last executing test programs:

2.133532694s ago: executing program 1 (id=1550):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r3, 0x0, r2, 0x0, 0xea8, 0xa)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x14, 0x4, 0x70bd29, 0x25dfdbfb, {0x21, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "4233bb7368ed4192828c2f6529d6abb627e1b5eb7c5ac4a5e678cd49578ad9eeac00980a28f28a0a2a660c20403de821e910c73903ac46fff335712bcf7af45dbd5a5835bcc7905c"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20004000)
ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00')
r4 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0x7, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6}]}, 0x34}}, 0x20000000)

2.131257753s ago: executing program 1 (id=1552):
r0 = socket(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', r2, 0x40, 0x40, 0x0, 0xda18, {{0xc, 0x4, 0x0, 0x12, 0x30, 0x67, 0x0, 0x0, 0x2f, 0x0, @local, @empty, {[@noop, @timestamp={0x44, 0x18, 0x8a, 0x0, 0x9, [0x2, 0x1, 0x3, 0x0, 0x2]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', <r3=>r2, 0x40, 0x40, 0x0, 0xda18, {{0xc, 0x4, 0x0, 0x12, 0x30, 0x67, 0x0, 0x0, 0x2f, 0x0, @local, @empty, {[@noop, @timestamp={0x44, 0x18, 0x8a, 0x0, 0x9, [0x2, 0x1, 0x3, 0x0, 0x2]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', r3, 0x20, 0x7, 0x1, 0xfffffffb, {{0x34, 0x4, 0x3, 0xb, 0xd0, 0x68, 0x0, 0xaf, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_prespec={0x44, 0x3c, 0x85, 0x3, 0x0, [{@empty, 0xffff}, {@multicast2, 0x8}, {@loopback, 0x8}, {@loopback, 0x8c56}, {@multicast1, 0x4}, {@empty, 0xa}, {@multicast2, 0xffff3769}]}, @end, @timestamp_addr={0x44, 0x2c, 0x9d, 0x1, 0x0, [{@private=0xa010100, 0x93}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xfffeffff}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010100, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @generic={0x88, 0x3, "c4"}, @generic={0x83, 0xb, "22b05c12d2bbb4c6bf"}, @generic={0x82, 0xc, "76bca916bbc1ffd38535"}, @timestamp_addr={0x44, 0x14, 0x9b, 0x1, 0xb, [{@private=0xa010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4}]}, @rr={0x7, 0x23, 0xbb, [@local, @dev={0xac, 0x14, 0x14, 0x3c}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}]}, @noop]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x24000000)

1.937800371s ago: executing program 1 (id=1555):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001000000008000900000002001800018014000200776c616e31"], 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001140)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x28, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f9b7b5acfe1e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1}, {0xfff5, 0x10}, {0xd, 0x8}}, ["", "", ""]}, 0x24}}, 0x20000000)

1.722879474s ago: executing program 1 (id=1559):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000003c00010000000800000000000100000004000000100001800c00108004000b800400e3000c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00183c00fe880000000000000000000000000001ff020000000000000000000000000001880000000000010000000000000290"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000033"], 0xfdef)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0))
select(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x8840)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xfff2}, {0xd, 0xb}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x1ff, 0x9, 0x2, 0x7ff, 0x401, 0x2}}, {0x8, 0x2, [0x6, 0x9]}}, {{0x1c, 0x1, {0x1, 0x3, 0xfffb, 0xfffffffc, 0x2, 0x3, 0x0, 0x5}}, {0xe, 0x2, [0x5, 0x8, 0x6c, 0x4, 0x6]}}, {{0x1c, 0x1, {0x15, 0x0, 0x9, 0x1, 0x0, 0x200, 0x6}}, {0x4}}, {{0x1c, 0x1, {0xf7, 0xe, 0x9c0, 0x6, 0x0, 0x3, 0x8, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0x3, 0x0, 0x4, 0x8]}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a000000000721eb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500243209880bd320d98a61a90021e9bf", 0x0, 0x401, 0x44000000, 0x0, 0xa6, 0x0, &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd, 0x2}, 0x50)
r10 = socket(0x10, 0x3, 0x6)
r11 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040))
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@gettaction={0x0, 0x32, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@action_dump_flags, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x81}}, {0x0, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xffffffff}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xffffffff}}, {0x0, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}]}, @action_dump_flags]}, 0x90}}, 0x20000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf25030000000c00050005000000000000000a000a006e6574656d0000000c0005000b000000000000000c00050001000000000000000c000400060000000000000005000ae9f27012d2c8503271616c574400000000000c00040051f676ffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

1.198285634s ago: executing program 2 (id=1565):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1c176bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f60109af93a09fab1daae4b518d7a5d95a017864487367d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5ce4ba01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe449678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a6a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b535aed87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf31523d753cf27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e72daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981b90d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000000000000000000000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b2647726795617a9d170000000000000000000000000767003cacbcd49d0f7ba330f3b788ad4cf448e89c48c32915b1c356e3814621f166d55edb985cb1c3224652996c492c6249af22aa673ddf67d75325652cc6d74b00df9cc0012bc725b168c3aab1c7f2303ad6d54a612d7f9791a49b582c2b982423d837ac2e74aa1cde817adc1b24f1b2b6b9d0af28522b14b22359f89f836860811dddc56d303b057e6d81b0a87a5c99279e57c4b297919b478fae9526354e15f1d56dfe9334eaf44955ff81bb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)
r3 = socket(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000003c0)={0x9, 0xa, 0x3}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000001c0)={<r6=>r3, 0x10001, 0xbdd, 0x5})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e00010a030000000000000007000000ce642a8e32e88d096d156f58f85197d1efbc6400458a930ef01099c66dd0c833fa3720a38a7d416971b620f1c7f95c8bee5f0645e6f65fdea907da7ed21dfb7d7371023944228fe06a8792e813cdb004655430901536dce9b820ad55c706ec31c2148baa7925d1a778fd44fbeca1cdfb4be2b9c4d7c2e6e9dcc7ff447c40632e2838688db33b4c2edcde831995d301fc7456e8a5d84b09ca68f089d43b8bf24c4eefe7"], 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '-,%@.'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000040)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip_vti0\x00', <r8=>0x0, 0x8000, 0x8000, 0x10001, 0x8, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x66, 0x0, 0x4, 0x481ccd5bcc4c6f0a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xbd, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @broadcast]}]}}}}})
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0xf}, @remote, r8}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0x6, 0x2, 0x5, 0x0, 0x1, 0x1000, 0xfffffff7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)

1.051412325s ago: executing program 2 (id=1566):
r0 = socket(0x10, 0x3, 0x6) (async)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) (async)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6)
r5 = socket(0x10, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001180), r5)
sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r6, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) (async)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}}]}, 0x88}}, 0x20000000)

1.0448081s ago: executing program 2 (id=1567):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r5=>0x0})
sendmsg$can_raw(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0)
recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0x6, 0x2, 0x5, 0x0, 0x1, 0x1000, 0xfffffff7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)

970.125001ms ago: executing program 2 (id=1568):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000003c00010000000800000000000100000004000000100001800c00108004000b800400e3000c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00183c00fe880000000000000000000000000001ff020000000000000000000000000001880000000000010000000000000290"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0))
select(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x8840)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xfff2}, {0xd, 0xb}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x1ff, 0x9, 0x2, 0x7ff, 0x401, 0x2}}, {0x8, 0x2, [0x6, 0x9]}}, {{0x1c, 0x1, {0x1, 0x3, 0xfffb, 0xfffffffc, 0x2, 0x3, 0x0, 0x5}}, {0xe, 0x2, [0x5, 0x8, 0x6c, 0x4, 0x6]}}, {{0x1c, 0x1, {0x15, 0x0, 0x9, 0x1, 0x0, 0x200, 0x6}}, {0x4}}, {{0x1c, 0x1, {0xf7, 0xe, 0x9c0, 0x6, 0x0, 0x3, 0x8, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0x3, 0x0, 0x4, 0x8]}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a000000000721eb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500243209880bd320d98a61a90021e9bf", 0x0, 0x401, 0x44000000, 0x0, 0xa6, 0x0, &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd, 0x2}, 0x50)
r8 = socket(0x10, 0x3, 0x6)
r9 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf25030000000c00050005000000000000000a000a006e6574656d0000000c0005000b000000000000000c00050001000000000000000c000400060000000000000005000ae9f27012d2c8503271616c574400000000000c00040051f676ffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="1e7c0d88a7d9053cc3dc8f859f8571bf1818faac6968e58a8a0fcc0ed3ffa05768edd68243fe4095f350979429da2d61fb6767d0fc93747f03138497379a667ebc", 0x41}, {&(0x7f0000000380)="b0c31eeae3efb1fc02e656b4bf56f961e839298e9e47d155189cdfb2ce2e7e6ba8168c2060a9add2c9fda249b1f6f6c82b2f6a70304289152d302bf64c6f7d9958d33edbfcbcb148b2a0", 0x4a}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x358}, 0x240000d0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)

850.281462ms ago: executing program 1 (id=1569):
r0 = socket(0x10, 0x3, 0x6) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280080001400000000005000200fc000000240001800b000100736f636b6574000014000280080002400000000a080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xfc}}, 0x0)
r2 = socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xb, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)

760.551115ms ago: executing program 1 (id=1571):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @default}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240))
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x140, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x110, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x1033}, @TCA_CHOKE_STAB={0x104, 0x2, "5425459381a14d2fa6fe807572b45a0067bbfc82c8730b3c67fe1083b55b576de3fa606f29168d216f356dfea0087aa9ea5db5605f95e68e881fc4fe29afcb172c43eef3af9259eeff9293c3dedcb66ac3f5b8535555dfb7b8a4948353e7c8eb2a6b9956d93462dffd8b2e01175a8b586e9e07034c1e99673e667941eba3633963709e56e8941928629e123eec408813ba7249ee680bef98e9f70635b3aa663c84c771b8594069f6a2d809c80475c5d5a3521f9bd5b9d17708f67c9b0926dd2412ef471376e704f0f5023c934b4401b321a05c8fff67f1a353948b3669e2fea16f78960da8e8e54e4dff72d26e910bc7c9ea07095b8534b3dcafae64b6c7c838"}]}}]}, 0x140}}, 0x0)

409.258078ms ago: executing program 0 (id=1576):
connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000005c0)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/220, 0xdc}], 0x6}, 0x80000002}], 0x4, 0x40000000, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

408.265783ms ago: executing program 0 (id=1577):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 32)
getsockopt$sock_buf(r1, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r5, &(0x7f0000000340)="0a000300010000", 0x7) (async, rerun: 32)
setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x9, 0x4) (async, rerun: 32)
recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x24008050) (async)
sendmsg$nl_route(r2, 0x0, 0x0) (async)
sendmmsg$inet6(r0, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) (async, rerun: 32)
shutdown(r0, 0x1) (rerun: 32)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x4}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r9=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="200028b1ac2ebd7000fbdbdf252700000008000300", @ANYRES32=r9, @ANYBLOB="0b002a0003018806020f000029012a003e0102bd06ffffffffffff040610f1a0d2040075160000010002006d28195861d8fb2e14cee70542ee1926375706012bfe204e9197e4151e154e65168a510e10214a33e259336bb1873c8ebf6695b8b505e9492bf9034315abb9d12b65bdff431dc5dec8a622be6f9da731715e75b8e5e943342ba00deba66e6fc951e8d3860203696670dd5972c3d36a30d6a3d6b75663d98a392a08665e3ed287c316660859d34622da934b952dab17aff9161d512800c9a16f445ec8ecec2aa5731368652722fc414ffe2b90206e01349583f001c1a248e7c48dc5fc72ffe2ee7a3a8c0903010882414201020900000008021100000007000000ffffffffffff05000000010400000301080211000000ff7f0000050802110000010500000004ffffffffffff010000000000000a0006005050505050500000"], 0x160}, 0x1, 0x0, 0x0, 0x44}, 0x80) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002dfa12184e757f653d941ab4769ef2a3b1be75a43f721aa8f0e329e8a2a24024e750b56735a3e9fb27e43735603c45176191f54fd6"], 0x48)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x28011, r10, 0xffffffffffffc000)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r11=>r0, 0x80, 0x18, 0xc})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x1, 0x8, 0xfff, 0x40000, r10, 0x30d8, '\x00', r7, r11, 0x3, 0x4, 0x3}, 0x50)

321.11798ms ago: executing program 0 (id=1578):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, 0x0, 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x108, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000080), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0xff, 0xff0000ff, 0x7, 0x8, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xb80, 0x4, 0x10af, 0x6, 0xdb4, 0x271, 'batadv0\x00', 'veth1_to_bond\x00', {0xff}, {0x101}, 0x0, 0x142}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000, 'syz1\x00', {0x5}}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0xff000000, 0x2, 0xb, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x4, 0xd, 0x7, 0x8, 0x7f, 0x1, 'geneve0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x31a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @private=0xa010101, @multicast2, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@multicast, @private=0xa010100, @private=0xa010102, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) (async)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x108, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000080), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0xff, 0xff0000ff, 0x7, 0x8, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xb80, 0x4, 0x10af, 0x6, 0xdb4, 0x271, 'batadv0\x00', 'veth1_to_bond\x00', {0xff}, {0x101}, 0x0, 0x142}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000, 'syz1\x00', {0x5}}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0xff000000, 0x2, 0xb, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x4, 0xd, 0x7, 0x8, 0x7f, 0x1, 'geneve0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x31a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @private=0xa010101, @multicast2, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@multicast, @private=0xa010100, @private=0xa010102, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460)
socket$kcm(0x10, 0x2, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$tipc(0x1e, 0x5, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
close(r5) (async)
close(r5)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async)
setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xc6, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x27, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @empty, @rand_addr=0x640100fe, {[@cipso={0x86, 0x7f, 0x1, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0x12, "00000040008000010f5051d6354c30c2"}, {0x0, 0x12, "73bc23f9ffffff810900a301c84600eb"}, {0x1, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
socket$kcm(0x2, 0xa, 0x2) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xfff3, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x2, 0x2, 0x8, 0x5, 0xa, 0xf, 0x9, 0x2, 0x2, 0x5, 0x1, 0x1, 0x9, 0x4, 0x9], 0x0, [0x3, 0xbbe, 0xff, 0x34, 0x3, 0x6, 0x6, 0x3, 0x9, 0xe4c, 0x9, 0x4, 0x1, 0x7, 0x7, 0x1], [0x2, 0xd, 0x5, 0x46b9, 0x1c0, 0xa, 0x1, 0x0, 0x0, 0x400, 0x5, 0x3, 0x7, 0x0, 0x4, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc021}, 0x4008000)

210.728605ms ago: executing program 0 (id=1579):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x6, 0xaec, [0x0, 0x200000002240, 0x2000000025d4, 0x200000002968], 0x0, 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff02000000050000001200000089066272696467655f736c6176655f31000070696d726567000000000000000000006e696376663000000000000000000000726f73653000000000000000000000000180c20000010000ffffffff95c7e148e66df4ff000000006e0000009e000000ee000000434c415353494659000000000000000000000000000000000000000000000000080000000000000003000000000000006c6f6700000000000000000000000000000000000000000000000000000000002800000000000000000c3f5f95ea0a27847552dd2e109e4000606bbc4dfd6dff566449019b672a000e000000000000000900000002000000000070696d7265670000000000000000000070696d7265670000000000000000000076657468305f746f5f6873720000000076657468315f6d616376746170000000bbbbbbbbbbbbffffff00ffff42702b0b7b6e0000ff00ffff9e00000046020000760200006367726f75700000000000000000000000000000000000000000000000000000080000000000000008000000010000005345434d41524b00000000000000000000000000000000000000000000000000080900000000000001000000ffffff7f73797374656d5f753a6f626a6563745f723a6d6f64756c65735f636f6e665f743a733000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000000000001010900000000000af66a05d2619d7e2f280ddb1d7f154c681a54ceec6041d170eb2e573f59c9d06893f2194454e23a968026ff1670c591a1c682fc8ec9179d3fdbe443ccaf7f5a00000000434c4153534946590000000000000000000000000000000000000000000000000800000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000200000011000000120000005902766574683000000000000000000000006272696467653000000000000000000076657468305f746f5f7465616d00000076657468315f746f5f7465616d000000aaaaaaaaaaaa0000000000ffaaaaaaaaaabb00ffffff00ff6e0000006e0000009e0000004e4651554555450000000000000000000000000000000000000000000000000008000000000000000c00000000000000110000000c00000000196261746164765f736c6176655f3000006d6163766c616e300000000000000000767863616e31000000000000000000007465616d5f736c6176655f300000000000000000000000ff00ff00ffaaaaaaaaaabbff00ff000000ee0000004e020000c602000068656c706572000000000000000000000000000000000000000000000000000028000000000000000100000073616e652d323030303000000000000000000000000000000000000000000000000000003830325f33000000000000000000000000000000000000000000000000000000080000000000000000000010020600005345434d41524b00000000000000000000000000000000000000000000000000080100000000000001000000c20000002f7573722f7362696e2f637570732d62726f77736564000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000434c415353494659000000000000000000000000000000000000000000000000080000000000000007000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000040000000500000000000000b96e922d69a68f5cb0002625a7414f09b3e7dd2b56af8c384897a1b3e330b07af8733cdb20dd0859240de81a7af1f962b86f7c7a3df20bed26c3a2d13a50462d0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000feffffff0200000011000000640000000805677265300000000000000000000000006d6163766c616e3000000000000000007866726d300000000000000000000000776731000000000000000000000000000000000000000000ffff0000bbbbbbbbbbbb0000ffffff00e60000005e0100008e0200006c696d69740000000000000000000000000000000000000000000000000000002000000000000000210000000800000002000000000000007f1a3240080000000500000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000007000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000003040000000000000f000000000000004155444954000000000000000000000000000000000000000000000000000000080000000000000002000000000000005345434d41524b000000000000000000000000000000000000000000000000000801000000000000010000000500000073797374656d5f753a6f626a6563745f723a6170745f7661725f6c69625f743a73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000006000000886c76657468315f746f5f627269646765006873723000000000000000000000000076657468305f746f5f6873720000000070696d36726567300000000000000000bbbbbbbbbbbbd2ff00ffff00aaaaaaaaaaaaffff000000006e000000be0000000601000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000100000073797a3000000000000000000000000000000000000000000000000005000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3000000000000000000000000021010000000000000900000000000000"]}, 0xb64)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x98, 0x90, 0x130, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002b80)=@newtfilter={0x890, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffeb, 0xfff3}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x860, 0x2, [@TCA_FLOW_POLICE={0x854, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x7ed, 0xcbb, 0x0, 0x3, 0x10001, 0x7f0c, 0x67, 0xc, 0x7, 0x3ff, 0xffffffc0, 0x5, 0x180000, 0x18, 0x3, 0x9, 0xae6, 0x7, 0x401, 0x0, 0xc, 0xfff, 0x0, 0x4, 0x7, 0xc, 0xfffffeff, 0x6, 0xbd04, 0x8, 0x7, 0xd3, 0x1, 0x200, 0x6, 0x3, 0x5, 0x1, 0x9, 0x2, 0x3, 0x0, 0x60000000, 0x3, 0xb, 0x800, 0x10, 0x80000001, 0x2, 0x9, 0x65, 0x0, 0x5, 0x7, 0xd, 0x1000, 0x2, 0x80000001, 0x7f, 0xfffffffd, 0xc, 0x1000, 0x7fffffff, 0x1000, 0x9, 0xfffffff8, 0x734, 0x9, 0x4, 0x3, 0xfff, 0x9, 0x5, 0x3f6, 0x29, 0x10, 0xf0c6, 0x0, 0x3, 0x3, 0x7fffffff, 0x0, 0x81, 0x9, 0xffffffff, 0x5, 0x58, 0x0, 0x8, 0x4, 0x4, 0x2, 0x3, 0x0, 0x669, 0xfffffff7, 0x80, 0xff, 0x9, 0x100000, 0x5, 0x3, 0x80, 0x7fff, 0xffff, 0x6, 0x4, 0x2dc, 0x6, 0xfff, 0xaa, 0x1, 0x8, 0x6, 0x638, 0x7, 0x8, 0x6, 0x0, 0x5, 0x400, 0x800, 0x9, 0x2860, 0x5, 0x5, 0x3, 0x0, 0x7fff, 0x3, 0x21c74b7f, 0x2, 0x10000, 0x7ff, 0x7, 0x2, 0x5, 0x2, 0x200, 0xd, 0xffff, 0x0, 0x8, 0x2a94, 0x205, 0x1, 0x9, 0x4, 0x1, 0x5, 0x0, 0x3, 0x8, 0x7f, 0x85c, 0x8, 0x8, 0x10001, 0x400, 0x0, 0x6, 0x67239c77, 0xb, 0x8, 0x8, 0x7fff, 0xe04b, 0x4, 0x7fffffff, 0x3, 0x7, 0x4, 0x7, 0x3, 0x3, 0x2, 0x6, 0x9, 0xfff, 0x3, 0x2, 0x3ff, 0x2, 0xa2d0, 0x4, 0x5, 0x5, 0x1b0e, 0x1, 0x7f, 0xfffffff7, 0x7, 0x259, 0xffff, 0x1, 0x4, 0xda, 0x348, 0x7ff, 0x4, 0x5, 0x0, 0x8, 0x2, 0x0, 0x5, 0x1, 0xa, 0xffffffff, 0x46, 0x1, 0x9, 0xee9, 0x8, 0x6, 0xadf5, 0x88f, 0x2, 0x1000, 0x800, 0x4, 0xace00, 0x727, 0x401, 0x7fffffff, 0x9, 0xffffffff, 0x4, 0x2e3d0f5d, 0x2, 0x87, 0x8000, 0x1000, 0xc60a, 0xfffffb8f, 0xd6, 0xd8e, 0xfff, 0x9, 0x47e, 0x1, 0x8000, 0xec, 0x7, 0x0, 0x0, 0x7, 0xff, 0x9, 0x3b, 0x81, 0x5, 0x101, 0x10, 0xffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x1ff, 0x3, 0x1d7f6b27, 0x514, 0x8, 0x5, 0x9, 0xfffffff7, 0x2, 0x2, 0xe, 0x3, 0x2, 0x1ff, 0x7, 0x7, 0x4, 0x4, 0x2, 0x1ff, 0x400, 0x401, 0x800, 0xfffffff9, 0x2, 0x401, 0x2, 0x7, 0x5, 0x2, 0x9, 0x80000000, 0x2, 0x5, 0x6, 0x7100000, 0x3, 0x3, 0x6, 0x7, 0x0, 0x9, 0x3, 0x3, 0x4, 0x79, 0x6b, 0x1, 0x7, 0x9, 0x3, 0xd523, 0xdbe, 0x80000001, 0x80, 0x5, 0x2, 0x2, 0x7, 0x28, 0xfffff187, 0x0, 0x0, 0x5, 0xfffffffa, 0x1571f67b, 0xffffff11, 0x2, 0x6, 0x0, 0x6, 0x3, 0x3, 0xa, 0xfd, 0x7, 0x9, 0x6, 0x947e, 0x1, 0x7, 0x2, 0x5, 0x2, 0xd3, 0xff, 0x5, 0x4, 0xc0, 0x7, 0x780, 0x5, 0x2, 0x8001, 0x31e, 0x3, 0x7fff, 0x402c8fe4, 0x3, 0x8, 0xfffffffa, 0xd15e, 0x7, 0x9, 0x0, 0x8, 0xde, 0x8001, 0x7, 0x2b5, 0x8, 0xd, 0x2, 0x8, 0xffffffff, 0x6, 0x200, 0x3, 0x2, 0x10, 0x6, 0x7, 0x7, 0x1, 0x3, 0x100, 0x9, 0x9, 0xb4, 0x3, 0x0, 0xf, 0xfffffe01, 0x3, 0xd, 0x1caeeccc, 0xb307, 0x5, 0x10000, 0x8, 0x6, 0x0, 0x793, 0x2, 0x8000, 0x1, 0x4, 0x5, 0x100, 0x4, 0x7fff, 0x2, 0x7, 0xf, 0xfffffff9, 0x1000000, 0x1, 0x7f2f, 0x2, 0x5, 0x2, 0x10001, 0x1ff, 0x4, 0x3, 0xd, 0x5, 0x1, 0x6, 0x3, 0x4, 0x3, 0x0, 0xff, 0x7ff, 0x4, 0x0, 0xffffffff, 0x200, 0x5, 0x3, 0x2, 0xd, 0xb, 0x4, 0x5, 0xd, 0x4, 0x1ff, 0x8, 0x2, 0x5, 0x2, 0x5, 0xf, 0x3, 0xe, 0xffffff0f, 0x9, 0x5, 0x1, 0x7, 0x5, 0x7, 0x5, 0x10001, 0x7f, 0x1ff, 0x1, 0x2, 0xc0000000, 0x1ff, 0x6b8, 0x5, 0x7, 0x9, 0x6, 0x3, 0x6, 0x3b, 0x1d, 0x6, 0x8001, 0xe, 0x81, 0x0, 0x800, 0x40, 0x74c, 0x8, 0x4, 0x4d4, 0x1, 0x3, 0x1, 0x2, 0x5, 0xee, 0x3, 0x5, 0x8000, 0xa, 0xfffffffa, 0x7, 0x2, 0x45, 0x8, 0x7, 0x328b, 0x25, 0x98, 0x1, 0x8, 0xffffffff, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x4, 0x2, 0x9, 0x0, {0x4, 0x0, 0x9, 0x4, 0x1, 0x437}, {0x3, 0x2, 0x7, 0x200, 0x9, 0x7a}, 0x6, 0x5, 0x3}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13a5}]}}]}, 0x890}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)={0x4, {{0x2, 0x4e20, @multicast2}}, 0x1, 0x5, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e24, @private=0xa010100}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @rand_addr=0x64010102}}]}, 0x310)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0)

88.11335ms ago: executing program 2 (id=1580):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x40000, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}]}]}, 0x2c}}, 0x0) (async)
r2 = socket(0x10, 0x3, 0x6)
r3 = socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0}) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x3, [@volatile={0xe, 0x0, 0x0, 0x9, 0x5}, @struct={0x7, 0x3, 0x0, 0x4, 0x1, 0x2088, [{0x7, 0x5, 0x8}, {0x2, 0x3, 0x5}, {0xe, 0x4, 0xf}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x9}}, @fwd={0xd}]}, {0x0, [0x30]}}, &(0x7f0000000240)=""/152, 0x8b, 0x98, 0x0, 0x7f, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8, 0x936, 0x28e8, 0x1, r3, 0x9, '\x00', r4, r5, 0x4, 0x1, 0x4, 0xa}, 0x50) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x24000000)

87.71338ms ago: executing program 0 (id=1581):
r0 = socket(0x11, 0x800000003, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x4c, r2, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x8000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x27)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffffffc}}}, 0xb8}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb4}}, 0x0)

682.542µs ago: executing program 2 (id=1582):
r0 = socket(0x11, 0x800000003, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_emit_ethernet(0x7c, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "5dba33", 0x0, 0x2f, 0xff, @empty, @mcast2, {[@routing={0x2f, 0x0, 0x2, 0xff, 0x0, [@mcast2, @remote, @private1, @loopback, @mcast1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x5], "20fb91ca1f6ef33bdb93220363731a6374b45c2b92acbb6200d6afdf874854c9bda7d1dcf9917df6c65145b30ae5aed29c8dc0e586d979777d0030852cfeee2ca98a7461018ea1e0c5f0721ca14791c3648cb19240c170eebe78f42d5f2c59ef098a7ede2c01b722375453f5498bbeebeb07258299730ea90948e1ce781c91017c14d37e1c9b12e5074063e4215b5a4be6892bd0939adbf3acb9ec21bda71711dd07a5a9512f14e30f729a9ad8c4e3e50f5ed75823df1ac42e33229ef75408002e3dd917d1a19e832e0b7bf4426ebf55ff58ffeb1ae17df948d6bb99584421601bbf5088a1733886b094b9720cdf4a5df82ac4f5b5a2"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x7, 0x1000, 0xa], "89cbb0a123ec6edbaa4b497893cfe94e0fb5bf8d879d97e54c949e685ee9d76ba33bae1550377b17983720660349"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4, 0x7fff, 0x3], "bcacda403c250e7831a8a1f2c9d1eecbff849a9344d34370a8ce1a575d639c11d4248151d0b8be843cff18ca00d7aec87b3daafaaeda85266d75fe08bf13f386df2e36d46dc3e295cbec195ec07336291520c5d5564dc5c67739dc5821c9cf9f765b87b9c41a294f2bbc97ee42c54387a5a7489635d464a4f38dcb"}, {0x8, 0x88be, 0x4, {{0x2, 0x1, 0x40, 0x2, 0x1, 0x2, 0x4, 0x6}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x2, {{0x7, 0x2, 0x4, 0x0, 0x1, 0x1, 0x0, 0x8}, 0x2, {0x0, 0x9, 0x3, 0x1d, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x1, "6ae83fb6e4d67929a95af6ce7bae2619e1d4dffea98f661e8e6a3131424158ffeed8e39da30378177b37a3df8f3c7e40e6a992a622fe3f1e76b34ecf1902329a47872757492818ab0a7cd636ffc5ff4d1daa17826e4915d5e99fc095f0bb0e919e73edc5dceba11dc7bc3cc188d62d749424010e2e67efcde1d22dce87c94b87f7f930de33e9da72444972439681ec2da547c0fcadfaae46d3f102a37cf4073f43d52b598c3965c3e0a95a2aa1ba308523ae0a132ee7d5c8990c0f6c8b8e75"}}}}}}}, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)

0s ago: executing program 0 (id=1583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x70bd26, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x16900, 0x20610}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x2d}]}}}]}, 0x3c}}, 0x40010)
r1 = socket(0x11, 0x800000003, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x6)
r4 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x4], 0x0, [0x4, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0xffff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x70bd26, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x16900, 0x20610}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x2d}]}}}]}, 0x3c}}, 0x40010) (async)
socket(0x11, 0x800000003, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x6) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x4], 0x0, [0x4, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0xffff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:56976' (ED25519) to the list of known hosts.
syzkaller login: [   58.283667][ T5814] cgroup: Unknown subsys name 'net'
[   58.442563][ T5814] cgroup: Unknown subsys name 'cpuset'
[   58.448917][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.656803][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.175420][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.179749][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.183159][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.186235][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.189250][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.199824][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.207716][ T5222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.211032][ T5222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.214390][ T5222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.217774][ T5222] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.264719][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.267834][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.270653][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.274686][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.279316][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.467084][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   66.546620][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   66.603937][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   66.612344][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.615835][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.619827][ T5837] bridge_slave_0: entered allmulticast mode
[   66.623865][ T5837] bridge_slave_0: entered promiscuous mode
[   66.629681][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.632469][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.635388][ T5837] bridge_slave_1: entered allmulticast mode
[   66.638591][ T5837] bridge_slave_1: entered promiscuous mode
[   66.702904][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.732239][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.735180][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.738401][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.741027][ T5840] bridge_slave_0: entered allmulticast mode
[   66.745897][ T5840] bridge_slave_0: entered promiscuous mode
[   66.769461][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.772157][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.774484][ T5840] bridge_slave_1: entered allmulticast mode
[   66.778236][ T5840] bridge_slave_1: entered promiscuous mode
[   66.830859][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.833207][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.835632][ T5848] bridge_slave_0: entered allmulticast mode
[   66.839270][ T5848] bridge_slave_0: entered promiscuous mode
[   66.843138][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.845673][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.848620][ T5848] bridge_slave_1: entered allmulticast mode
[   66.851370][ T5848] bridge_slave_1: entered promiscuous mode
[   66.856830][ T5837] team0: Port device team_slave_0 added
[   66.862312][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.867128][ T5837] team0: Port device team_slave_1 added
[   66.888890][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.914267][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.933690][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.936525][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.949274][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.958056][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.977047][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.980289][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.991163][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.012880][ T5840] team0: Port device team_slave_0 added
[   67.038369][ T5840] team0: Port device team_slave_1 added
[   67.059787][ T5848] team0: Port device team_slave_0 added
[   67.092847][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.095697][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.108573][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.116073][ T5848] team0: Port device team_slave_1 added
[   67.138026][ T5837] hsr_slave_0: entered promiscuous mode
[   67.141312][ T5837] hsr_slave_1: entered promiscuous mode
[   67.145534][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.149190][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.159656][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.214279][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.217061][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.228815][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.261802][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.264630][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.275097][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.297098][ T5840] hsr_slave_0: entered promiscuous mode
[   67.299992][ T5840] hsr_slave_1: entered promiscuous mode
[   67.302275][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.304779][ T5840] Cannot create hsr debugfs directory
[   67.351928][ T5848] hsr_slave_0: entered promiscuous mode
[   67.354328][ T5848] hsr_slave_1: entered promiscuous mode
[   67.356550][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.359873][ T5848] Cannot create hsr debugfs directory
[   67.669247][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.687762][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.701645][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.706666][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.744240][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.766454][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.772503][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.786791][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.846215][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.853632][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.861450][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.872863][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.920582][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.954496][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   67.974100][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.976718][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.991625][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.993882][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.001709][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.031084][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   68.049401][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.051824][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.069327][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.075609][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.078327][ T4918] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.102348][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   68.144399][ T4918] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.146652][ T4918] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.169928][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.172270][ T4918] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.230481][ T5222] Bluetooth: hci0: command tx timeout
[   68.254325][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.301490][ T5222] Bluetooth: hci2: command tx timeout
[   68.301502][ T5841] Bluetooth: hci1: command tx timeout
[   68.313175][ T5837] veth0_vlan: entered promiscuous mode
[   68.333816][ T5837] veth1_vlan: entered promiscuous mode
[   68.356600][ T5837] veth0_macvtap: entered promiscuous mode
[   68.362188][ T5837] veth1_macvtap: entered promiscuous mode
[   68.390374][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.396726][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.411880][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.415519][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.422574][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.425290][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.442969][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.462664][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.525186][ T5840] veth0_vlan: entered promiscuous mode
[   68.562003][ T5840] veth1_vlan: entered promiscuous mode
[   68.565704][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.569845][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.606889][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.607179][ T5848] veth0_vlan: entered promiscuous mode
[   68.612396][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.643508][ T5848] veth1_vlan: entered promiscuous mode
[   68.654214][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.655042][ T5840] veth0_macvtap: entered promiscuous mode
[   68.678754][ T5840] veth1_macvtap: entered promiscuous mode
[   68.702796][ T5848] veth0_macvtap: entered promiscuous mode
[   68.725982][ T5848] veth1_macvtap: entered promiscuous mode
[   68.753833][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.762011][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.777128][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.794552][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.812117][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.815764][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.823986][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.828220][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.841610][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.844730][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.857816][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.860903][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.017185][ T4824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.022225][ T4824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.083699][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.086771][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.114114][ T4824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.119107][ T4824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.125219][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.129450][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.138342][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'.
[   69.226049][ T5920] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   69.441780][ T5934] Zero length message leads to an empty skb
[   69.479807][ T5937] netlink: 'syz.1.10': attribute type 2 has an invalid length.
[   69.541414][ T5940] warning: `syz.2.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.961515][ T5945] netlink: 164 bytes leftover after parsing attributes in process `syz.0.14'.
[   70.046343][ T5947] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET)
[   70.303498][ T5222] Bluetooth: hci0: command tx timeout
[   70.377900][ T5222] Bluetooth: hci2: command tx timeout
[   70.387728][ T5222] Bluetooth: hci1: command tx timeout
[   70.789993][ T5961] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   71.191841][ T5966] netlink: 220 bytes leftover after parsing attributes in process `syz.2.21'.
[   71.263929][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.268463][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.284149][ T5968] netlink: 'syz.2.22': attribute type 10 has an invalid length.
[   71.287177][ T5968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.22'.
[   71.291807][ T5968] dummy0: entered promiscuous mode
[   71.294193][ T5968] dummy0: entered allmulticast mode
[   71.299991][ T5968] bridge0: port 3(dummy0) entered blocking state
[   71.302648][ T5968] bridge0: port 3(dummy0) entered disabled state
[   71.308644][ T5968] bridge0: port 3(dummy0) entered blocking state
[   71.311363][ T5968] bridge0: port 3(dummy0) entered forwarding state
[   71.383233][ T5970] netlink: 'syz.2.23': attribute type 2 has an invalid length.
[   72.210283][ T5975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'.
[   72.377573][ T5222] Bluetooth: hci0: command tx timeout
[   72.413913][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'.
[   72.458143][ T5222] Bluetooth: hci1: command tx timeout
[   72.458559][ T5841] Bluetooth: hci2: command tx timeout
[   72.513891][   T10] hid-generic 0005:04F3:5505.0001: item fetching failed at offset 0/1
[   72.519723][   T10] hid-generic 0005:04F3:5505.0001: probe with driver hid-generic failed with error -22
[   72.728279][ T6003] netlink: 410 bytes leftover after parsing attributes in process `syz.2.32'.
[   72.732964][ T6003] netlink: 'syz.2.32': attribute type 22 has an invalid length.
[   72.813397][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.33'.
[   72.817055][ T6007] netlink: 'syz.2.33': attribute type 7 has an invalid length.
[   72.823039][ T6007] netlink: 'syz.2.33': attribute type 8 has an invalid length.
[   72.825986][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'.
[   72.835454][ T6007] syz_tun: entered promiscuous mode
[   72.841056][ T6007] syz_tun: left promiscuous mode
[   73.257920][ T6031] netlink: 48 bytes leftover after parsing attributes in process `syz.1.39'.
[   73.304900][ T6038] netlink: 'syz.0.41': attribute type 2 has an invalid length.
[   73.528864][ T6053] veth0_to_bond: entered allmulticast mode
[   73.682320][ T6061] netlink: 'syz.0.49': attribute type 2 has an invalid length.
[   73.794614][ T6065] hsr_slave_0 (unregistering): left promiscuous mode
[   73.836532][ T6069] bond0: option mode: unable to set because the bond device has slaves
[   74.332982][ T6111] netlink: 'syz.2.63': attribute type 2 has an invalid length.
[   74.457494][ T5841] Bluetooth: hci0: command tx timeout
[   74.538285][ T5841] Bluetooth: hci2: command tx timeout
[   74.550007][ T5841] Bluetooth: hci1: command tx timeout
[   74.609151][ T6120] __nla_validate_parse: 5 callbacks suppressed
[   74.609166][ T6120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.65'.
[   74.615238][ T6120] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   74.755471][ T6121] netlink: 164 bytes leftover after parsing attributes in process `syz.0.65'.
[   74.866020][ T6125] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.912265][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'.
[   75.915251][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.80'.
[   75.992400][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'.
[   76.011946][ T6190] netlink: 'syz.2.81': attribute type 1 has an invalid length.
[   76.187124][ T6207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.86'.
[   76.233691][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.87'.
[   76.477113][ T6227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.93'.
[   76.483080][ T6227] netlink: 37 bytes leftover after parsing attributes in process `syz.2.93'.
[   76.488931][ T6227] netlink: 37 bytes leftover after parsing attributes in process `syz.2.93'.
[   76.496638][ T6227] netlink: 'syz.2.93': attribute type 4 has an invalid length.
[   76.566568][ T6232] netlink: 'syz.0.96': attribute type 3 has an invalid length.
[   76.572524][ T6232] netlink: 'syz.0.96': attribute type 3 has an invalid length.
[   76.572697][ T6234] netlink: 'syz.2.97': attribute type 32 has an invalid length.
[   76.786988][ T6248] bridge_slave_1: left allmulticast mode
[   76.793378][ T6248] bridge_slave_1: left promiscuous mode
[   76.796430][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.809702][ T6248] bridge_slave_0: left allmulticast mode
[   76.814273][ T6248] bridge_slave_0: left promiscuous mode
[   76.816590][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.323590][ T6268] syz.1.107: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   77.330859][ T6268] CPU: 1 UID: 0 PID: 6268 Comm: syz.1.107 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[   77.330895][ T6268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.330904][ T6268] Call Trace:
[   77.330911][ T6268]  <TASK>
[   77.330943][ T6268]  dump_stack_lvl+0x189/0x250
[   77.330971][ T6268]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.330988][ T6268]  ? __pfx__printk+0x10/0x10
[   77.331007][ T6268]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   77.331026][ T6268]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   77.331044][ T6268]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   77.331064][ T6268]  warn_alloc+0x214/0x310
[   77.331084][ T6268]  ? __pfx_warn_alloc+0x10/0x10
[   77.331103][ T6268]  ? __get_vm_area_node+0x28f/0x300
[   77.331124][ T6268]  ? __do_replace+0xb4/0xaa0
[   77.331140][ T6268]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   77.331160][ T6268]  ? stack_depot_save_flags+0x40/0x900
[   77.331189][ T6268]  ? translate_table+0x1b4d/0x1f90
[   77.331211][ T6268]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   77.331236][ T6268]  ? __do_replace+0xb4/0xaa0
[   77.331248][ T6268]  vzalloc_noprof+0xb2/0xf0
[   77.331282][ T6268]  ? __do_replace+0xb4/0xaa0
[   77.331296][ T6268]  __do_replace+0xb4/0xaa0
[   77.331310][ T6268]  ? __pfx_translate_table+0x10/0x10
[   77.331334][ T6268]  ? __pfx___do_replace+0x10/0x10
[   77.331352][ T6268]  ? _copy_from_user+0x94/0xb0
[   77.331376][ T6268]  do_arpt_set_ctl+0xa2a/0xf10
[   77.331397][ T6268]  ? __mutex_trylock_common+0x153/0x260
[   77.331416][ T6268]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[   77.331439][ T6268]  ? rcu_is_watching+0x15/0xb0
[   77.331466][ T6268]  ? __mutex_unlock_slowpath+0x1cd/0x700
[   77.331511][ T6268]  ? __pfx___mutex_lock+0x10/0x10
[   77.331525][ T6268]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   77.331539][ T6268]  ? aa_sk_perm+0x81e/0x950
[   77.331555][ T6268]  ? __pfx_aa_sk_perm+0x10/0x10
[   77.331579][ T6268]  nf_setsockopt+0x26f/0x290
[   77.331602][ T6268]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   77.331622][ T6268]  do_sock_setsockopt+0x17c/0x1b0
[   77.331646][ T6268]  __x64_sys_setsockopt+0x13f/0x1b0
[   77.331668][ T6268]  do_syscall_64+0xfa/0x3b0
[   77.331684][ T6268]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.331697][ T6268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.331711][ T6268]  ? exc_page_fault+0x9f/0xf0
[   77.331727][ T6268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.331739][ T6268] RIP: 0033:0x7fbca778e9a9
[   77.331752][ T6268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.331762][ T6268] RSP: 002b:00007fbca86c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   77.331775][ T6268] RAX: ffffffffffffffda RBX: 00007fbca79b5fa0 RCX: 00007fbca778e9a9
[   77.331783][ T6268] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
[   77.331791][ T6268] RBP: 00007fbca7810d69 R08: 0000000000000068 R09: 0000000000000000
[   77.331799][ T6268] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[   77.331806][ T6268] R13: 0000000000000000 R14: 00007fbca79b5fa0 R15: 00007ffe049c1008
[   77.331827][ T6268]  </TASK>
[   77.334249][ T6268] Mem-Info:
[   77.459410][ T6268] active_anon:5652 inactive_anon:0 isolated_anon:0
[   77.459410][ T6268]  active_file:885 inactive_file:38208 isolated_file:0
[   77.459410][ T6268]  unevictable:1768 dirty:1439 writeback:0
[   77.459410][ T6268]  slab_reclaimable:9218 slab_unreclaimable:52160
[   77.459410][ T6268]  mapped:18129 shmem:2568 pagetables:949
[   77.459410][ T6268]  sec_pagetables:0 bounce:0
[   77.459410][ T6268]  kernel_misc_reclaimable:0
[   77.459410][ T6268]  free:289988 free_pcp:23866 free_cma:0
[   77.489066][ T6268] Node 0 active_anon:11940kB inactive_anon:0kB active_file:3164kB inactive_file:18828kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24440kB dirty:5724kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5964kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   77.512415][ T6268] Node 1 active_anon:10668kB inactive_anon:0kB active_file:376kB inactive_file:134004kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47872kB dirty:32kB writeback:0kB shmem:5264kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5420kB pagetables:1984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   77.569054][ T6268] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   77.583617][ T6297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.587898][ T6268] lowmem_reserve[]: 0 812 812 812 812
[   77.589633][ T6268] Node 0 DMA32 free:390412kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11872kB inactive_anon:0kB active_file:3164kB inactive_file:18828kB unevictable:3536kB writepending:5724kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:46444kB local_pcp:18912kB free_cma:0kB
[   77.600558][ T6268] lowmem_reserve[]: 0 0 0 0 0
[   77.602697][ T6268] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   77.620511][ T6268] lowmem_reserve[]: 0 0 854 854 854
[   77.622249][ T6268] Node 1 Normal free:295180kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10736kB inactive_anon:0kB active_file:376kB inactive_file:134004kB unevictable:3536kB writepending:32kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:50224kB local_pcp:32744kB free_cma:0kB
[   77.655023][ T6268] lowmem_reserve[]: 0 0 0 0 0
[   77.658106][ T6268] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   77.662062][ T6268] Node 0 DMA32: 439*4kB (UM) 204*8kB (M) 87*16kB (UM) 13*32kB (ME) 7*64kB (UME) 4*128kB (UM) 1*256kB (M) 1*512kB (M) 4*1024kB (UME) 3*2048kB (UME) 91*4096kB (M) = 389900kB
[   77.667542][ T6268] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   77.668777][ T6308] netlink: 'syz.2.117': attribute type 15 has an invalid length.
[   77.673198][ T6268] Node 1 Normal: 263*4kB (UM) 108*8kB (UME) 527*16kB (UME) 109*32kB (UME) 23*64kB (UME) 13*128kB (UME) 7*256kB (UM) 2*512kB (M) 5*1024kB (UME) 4*2048kB (UME) 64*4096kB (M) = 295244kB
[   77.687707][ T6268] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.692499][ T6268] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   77.696887][ T6268] 41661 total pagecache pages
[   77.699243][ T6268] 0 pages in swap cache
[   77.701085][ T6268] Free swap  = 124996kB
[   77.702932][ T6268] Total swap = 124996kB
[   77.703051][ T6308] netlink: 'syz.2.117': attribute type 13 has an invalid length.
[   77.704643][ T6268] 786301 pages RAM
[   77.708849][ T6268] 0 pages HighMem/MovableOnly
[   77.711557][ T6268] 241058 pages reserved
[   77.713335][ T6268] 0 pages cma reserved
[   77.870075][ T6315] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.129886][ T6331] x_tables: duplicate underflow at hook 1
[   78.155893][ T6340] netlink: 'syz.0.123': attribute type 2 has an invalid length.
[   78.368299][ T6348] Cannot find add_set index 3 as target
[   78.482721][ T6352] sctp: [Deprecated]: syz.1.127 (pid 6352) Use of int in max_burst socket option deprecated.
[   78.482721][ T6352] Use struct sctp_assoc_value instead
[   78.984647][ T6371] netlink: 'syz.1.132': attribute type 2 has an invalid length.
[   79.666559][ T6394] __nla_validate_parse: 11 callbacks suppressed
[   79.666576][ T6394] netlink: 164 bytes leftover after parsing attributes in process `syz.0.135'.
[   79.703771][ T6395] netlink: 164 bytes leftover after parsing attributes in process `syz.0.135'.
[   79.920413][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'.
[   80.049774][ T6412] netlink: 'syz.0.139': attribute type 1 has an invalid length.
[   80.225219][ T6424] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.142'.
[   80.231082][   T10] IPVS: starting estimator thread 0...
[   80.319601][ T6429] IPVS: using max 37 ests per chain, 88800 per kthread
[   80.334101][ T6443] netlink: 'syz.0.144': attribute type 2 has an invalid length.
[   80.504500][ T6453] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.147'.
[   80.834256][ T6457] netlink: 'syz.0.148': attribute type 1 has an invalid length.
[   80.863291][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.148'.
[   80.894023][ T6464] No such timeout policy "syz0"
[   80.903655][ T6464] netlink: 'syz.1.149': attribute type 1 has an invalid length.
[   80.955621][ T6473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.149'.
[   80.968945][ T6464] bond1: entered promiscuous mode
[   80.971871][ T6464] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.159620][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'.
[   81.168015][ T6490] netlink: 236 bytes leftover after parsing attributes in process `syz.1.157'.
[   81.251198][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'.
[   81.258741][ T6500] netlink: 'syz.1.161': attribute type 2 has an invalid length.
[   81.261030][ T6502] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.264940][ T6502] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.268459][ T6502] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.271690][ T6502] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.733837][ T6517] veth0: entered promiscuous mode
[   81.744134][ T6516] veth0: left promiscuous mode
[   82.348149][ T6544] delete_channel: no stack
[   82.454374][ T6547] xt_hashlimit: size too large, truncated to 1048576
[   83.144005][ T6575] netlink: 'syz.1.183': attribute type 4 has an invalid length.
[   83.266231][ T6594] veth1_to_bond: entered allmulticast mode
[   83.369820][ T6594] bond0: (slave bond_slave_1): Releasing backup interface
[   83.404448][ T6594] veth1_to_bond (unregistering): left allmulticast mode
[   83.455736][ T6594] syz.1.188 (6594) used greatest stack depth: 20584 bytes left
[   83.560444][ T6613] tipc: Started in network mode
[   83.562596][ T6613] tipc: Node identity 5654bd8e2859, cluster identity 4711
[   83.568060][ T6613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.576069][ T6610] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   83.583699][ T6614] syzkaller0: entered promiscuous mode
[   83.586000][ T6614] syzkaller0: entered allmulticast mode
[   83.642706][ T6609] tipc: Resetting bearer <eth:syzkaller0>
[   83.668699][ T6609] tipc: Disabling bearer <eth:syzkaller0>
[   84.083692][ T6633] netlink: 'syz.0.199': attribute type 2 has an invalid length.
[   84.376430][ T6644] netlink: 'syz.2.201': attribute type 2 has an invalid length.
[   84.688952][ T6652] __nla_validate_parse: 12 callbacks suppressed
[   84.688962][ T6652] netlink: 164 bytes leftover after parsing attributes in process `syz.2.202'.
[   84.715171][ T6656] netlink: 'syz.1.204': attribute type 2 has an invalid length.
[   84.738320][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'.
[   84.749116][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'.
[   84.912930][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'.
[   84.970335][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'.
[   84.992851][ T6667] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   85.205986][ T6674] netlink: 64 bytes leftover after parsing attributes in process `syz.2.210'.
[   85.256305][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'.
[   85.686684][ T6700] netlink: 'syz.0.217': attribute type 15 has an invalid length.
[   85.702261][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.215'.
[   86.604380][ T6702] veth0: entered promiscuous mode
[   86.610414][ T6701] veth0: left promiscuous mode
[   86.631186][   T96] cfg80211: failed to load regulatory.db
[   86.790513][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'.
[   86.814024][ T6706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.220'.
[   87.270325][ T6745] wg0: entered promiscuous mode
[   87.352804][ T6749] netlink: 'syz.2.231': attribute type 2 has an invalid length.
[   88.286978][ T6777] netlink: 'syz.0.240': attribute type 2 has an invalid length.
[   88.415316][ T6786] syzkaller1: entered promiscuous mode
[   88.420999][ T6786] syzkaller1: entered allmulticast mode
[   89.192357][ T6833] netlink: 'syz.0.259': attribute type 2 has an invalid length.
[   89.605497][ T6866] xt_socket: unknown flags 0x8
[   90.042429][ T6889] __nla_validate_parse: 8 callbacks suppressed
[   90.042444][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'.
[   90.421064][ T6909] xt_TPROXY: Can be used only with -p tcp or -p udp
[   90.433449][ T6911] netlink: 'syz.0.283': attribute type 21 has an invalid length.
[   90.436338][ T6911] netlink: 128 bytes leftover after parsing attributes in process `syz.0.283'.
[   90.441802][ T6911] netlink: 'syz.0.283': attribute type 4 has an invalid length.
[   90.444373][ T6911] netlink: 'syz.0.283': attribute type 3 has an invalid length.
[   90.446697][ T6911] netlink: 3 bytes leftover after parsing attributes in process `syz.0.283'.
[   90.482217][ T6917] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   90.612408][ T6929] netlink: 'syz.1.286': attribute type 2 has an invalid length.
[   90.698694][ T6930] nbd0: detected capacity change from 0 to 127
[   90.778284][ T6931] nbd1: detected capacity change from 0 to 127
[   90.826054][   T56] block nbd0: Receive control failed (result -104)
[   90.833406][ T6932] block nbd1: Receive control failed (result -32)
[   91.058830][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'.
[   91.501070][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'.
[   92.321510][ T6960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'.
[   92.562641][ T6980] netlink: 236 bytes leftover after parsing attributes in process `syz.2.299'.
[   92.625000][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'.
[   92.693818][ T6990] netlink: 56 bytes leftover after parsing attributes in process `syz.2.303'.
[   92.802357][ T7001] netlink: 'syz.2.308': attribute type 2 has an invalid length.
[   92.812667][ T7003] netlink: 'syz.1.309': attribute type 2 has an invalid length.
[   92.850749][ T7006] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   92.869394][ T7006] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   92.903228][ T7006] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   93.068620][ T7005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   93.673832][ T7040] netlink: 44 bytes leftover after parsing attributes in process `syz.0.312'.
[   93.739238][ T1007] wlan0: Trigger new scan to find an IBSS to join
[   93.804563][ T7045] syzkaller0: entered promiscuous mode
[   93.806439][ T7045] syzkaller0: entered allmulticast mode
[   95.125658][ T7107] __nla_validate_parse: 4 callbacks suppressed
[   95.125676][ T7107] netlink: 132 bytes leftover after parsing attributes in process `syz.0.329'.
[   95.253048][ T7116] netlink: 'syz.0.332': attribute type 2 has an invalid length.
[   95.601910][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'.
[   95.617637][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'.
[   95.634527][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'.
[   95.684246][ T7145] netlink: 'syz.2.343': attribute type 2 has an invalid length.
[   95.870698][ T7160] netlink: 'syz.2.343': attribute type 64 has an invalid length.
[   95.874885][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'.
[   96.308536][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'.
[   96.495024][ T7176] netlink: 'syz.1.351': attribute type 2 has an invalid length.
[   96.629213][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'.
[   96.632269][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'.
[   96.672766][ T7190] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   96.699950][ T4824] wlan0: Trigger new scan to find an IBSS to join
[   97.234004][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'.
[   97.372147][ T7204] netlink: 'syz.0.357': attribute type 1 has an invalid length.
[   97.375233][ T7204] netlink: 'syz.0.357': attribute type 2 has an invalid length.
[   97.519776][ T7216] netlink: 164 bytes leftover after parsing attributes in process `syz.1.361'.
[   97.607241][ T7224] unsupported nlmsg_type 40
[   97.618663][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.624074][ T7223] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   97.635843][ T7227] netlink: 'syz.2.365': attribute type 2 has an invalid length.
[   97.905874][ T7244] netlink: 'syz.0.369': attribute type 2 has an invalid length.
[   98.503834][ T7269] netlink: 'syz.1.374': attribute type 2 has an invalid length.
[   98.551361][ T7271] netlink: 'syz.2.375': attribute type 1 has an invalid length.
[   98.554336][ T7271] netlink: 'syz.2.375': attribute type 2 has an invalid length.
[   98.557551][ T7271] netlink: 'syz.2.375': attribute type 8 has an invalid length.
[   98.778421][ T7280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.859205][ T7282] netlink: 'syz.0.378': attribute type 3 has an invalid length.
[   99.434217][ T7298] netlink: 'syz.1.381': attribute type 2 has an invalid length.
[   99.832357][ T7328] IPv6: sit1: Disabled Multicast RS
[   99.835403][ T7328] sit1: entered allmulticast mode
[  100.482315][ T7381] __nla_validate_parse: 13 callbacks suppressed
[  100.482329][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[  100.619353][ T7391] netlink: 'syz.2.406': attribute type 2 has an invalid length.
[  100.729243][ T7397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.409'.
[  100.908289][ T7413] netlink: 'syz.0.413': attribute type 21 has an invalid length.
[  100.910893][ T7413] netlink: 'syz.0.413': attribute type 22 has an invalid length.
[  100.913340][ T7413] netlink: 96 bytes leftover after parsing attributes in process `syz.0.413'.
[  101.193295][ T7429] tun0: tun_chr_ioctl cmd 1074025677
[  101.195844][ T7429] tun0: linktype set to 804
[  101.265775][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'.
[  101.270328][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'.
[  101.552129][ T7456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.426'.
[  101.590789][ T7459] netlink: 148 bytes leftover after parsing attributes in process `syz.2.427'.
[  101.594824][ T7459] netlink: 43 bytes leftover after parsing attributes in process `syz.2.427'.
[  101.657133][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'.
[  102.103082][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'.
[  102.272648][ T7478] tipc: Started in network mode
[  102.274870][ T7478] tipc: Node identity , cluster identity 4711
[  102.278048][ T7478] tipc: Failed to obtain node identity
[  102.280391][ T7478] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  102.284763][ T7478] syzkaller0: entered promiscuous mode
[  102.287161][ T7478] syzkaller0: entered allmulticast mode
[  102.694468][ T7502] Cannot find add_set index 0 as target
[  103.942953][ T7543] validate_nla: 7 callbacks suppressed
[  103.942994][ T7543] netlink: 'syz.2.448': attribute type 2 has an invalid length.
[  103.950663][ T7543] netlink: 'syz.2.448': attribute type 2 has an invalid length.
[  104.334103][ T7564] netlink: 'syz.2.451': attribute type 2 has an invalid length.
[  104.795404][ T7587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.843442][ T7591] netlink: 'syz.0.455': attribute type 29 has an invalid length.
[  104.847078][ T7591] netlink: 'syz.0.455': attribute type 29 has an invalid length.
[  104.895442][ T7593] netlink: 'syz.0.456': attribute type 2 has an invalid length.
[  105.466011][ T7621] netlink: 'syz.1.460': attribute type 2 has an invalid length.
[  105.527149][ T7626] __nla_validate_parse: 6 callbacks suppressed
[  105.527162][ T7626] netlink: 236 bytes leftover after parsing attributes in process `syz.1.461'.
[  105.805719][ T7653] netlink: 100 bytes leftover after parsing attributes in process `syz.1.469'.
[  105.865122][ T7655] netlink: 164 bytes leftover after parsing attributes in process `syz.0.470'.
[  105.926815][ T7664] netlink: 'syz.1.474': attribute type 2 has an invalid length.
[  105.959754][ T7663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.963134][ T7663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.985156][ T7658] netlink: 104 bytes leftover after parsing attributes in process `syz.2.471'.
[  105.991220][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'.
[  106.081760][ T7663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.085884][ T7663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.126529][ T7673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.130436][ T7673] syzkaller0: entered promiscuous mode
[  106.132702][ T7673] syzkaller0: entered allmulticast mode
[  106.161094][ T7673] tipc: Resetting bearer <eth:syzkaller0>
[  106.192083][ T7663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.195430][ T7663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.211780][ T7672] tipc: Resetting bearer <eth:syzkaller0>
[  106.232844][ T7672] tipc: Disabling bearer <eth:syzkaller0>
[  106.270243][ T7663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.273664][ T7663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.392798][ T7663] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.396324][ T7663] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.411300][ T7663] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.414456][ T7663] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.429415][ T7663] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.434012][ T7663] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.449569][ T7663] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.453186][ T7663] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.634396][ T7679] netlink: 164 bytes leftover after parsing attributes in process `syz.2.478'.
[  106.746912][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'.
[  106.812234][ T7685] netlink: 'syz.2.481': attribute type 3 has an invalid length.
[  106.969054][ T7696] netlink: 'syz.1.486': attribute type 2 has an invalid length.
[  107.436726][ T7713] batadv0: entered promiscuous mode
[  107.796857][ T7724] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.493'.
[  107.802371][ T7724] netlink: 236 bytes leftover after parsing attributes in process `syz.2.493'.
[  108.101837][ T7747] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  108.104773][ T7747] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  108.199577][ T7758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.501'.
[  108.263247][ T7762] sctp: [Deprecated]: syz.0.506 (pid 7762) Use of int in maxseg socket option.
[  108.263247][ T7762] Use struct sctp_assoc_value instead
[  108.378451][ T7773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.831838][ T7800] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003
[  109.396556][ T7781] delete_channel: no stack
[  109.856972][ T7865] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20003
[  110.289138][ T7881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.348510][ T7883] netlink: 'syz.0.546': attribute type 2 has an invalid length.
[  110.573362][ T7890] __nla_validate_parse: 12 callbacks suppressed
[  110.573384][ T7890] netlink: 40 bytes leftover after parsing attributes in process `syz.0.547'.
[  110.603324][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'.
[  110.651252][ T7897] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.549'.
[  110.661373][ T7896] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.549'.
[  110.964048][ T7911] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  111.217465][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'.
[  111.220632][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.558'.
[  111.251793][ T7929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.559'.
[  111.443429][ T7933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.560'.
[  111.511990][ T7943] bridge0: port 3(dummy0) entered disabled state
[  111.514236][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.516785][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.582978][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.591144][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.634922][ T7943] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.639419][ T7943] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.642449][ T7943] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.646063][ T7943] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.756558][ T7943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.562'.
[  112.097680][ T7964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.204480][ T7969] netlink: 'syz.1.568': attribute type 2 has an invalid length.
[  113.016057][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'.
[  113.137563][ T7993] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.633276][ T8040] syzkaller0: entered allmulticast mode
[  113.768616][ T8049] netlink: 'syz.1.601': attribute type 2 has an invalid length.
[  114.631096][ T8066] netlink: 'syz.1.607': attribute type 2 has an invalid length.
[  114.678608][ T8073] netlink: 'syz.1.609': attribute type 2 has an invalid length.
[  114.829241][ T8085] netlink: 'syz.0.611': attribute type 178 has an invalid length.
[  114.899533][ T8087] netlink: 'syz.0.612': attribute type 4 has an invalid length.
[  115.453428][ T8112] netlink: 'syz.0.619': attribute type 2 has an invalid length.
[  115.632237][ T8120] __nla_validate_parse: 9 callbacks suppressed
[  115.632254][ T8120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.621'.
[  115.640186][ T8120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.621'.
[  116.391494][ T8142] syzkaller0: entered promiscuous mode
[  116.393420][ T8142] syzkaller0: entered allmulticast mode
[  118.544425][ T8161] netlink: 940 bytes leftover after parsing attributes in process `syz.0.636'.
[  118.561822][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.635'.
[  118.593986][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[  118.652019][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'.
[  118.656980][ T8163] ip6t_srh: unknown srh invflags 4000
[  118.757527][ T8172] netlink: 'syz.1.642': attribute type 2 has an invalid length.
[  118.796450][ T8177] xt_NFQUEUE: number of total queues is 0
[  118.989713][ T8192] netlink: 'syz.1.647': attribute type 3 has an invalid length.
[  118.992950][ T8192] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.647'.
[  118.999053][ T8194] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  119.026474][ T8196] C: renamed from team_slave_0 (while UP)
[  119.033158][ T8196] netlink: 'syz.0.648': attribute type 3 has an invalid length.
[  119.040263][ T8196] netlink: 152 bytes leftover after parsing attributes in process `syz.0.648'.
[  119.046413][ T8196] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  119.065763][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'.
[  119.193922][ T8205] netlink: 164 bytes leftover after parsing attributes in process `syz.0.652'.
[  119.194258][ T8207] netlink: 'syz.1.653': attribute type 2 has an invalid length.
[  119.413161][ T8223] tipc: Started in network mode
[  119.416104][ T8223] tipc: Node identity 9abe42273c1e, cluster identity 4711
[  119.422763][ T8223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.426809][ T8223] syzkaller0: entered promiscuous mode
[  119.433832][ T8223] syzkaller0: entered allmulticast mode
[  119.456185][ T8223] tipc: Resetting bearer <eth:syzkaller0>
[  119.461083][ T8222] tipc: Resetting bearer <eth:syzkaller0>
[  119.475579][ T8222] tipc: Disabling bearer <eth:syzkaller0>
[  120.835148][ T8278] __nla_validate_parse: 5 callbacks suppressed
[  120.835163][ T8278] netlink: 248 bytes leftover after parsing attributes in process `syz.0.674'.
[  121.179693][ T8292] netlink: 236 bytes leftover after parsing attributes in process `syz.0.677'.
[  121.183666][ T8291] netlink: 236 bytes leftover after parsing attributes in process `syz.0.677'.
[  121.489735][ T8310] netlink: 'syz.2.681': attribute type 2 has an invalid length.
[  121.558196][ T8302] netlink: 'syz.0.679': attribute type 1 has an invalid length.
[  121.561708][ T8302] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.679'.
[  121.784323][ T8318] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  121.867810][ T8318] bond0: (slave bond_slave_0): Releasing backup interface
[  121.884832][ T8322] netlink: 'syz.0.682': attribute type 10 has an invalid length.
[  121.905388][ T8318] bond0: (slave bond_slave_1): Releasing backup interface
[  121.993472][ T8318] team0: Port device C removed
[  122.023356][ T8318] team0: Port device team_slave_1 removed
[  122.026670][ T8318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.033622][ T8318] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.039562][ T8318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.042643][ T8318] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.070413][ T8322] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  122.073453][ T8322] bond0: (slave wlan1): refused to change device type
[  122.126305][ T8318] syz.0.682 (8318) used greatest stack depth: 19928 bytes left
[  122.395465][ T8333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.684'.
[  122.664135][ T8345] netlink: 236 bytes leftover after parsing attributes in process `syz.2.688'.
[  122.745119][ T8347] netlink: 236 bytes leftover after parsing attributes in process `syz.0.689'.
[  122.761455][ T8353] netlink: 'syz.1.691': attribute type 2 has an invalid length.
[  122.959518][ T8371] netlink: 'syz.0.696': attribute type 2 has an invalid length.
[  123.001923][ T8372] Bluetooth: MGMT ver 1.23
[  123.871681][ T8385] netlink: 'syz.2.698': attribute type 8 has an invalid length.
[  123.875279][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'.
[  123.893372][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.699'.
[  123.911949][ T8387] @: renamed from veth0_vlan (while UP)
[  123.927255][ T8389] netlink: 'syz.1.700': attribute type 11 has an invalid length.
[  123.936937][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[  123.976236][ T8391] xt_l2tp: invalid flags combination: 4
[  124.785225][ T5841] Bluetooth: hci2: command tx timeout
[  124.830924][ T8422] sch_tbf: burst 0 is lower than device team0 mtu (1514) !
[  124.994973][ T8429] syzkaller1: entered promiscuous mode
[  124.996836][ T8429] syzkaller1: entered allmulticast mode
[  125.018850][ T5841] Bluetooth: hci0: command tx timeout
[  125.543178][ T8471] netlink: 'syz.0.731': attribute type 2 has an invalid length.
[  126.194825][ T8477] sctp: [Deprecated]: syz.2.732 (pid 8477) Use of struct sctp_assoc_value in delayed_ack socket option.
[  126.194825][ T8477] Use struct sctp_sack_info instead
[  126.254589][ T8479] netlink: 'syz.2.733': attribute type 2 has an invalid length.
[  126.531410][ T8492] __nla_validate_parse: 11 callbacks suppressed
[  126.531422][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'.
[  126.544841][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'.
[  126.663898][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'.
[  126.727437][ T8510] netlink: 104 bytes leftover after parsing attributes in process `syz.1.743'.
[  126.951987][ T8515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.137154][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'.
[  127.283759][ T8539] netlink: 236 bytes leftover after parsing attributes in process `syz.2.751'.
[  127.671484][ T8562] netlink: 'syz.2.758': attribute type 2 has an invalid length.
[  127.684446][ T8564] netlink: 'syz.1.757': attribute type 2 has an invalid length.
[  127.814823][ T8571] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  127.824474][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'.
[  128.571645][ T8595] netlink: 'syz.1.765': attribute type 3 has an invalid length.
[  128.583926][ T8597] netlink: 'syz.2.766': attribute type 2 has an invalid length.
[  128.841616][ T8612] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.769'.
[  128.853257][ T8612] syzkaller1: entered promiscuous mode
[  128.855327][ T8612] syzkaller1: entered allmulticast mode
[  128.856838][ T8602] "syz.1.768" (8602) uses obsolete ecb(arc4) skcipher
[  128.861139][ T8612] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  129.035859][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.770'.
[  129.549382][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'.
[  129.577868][ T8638] netlink: 'syz.2.776': attribute type 6 has an invalid length.
[  129.838534][ T8642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.246573][ T8664] bridge_slave_1: left allmulticast mode
[  130.249022][ T8664] bridge_slave_1: left promiscuous mode
[  130.252544][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.257631][ T8664] bridge_slave_0: left allmulticast mode
[  130.259429][ T8664] bridge_slave_0: left promiscuous mode
[  130.261246][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.607116][ T8687] batadv_slave_1: entered promiscuous mode
[  130.615759][ T8686] batadv_slave_1: left promiscuous mode
[  130.862150][ T8701] lo speed is unknown, defaulting to 1000
[  130.865387][ T8701] lo speed is unknown, defaulting to 1000
[  130.869171][ T8701] lo speed is unknown, defaulting to 1000
[  130.873863][ T8701] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  130.881559][ T8701] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  130.909707][ T8701] lo speed is unknown, defaulting to 1000
[  130.913512][ T8701] lo speed is unknown, defaulting to 1000
[  130.922866][ T8701] lo speed is unknown, defaulting to 1000
[  131.230160][ T8706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.248960][ T8706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.363610][ T8706] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.366473][ T8706] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.371931][ T8706] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.375401][ T8706] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.755576][ T8731] tipc: Started in network mode
[  131.757857][ T8731] tipc: Node identity be05f77109da, cluster identity 4711
[  131.760412][ T8731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.769788][ T8731] syzkaller0: entered promiscuous mode
[  131.771643][ T8731] syzkaller0: entered allmulticast mode
[  131.796366][ T8731] tipc: Resetting bearer <eth:syzkaller0>
[  131.811696][ T8730] tipc: Resetting bearer <eth:syzkaller0>
[  131.829175][ T8730] tipc: Disabling bearer <eth:syzkaller0>
[  132.702154][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  151.955320][ T5281] udevd[5281]: worker [5845] /devices/virtual/block/nbd0 is taking a long time
[  151.959259][ T5281] udevd[5281]: worker [5847] /devices/virtual/block/nbd1 is taking a long time
[  162.419884][ T8751] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  162.495453][ T8758] netlink: 'syz.1.814': attribute type 2 has an invalid length.
[  162.766243][ T8781] netlink: 'syz.0.819': attribute type 2 has an invalid length.
[  163.051878][ T8797] __nla_validate_parse: 10 callbacks suppressed
[  163.051899][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.822'.
[  163.546821][ T8830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'.
[  163.936182][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'.
[  163.953209][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'.
[  163.979252][ T8856] tipc: New replicast peer: 255.255.255.255
[  163.983333][ T8856] tipc: Enabled bearer <udp:syz2>, priority 10
[  164.216659][ T8885] openvswitch: netlink: Key type 30 is not supported
[  164.321818][ T8893] netlink: 5 bytes leftover after parsing attributes in process `syz.0.851'.
[  164.335680][ T8894] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  164.348185][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'.
[  164.358583][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'.
[  164.395418][ T8896] lo speed is unknown, defaulting to 1000
[  164.415049][ T8897] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.852'.
[  164.596402][ T8899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.854'.
[  164.600873][ T8905] netlink: 48 bytes leftover after parsing attributes in process `syz.1.856'.
[  164.605345][ T8902] netlink: 'syz.2.855': attribute type 5 has an invalid length.
[  164.964510][ T8932] xt_TCPMSS: Only works on TCP SYN packets
[  165.098760][   T96] tipc: Node number set to 2114829710
[  165.333660][ T8951] netlink: 'syz.2.871': attribute type 2 has an invalid length.
[  165.584130][ T8968] netlink: 'syz.0.875': attribute type 32 has an invalid length.
[  165.605588][ T8971] netlink: 'syz.2.876': attribute type 2 has an invalid length.
[  167.044408][ T9049] netlink: 'syz.2.895': attribute type 13 has an invalid length.
[  167.047928][ T9049] netlink: 'syz.2.895': attribute type 17 has an invalid length.
[  167.110389][ T9049] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.114916][ T9049] 8021q: adding VLAN 0 to HW filter on device team0
[  167.120993][ T9049] bridge0: port 3(dummy0) entered blocking state
[  167.124047][ T9049] bridge0: port 3(dummy0) entered forwarding state
[  167.131741][ T9049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.139733][   T24] lo speed is unknown, defaulting to 1000
[  167.143126][   T24] syz1: Port: 1 Link ACTIVE
[  167.179649][ T9047] lo speed is unknown, defaulting to 1000
[  167.374794][ T9055] netem: change failed
[  167.431742][ T9057] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  167.765302][ T9081] netlink: 'syz.0.905': attribute type 20 has an invalid length.
[  168.450374][ T9115] __nla_validate_parse: 9 callbacks suppressed
[  168.450387][ T9115] netlink: 168 bytes leftover after parsing attributes in process `syz.2.916'.
[  168.462962][ T9117] netlink: 'syz.1.917': attribute type 2 has an invalid length.
[  168.494457][ T9115] netlink: 'syz.2.916': attribute type 8 has an invalid length.
[  168.593842][ T9121] netlink: 236 bytes leftover after parsing attributes in process `syz.0.919'.
[  168.783421][ T9130] lo speed is unknown, defaulting to 1000
[  169.200958][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'.
[  169.313688][ T9146] ieee802154 phy0 wpan0: encryption failed: -90
[  169.321175][ T9149] netlink: 'syz.0.925': attribute type 2 has an invalid length.
[  169.355867][ T9153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.926'.
[  169.385813][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'.
[  169.450627][   T33] audit: type=1800 audit(1753208515.312:2): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.926" name="memory.events" dev="tmpfs" ino=1498 res=0 errno=0
[  169.493516][   T33] audit: type=1804 audit(1753208515.322:3): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.926" name="/newroot/292/memory.events" dev="tmpfs" ino=1498 res=1 errno=0
[  169.501957][ T9161] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.927'.
[  169.525669][ T9161] geneve2: entered promiscuous mode
[  169.553694][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'.
[  169.645770][ T9167] netlink: 'syz.1.929': attribute type 2 has an invalid length.
[  169.784023][ T9175] netlink: 'syz.0.932': attribute type 2 has an invalid length.
[  169.991857][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'.
[  169.992122][ T9193] netlink: 'syz.2.936': attribute type 10 has an invalid length.
[  170.003068][ T9193] bridge0: port 3(dummy0) entered disabled state
[  170.013887][ T9193] bridge0: port 3(dummy0) entered blocking state
[  170.016523][ T9193] bridge0: port 3(dummy0) entered forwarding state
[  170.027549][ T9193] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  170.073544][ T9199] netlink: 'syz.1.939': attribute type 2 has an invalid length.
[  170.143144][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'.
[  170.213544][ T9211] team0 (unregistering): Port device team_slave_0 removed
[  170.220644][ T9211] team0 (unregistering): Port device team_slave_1 removed
[  170.293483][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'.
[  170.419030][ T9228] lo speed is unknown, defaulting to 1000
[  170.529481][ T9228] netlink: 'syz.0.946': attribute type 13 has an invalid length.
[  170.533248][ T9228] netlink: 'syz.0.946': attribute type 17 has an invalid length.
[  170.560094][ T9228] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  171.464755][ T9282] xt_nat: multiple ranges no longer supported
[  171.810201][ T9302] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  172.561716][ T9364] Bluetooth: MGMT ver 1.23
[  172.870236][ T9389] lo speed is unknown, defaulting to 1000
[  173.215014][ T9411] tipc: New replicast peer: 255.255.255.255
[  173.227460][ T9411] tipc: Enabled bearer <udp:syz2>, priority 10
[  173.243921][ T9411] unknown channel width for channel at 909000KHz?
[  173.247545][ T9411] unknown channel width for channel at 909000KHz?
[  173.250234][ T9411] unknown channel width for channel at 909000KHz?
[  174.020426][ T9420] __nla_validate_parse: 15 callbacks suppressed
[  174.020450][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'.
[  174.040072][ T9417] netlink: 172 bytes leftover after parsing attributes in process `syz.1.991'.
[  174.171478][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.993'.
[  174.175219][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.993'.
[  174.337541][   T96] tipc: Node number set to 2795520551
[  174.361954][ T9444] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  174.524341][ T9457] validate_nla: 6 callbacks suppressed
[  174.524365][ T9457] netlink: 'syz.2.1000': attribute type 2 has an invalid length.
[  174.996614][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'.
[  175.000558][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'.
[  175.004271][ T9463] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1001'.
[  175.142044][ T9468] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1002'.
[  175.173548][ T9468] delete_channel: no stack
[  175.559370][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'.
[  175.566394][ T9480] netlink: 'syz.2.1005': attribute type 1 has an invalid length.
[  175.699137][ T9506] trusted_key: syz.2.1011 sent an empty control message without MSG_MORE.
[  175.803365][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'.
[  175.881167][ T9520] netlink: 'syz.1.1016': attribute type 2 has an invalid length.
[  175.962199][ T9527] netlink: 'syz.2.1020': attribute type 2 has an invalid length.
[  176.282216][ T9557] netlink: 'syz.0.1026': attribute type 1 has an invalid length.
[  176.948716][ T9588] batman_adv: batadv0: Adding interface: gretap1
[  176.951632][ T9588] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.962955][ T9588] batman_adv: batadv0: Interface activated: gretap1
[  178.322133][ T9714] netlink: 'syz.2.1053': attribute type 1 has an invalid length.
[  178.411169][ T9714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.532836][ T9728] tipc: New replicast peer: 0.0.0.0
[  178.534807][ T9728] tipc: Enabled bearer <udp:syz2>, priority 10
[  178.536940][ T9728] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  178.568393][ T9732] netlink: 'syz.2.1058': attribute type 2 has an invalid length.
[  178.629886][ T9735] netlink: 'syz.1.1059': attribute type 1 has an invalid length.
[  178.655026][ T9735] 8021q: adding VLAN 0 to HW filter on device bond2
[  178.971047][ T9752] netlink: 'syz.1.1062': attribute type 4 has an invalid length.
[  179.177821][ T9761] __nla_validate_parse: 19 callbacks suppressed
[  179.177843][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1064'.
[  179.196471][ T9761] vxcan3: entered promiscuous mode
[  179.470181][ T9767] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1066'.
[  179.533357][  T791] tipc: Node number set to 3084908401
[  179.583755][ T9778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1068'.
[  179.736677][ T9793] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  180.079099][ T9808] nbd2: detected capacity change from 0 to 127
[  180.104224][   T57] block nbd2: Receive control failed (result -104)
[  180.148329][ T9812] netlink: 'syz.0.1077': attribute type 2 has an invalid length.
[  180.260297][ T9821] netlink: 'syz.0.1080': attribute type 2 has an invalid length.
[  180.445204][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'.
[  180.558072][ T9844] netlink: 'syz.1.1087': attribute type 2 has an invalid length.
[  180.823180][ T9871] netlink: 'syz.2.1093': attribute type 2 has an invalid length.
[  180.999992][ T9872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1093'.
[  181.951032][ T9931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1107'.
[  181.955043][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1107'.
[  181.960533][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'.
[  181.969784][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'.
[  181.979198][ T9931] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1107'.
[  182.208322][ T9950] netlink: 'syz.0.1113': attribute type 21 has an invalid length.
[  182.209172][ T9951] netlink: 'syz.0.1113': attribute type 21 has an invalid length.
[  182.239323][ T9954] syzkaller0: entered promiscuous mode
[  182.241502][ T9954] syzkaller0: entered allmulticast mode
[  182.381228][ T9960] netlink: 'syz.0.1116': attribute type 32 has an invalid length.
[  182.433439][ T9963] syzkaller1: entered promiscuous mode
[  182.435709][ T9963] syzkaller1: entered allmulticast mode
[  183.889789][T10022] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  183.914991][T10019] lo speed is unknown, defaulting to 1000
[  184.226497][T10043] __nla_validate_parse: 13 callbacks suppressed
[  184.226521][T10043] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1138'.
[  184.276599][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1138'.
[  184.446294][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'.
[  184.467027][T10057] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1142'.
[  184.491557][T10056] lo speed is unknown, defaulting to 1000
[  184.542371][T10061] netlink: 'syz.0.1145': attribute type 2 has an invalid length.
[  184.837554][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'.
[  185.116733][T10105] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  185.134281][T10105] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  185.173499][T10108] netlink: 'syz.2.1157': attribute type 39 has an invalid length.
[  185.842047][T10126] netlink: 'syz.2.1162': attribute type 2 has an invalid length.
[  186.231694][T10147] netlink: 'syz.0.1167': attribute type 1 has an invalid length.
[  186.245584][T10147] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1167'.
[  186.270599][T10147] netlink: 'syz.0.1167': attribute type 1 has an invalid length.
[  186.281441][T10147] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1167'.
[  187.090535][T10178] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1175'.
[  187.259641][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1178'.
[  187.410389][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'.
[  187.440735][T10196] bridge0: entered promiscuous mode
[  187.453522][T10196] macvlan0: entered promiscuous mode
[  187.455314][T10196] bond0: entered promiscuous mode
[  187.458037][T10196] bond_slave_0: entered promiscuous mode
[  187.460077][T10196] bond_slave_1: entered promiscuous mode
[  187.469822][T10196] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  187.835040][T10219] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  187.862732][T10223] IPVS: set_ctl: invalid protocol: 1472 0.32.0.0:15360
[  188.315567][T10261] IPv6: sit1: Disabled Multicast RS
[  188.321417][T10261] sit1: entered allmulticast mode
[  188.460458][T10275] netlink: 'syz.0.1202': attribute type 2 has an invalid length.
[  188.843429][T10301] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  188.889403][T10308] xt_CT: You must specify a L4 protocol and not use inversions on it
[  188.890999][T10307] xt_CT: You must specify a L4 protocol and not use inversions on it
[  189.783372][T10361] __nla_validate_parse: 6 callbacks suppressed
[  189.783391][T10361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1223'.
[  190.192543][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1225'.
[  190.244169][T10369] netlink: 'syz.2.1226': attribute type 2 has an invalid length.
[  190.302151][T10371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.521735][T10382] netlink: 'syz.1.1231': attribute type 1 has an invalid length.
[  190.525102][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'.
[  190.531586][T10382] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1231'.
[  190.636291][T10394] netlink: 'syz.0.1235': attribute type 6 has an invalid length.
[  190.651732][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1235'.
[  190.714206][T10398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1236'.
[  190.733436][T10400] netlink: 'syz.1.1237': attribute type 2 has an invalid length.
[  190.736877][T10401] netlink: 'syz.1.1237': attribute type 2 has an invalid length.
[  190.959592][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1239'.
[  191.101321][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  191.188073][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'.
[  191.242164][T10431] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1246'.
[  191.385963][T10450] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1250'.
[  191.747514][ T5222] Bluetooth: hci2: command 0x0405 tx timeout
[  192.225654][T10539] netlink: 'syz.1.1274': attribute type 2 has an invalid length.
[  192.566301][T10555] lo speed is unknown, defaulting to 1000
[  192.681851][T10570] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  192.738268][T10565] netlink: 'syz.2.1281': attribute type 1 has an invalid length.
[  192.752648][T10565] nbd: error processing sock list
[  192.760285][T10565] block nbd3: shutting down sockets
[  192.919341][T10585] x_tables: duplicate underflow at hook 2
[  193.262104][T10615] netlink: 'syz.2.1293': attribute type 2 has an invalid length.
[  193.480915][T10632] netlink: 'syz.1.1297': attribute type 2 has an invalid length.
[  194.145939][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.256735][T10683] netlink: 'syz.1.1310': attribute type 2 has an invalid length.
[  194.626753][T10704] lo speed is unknown, defaulting to 1000
[  195.400500][T10724] __nla_validate_parse: 15 callbacks suppressed
[  195.400524][T10724] netlink: 5080 bytes leftover after parsing attributes in process `syz.0.1319'.
[  195.522561][T10732] bond0: (slave bridge0): Releasing backup interface
[  195.525488][T10732] bridge0: left promiscuous mode
[  195.530377][T10732] bridge0: port 3(dummy0) entered disabled state
[  195.608770][T10732] dummy0: left allmulticast mode
[  195.610856][T10732] dummy0: left promiscuous mode
[  195.613084][T10732] bridge0: port 3(dummy0) entered disabled state
[  195.620364][T10732] bridge_slave_0: left promiscuous mode
[  195.623116][T10732] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.628648][T10732] bridge_slave_1: left allmulticast mode
[  195.630950][T10732] bridge_slave_1: left promiscuous mode
[  195.633393][T10732] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.641302][T10732] bond0: (slave bond_slave_0): Releasing backup interface
[  195.644758][T10732] bond_slave_0: left promiscuous mode
[  195.649475][T10732] bond0: (slave bond_slave_1): Releasing backup interface
[  195.653712][T10732] bond_slave_1: left promiscuous mode
[  195.662751][T10732] team0: Port device team_slave_0 removed
[  195.669811][T10732] team0: Port device team_slave_1 removed
[  195.673079][T10732] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.678492][T10732] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.682584][T10732] batman_adv: batadv0: Interface deactivated: gretap1
[  195.685420][T10732] batman_adv: batadv0: Removing interface: gretap1
[  195.776492][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'.
[  195.872813][T10747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1325'.
[  195.877441][T10747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1325'.
[  195.881463][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'.
[  195.885980][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'.
[  195.943180][T10755] validate_nla: 3 callbacks suppressed
[  195.943439][T10755] netlink: 'syz.1.1327': attribute type 2 has an invalid length.
[  196.106755][T10761] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1328'.
[  196.193729][T10767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1328'.
[  196.208016][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.211062][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.367244][T10780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1333'.
[  196.512552][T10789] netlink: 'syz.2.1336': attribute type 2 has an invalid length.
[  196.714906][T10803] netlink: 'syz.2.1339': attribute type 2 has an invalid length.
[  196.842408][T10809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1341'.
[  197.865241][T10851] netlink: 'syz.2.1354': attribute type 2 has an invalid length.
[  197.884718][T10851] syzkaller1: entered promiscuous mode
[  197.887861][T10851] syzkaller1: entered allmulticast mode
[  199.025544][T10915] netlink: 'syz.0.1367': attribute type 1 has an invalid length.
[  200.286243][T11013] tipc: Can't bind to reserved service type 0
[  201.189424][T11069] __nla_validate_parse: 19 callbacks suppressed
[  201.189442][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'.
[  201.397030][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'.
[  201.887873][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1417'.
[  202.054258][T11135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1420'.
[  202.147138][T11143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'.
[  202.151134][T11143] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1422'.
[  202.155358][T11143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'.
[  202.164915][T11145] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1419'.
[  202.171667][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'.
[  202.268239][T11147] netlink: 'syz.1.1423': attribute type 21 has an invalid length.
[  202.566582][T11172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1428'.
[  202.620676][T11174] netlink: 'syz.1.1429': attribute type 2 has an invalid length.
[  202.737077][T11181] netlink: 'syz.0.1431': attribute type 39 has an invalid length.
[  203.387000][T11207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  203.389499][T11207] IPv6: NLM_F_CREATE should be set when creating new route
[  203.391812][T11207] IPv6: NLM_F_CREATE should be set when creating new route
[  203.393995][T11207] IPv6: NLM_F_CREATE should be set when creating new route
[  203.471196][T11209] netlink: 'syz.2.1439': attribute type 2 has an invalid length.
[  203.889827][T11236] syz_tun: entered promiscuous mode
[  203.892643][T11236] macsec2: entered allmulticast mode
[  203.894374][T11236] syz_tun: entered allmulticast mode
[  203.898780][T11236] syz_tun: left allmulticast mode
[  203.900530][T11236] syz_tun: left promiscuous mode
[  204.886518][T11298] netlink: zone id is out of range
[  204.898567][T11298] netlink: zone id is out of range
[  204.900226][T11298] netlink: zone id is out of range
[  204.901829][T11298] netlink: zone id is out of range
[  204.903400][T11298] netlink: zone id is out of range
[  204.905369][T11298] netlink: zone id is out of range
[  204.907189][T11298] netlink: zone id is out of range
[  204.910629][T11298] netlink: zone id is out of range
[  204.912406][T11298] netlink: zone id is out of range
[  204.914231][T11298] netlink: zone id is out of range
[  205.090139][T11315] netlink: 'syz.0.1466': attribute type 2 has an invalid length.
[  205.199592][T11325] sctp: [Deprecated]: syz.1.1468 (pid 11325) Use of int in max_burst socket option.
[  205.199592][T11325] Use struct sctp_assoc_value instead
[  206.056091][T11373] netlink: 'syz.1.1479': attribute type 2 has an invalid length.
[  206.142181][T11374] lo speed is unknown, defaulting to 1000
[  206.247632][T11389] __nla_validate_parse: 10 callbacks suppressed
[  206.247648][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1479'.
[  206.318455][T11383] lo speed is unknown, defaulting to 1000
[  206.396325][T11395] netlink: 'syz.0.1482': attribute type 2 has an invalid length.
[  206.883569][T11403] batman_adv: batadv0: Adding interface: dummy0
[  206.885690][T11403] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.914539][T11403] batman_adv: batadv0: Interface activated: dummy0
[  207.032062][T11407] bridge0: entered promiscuous mode
[  207.037005][T11407] bridge0: entered allmulticast mode
[  207.053154][T11407] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1484'.
[  207.276873][T11420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1489'.
[  207.384708][T11429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.412706][T11429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.481490][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'.
[  207.541602][T11451] netlink: 'syz.1.1493': attribute type 4 has an invalid length.
[  207.664319][T11455] tun0: tun_chr_ioctl cmd 1074025675
[  207.666408][T11455] tun0: persist enabled
[  207.668284][T11455] tun0: tun_chr_ioctl cmd 1074025675
[  207.670006][T11455] tun0: persist enabled
[  207.789590][T11474] netlink: 'syz.1.1504': attribute type 2 has an invalid length.
[  208.234747][T11525] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1514'.
[  208.290036][T11529] x_tables: duplicate underflow at hook 2
[  208.381120][T11538] bond0: Device is already in use.
[  208.418017][T11538] netlink: 'syz.2.1520': attribute type 1 has an invalid length.
[  208.421375][T11538] netlink: 'syz.2.1520': attribute type 1 has an invalid length.
[  208.424165][T11538] netlink: 'syz.2.1520': attribute type 1 has an invalid length.
[  208.428390][T11538] block nbd3: shutting down sockets
[  208.522570][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1521'.
[  208.654480][T11547] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1523'.
[  208.998232][T11560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1526'.
[  209.001927][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1527'.
[  209.006767][T11560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1526'.
[  209.823919][T11620] netlink: 'syz.0.1539': attribute type 12 has an invalid length.
[  209.830015][T11622] netlink: 'syz.0.1539': attribute type 12 has an invalid length.
[  209.841301][T11620] netlink: 'syz.0.1539': attribute type 12 has an invalid length.
[  209.853719][T11622] netlink: 'syz.0.1539': attribute type 12 has an invalid length.
[  210.153784][T11645] vlan0: entered promiscuous mode
[  210.155887][T11645] erspan0: entered promiscuous mode
[  210.200450][T11649] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  210.769408][T11703] netlink: 'syz.1.1559': attribute type 2 has an invalid length.
[  211.396789][T11732] __nla_validate_parse: 10 callbacks suppressed
[  211.396805][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'.
[  211.844302][T11758] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  211.942898][T11761] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1573'.
[  212.087214][T11765] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1575'.
[  212.466619][T11781] tipc: Bearer <eth:netdevsim0>: already 2 bearers with priority 10
[  212.477188][T11781] tipc: Bearer <eth:netdevsim0>: trying with adjusted priority
[  212.483202][T11781] tipc: Enabling of bearer <eth:netdevsim0> rejected, failed to enable media
[  212.607172][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'.
[  212.616013][T11756] ==================================================================
[  212.618847][T11756] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  212.621772][T11756] Read of size 1 at addr ffff88801fec5832 by task syz.1.1571/11756
[  212.625273][T11756] 
[  212.626728][T11756] CPU: 1 UID: 0 PID: 11756 Comm: syz.1.1571 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  212.626749][T11756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.626760][T11756] Call Trace:
[  212.626767][T11756]  <TASK>
[  212.626776][T11756]  dump_stack_lvl+0x189/0x250
[  212.626800][T11756]  ? __virt_addr_valid+0x1c8/0x5c0
[  212.626819][T11756]  ? rcu_is_watching+0x15/0xb0
[  212.626836][T11756]  ? __kasan_check_byte+0x12/0x40
[  212.626857][T11756]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.626873][T11756]  ? rcu_is_watching+0x15/0xb0
[  212.626887][T11756]  ? lock_release+0x4b/0x3e0
[  212.626902][T11756]  ? __virt_addr_valid+0x1c8/0x5c0
[  212.626921][T11756]  ? __virt_addr_valid+0x4a5/0x5c0
[  212.626939][T11756]  print_report+0xca/0x230
[  212.626952][T11756]  ? rose_transmit_link+0x5c3/0x740
[  212.626965][T11756]  kasan_report+0x118/0x150
[  212.626985][T11756]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  212.627009][T11756]  ? rose_transmit_link+0x5c3/0x740
[  212.627027][T11756]  rose_transmit_link+0x5c3/0x740
[  212.627039][T11756]  ? skb_put+0x11b/0x210
[  212.627058][T11756]  rose_write_internal+0x11dc/0x1ac0
[  212.627076][T11756]  ? __pfx_rose_write_internal+0x10/0x10
[  212.627092][T11756]  ? __timer_delete+0x5d/0x390
[  212.627112][T11756]  rose_release+0x24e/0x520
[  212.627132][T11756]  sock_close+0xc3/0x240
[  212.627147][T11756]  ? __pfx_sock_close+0x10/0x10
[  212.627160][T11756]  __fput+0x44c/0xa70
[  212.627180][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1584'.
[  212.627179][T11756]  task_work_run+0x1d4/0x260
[  212.627205][T11756]  ? __pfx_task_work_run+0x10/0x10
[  212.627222][T11756]  ? task_work_add+0x377/0x420
[  212.627282][T11756]  ? __pfx_task_work_add+0x10/0x10
[  212.627303][T11756]  get_signal+0x11ed/0x1340
[  212.627326][T11756]  arch_do_signal_or_restart+0x9a/0x750
[  212.627351][T11756]  ? __pfx___sys_connect+0x10/0x10
[  212.627369][T11756]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  212.627398][T11756]  ? exit_to_user_mode_loop+0x40/0x110
[  212.627422][T11756]  exit_to_user_mode_loop+0x75/0x110
[  212.627436][T11756]  do_syscall_64+0x2bd/0x3b0
[  212.627453][T11756]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.627466][T11756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.627481][T11756]  ? exc_page_fault+0x9f/0xf0
[  212.627493][T11756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.627507][T11756] RIP: 0033:0x7fbca778e9a9
[  212.627522][T11756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.627536][T11756] RSP: 002b:00007fbca86c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  212.627553][T11756] RAX: fffffffffffffe00 RBX: 00007fbca79b5fa0 RCX: 00007fbca778e9a9
[  212.627563][T11756] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000004
[  212.627571][T11756] RBP: 00007fbca7810d69 R08: 0000000000000000 R09: 0000000000000000
[  212.627579][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.627587][T11756] R13: 0000000000000000 R14: 00007fbca79b5fa0 R15: 00007ffe049c1008
[  212.627602][T11756]  </TASK>
[  212.627607][T11756] 
[  212.748353][T11756] Allocated by task 7965:
[  212.750048][T11756]  kasan_save_track+0x3e/0x80
[  212.751975][T11756]  __kasan_kmalloc+0x93/0xb0
[  212.753898][T11756]  __kmalloc_cache_noprof+0x230/0x3d0
[  212.756090][T11756]  rose_add_node+0x23a/0xde0
[  212.757960][T11756]  rose_rt_ioctl+0xa48/0xfb0
[  212.759859][T11756]  rose_ioctl+0x3ce/0x8b0
[  212.761633][T11756]  sock_do_ioctl+0xdc/0x300
[  212.763458][T11756]  sock_ioctl+0x576/0x790
[  212.765244][T11756]  __se_sys_ioctl+0xfc/0x170
[  212.767075][T11756]  do_syscall_64+0xfa/0x3b0
[  212.768975][T11756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.771413][T11756] 
[  212.772443][T11756] Freed by task 11763:
[  212.774102][T11756]  kasan_save_track+0x3e/0x80
[  212.775992][T11756]  kasan_save_free_info+0x46/0x50
[  212.778078][T11756]  __kasan_slab_free+0x62/0x70
[  212.780012][T11756]  kfree+0x18e/0x440
[  212.781638][T11756]  rose_rt_device_down+0x473/0x4c0
[  212.783722][T11756]  rose_device_event+0x603/0x6a0
[  212.785801][T11756]  notifier_call_chain+0x1b6/0x3e0
[  212.787894][T11756]  __dev_notify_flags+0x18d/0x2e0
[  212.790029][T11756]  netif_change_flags+0xe8/0x1a0
[  212.792132][T11756]  dev_change_flags+0x130/0x260
[  212.794149][T11756]  dev_ioctl+0x7b4/0x1150
[  212.795928][T11756]  sock_do_ioctl+0x22c/0x300
[  212.797789][T11756]  sock_ioctl+0x576/0x790
[  212.799580][T11756]  __se_sys_ioctl+0xfc/0x170
[  212.801444][T11756]  do_syscall_64+0xfa/0x3b0
[  212.803309][T11756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.805731][T11756] 
[  212.806728][T11756] The buggy address belongs to the object at ffff88801fec5800
[  212.806728][T11756]  which belongs to the cache kmalloc-512 of size 512
[  212.812484][T11756] The buggy address is located 50 bytes inside of
[  212.812484][T11756]  freed 512-byte region [ffff88801fec5800, ffff88801fec5a00)
[  212.817921][T11756] 
[  212.818917][T11756] The buggy address belongs to the physical page:
[  212.821512][T11756] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fec4
[  212.824999][T11756] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  212.828424][T11756] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  212.831462][T11756] page_type: f5(slab)
[  212.833028][T11756] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  212.836474][T11756] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  212.839977][T11756] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  212.843347][T11756] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  212.846839][T11756] head: 00fff00000000002 ffffea00007fb101 00000000ffffffff 00000000ffffffff
[  212.850194][T11756] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  212.853678][T11756] page dumped because: kasan: bad access detected
[  212.856279][T11756] page_owner tracks the page as allocated
[  212.858588][T11756] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10, tgid 10 (kworker/0:1), ts 8564598070, free_ts 0
[  212.866432][T11756]  post_alloc_hook+0x240/0x2a0
[  212.868372][T11756]  get_page_from_freelist+0x21e4/0x22c0
[  212.870643][T11756]  __alloc_frozen_pages_noprof+0x181/0x370
[  212.873094][T11756]  alloc_pages_mpol+0x232/0x4a0
[  212.875150][T11756]  allocate_slab+0x8a/0x3b0
[  212.876990][T11756]  ___slab_alloc+0xbfc/0x1480
[  212.878924][T11756]  __kmalloc_cache_noprof+0x296/0x3d0
[  212.881074][T11756]  drm_atomic_helper_crtc_duplicate_state+0x72/0xb0
[  212.883688][T11756]  drm_atomic_get_crtc_state+0x19a/0x460
[  212.886101][T11756]  drm_atomic_get_plane_state+0x4c8/0x5a0
[  212.888349][T11756]  drm_atomic_helper_dirtyfb+0xce5/0xee0
[  212.890646][T11756]  drm_fbdev_shmem_helper_fb_dirty+0x160/0x2f0
[  212.893105][T11756]  drm_fb_helper_damage_work+0x224/0x710
[  212.895298][T11756]  process_scheduled_works+0xae1/0x17b0
[  212.897500][T11756]  worker_thread+0x8a0/0xda0
[  212.899401][T11756]  kthread+0x711/0x8a0
[  212.901071][T11756] page_owner free stack trace missing
[  212.903292][T11756] 
[  212.904391][T11756] Memory state around the buggy address:
[  212.906731][T11756]  ffff88801fec5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  212.910061][T11756]  ffff88801fec5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  212.913277][T11756] >ffff88801fec5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  212.916520][T11756]                                      ^
[  212.918772][T11756]  ffff88801fec5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  212.922001][T11756]  ffff88801fec5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  212.925246][T11756] ==================================================================
[  212.943921][T11756] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  212.946931][T11756] CPU: 1 UID: 0 PID: 11756 Comm: syz.1.1571 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  212.951908][T11756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.955937][T11756] Call Trace:
[  212.957296][T11756]  <TASK>
[  212.958514][T11756]  dump_stack_lvl+0x99/0x250
[  212.960351][T11756]  ? __asan_memcpy+0x40/0x70
[  212.962260][T11756]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.964408][T11756]  ? __pfx__printk+0x10/0x10
[  212.966310][T11756]  panic+0x2db/0x790
[  212.967912][T11756]  ? __pfx_preempt_schedule+0x10/0x10
[  212.970097][T11756]  ? __pfx_panic+0x10/0x10
[  212.971940][T11756]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  212.974338][T11756]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  212.976901][T11756]  ? rose_transmit_link+0x5c3/0x740
[  212.978993][T11756]  check_panic_on_warn+0x89/0xb0
[  212.981000][T11756]  ? rose_transmit_link+0x5c3/0x740
[  212.983110][T11756]  end_report+0x78/0x160
[  212.984908][T11756]  kasan_report+0x129/0x150
[  212.986759][T11756]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  212.989235][T11756]  ? rose_transmit_link+0x5c3/0x740
[  212.991349][T11756]  rose_transmit_link+0x5c3/0x740
[  212.993401][T11756]  ? skb_put+0x11b/0x210
[  212.995126][T11756]  rose_write_internal+0x11dc/0x1ac0
[  212.997335][T11756]  ? __pfx_rose_write_internal+0x10/0x10
[  212.999542][T11756]  ? __timer_delete+0x5d/0x390
[  213.001433][T11756]  rose_release+0x24e/0x520
[  213.003310][T11756]  sock_close+0xc3/0x240
[  213.005070][T11756]  ? __pfx_sock_close+0x10/0x10
[  213.007080][T11756]  __fput+0x44c/0xa70
[  213.008685][T11756]  task_work_run+0x1d4/0x260
[  213.010497][T11756]  ? __pfx_task_work_run+0x10/0x10
[  213.012594][T11756]  ? task_work_add+0x377/0x420
[  213.014577][T11756]  ? __pfx_task_work_add+0x10/0x10
[  213.016641][T11756]  get_signal+0x11ed/0x1340
[  213.018489][T11756]  arch_do_signal_or_restart+0x9a/0x750
[  213.020747][T11756]  ? __pfx___sys_connect+0x10/0x10
[  213.022846][T11756]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  213.025403][T11756]  ? exit_to_user_mode_loop+0x40/0x110
[  213.027591][T11756]  exit_to_user_mode_loop+0x75/0x110
[  213.029722][T11756]  do_syscall_64+0x2bd/0x3b0
[  213.031629][T11756]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.033655][T11756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.036026][T11756]  ? exc_page_fault+0x9f/0xf0
[  213.037813][T11756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.040138][T11756] RIP: 0033:0x7fbca778e9a9
[  213.041966][T11756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.049796][T11756] RSP: 002b:00007fbca86c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  213.053182][T11756] RAX: fffffffffffffe00 RBX: 00007fbca79b5fa0 RCX: 00007fbca778e9a9
[  213.056376][T11756] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000004
[  213.059530][T11756] RBP: 00007fbca7810d69 R08: 0000000000000000 R09: 0000000000000000
[  213.062725][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.065829][T11756] R13: 0000000000000000 R14: 00007fbca79b5fa0 R15: 00007ffe049c1008
[  213.068976][T11756]  </TASK>
[  213.070955][T11756] Kernel Offset: disabled
[  213.072750][T11756] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:22:38  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81000000 RBX=0000000000000001 RCX=210e9506a3932400 RDX=00000000000a714d
RSI=ffffffff8be28be0 RDI=ffffffff8be28ba0 RBP=dffffc0000000000 RSP=ffffc90007c07118
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc90007c07238 R11=ffffffff81ad0050
R12=ffffffff8234c74b R13=ffffc90007c07238 R14=ffffc90007c071e8 R15=00000000000134c7
RIP=ffffffff8172ac32 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0ec38a1380 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2d9773 CR3=0000000032722000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff283a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000018ee RDI=00000000000018ef RBP=00000000000003f8 RSP=ffffc900065cf210
R8 =ffff8881080c0237 R9 =1ffff11021018046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af1897 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbca86c96c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2dedda CR3=0000000129312000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000306d616574
XMM02=9e910ebbf095c09f e9d515496e8217aa XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=758e8b6c0f0c99c8 d5e72e130aae2385
XMM06=30baa12a5aa9e0c3 65398c592bd5433f XMM07=07f47ca302f1d346 aefaadfcc047a52d
XMM08=ec81964372494472 dae933de30f9f787 XMM09=0000000000000000 00007ff283a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
