165.214918][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'.
[  165.222949][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'.
[  165.250393][ T8438] 8021q: adding VLAN 0 to HW filter on device bond2
[  165.264101][ T8445] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  165.271265][ T8442] vlan3: entered allmulticast mode
[  165.284942][ T8442] bond2: entered allmulticast mode
[  165.306690][ T8436] syzkaller0: entered promiscuous mode
[  165.322602][ T8436] syzkaller0: entered allmulticast mode
[  165.376494][ T8438] bond2: (slave geneve2): making interface the new active one
[  165.384995][ T8438] geneve2: entered allmulticast mode
[  165.400215][ T8438] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  165.533170][ T6991] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.640235][ T6991] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.674409][ T8461] lo speed is unknown, defaulting to 1000
[  165.686540][ T8461] lo speed is unknown, defaulting to 1000
[  165.686586][ T6991] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.760377][ T8461] lo speed is unknown, defaulting to 1000
[  165.786390][ T8466] netlink: 88 bytes leftover after parsing attributes in process `syz.2.628'.
[  165.810558][ T6991] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.837265][ T8461] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  165.844944][ T8471] netlink: 40 bytes leftover after parsing attributes in process `syz.3.629'.
[  165.923006][ T8471] netlink: 80 bytes leftover after parsing attributes in process `syz.3.629'.
[  165.944712][ T8462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'.
[  165.953657][ T8461] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  165.953720][ T8461] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  165.975737][ T8461] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  166.063905][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'.
[  166.185849][ T8461] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  166.351601][ T8487] netlink: 104 bytes leftover after parsing attributes in process `syz.1.632'.
[  166.388110][ T8461] lo speed is unknown, defaulting to 1000
[  166.398338][ T8461] lo speed is unknown, defaulting to 1000
[  166.410429][ T8461] lo speed is unknown, defaulting to 1000
[  166.424296][ T8461] lo speed is unknown, defaulting to 1000
[  166.436379][ T8461] lo speed is unknown, defaulting to 1000
[  166.643701][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'.
[  167.319143][ T8522] sctp: [Deprecated]: syz.1.641 (pid 8522) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.319143][ T8522] Use struct sctp_sack_info instead
[  167.509028][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'.
[  168.117197][   T29] audit: type=1804 audit(1778370705.132:2): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.653" name="/newroot/140/memory.events" dev="tmpfs" ino=732 res=1 errno=0
[  168.149783][   T29] audit: type=1800 audit(1778370705.132:3): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.653" name="memory.events" dev="tmpfs" ino=732 res=0 errno=0
[  168.287811][ T8560] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  168.320666][ T8560] bond2 (unregistering): Released all slaves
[  169.170575][ T8599] lo speed is unknown, defaulting to 1000
[  171.791311][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  178.831513][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  186.376483][ T8621] syzkaller1: left promiscuous mode
[  186.382085][ T8621] syzkaller1: left allmulticast mode
[  186.399132][ T8621] __nla_validate_parse: 5 callbacks suppressed
[  186.399173][ T8621] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.666'.
[  186.813193][ T8646] netlink: 72 bytes leftover after parsing attributes in process `syz.3.673'.
[  186.828474][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'.
[  186.859942][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'.
[  186.969928][ T8662] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.678'.
[  187.032978][ T8666] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.678'.
[  187.138685][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'.
[  187.181516][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.680'.
[  187.418533][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'.
[  187.440831][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'.
[  187.646358][ T6991] tipc: Subscription rejected, illegal request
[  187.670944][ T8695] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  187.991190][ T8711] vlan4: entered allmulticast mode
[  187.998602][ T8711] macvtap0: entered allmulticast mode
[  188.056458][ T8713] vlan4: entered allmulticast mode
[  188.062372][ T8713] macvtap0: entered allmulticast mode
[  188.076426][ T8713] veth0_macvtap: entered allmulticast mode
[  188.245459][ T8686] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  188.506673][ T8734] xfrm1: entered allmulticast mode
[  188.935338][ T8751] netlink: 'syz.1.701': attribute type 11 has an invalid length.
[  189.293072][ T8772] pim6reg1: entered promiscuous mode
[  189.314644][ T8772] pim6reg1: entered allmulticast mode
[  189.445559][ T8783] netlink: 'syz.1.708': attribute type 1 has an invalid length.
[  189.515586][ T8783] 8021q: adding VLAN 0 to HW filter on device bond4
[  189.609960][ T8775] lo speed is unknown, defaulting to 1000
[  189.693446][ T8789] netlink: 'syz.1.708': attribute type 1 has an invalid length.
[  190.635902][ T8817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.660552][ T8817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.936920][ T8831] lo speed is unknown, defaulting to 1000
[  191.405906][ T8852] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000
[  191.555101][ T8850] IPVS: persistence engine module ip_vs_pe_� not found
[  191.618422][ T8852] bridge0: entered allmulticast mode
[  191.637527][ T8866] __nla_validate_parse: 11 callbacks suppressed
[  191.637547][ T8866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'.
[  191.694607][ T8859] pim6reg: entered allmulticast mode
[  191.809760][ T8871] netlink: 'syz.1.731': attribute type 1 has an invalid length.
[  191.839411][ T8873] syzkaller1: tun_chr_ioctl cmd 2147767520
[  191.887295][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'.
[  192.156664][ T8882] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  192.237583][ T8880] lo speed is unknown, defaulting to 1000
[  192.448126][ T8886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.736'.
[  192.784479][ T8902] netlink: 68 bytes leftover after parsing attributes in process `syz.4.741'.
[  192.969556][ T8911] netlink: 5 bytes leftover after parsing attributes in process `syz.0.742'.
[  193.035800][ T8901] syzkaller0: entered promiscuous mode
[  193.050065][ T8901] syzkaller0: entered allmulticast mode
[  193.063278][ T8911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.259248][ T8923] netlink: 56 bytes leftover after parsing attributes in process `syz.4.745'.
[  193.414841][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.422705][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.528024][ T8914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.550136][ T8914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.636465][ T8914] veth0_macvtap: left allmulticast mode
[  193.858404][ T1042] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.906270][ T1042] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.058726][ T1042] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.098895][ T1042] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.127612][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'.
[  194.162165][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  194.208837][ T8951] netlink: 'syz.1.749': attribute type 18 has an invalid length.
[  194.439521][ T8956] netlink: 84 bytes leftover after parsing attributes in process `syz.0.748'.
[  194.521508][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'.
[  194.531516][ T8948] syzkaller0: entered promiscuous mode
[  194.531543][ T8948] syzkaller0: entered allmulticast mode
[  194.836020][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  195.028283][ T9003] sctp: [Deprecated]: syz.2.758 (pid 9003) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.028283][ T9003] Use struct sctp_sack_info instead
[  197.243438][ T9039] __nla_validate_parse: 1 callbacks suppressed
[  197.243460][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'.
[  197.808734][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'.
[  197.840856][ T9061] lo speed is unknown, defaulting to 1000
[  197.965895][ T9073] bond4: entered promiscuous mode
[  197.993418][ T9073] 8021q: adding VLAN 0 to HW filter on device bond4
[  198.165990][ T9086] netlink: 660 bytes leftover after parsing attributes in process `syz.1.767'.
[  198.190768][ T9086] netlink: 76 bytes leftover after parsing attributes in process `syz.1.767'.
[  198.246432][ T9081] syzkaller0: entered promiscuous mode
[  198.255247][ T9081] syzkaller0: entered allmulticast mode
[  198.341741][ T9006] infiniband syz0: set down
[  198.360430][ T9006] infiniband syz0: added bridge_slave_1
[  198.398956][ T9006] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  198.408088][ T9006] infiniband syz0: Couldn't open port 1
[  198.413111][ T9082] IPVS: sh: FWM 3 0x00000003 - no destination available
[  198.422813][ T9006] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  198.467919][ T9082] IPVS: sh: FWM 3 0x00000003 - no destination available
[  198.481361][ T9006] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  198.521136][ T9006] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  198.613207][ T9081] lo speed is unknown, defaulting to 1000
[  198.673014][ T9006] RDS/IB: syz0: added
[  198.689453][ T9006] smc: adding ib device syz0 with port count 1
[  198.706127][ T9006] smc:    ib device syz0 port 1 has no pnetid
[  199.061847][ T9112] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.771'.
[  199.678709][ T9134] atomic_op ffff888031cf4998 conn xmit_atomic 0000000000000000
[  199.818323][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'.
[  200.187684][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.779'.
[  200.482874][ T9160] sctp: [Deprecated]: syz.3.780 (pid 9160) Use of int in max_burst socket option.
[  200.482874][ T9160] Use struct sctp_assoc_value instead
[  201.984600][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'.
[  202.529952][ T9221] netlink: get zone limit has 4 unknown bytes
[  203.947097][ T9248] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  204.000585][ T9248] bond5 (unregistering): Released all slaves
[  204.132493][ T9266] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  204.387555][ T9276] netlink: 388 bytes leftover after parsing attributes in process `syz.0.796'.
[  204.431454][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  204.465731][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.796'.
[  204.490444][ T9276] syzkaller0: entered promiscuous mode
[  204.511610][ T9276] syzkaller0: entered allmulticast mode
[  204.587524][ T9284] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  204.776128][ T9290] netlink: 104 bytes leftover after parsing attributes in process `syz.3.800'.
[  205.127771][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.804'.
[  205.291763][ T9318] xt_socket: unknown flags 0x50
[  205.779483][ T9338] netlink: 'syz.4.812': attribute type 1 has an invalid length.
[  205.828267][ T9338] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  205.967009][ T9346] netlink: 'syz.3.814': attribute type 29 has an invalid length.
[  206.039343][ T9347] netlink: 'syz.3.814': attribute type 29 has an invalid length.
[  206.114177][ T9351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.815'.
[  206.420218][ T9376] veth0_to_batadv: entered promiscuous mode
[  206.583650][ T9380] netlink: 68 bytes leftover after parsing attributes in process `syz.0.821'.
[  206.986212][ T9398] netlink: 'syz.1.825': attribute type 1 has an invalid length.
[  207.011726][ T9398] netlink: 240 bytes leftover after parsing attributes in process `syz.1.825'.
[  207.050344][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'.
[  207.078371][   T29] audit: type=1804 audit(1778370744.092:4): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.827" name="/newroot/165/cgroup.controllers" dev="tmpfs" ino=859 res=1 errno=0
[  207.133347][ T9367] netlink: 1 bytes leftover after parsing attributes in process `syz.3.818'.
[  207.161254][ T5628] Bluetooth: hci3: command 0x0406 tx timeout
[  207.161324][ T5644] Bluetooth: hci2: command 0x0406 tx timeout
[  207.167352][ T5628] Bluetooth: hci1: command 0x0406 tx timeout
[  207.188427][   T29] audit: type=1800 audit(1778370744.092:5): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.827" name="cgroup.controllers" dev="tmpfs" ino=859 res=0 errno=0
[  207.199787][ T9367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.212888][   T29] audit: type=1804 audit(1778370744.092:6): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.827" name="/newroot/165/cgroup.controllers" dev="tmpfs" ino=859 res=1 errno=0
[  207.307022][ T9389] bond2: option all_slaves_active: invalid value (5)
[  207.372485][ T9389] bond2 (unregistering): Released all slaves
[  207.512267][ T9415] x_tables: duplicate underflow at hook 1
[  207.529717][ T9392] lo speed is unknown, defaulting to 1000
[  207.729635][ T9421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.833'.
[  207.899908][ T9429] netlink: 'syz.1.837': attribute type 1 has an invalid length.
[  207.963104][ T9429] bond5: entered promiscuous mode
[  207.969341][ T9429] 8021q: adding VLAN 0 to HW filter on device bond5
[  209.262975][ T9465] dvmrp0: entered allmulticast mode
[  209.525809][ T9478] netlink: 'syz.1.846': attribute type 1 has an invalid length.
[  209.570418][ T9484] netlink: 'syz.3.848': attribute type 1 has an invalid length.
[  209.643582][ T9484] __nla_validate_parse: 4 callbacks suppressed
[  209.643601][ T9484] netlink: 224 bytes leftover after parsing attributes in process `syz.3.848'.
[  209.647553][ T9491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.846'.
[  210.057679][ T9488] bond6: (slave veth7): Enslaving as an active interface with a down link
[  210.100403][ T9491] 8021q: adding VLAN 0 to HW filter on device bond6
[  211.881653][ T9574] netlink: 'syz.0.870': attribute type 3 has an invalid length.
[  211.918999][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'.
[  212.544334][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'.
[  212.555107][ T9599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.878'.
[  212.606379][   T29] audit: type=1800 audit(1778370749.622:7): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.878" name="memory.events" dev="tmpfs" ino=923 res=0 errno=0
[  212.751552][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  213.281143][ T9609] syzkaller0: entered promiscuous mode
[  213.302512][ T9609] syzkaller0: entered allmulticast mode
[  213.747187][ T9619] bond5: option arp_all_targets: invalid value (129)
[  213.762901][ T9629] netlink: 14 bytes leftover after parsing attributes in process `syz.4.885'.
[  213.772555][ T9622] netlink: 14 bytes leftover after parsing attributes in process `syz.4.885'.
[  213.782746][ T9619] bond5 (unregistering): Released all slaves
[  213.862967][ T9624] bond5: option arp_all_targets: invalid value (129)
[  213.880174][ T9624] bond5 (unregistering): Released all slaves
[  213.946046][ T9635] netlink: 'syz.3.888': attribute type 1 has an invalid length.
[  214.136945][ T9642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.149812][ T9645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.891'.
[  214.179835][ T9637] bond6: entered promiscuous mode
[  214.202457][ T9637] bond6: entered allmulticast mode
[  214.229197][ T9637] 8021q: adding VLAN 0 to HW filter on device bond6
[  214.300927][ T9640] bridge4: entered promiscuous mode
[  214.307013][ T1042] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  214.322223][ T9640] bridge4: entered allmulticast mode
[  214.333024][ T9640] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  214.374799][ T9646] bridge5: entered promiscuous mode
[  214.391693][ T9646] bridge5: entered allmulticast mode
[  214.405619][ T9646] bond6: (slave bridge5): Enslaving as a backup interface with a down link
[  214.412300][   T48] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  214.755327][ T9667] netlink: 36 bytes leftover after parsing attributes in process `syz.4.898'.
[  215.159455][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'.
[  215.189476][ T9687] sctp: [Deprecated]: syz.0.903 (pid 9687) Use of int in maxseg socket option.
[  215.189476][ T9687] Use struct sctp_assoc_value instead
[  215.336909][ T9693] veth1_to_bond: entered allmulticast mode
[  215.372723][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'.
[  215.404301][ T9693] veth1_to_bond (unregistering): left allmulticast mode
[  215.499415][ T9693] bond0: (slave 
c
@0���): Releasing backup interface
[  215.626052][ T9700] Bluetooth: MGMT ver 1.23
[  215.787962][ T9711] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  216.008364][ T9716] lo speed is unknown, defaulting to 1000
[  216.032310][ T9719] IPVS: sh: FWM 3 0x00000003 - no destination available
[  216.043143][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'.
[  216.310684][ T9730] xt_TPROXY: Can be used only with -p tcp or -p udp
[  216.591070][ T9742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.918'.
[  216.620118][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'.
[  216.742771][ T9751] macvlan3: entered allmulticast mode
[  216.767535][ T9751] veth1_vlan: entered allmulticast mode
[  216.810028][ T9744] lo speed is unknown, defaulting to 1000
[  217.255036][ T9759] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  218.023653][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'.
[  218.081854][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.931'.
[  218.215720][ T9779] dvmrp0: entered allmulticast mode
[  218.726762][ T9804] openvswitch: netlink: Actions may not be safe on all matching packets
[  218.794873][ T9805] macsec2: entered promiscuous mode
[  219.011855][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'.
[  219.026417][ T9815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.940'.
[  219.513651][ T9829] bond3: entered promiscuous mode
[  219.660233][ T9843] netlink: 'syz.2.948': attribute type 7 has an invalid length.
[  219.765592][ T9850] __nla_validate_parse: 2 callbacks suppressed
[  219.765613][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.949'.
[  219.807717][ T9853] openvswitch: netlink: IP tunnel dst address not specified
[  219.868888][ T9850] ip6gre1: entered promiscuous mode
[  219.885435][ T9850] ip6gre1: entered allmulticast mode
[  219.909441][ T9858] netlink: 'syz.1.949': attribute type 6 has an invalid length.
[  219.955415][ T9858] netlink: 72 bytes leftover after parsing attributes in process `syz.1.949'.
[  220.288452][ T9850] syz.1.949 (9850) used greatest stack depth: 17312 bytes left
[  220.703313][ T9881] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  220.977857][ T9889] syzkaller0: entered promiscuous mode
[  220.984242][ T9891] xt_l2tp: wrong L2TP version: 0
[  220.984706][ T9889] syzkaller0: entered allmulticast mode
[  221.004637][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.959'.
[  221.017757][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.959'.
[  221.718189][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'.
[  221.836507][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'.
[  222.247191][ T9914] lo speed is unknown, defaulting to 1000
[  222.550203][ T9950] netlink: 'syz.3.978': attribute type 13 has an invalid length.
[  222.590634][ T9950] netlink: 'syz.3.978': attribute type 17 has an invalid length.
[  222.630109][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'.
[  223.203478][ T9950] 8021q: adding VLAN 0 to HW filter on device team0
[  223.232336][ T9950] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.342792][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.358084][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.402159][ T9950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  223.412901][ T9950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  223.427371][ T9950] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  223.458206][ T9947] lo speed is unknown, defaulting to 1000
[  223.464960][ T9943] syzkaller1: entered promiscuous mode
[  223.474274][ T9943] syzkaller1: entered allmulticast mode
[  223.485577][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.492917][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.503613][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.510907][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.587146][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'.
[  223.749863][ T9980] xt_CT: You must specify a L4 protocol and not use inversions on it
[  223.992588][ T9988] netlink: 'syz.4.988': attribute type 8 has an invalid length.
[  224.016683][ T9986] netlink: 72 bytes leftover after parsing attributes in process `syz.3.987'.
[  224.038680][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'.
[  224.276233][ T9997] netlink: 'syz.2.992': attribute type 1 has an invalid length.
[  224.352867][ T9997] 8021q: adding VLAN 0 to HW filter on device bond5
[  224.399054][ T9998] ip6gre2: entered promiscuous mode
[  224.406065][ T9998] ip6gre2: entered allmulticast mode
[  224.422742][T10000] vlan2: entered allmulticast mode
[  224.427963][T10000] bond5: entered allmulticast mode
[  224.454383][T10006] netlink: 'syz.3.994': attribute type 1 has an invalid length.
[  224.478890][ T9997] bond5: (slave geneve2): making interface the new active one
[  224.486873][ T9997] geneve2: entered allmulticast mode
[  224.499462][ T9997] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  224.646223][ T3387] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.660780][ T3387] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.792637][ T3387] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.813570][ T3387] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.933569][T10017] netlink: 'syz.4.999': attribute type 1 has an invalid length.
[  224.990638][T10020] netlink: 'syz.3.998': attribute type 1 has an invalid length.
[  225.004252][T10015] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.014090][T10015] 8021q: adding VLAN 0 to HW filter on device team0
[  225.025476][T10015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.068294][T10015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.077779][T10015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.090238][T10015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  225.101703][T10015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  225.104089][T10024] __nla_validate_parse: 3 callbacks suppressed
[  225.104107][T10024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'.
[  225.115957][T10015] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  225.172873][T10017] 8021q: adding VLAN 0 to HW filter on device bond4
[  225.239569][ T7119] lo speed is unknown, defaulting to 1000
[  225.267010][ T7119] syz2: Port: 1 Link ACTIVE
[  225.362980][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.370225][ T6267] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.388802][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.396056][ T6267] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.454972][T10022] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  225.465483][T10024] 8021q: adding VLAN 0 to HW filter on device bond7
[  225.466949][   T13] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  225.486565][ T7122] syz0: Port: 1 Link ACTIVE
[  225.611188][ T3387] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  226.388313][T10060] openvswitch: netlink: Flow key attr not present in new flow.
[  226.563720][T10067] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1010'.
[  226.577372][T10067] netlink: 'syz.4.1010': attribute type 1 has an invalid length.
[  226.606303][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'.
[  226.647157][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'.
[  226.665790][T10067] netlink: 'syz.4.1010': attribute type 6 has an invalid length.
[  226.677247][T10067] netlink: 'syz.4.1010': attribute type 5 has an invalid length.
[  226.703054][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'.
[  226.704336][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.712181][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'.
[  226.732468][T10067] netlink: 'syz.4.1010': attribute type 6 has an invalid length.
[  226.754244][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.756912][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'.
[  226.773036][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'.
[  226.779080][T10067] netlink: 'syz.4.1010': attribute type 5 has an invalid length.
[  226.783743][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.805047][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'.
[  226.814297][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.833976][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'.
[  226.960633][T10081] sctp: [Deprecated]: syz.3.1016 (pid 10081) Use of int in max_burst socket option deprecated.
[  226.960633][T10081] Use struct sctp_assoc_value instead
[  227.355530][T10084] ip6tnl1: entered allmulticast mode
[  227.426654][T10086] kthread_run failed with err -4
[  227.634277][T10096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.078796][T10123] bond0: (slave syz_tun): Releasing backup interface
[  228.109457][T10123] bridge_slave_0: left allmulticast mode
[  228.125810][T10123] bridge_slave_0: left promiscuous mode
[  228.136866][T10127] netlink: 'syz.1.1029': attribute type 2 has an invalid length.
[  228.153169][T10123] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.215382][T10123] bridge_slave_1: left allmulticast mode
[  228.237269][T10133] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  228.253929][T10123] bridge_slave_1: left promiscuous mode
[  228.280696][T10123] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.294024][T10123] bond0: (slave bond_slave_0): Releasing backup interface
[  228.305391][T10123] bond0: (slave bond_slave_1): Releasing backup interface
[  228.316486][T10123] team0: Port device team_slave_0 removed
[  228.325839][T10123] team0: Port device team_slave_1 removed
[  228.344641][T10123] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.355023][T10123] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.366202][T10123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  228.385842][T10135] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  228.532906][T10149] netlink: 'syz.1.1038': attribute type 30 has an invalid length.
[  228.595171][T10149] netlink: 'syz.1.1038': attribute type 30 has an invalid length.
[  229.786983][T10202] veth1_vlan: left promiscuous mode
[  229.825706][T10202] veth0_vlan: left promiscuous mode
[  229.863115][T10202] veth0_vlan: entered promiscuous mode
[  229.893727][T10202] veth1_vlan: entered promiscuous mode
[  229.913596][T10202] veth1_macvtap: left promiscuous mode
[  229.921434][T10202] veth0_macvtap: left promiscuous mode
[  229.928186][T10202] veth0_macvtap: entered promiscuous mode
[  229.935987][T10202] veth1_macvtap: entered promiscuous mode
[  229.963229][T10202] bond1: left promiscuous mode
[  229.969161][T10202] 8021q: adding VLAN 0 to HW filter on device bond1
[  229.979292][T10202] veth3: left promiscuous mode
[  229.984685][T10202] veth3: left allmulticast mode
[  230.035932][T10202] veth5: left allmulticast mode
[  230.043413][T10202] 8021q: adding VLAN 0 to HW filter on device bond2
[  230.053903][T10202] 8021q: adding VLAN 0 to HW filter on device bond3
[  230.062636][T10202] vti0: left promiscuous mode
[  230.068649][T10202] 8021q: adding VLAN 0 to HW filter on device bond4
[  230.076446][T10202] hsr1: left promiscuous mode
[  230.086270][T10202] 8021q: adding VLAN 0 to HW filter on device eth0
[  230.094936][T10202] 8021q: adding VLAN 0 to HW filter on device eth1
[  230.103607][T10202] 8021q: adding VLAN 0 to HW filter on device eth2
[  230.114075][T10202] 8021q: adding VLAN 0 to HW filter on device eth3
[  230.123423][T10202] vlan2: left allmulticast mode
[  230.128316][T10202] bond5: left allmulticast mode
[  230.134017][T10202] geneve2: left allmulticast mode
[  230.452183][T10238] syzkaller0: entered promiscuous mode
[  230.455562][T10248] netlink: 'syz.2.1062': attribute type 5 has an invalid length.
[  230.466671][T10248] __nla_validate_parse: 6 callbacks suppressed
[  230.466689][T10248] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1062'.
[  230.468213][T10238] syzkaller0: entered allmulticast mode
[  232.934249][T10268] lo speed is unknown, defaulting to 1000
[  232.952864][T10272] netlink: 'syz.4.1069': attribute type 1 has an invalid length.
[  232.956469][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1072'.
[  232.982919][T10272] netlink: 1008 bytes leftover after parsing attributes in process `syz.4.1069'.
[  232.998973][T10277] ipvlan2: entered allmulticast mode
[  233.010877][T10277] gretap0: entered allmulticast mode
[  233.155556][T10277] ip6t_srh: unknown srh invflags BA61
[  233.229099][T10286] netlink: 'syz.4.1074': attribute type 10 has an invalid length.
[  233.306909][T10287] tipc: Started in network mode
[  233.315311][T10287] tipc: Node identity a20f441b068f, cluster identity 4711
[  233.338183][T10287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.384280][T10287] syzkaller0: entered promiscuous mode
[  233.392118][T10287] syzkaller0: entered allmulticast mode
[  233.433798][T10287] tipc: Resetting bearer <eth:syzkaller0>
[  233.461286][T10284] tipc: Resetting bearer <eth:syzkaller0>
[  233.525728][T10284] tipc: Disabling bearer <eth:syzkaller0>
[  233.563157][T10296] vlan6: entered allmulticast mode
[  233.571937][T10296] bond0: entered allmulticast mode
[  233.580226][T10296] bond_slave_0: entered allmulticast mode
[  234.482167][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1086'.
[  236.110064][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'.
[  236.134190][T10364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1095'.
[  236.274272][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'.
[  236.417946][T10373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1098'.
[  236.484373][T10373] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1098'.
[  236.536300][T10381] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1101'.
[  236.724080][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'.
[  236.823816][ T5645] block nbd2: Receive control failed (result -1)
[  237.582959][T10417] netlink: 'syz.3.1109': attribute type 49 has an invalid length.
[  237.748551][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'.
[  237.887171][T10417] ip6gretap0: entered promiscuous mode
[  237.906906][T10417] ip6gretap0: entered allmulticast mode
[  238.463210][T10435] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1111'.
[  238.684882][T10450] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  238.723231][T10450] 
[  238.725643][T10450] ======================================================
[  238.732866][T10450] WARNING: possible circular locking dependency detected
[  238.740007][T10450] syzkaller #0 Not tainted
[  238.743111][T10451] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  238.744441][T10450] ------------------------------------------------------
[  238.744452][T10450] syz.1.1111/10450 is trying to acquire lock:
[  238.744466][T10450] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0
[  238.776728][T10450] 
[  238.776728][T10450] but task is already holding lock:
[  238.784127][T10450] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  238.793577][T10450] 
[  238.793577][T10450] which lock already depends on the new lock.
[  238.793577][T10450] 
[  238.804006][T10450] 
[  238.804006][T10450] the existing dependency chain (in reverse order) is:
[  238.813039][T10450] 
[  238.813039][T10450] -> #10 (&root->kernfs_rwsem){++++}-{4:4}:
[  238.821147][T10450]        down_write+0x96/0x200
[  238.825926][T10450]        kernfs_add_one+0x41/0x5c0
[  238.831053][T10450]        kernfs_create_dir_ns+0xde/0x130
[  238.836705][T10450]        internal_create_group+0x425/0x1180
[  238.842608][T10450]        cpuhp_invoke_callback+0x445/0x860
[  238.848529][T10450]        cpuhp_issue_call+0x430/0x7a0
[  238.853918][T10450]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  238.860522][T10450]        __cpuhp_setup_state+0x3f/0x60
[  238.865985][T10450]        do_one_initcall+0x250/0x870
[  238.871369][T10450]        do_initcall_level+0x104/0x190
[  238.876844][T10450]        do_initcalls+0x59/0xa0
[  238.881703][T10450]        kernel_init_freeable+0x2a6/0x3e0
[  238.887521][T10450]        kernel_init+0x1d/0x1d0
[  238.892380][T10450]        ret_from_fork+0x514/0xb70
[  238.897504][T10450]        ret_from_fork_asm+0x1a/0x30
[  238.902804][T10450] 
[  238.902804][T10450] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}:
[  238.910634][T10450] 
[  238.910634][T10450] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  238.918806][T10450]        cpus_read_lock+0x42/0x160
[  238.923922][T10450]        static_key_slow_inc+0x12/0x30
[  238.929388][T10450]        ipv6_flowlabel_opt+0x1b94/0x28e0
[  238.935125][T10450]        do_ipv6_setsockopt+0xd9f/0x3150
[  238.940780][T10450]        ipv6_setsockopt+0x59/0x170
[  238.946070][T10450]        do_sock_setsockopt+0x17c/0x1b0
[  238.951720][T10450]        __x64_sys_setsockopt+0x13d/0x1b0
[  238.957626][T10450]        do_syscall_64+0x15f/0xf80
[  238.962917][T10450]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.969337][T10450] 
[  238.969337][T10450] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  238.977077][T10450]        lock_sock_nested+0x41/0x100
[  238.982545][T10450]        inet_shutdown+0x6a/0x390
[  238.987578][T10450]        nbd_mark_nsock_dead+0x2e9/0x560
[  238.993219][T10450]        recv_work+0x1c2e/0x1d40
[  238.998524][T10450]        process_scheduled_works+0xb5d/0x1860
[  239.004634][T10450]        worker_thread+0xa53/0xfc0
[  239.009751][T10450]        kthread+0x388/0x470
[  239.014350][T10450]        ret_from_fork+0x514/0xb70
[  239.019466][T10450]        ret_from_fork_asm+0x1a/0x30
[  239.024756][T10450] 
[  239.024756][T10450] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  239.032412][T10450]        __mutex_lock+0x1a3/0x1550
[  239.037533][T10450]        nbd_queue_rq+0x37b/0x1100
[  239.042653][T10450]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  239.048737][T10450]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  239.055689][T10450]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  239.062212][T10450]        blk_mq_run_hw_queue+0x348/0x4f0
[  239.067882][T10450]        blk_mq_dispatch_list+0xd16/0xe10
[  239.073646][T10450]        blk_mq_flush_plug_list+0x48d/0x570
[  239.079583][T10450]        __blk_flush_plug+0x3ed/0x4d0
[  239.085081][T10450]        __submit_bio+0x28d/0x580
[  239.090217][T10450]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  239.096413][T10450]        block_read_full_folio+0x599/0x830
[  239.102246][T10450]        filemap_read_folio+0x137/0x3b0
[  239.107828][T10450]        do_read_cache_folio+0x358/0x590
[  239.113489][T10450]        read_part_sector+0xb6/0x2b0
[  239.118788][T10450]        adfspart_check_ICS+0xb1/0x960
[  239.124361][T10450]        bdev_disk_changed+0x817/0x1770
[  239.129939][T10450]        blkdev_get_whole+0x380/0x510
[  239.135331][T10450]        bdev_open+0x31e/0xd30
[  239.140113][T10450]        blkdev_open+0x470/0x610
[  239.145060][T10450]        do_dentry_open+0x785/0x14e0
[  239.150372][T10450]        vfs_open+0x3b/0x340
[  239.154986][T10450]        path_openat+0x2e08/0x3860
[  239.160126][T10450]        do_file_open+0x23e/0x4a0
[  239.165171][T10450]        do_sys_openat2+0x113/0x200
[  239.170377][T10450]        __x64_sys_openat+0x138/0x170
[  239.175758][T10450]        do_syscall_64+0x15f/0xf80
[  239.180874][T10450]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.187289][T10450] 
[  239.187289][T10450] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  239.194511][T10450]        __mutex_lock+0x1a3/0x1550
[  239.199629][T10450]        nbd_queue_rq+0xc6/0x1100
[  239.204662][T10450]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  239.210743][T10450]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  239.217604][T10450]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  239.224134][T10450]        blk_mq_run_hw_queue+0x348/0x4f0
[  239.229777][T10450]        blk_mq_dispatch_list+0xd16/0xe10
[  239.235602][T10450]        blk_mq_flush_plug_list+0x48d/0x570
[  239.241598][T10450]        __blk_flush_plug+0x3ed/0x4d0
[  239.247073][T10450]        __submit_bio+0x28d/0x580
[  239.252198][T10450]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  239.258451][T10450]        block_read_full_folio+0x599/0x830
[  239.264358][T10450]        filemap_read_folio+0x137/0x3b0
[  239.270039][T10450]        do_read_cache_folio+0x358/0x590
[  239.275693][T10450]        read_part_sector+0xb6/0x2b0
[  239.281006][T10450]        adfspart_check_ICS+0xb1/0x960
[  239.286477][T10450]        bdev_disk_changed+0x817/0x1770
[  239.292040][T10450]        blkdev_get_whole+0x380/0x510
[  239.297423][T10450]        bdev_open+0x31e/0xd30
[  239.302197][T10450]        blkdev_open+0x470/0x610
[  239.307226][T10450]        do_dentry_open+0x785/0x14e0
[  239.312548][T10450]        vfs_open+0x3b/0x340
[  239.317249][T10450]        path_openat+0x2e08/0x3860
[  239.322464][T10450]        do_file_open+0x23e/0x4a0
[  239.327502][T10450]        do_sys_openat2+0x113/0x200
[  239.332793][T10450]        __x64_sys_openat+0x138/0x170
[  239.338194][T10450]        do_syscall_64+0x15f/0xf80
[  239.343330][T10450]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.349784][T10450] 
[  239.349784][T10450] -> #4 (set->srcu){.+.+}-{0:0}:
[  239.357010][T10450]        __synchronize_srcu+0xca/0x300
[  239.362567][T10450]        elevator_switch+0x1e8/0x7a0
[  239.367870][T10450]        elevator_change+0x2cc/0x450
[  239.373263][T10450]        elevator_set_default+0x36c/0x430
[  239.379005][T10450]        blk_register_queue+0x3e9/0x4e0
[  239.384555][T10450]        __add_disk+0x677/0xd50
[  239.389416][T10450]        add_disk_fwnode+0xfb/0x480
[  239.394890][T10450]        nbd_dev_add+0x72c/0xb50
[  239.399932][T10450]        nbd_init+0x168/0x1f0
[  239.404732][T10450]        do_one_initcall+0x250/0x870
[  239.410469][T10450]        do_initcall_level+0x104/0x190
[  239.415950][T10450]        do_initcalls+0x59/0xa0
[  239.420819][T10450]        kernel_init_freeable+0x2a6/0x3e0
[  239.426644][T10450]        kernel_init+0x1d/0x1d0
[  239.431509][T10450]        ret_from_fork+0x514/0xb70
[  239.436641][T10450]        ret_from_fork_asm+0x1a/0x30
[  239.441958][T10450] 
[  239.441958][T10450] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  239.449887][T10450]        __mutex_lock+0x1a3/0x1550
[  239.455010][T10450]        elevator_change+0x1b3/0x450
[  239.460313][T10450]        elevator_set_none+0xb5/0x140
[  239.465809][T10450]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  239.472143][T10450]        nbd_start_device+0x17f/0xb10
[  239.477614][T10450]        nbd_genl_connect+0x165b/0x1cf0
[  239.483250][T10450]        genl_family_rcv_msg_doit+0x22a/0x330
[  239.489673][T10450]        genl_rcv_msg+0x61c/0x7a0
[  239.494709][T10450]        netlink_rcv_skb+0x232/0x4b0
[  239.500033][T10450]        genl_rcv+0x28/0x40
[  239.504572][T10450]        netlink_unicast+0x75c/0x8e0
[  239.509890][T10450]        netlink_sendmsg+0x813/0xb40
[  239.515210][T10450]        ____sys_sendmsg+0x972/0x9f0
[  239.520522][T10450]        ___sys_sendmsg+0x2a5/0x360
[  239.525928][T10450]        __x64_sys_sendmsg+0x1bd/0x2a0
[  239.531501][T10450]        do_syscall_64+0x15f/0xf80
[  239.536625][T10450]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.543220][T10450] 
[  239.543220][T10450] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  239.552194][T10450]        blk_alloc_queue+0x546/0x680
[  239.557586][T10450]        __blk_mq_alloc_disk+0x197/0x390
[  239.563249][T10450]        nbd_dev_add+0x499/0xb50
[  239.568474][T10450]        nbd_init+0x168/0x1f0
[  239.573173][T10450]        do_one_initcall+0x250/0x870
[  239.578477][T10450]        do_initcall_level+0x104/0x190
[  239.583954][T10450]        do_initcalls+0x59/0xa0
[  239.588831][T10450]        kernel_init_freeable+0x2a6/0x3e0
[  239.594591][T10450]        kernel_init+0x1d/0x1d0
[  239.599473][T10450]        ret_from_fork+0x514/0xb70
[  239.604706][T10450]        ret_from_fork_asm+0x1a/0x30
[  239.610265][T10450] 
[  239.610265][T10450] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  239.617483][T10450]        fs_reclaim_acquire+0x71/0x100
[  239.622959][T10450]        kmem_cache_alloc_noprof+0x40/0x650
[  239.628862][T10450]        __kernfs_iattrs+0xdf/0x320
[  239.634118][T10450]        kernfs_iop_setattr+0xea/0x3f0
[  239.640117][T10450]        notify_change+0xc1a/0xf40
[  239.645233][T10450]        do_truncate+0x1c2/0x250
[  239.650184][T10450]        path_openat+0x2f89/0x3860
[  239.655304][T10450]        do_file_open+0x23e/0x4a0
[  239.660460][T10450]        do_sys_openat2+0x113/0x200
[  239.665702][T10450]        __x64_sys_openat+0x138/0x170
[  239.671109][T10450]        do_syscall_64+0x15f/0xf80
[  239.676320][T10450]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.682937][T10450] 
[  239.682937][T10450] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  239.691660][T10450]        __lock_acquire+0x15a5/0x2cf0
[  239.697329][T10450]        lock_acquire+0x106/0x350
[  239.702380][T10450]        down_write+0x96/0x200
[  239.707166][T10450]        kernfs_link_sibling+0x4ed/0x5c0
[  239.712993][T10450]        kernfs_add_one+0x1ca/0x5c0
[  239.718555][T10450]        kernfs_create_dir_ns+0xde/0x130
[  239.724196][T10450]        sysfs_create_dir_ns+0x12f/0x2a0
[  239.730007][T10450]        kobject_add_internal+0x62b/0xd00
[  239.735861][T10450]        kobject_add+0x163/0x240
[  239.740852][T10450]        device_add+0x408/0xbb0
[  239.745731][T10450]        device_create_with_groups+0x26a/0x300
[  239.752061][T10450]        led_classdev_register_ext+0x4be/0x9c0
[  239.758248][T10450]        input_leds_connect+0x517/0x790
[  239.763818][T10450]        input_register_device+0xce0/0x1140
[  239.769725][T10450]        hidp_session_probe+0x1a5/0x890
[  239.775284][T10450]        l2cap_register_user+0xc2/0x1d0
[  239.780863][T10450]        hidp_connection_add+0x1579/0x1a10
[  239.786849][T10450]        hidp_sock_ioctl+0x403/0x650
[  239.792144][T10450]        sock_do_ioctl+0x101/0x320
[  239.797359][T10450]        sock_ioctl+0x5c6/0x7f0
[  239.802241][T10450]        __se_sys_ioctl+0xfc/0x170
[  239.807387][T10450]        do_syscall_64+0x15f/0xf80
[  239.812606][T10450]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.819114][T10450] 
[  239.819114][T10450] other info that might help us debug this:
[  239.819114][T10450] 
[  239.829349][T10450] Chain exists of:
[  239.829349][T10450]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  239.829349][T10450] 
[  239.843802][T10450]  Possible unsafe locking scenario:
[  239.843802][T10450] 
[  239.851265][T10450]        CPU0                    CPU1
[  239.856828][T10450]        ----                    ----
[  239.862192][T10450]   lock(&root->kernfs_rwsem);
[  239.867064][T10450]                                lock(cpuhp_state_mutex);
[  239.874184][T10450]                                lock(&root->kernfs_rwsem);
[  239.881690][T10450]   lock(&root->kernfs_iattr_rwsem);
[  239.887036][T10450] 
[  239.887036][T10450]  *** DEADLOCK ***
[  239.887036][T10450] 
[  239.895301][T10450] 5 locks held by syz.1.1111/10450:
[  239.900520][T10450]  #0: ffff88803655aaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_register_user+0x35/0x1d0
[  239.910403][T10450]  #1: ffffffff8ff7da88 (hidp_session_sem){++++}-{4:4}, at: hidp_session_probe+0x98/0x890
[  239.920555][T10450]  #2: ffffffff8f84b760 (input_mutex){+.+.}-{4:4}, at: input_register_device+0xa56/0x1140
[  239.930525][T10450]  #3: ffff8880346102f0 (&led_cdev->led_access){+.+.}-{4:4}, at: led_classdev_register_ext+0x484/0x9c0
[  239.941633][T10450]  #4: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  239.951497][T10450] 
[  239.951497][T10450] stack backtrace:
[  239.957848][T10450] CPU: 0 UID: 0 PID: 10450 Comm: syz.1.1111 Not tainted syzkaller #0 PREEMPT(full) 
[  239.957875][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  239.957885][T10450] Call Trace:
[  239.957895][T10450]  <TASK>
[  239.957904][T10450]  dump_stack_lvl+0xe8/0x150
[  239.957928][T10450]  print_circular_bug+0x2e1/0x300
[  239.957952][T10450]  check_noncircular+0x12e/0x150
[  239.957976][T10450]  __lock_acquire+0x15a5/0x2cf0
[  239.957995][T10450]  ? __lock_acquire+0x6b5/0x2cf0
[  239.958016][T10450]  ? kernfs_link_sibling+0x4ed/0x5c0
[  239.958038][T10450]  lock_acquire+0x106/0x350
[  239.958054][T10450]  ? kernfs_link_sibling+0x4ed/0x5c0
[  239.958080][T10450]  down_write+0x96/0x200
[  239.958098][T10450]  ? kernfs_link_sibling+0x4ed/0x5c0
[  239.958120][T10450]  ? __pfx_down_write+0x10/0x10
[  239.958136][T10450]  ? kernfs_root+0x1c/0x230
[  239.958156][T10450]  ? kernfs_root+0x1c/0x230
[  239.958175][T10450]  ? kernfs_root+0x1ea/0x230
[  239.958195][T10450]  kernfs_link_sibling+0x4ed/0x5c0
[  239.958220][T10450]  kernfs_add_one+0x1ca/0x5c0
[  239.958242][T10450]  kernfs_create_dir_ns+0xde/0x130
[  239.958266][T10450]  sysfs_create_dir_ns+0x12f/0x2a0
[  239.958286][T10450]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  239.958305][T10450]  ? do_raw_spin_unlock+0xf5/0x210
[  239.958329][T10450]  kobject_add_internal+0x62b/0xd00
[  239.958358][T10450]  kobject_add+0x163/0x240
[  239.958376][T10450]  ? __pfx_kobject_add+0x10/0x10
[  239.958393][T10450]  ? _raw_spin_unlock+0x28/0x50
[  239.958415][T10450]  ? get_device_parent+0x366/0x3a0
[  239.958435][T10450]  device_add+0x408/0xbb0
[  239.958453][T10450]  device_create_with_groups+0x26a/0x300
[  239.958472][T10450]  ? led_classdev_register_ext+0x484/0x9c0
[  239.958497][T10450]  ? __pfx___mutex_lock+0x10/0x10
[  239.958512][T10450]  ? class_find_device+0x30a/0x380
[  239.958535][T10450]  ? __pfx_device_match_name+0x10/0x10
[  239.958556][T10450]  ? __pfx_device_create_with_groups+0x10/0x10
[  239.958580][T10450]  led_classdev_register_ext+0x4be/0x9c0
[  239.958605][T10450]  ? __pfx_led_classdev_register_ext+0x10/0x10
[  239.958635][T10450]  ? input_open_device+0x2ce/0x3b0
[  239.958660][T10450]  input_leds_connect+0x517/0x790
[  239.958687][T10450]  input_register_device+0xce0/0x1140
[  239.958714][T10450]  hidp_session_probe+0x1a5/0x890
[  239.958732][T10450]  ? l2cap_register_user+0x35/0x1d0
[  239.958749][T10450]  ? __pfx_hidp_session_probe+0x10/0x10
[  239.958769][T10450]  ? __init_waitqueue_head+0xa9/0x150
[  239.958795][T10450]  l2cap_register_user+0xc2/0x1d0
[  239.958810][T10450]  ? hidp_connection_add+0x1565/0x1a10
[  239.958829][T10450]  hidp_connection_add+0x1579/0x1a10
[  239.958850][T10450]  hidp_sock_ioctl+0x403/0x650
[  239.958871][T10450]  ? __pfx_hidp_sock_ioctl+0x10/0x10
[  239.958904][T10450]  ? do_vfs_ioctl+0x1166/0x1530
[  239.958932][T10450]  sock_do_ioctl+0x101/0x320
[  239.958951][T10450]  ? __pfx_sock_do_ioctl+0x10/0x10
[  239.958967][T10450]  ? do_futex+0x395/0x420
[  239.958990][T10450]  sock_ioctl+0x5c6/0x7f0
[  239.959007][T10450]  ? __pfx_sock_ioctl+0x10/0x10
[  239.959023][T10450]  ? __fget_files+0x2a/0x420
[  239.959041][T10450]  ? __fget_files+0x3a0/0x420
[  239.959060][T10450]  ? __fget_files+0x2a/0x420
[  239.959079][T10450]  ? bpf_lsm_file_ioctl+0x9/0x20
[  239.959105][T10450]  ? __pfx_sock_ioctl+0x10/0x10
[  239.959121][T10450]  __se_sys_ioctl+0xfc/0x170
[  239.959144][T10450]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.959161][T10450]  do_syscall_64+0x15f/0xf80
[  239.959175][T10450]  ? trace_irq_disable+0x3b/0x140
[  239.959199][T10450]  ? clear_bhb_loop+0x40/0x90
[  239.959216][T10450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.959232][T10450] RIP: 0033:0x7fae0f79cdd9
[  239.959247][T10450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.959261][T10450] RSP: 002b:00007fae0d9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.959280][T10450] RAX: ffffffffffffffda RBX: 00007fae0fa16090 RCX: 00007fae0f79cdd9
[  239.959292][T10450] RDX: 0000200000000400 RSI: 00000000400448c8 RDI: 000000000000000a
[  239.959302][T10450] RBP: 00007fae0f832d69 R08: 0000000000000000 R09: 0000000000000000
[  239.959312][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.959322][T10450] R13: 00007fae0fa16128 R14: 00007fae0fa16090 R15: 00007ffe128d9d28
[  239.959346][T10450]  </TASK>