last executing test programs:

2m15.738900236s ago: executing program 32 (id=2870):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="f07ca2a5ddef2d495ba3c21a71e6da3785230a40f3a5dfedbc1ec673e7334f395602b4da2aa2612d9bb0601c6a07014f12b5d7fcb2bf9321a7720d5d35edc88f5d6efa0a01b86e07ba3951267ec41fd398895774152bbf131785011d5e329f623e4a54cab4978df5fff95c923dad73bbae589767d0e04790172082c36246361a60f3", @ANYRES32=<r2=>r1, @ANYRES32], 0x48)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
shutdown(r4, 0x0)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000080000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766aadb6d2ffbac2100ae3e4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRESDEC, @ANYRES32=r4, @ANYRES8=r2, @ANYBLOB="030000000d0000000100104000c3a001970851dee787c69a8472ccb246f822a265f7fa5cb020c7b3ca3fd6"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0x58, &(0x7f0000000300)}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e657464657673696d3000000000"], 0x4c}}, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x700, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0xfffffffffffffea1, 0x1, @rand_addr=0x64010102}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1404, 0x1, 0x70fd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m3.140993389s ago: executing program 2 (id=3061):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000068000100040000e63bfc70698e40be000000007796b5dd9d20c73b00d9f4bb59c6000400089db4b4d6517ce25c7acaaa8d793b00f0ff7f1417c9001ef705000000d868e6d50b43bf7533e1a38a752e9fe89094556e850786e2321f88b19f6b56124a26ea3c733bef4055a1bc01285461f1428706adefc0e2ebdd7477dd5a789ff974ddf73ff2ba71a30f508b"], 0x34}, 0x1, 0x0, 0x0, 0x4c050}, 0x8000)

2m2.933412832s ago: executing program 2 (id=3065):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
connect$can_j1939(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ee, 0xf83, 0x8}, 0x1c)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00'})
sendto$packet(r4, &(0x7f0000000280)="01000000", 0x4, 0x0, &(0x7f0000000000)={0x11, 0x8100, 0x0, 0x1, 0xe0, 0x6, @remote}, 0x14)

2m2.77109765s ago: executing program 2 (id=3066):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r2, 0x0, 0x0) (async, rerun: 32)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (rerun: 32)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB="0a001b954bed77f56a5c6c0326f8989cb8490dd3185a0461bae94c020100bbbbbbbbbbbb0000"], 0x48}}, 0x0)

2m1.659013995s ago: executing program 2 (id=3074):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x46}, @void, @val={0xc, 0x99, {0x5, 0x61}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1a}]}, 0x30}, 0x1, 0x0, 0x0, 0x10004848}, 0x8000) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0xffffffffffffffff, 0x7, 0x6}, 0x3, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x94) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884)

2m1.142864698s ago: executing program 2 (id=3080):
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0xa, 0xffe0}, {0xc, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008814}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
accept4$netrom(r0, 0x0, 0x0, 0x0)

2m0.639218519s ago: executing program 2 (id=3084):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async)
unshare(0x62040200)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94)
write$tun(0xffffffffffffffff, 0x0, 0x3e) (async)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r4, 0x5452, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) (async)
setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x46, 0x0, 0xa}, 0x28) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="c4070000", @ANYRES16=r8, @ANYBLOB="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"], 0x7c4}, 0x1, 0x0, 0x0, 0x40814}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'\x00', <r9=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r10=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="c7e3c91c9f1b355b90f0062d96b4b1c6a2cbeed26d9ce390b94b162968e82f27ebfc8465e81f5e6c25ed58df14a376f878f0490c510d5cd2705891bf13969a5ef3eae01e02f3bfaf8386"], 0x48}}, 0x0)

1m45.556831131s ago: executing program 33 (id=3084):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async)
unshare(0x62040200)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94)
write$tun(0xffffffffffffffff, 0x0, 0x3e) (async)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r4, 0x5452, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) (async)
setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x46, 0x0, 0xa}, 0x28) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="c4070000", @ANYRES16=r8, @ANYBLOB="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"], 0x7c4}, 0x1, 0x0, 0x0, 0x40814}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'\x00', <r9=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r10=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="c7e3c91c9f1b355b90f0062d96b4b1c6a2cbeed26d9ce390b94b162968e82f27ebfc8465e81f5e6c25ed58df14a376f878f0490c510d5cd2705891bf13969a5ef3eae01e02f3bfaf8386"], 0x48}}, 0x0)

1m17.963759781s ago: executing program 5 (id=3447):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0)
gettid()
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000005bf989bfb7ffff95d80000000000000000000000f900000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10)
unshare(0x10000000)
gettid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'})
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbcbbbbbbbbb4aa468739b8508060001080006040001da82ce4f59beaaaaaaaaaaaa0a01010057330377"], 0x0)
sendmsg$inet(r3, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x4, @empty, 0xde4}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x1, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x90}}, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
close(0x3)

1m15.684759089s ago: executing program 5 (id=3467):
syz_init_net_socket$ax25(0x3, 0x5, 0xcc)
unshare(0x20000400)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r1}, 0x8)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a00000000000000010000060400000007000008"], 0x0, 0x82, 0x0, 0x8, 0x2040000}, 0x28)

1m15.274370388s ago: executing program 5 (id=3472):
r0 = socket$netlink(0x10, 0x3, 0x7)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async)
bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
recvmmsg(r1, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1}, 0x800}, {{&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/102, 0x66}], 0x2, &(0x7f0000000340)=""/24, 0x18}, 0x8}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000600)=""/101, 0x65}], 0x5, &(0x7f0000000700)=""/181, 0xb5}, 0x8}, {{&(0x7f00000007c0)=@isdn, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000840)=""/8, 0x8}, {&(0x7f0000000880)=""/255, 0xff}, {&(0x7f0000000980)=""/137, 0x89}, {&(0x7f0000001b00)=""/51, 0x33}], 0x4}, 0x5}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/151, 0x97}, {&(0x7f0000002c40)=""/53, 0x35}, {&(0x7f0000002c80)=""/114, 0x72}, {&(0x7f0000002d00)=""/20, 0x14}, {&(0x7f0000002d40)}], 0x6, &(0x7f0000002e00)=""/198, 0xc6}, 0x8000}, {{&(0x7f0000002f00)=@nl=@proc, 0x80, &(0x7f0000003240)=[{&(0x7f0000002f80)=""/232, 0xe8}, {&(0x7f0000003080)=""/116, 0x74}, {&(0x7f0000003100)=""/107, 0x6b}, {&(0x7f0000003180)=""/167, 0xa7}], 0x4, &(0x7f0000003280)=""/187, 0xbb}, 0x6}, {{&(0x7f0000003340)=@pppol2tp, 0x80, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/51, 0x33}, {&(0x7f0000003400)=""/249, 0xf9}], 0x2, &(0x7f0000003540)=""/148, 0x94}, 0x4}], 0x7, 0x4, &(0x7f00000037c0)) (async)
recvmmsg(r1, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1}, 0x800}, {{&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/102, 0x66}], 0x2, &(0x7f0000000340)=""/24, 0x18}, 0x8}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000600)=""/101, 0x65}], 0x5, &(0x7f0000000700)=""/181, 0xb5}, 0x8}, {{&(0x7f00000007c0)=@isdn, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000840)=""/8, 0x8}, {&(0x7f0000000880)=""/255, 0xff}, {&(0x7f0000000980)=""/137, 0x89}, {&(0x7f0000001b00)=""/51, 0x33}], 0x4}, 0x5}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/151, 0x97}, {&(0x7f0000002c40)=""/53, 0x35}, {&(0x7f0000002c80)=""/114, 0x72}, {&(0x7f0000002d00)=""/20, 0x14}, {&(0x7f0000002d40)}], 0x6, &(0x7f0000002e00)=""/198, 0xc6}, 0x8000}, {{&(0x7f0000002f00)=@nl=@proc, 0x80, &(0x7f0000003240)=[{&(0x7f0000002f80)=""/232, 0xe8}, {&(0x7f0000003080)=""/116, 0x74}, {&(0x7f0000003100)=""/107, 0x6b}, {&(0x7f0000003180)=""/167, 0xa7}], 0x4, &(0x7f0000003280)=""/187, 0xbb}, 0x6}, {{&(0x7f0000003340)=@pppol2tp, 0x80, &(0x7f0000003500)=[{&(0x7f00000033c0)=""/51, 0x33}, {&(0x7f0000003400)=""/249, 0xf9}], 0x2, &(0x7f0000003540)=""/148, 0x94}, 0x4}], 0x7, 0x4, &(0x7f00000037c0))
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000ef0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000090000000000000000000100000a88000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000005400048050000180080001006669620044000280080003400000000308000340000000120800014000000013080001400000001208000240000000020800024000000001080001400000000e0800034000000008050007"], 0xb0}}, 0x0)
accept$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) (async)
accept$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000100001fffffff000000000000300000a140000000b0a010200000000000000000700000314000000160a0108000000000000000007000000540000001100010000000000000000000100000a"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x18)

1m15.023094326s ago: executing program 5 (id=3474):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x4) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) (rerun: 32)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f00000001c0)="1713"}, 0x20) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
close(r6) (async)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r4, 0x5, '\x00', 0x0, r7, 0x4, 0x3, 0x2}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) (async, rerun: 64)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x20010, r9, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) (async, rerun: 64)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r10 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000200)=0x200) (async)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r10)
sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x40, r11, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4042081}, 0x20004080)

1m14.702622775s ago: executing program 5 (id=3477):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000400010002081000418e00000004fcff", 0x58}], 0x1)
syz_emit_ethernet(0x5a, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800240600fc01003d000000000000000000000001fe80000000001a0000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90020000907800000505f42f7ffe0bf98923c486d4219ab9"], 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf}, {0xfff3, 0x10}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x1e)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000010105000000000000000000000000050c00198008000100000000003400198008000200090400000800010014eaffff070001002af1ffff070001000800000008000200420e000008000100400c0000180004801400038008000240000000370500010008000000d9dc0a86333613861cdf06f8218eeaff472ea6ea36e24d110c95d4d67fc069aaee0000"], 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
socket$alg(0x26, 0x5, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

1m13.95001071s ago: executing program 5 (id=3482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x14) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x14)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
shutdown(r5, 0x1) (async)
shutdown(r5, 0x1)
socket$inet(0x2, 0x80001, 0x84) (async)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={<r8=>r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='veth0_virt_wifi\x00', 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaab2bbbbbbbbbb0800450000380000000004019078ac900001ac0014aa030490781200183f2500000000000000000100007f000001ac14142200186371ae9b1cd2"], 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r4, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000280)={r8, @in={{0x2, 0x4e22, @local}}, 0x4, 0x2e, 0x8001, 0x8000, 0x80000000}, &(0x7f0000000140)=0x98)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023000000", @ANYRES32=0x0, @ANYBLOB="140002"], 0x2c}}, 0x0)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x40)

59.54959649s ago: executing program 6 (id=3583):
r0 = socket$inet(0x2, 0x2, 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40008000000000061115000000000009500"/32], &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x200, 0x4}, 0x10}, 0x94)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={<r4=>0x0}, &(0x7f0000000140)=0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000001000000000000000000000000000000feffffff0000000000"], 0x50)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000480), &(0x7f0000000280)=@udp=r7}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f0000000380), 0x0}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000201000500100005000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="074b4f5a5ad8053e"], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000900)={&(0x7f0000001180)="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", &(0x7f00000006c0)=""/76, &(0x7f0000000840)="a861978c9e63b7690333dfc0cfe92c303a5bd7e3beb0a79dd4b1cbd28174d192d961c9340b34f8f7b1baa6f8c1ef27abaefe189eca20b1e440f92dfcd88e5126d0e97d57057b8b6ea8d03738c3ff121978cc4403e927dde8e80a6753e323545f43c8cb7e50594a54dd79b88c2e5180591a92453480027debdfc0ae14fb469638dc5e0f5f1cc4e3440a08cde4a582fb08d9017d", &(0x7f0000000740)="cd8c6e0e370ff42c127a61396abbdbaef28b8cd1644389c53b8fa4c2a80b", 0xe3, r6}, 0x38)
r10 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={r4, 0x5, 0x20}, &(0x7f00000001c0)=0x18)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r11, 0x111, 0x4, 0x1, 0x4)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r4, 0x5, 0x4, 0x6, 0x10001, 0x3}, &(0x7f0000000040)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', <r12=>0x0, 0x7, 0x18, 0x4, 0xaf1, {{0x14, 0x4, 0x2, 0x8, 0x50, 0x66, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@generic={0x0, 0x5, "3cf6e9"}, @cipso={0x86, 0x30, 0x3, [{0x1, 0x7, "0b9e7c8ee7"}, {0x2, 0x2}, {0x7, 0x9, "2f441dd655fb71"}, {0x6, 0x5, "603c80"}, {0x2, 0x5, "57ea4a"}, {0x1, 0xe, "06512ee42d2129ddfab9f0ad"}]}, @generic={0x86, 0x6, "b06aa362"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001d00110526bd7000fedbdf2507000000", @ANYRES32=r12, @ANYBLOB="8000200b080001006401010008000800", @ANYRES32=r13, @ANYBLOB="080007000200000014000100fc01000000000000000000000000000108000100ac1e010108000700070000000800090000008004060006004e230000080004000c000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x14000045)
accept4$bt_l2cap(r2, 0x0, &(0x7f0000000100), 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x2000, 0x0)

58.962904487s ago: executing program 6 (id=3587):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x108, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xf4, 0x1, [@m_gact={0xc4, 0x1b, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x1, 0x2, 0x298562a9, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xb, 0xffffffffffffffff, 0xb43, 0x5}}]}, {0x67, 0x6, "79cd4003925c416ad7e46ab942c97237bd04b1cd09a764f26a7367288f192765542a5b8bb6e27c68c5999736f33b9fe618648229a8aef1bd7a5b1e62a2d6b60a9a701a87116da9073d731911f62b9b3817147f596ba569bbcc9939737592bbd9f2acd8"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x108}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r5, 0x0, 0x4000044) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x8}}}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r8 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r9 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async)
listen(r9, 0x2) (async)
listen(r8, 0x80) (async)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x4}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffff1f1, 0x80000001}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

58.889312914s ago: executing program 34 (id=3482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x14) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x14)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
shutdown(r5, 0x1) (async)
shutdown(r5, 0x1)
socket$inet(0x2, 0x80001, 0x84) (async)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={<r8=>r7, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='veth0_virt_wifi\x00', 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaab2bbbbbbbbbb0800450000380000000004019078ac900001ac0014aa030490781200183f2500000000000000000100007f000001ac14142200186371ae9b1cd2"], 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r4, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000280)={r8, @in={{0x2, 0x4e22, @local}}, 0x4, 0x2e, 0x8001, 0x8000, 0x80000000}, &(0x7f0000000140)=0x98)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023000000", @ANYRES32=0x0, @ANYBLOB="140002"], 0x2c}}, 0x0)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x40)

58.690130522s ago: executing program 6 (id=3591):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCSIFHWADDR(r7, 0x8931, &(0x7f00000000c0)={'netdevsim0\x00'})
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@setlink={0x20, 0x13, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x800)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r10=>0x0})
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r10, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r12}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6   \x00'}, 0x20)
socket$inet6_sctp(0xa, 0x5, 0x84)

57.869182752s ago: executing program 6 (id=3596):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r3=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'gre0\x00', <r5=>0x0, 0x80, 0x10, 0x2, 0x1, {{0x7, 0x4, 0x0, 0x1, 0x1c, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @private=0xa010101, {[@ssrr={0x89, 0x7, 0xe0, [@empty]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r6=>0x0, 0x1, 0x20, 0x20000000, 0x7fffffff, {{0x1a, 0x4, 0x1, 0x4, 0x68, 0x64, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}, {[@end, @rr={0x7, 0x1f, 0x2a, [@multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @broadcast, @local, @broadcast, @rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0xc, 0x85, 0x1, 0x9, [{@multicast1, 0x3}]}, @timestamp={0x44, 0x18, 0x86, 0x0, 0x7, [0x9, 0x2, 0x3ff, 0x4, 0x2]}, @ssrr={0x89, 0xf, 0xf5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote]}]}}}}})
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x44818, 0x43e4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r9, 0x100, 0x35040}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000480)={'ip_vti0\x00', <r10=>0x0, 0x80, 0x20, 0x447280, 0x1, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x67, 0x0, 0x30, 0x29, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}]}}}}}) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, <r11=>0x0}, &(0x7f0000000540)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={<r12=>0x0, @empty, @initdev}, &(0x7f00000005c0)=0xc)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x128, r2, 0x205, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4050}, 0x404c820)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) (async)
r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)

57.418548633s ago: executing program 6 (id=3598):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x4}, @TCA_CAKE_RTT={0x8, 0x7, 0xa4b}, @TCA_CAKE_TARGET={0x8, 0x8, 0xb}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xa2}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x7c}}, 0x4000)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800)

56.949058747s ago: executing program 6 (id=3603):
unshare(0x68040200)
unshare(0x40400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x34, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x6, 0x1a, '\xff\xff'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4088080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2)
r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.max\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000100)=0x4, 0x12)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x30}}, 0x4000000)

50.546939594s ago: executing program 4 (id=3658):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e3deb150a6a97a73b168ccd8f7872"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x15, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x558}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0x8e}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0xc7, 0xf8, &(0x7f00000013c0)=""/248, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001500)={0x5, 0x5, 0xb28f, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001540)=[{0x5, 0x1, 0xd}, {0x5, 0x1, 0x3, 0xa}]}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x29, 0x48, &(0x7f0000000100)=r2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x0, 0x0}}, 0x10)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockname$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)

50.236017888s ago: executing program 4 (id=3661):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4008085) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x1, 0xfffffffe, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0x4, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb, 0x4}, 0x7, 0x3}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x2}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8000}]}}]}, 0xa4}}, 0x4000) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000002060108000000000000000000000000050005000a000000050001000700000013000700686173683a6e65742c"], 0x38}}, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x3, 0x0) (rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) (async)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000010010c80"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

49.975125864s ago: executing program 4 (id=3664):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000004762000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x0, [{@remote}, {@multicast2}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}}}}, 0x0)

49.84001574s ago: executing program 4 (id=3666):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40080c1)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e24, 0x10001, @ipv4={'\x00', '\xff\xff', @remote}, 0x800000}, 0x1c)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='bond_slave_1\x00')
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x22020600)
r4 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={<r5=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x6, 0x1, 0x9, 0x2, 0x9}, &(0x7f0000000180)=0x98)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={r5, @in={{0x2, 0x4e25, @empty}}, 0x100, 0xe41b, 0x5, 0xc, 0xcf, 0x1fd, 0xe}, 0x9c)
openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10001, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x10, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x4, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc874}, 0x4008000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r8}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)

48.613203494s ago: executing program 4 (id=3682):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x800}}, 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x800}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x20000000, 0xffff}}]}, 0xc4}}, 0x4000000) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x20000000, 0xffff}}]}, 0xc4}}, 0x4000000)

48.47499258s ago: executing program 4 (id=3683):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910280000000000630a64ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
syz_emit_ethernet(0x13, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@llc={0x4, {@llc={0x42, 0xfe, "87", "a90e"}}}}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0xb, 0x0, 0x20000000)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910280000000000630a64ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async)
syz_emit_ethernet(0x13, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@llc={0x4, {@llc={0x42, 0xfe, "87", "a90e"}}}}}, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0xb, 0x0, 0x20000000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)

41.875216962s ago: executing program 35 (id=3603):
unshare(0x68040200)
unshare(0x40400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x34, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x6, 0x1a, '\xff\xff'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4088080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r2)
r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.max\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000100)=0x4, 0x12)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x30}}, 0x4000000)

33.086053983s ago: executing program 36 (id=3683):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910280000000000630a64ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
syz_emit_ethernet(0x13, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@llc={0x4, {@llc={0x42, 0xfe, "87", "a90e"}}}}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0xb, 0x0, 0x20000000)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910280000000000630a64ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async)
syz_emit_ethernet(0x13, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@llc={0x4, {@llc={0x42, 0xfe, "87", "a90e"}}}}}, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0xb, 0x0, 0x20000000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)

31.698643894s ago: executing program 8 (id=3796):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r11}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x800)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
pwritev(r12, &(0x7f0000000180), 0x0, 0x8, 0x2)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bond0\x00'})
syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x5a}}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff088a8", 0x0, 0x104, 0x6000000000000000, 0xc1, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab30", 0x0}, 0x50)

30.875849966s ago: executing program 8 (id=3800):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 64)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="620a00000000000061318c000000000085c66cf6bbc5790e0b00000000b23db21711e1b7fc440c1e8b3505bb594745b00277a3bf75ed906342074edc0c10d853bee742ffe778d603cb5d142eaf06b363b8b52636a8b7b28114ed8feeaa4864e8b83be05e0c6adafa2f7c48e7fac7d483e3645250b9b3988181f45a63090874d25386087f176bd6675c58a529dac9059e1cf614ab22de1ce003cf869c5e90dc48b8d627a2aee85df07c98b55e"], &(0x7f0000000000)='GPL\x00'}, 0x94) (rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r2 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000380)=@ethtool_channels={0x3d, 0x5, 0x5, 0x1, 0xff, 0x2, 0x0, 0x5, 0x4}}) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) (async)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000040c0)='reno\x00', 0x5) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', <r6=>0x0})
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4c4ba377f1830121}, 0xc, &(0x7f0000000280)={&(0x7f0000001300)={0x12a0, 0x13, 0x400, 0x70bd2b, 0x25dfdbfd, {0x15, 0x6, 0x9, 0x7f, {0x4e23, 0x4e24, [0x1, 0x3, 0x0, 0x1], [0x0, 0x7ff, 0x794d, 0x435b], r6, [0x8, 0x3]}, 0x0, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x62, 0x1, "fc50ce32c35a8e9ebb957e0fdcbafa4b4855839eabd53c86e80607b78529e247d25e257a91373fb909b1c91dc28545ce559ee02be6e6b9e2619ad331254e1d8f383f07bfb50bb39df386a1c301341a7e3b71b499c1fc36d0323f50693f7f"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "0b864b898471a4b7059f3b87f28a938dee0f110c39189f6782ee1549d058a4b0636a0134a0bbf899b8da97ec341edf9249764d4af7218690d3f1751c90bd93f5e2af83cfa6d91a4e9089a1967e7e13ecc45a5679b47e6b973053130260b5acb18ad341d1ce4ee53162cdda229a777aad0fdeae29b7c5fc3a6ebf582704a14e700f"}, @INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "8c9e84fd02f853d2cb2716262d58718fc09b4ed69334af8b460538fa05aa98099e129eaba5de0b172192193c532816a06688913d277e3b8ec85eda8e33dd02ebf60dd75f3e246d24c25b9b9680512cb0ebacc54a308c6878bbfe79daed84671f9e4d2ea62924b59506a4160990abead8149b227b035c7db7943d80c55438e7717c440ae1a77c04f7553433c30563fb21c58147811cf431dfe8c7b6e9"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "9ed7f3f0d9b65aff9bf9aab4b3fb37e15115821a4a"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "15c37c656efbb65324b9efcfe0b04f140454c77c467253fd8a3c79799b44f6896711fefc0f022bfc4b6f6464cff86ca5"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "4f8907"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "8fd4037be8215022baf06dd109b618e53b39c777859d0d46cda096c0e927d5ed26d789a0e60bff432d3a24369097f15f95414ddab601df27b7c809b59edc964c22d064f02e40ce62baa77875bb4e5ff732606b0685a7d267d3bfc0ef52a775524e7bb729c26428"}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x50}, 0x4008000) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
sendto(r8, &(0x7f0000000040)="5afa3fd29bffff", 0x7, 0x4000846, &(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
accept4(r9, &(0x7f0000000440)=@l2={0x1f, 0x0, @none}, &(0x7f0000000240)=0x80, 0x800) (async)
close(0x4) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=r8], &(0x7f00000004c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='task_newtask\x00', r10, 0x0, 0xd}, 0x18)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

30.36296242s ago: executing program 8 (id=3802):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000007ff0000b55deefa00000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000600)="7b84cda76573b3638a1584e1211a863d6c97bb8dba49dcd194a5aaeb7e9cae7443c9d72a0e430d8da9988a05f3715994170632c1fa83570300c63f56605ac41dd69345998ed2b94a61d0dbc8d6f6e24e0513abec71b93e2b985fdf58f5b6a50793a8eeee6b7a560e31", 0x69}, {&(0x7f0000000680)="23413a3b31a0d9b14087ab553229afba3f5c43ab8db28f836db601d7ad9eb1ee8264142565f7cdf4cb83fa13b2ec573b88cd2822a78c9b6cc6a71c5b92263b1927a8c094a3edf82a7214c2f326764caf85a8496a5fe2c6f570ad5f4844ecbfdfb22f28f3ddb9fba21ddb823a562cbd2df238e5fbbab9bf695f64c755ee25ad1358b49ab56315bcf945d3b21c5744653ebe97998151b0684631b9d45d974d9d8d9805b2450e9f598756380599", 0xac}, {&(0x7f0000000d00)="a86bca4f83457d5c2662cb1b6614ae8c30b531045f663dfd551bc009825c555ab0f9c9a2c17b4c9f09e1d865a4fed1b9100e61a780aa28d9640ebd9215a42bcbf0c9e001843b2750dbaa586f614c9a0d5c761f2b0fd7adf221c3bc6694ec61789e92fb19cb00c9cb33a97007546f7ac7f46a1438bddad49b157228b4a2f84e1db39ef8a875b755d362", 0x89}, {&(0x7f0000000840)="2d14c7e0b9208b9ce2e81178127372a96ea54657bdfa399056df2a5ae18cae09bbb5ddc7ac8019af96826e7e3324b8e8d6ff4505ecc3d291c6a973c45f3206664b7a63c9e9a2cdefe830d7614856c072055ad3f14e0ae362dcd728950c7697ff982d4ffa895607d7f3ced48fa1fd506f662ab8502a443e0876665a2afcd1d55b28cd873ca01c0134d4966ce20bc19f66d7badd71eb992c6ac936b4449975bcdae162aac775ee1168ccced8b940ca220477d03fd8c2211c2a280ced0b4f1e6d1bf6b50b2486290406f6868bf825946ed8afd70165d14a0f2c7763ff10eb8f30d232", 0xe1}, {&(0x7f0000000780)="0074071bafd0274ee82b721673d416f3aa8046ad896341451c1600848cf320d66fc5932f8bd700e48cca81dbde3df27bfe3474c2f7b9db9b6838043be465970609c3c53d4812f1451b0000000000008851d7f8f6bd766790e32c1919388d5e936d8660b580a97b410ae54534f32a02577f21ddfaae6a30cce7b3423059af8c5cd0de77d57ac68d9dfd5ad29af497d38004b894da0a6a084794d3649b6ac5a3599310f88b8f1b922cec03ac23b558860000000000000066649ae64c0c8d7a8f88", 0xc0}, {&(0x7f0000000a00)="c124b422d1ffb02407f171cf08f44cdd1ac66c422794649bd2865e055967de6b85d9c15efe2678dd5b311bb4d178b75ad263eb771d17d740ed3db292273bbdfd84fbacd504f3c26f54a76487275d35b2ac0b7d713b6b9f1ca473d8d5bfde89f5afdd372a847ce87a4117413fc4e0d4ab0482d5da3eec9d8c774d1e9a", 0x7c}, {&(0x7f0000000dc0)="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", 0x126}], 0x7, 0x0, 0x0, 0x7400}, 0x85)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80, 0x100000)
mmap(&(0x7f0000b94000/0x3000)=nil, 0x3000, 0x2, 0x3032, r0, 0x2ff28000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x2000000}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r3}, 0x18)
r4 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)='%pK    \x00'}, 0x20)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}}}, 0x6, 0x6191, 0xd7cf, 0x200, 0x11, 0x8, 0xf}, &(0x7f00000004c0)=0x9c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
r7 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x50, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r8, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.events.local\x00', 0x7a05, 0x1700)
write$cgroup_int(r9, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000007cc0)=ANY=[], 0x14}], 0x1}, 0x0)

30.055298717s ago: executing program 8 (id=3804):
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x800})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
syz_emit_ethernet(0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="9ba64e95a0383181717dfe17f990c7122f0c8582c00a86bef400000000000000"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f00000000c0)=0x1)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'netdevsim0\x00', @multicast})
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, 0x0, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x40000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES32], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000081)
sendmsg$NFT_BATCH(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1000003}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet(0x2, 0x4, 0x8001)
close(r9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600))
ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

29.259678628s ago: executing program 8 (id=3808):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x8, 0x100001}, 0x50) (async)
getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x800, '\x00', 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
r0 = socket$inet6(0xa, 0x80002, 0x0) (async)
r1 = socket(0x23, 0x5, 0x0)
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r2}, 0x10) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000340)=[{&(0x7f0000002000)="f838b39ffa3563660f9814b4227413e01fae8c141a89fc121c5f52b430714dbfc5ba621390d85264f9f52ca984710f2881e3212a01c3034108a0c02d4e919f4ee18f640d365b63ac188f41180848d0d665f4579b93862a15f7b4b028f4cde79106a7d282246ac8139032e3c2b4b18924f0edb1a8bd986355a2cbad0104572adf7a986e927e0db561b8f711c7e23bbc1a5623b3704c55b2692a59ccb07d2a2de3321a476d3603ede9dbf268e67a43b491d980dbaa47e4e23c1f84379261076492f0a46598b1c2913db95ece9a9707d220f22aa438f29329ffef4cd6ebfd65ef97015949009f057d45c159173d7cb724e10037930e6674b18b607ef8d9a31fffa75579b4946adda7aaef92c894dea722960f333e0091f1f5119cfa9b4bef09d038545b640136210c93c329ed414e9dd66d3fe95ccca9ad614a1a97ca69c24fbeba68b23b2e00f86112e449979f4c982d2979740ff35eab13b861a6fb82c4cc90cf90275bf3029088558f16ca95d0056f0896131b4d62a85b6e3934bc9cef4824ca26d4a3042eb245243cc85a3c0fd1a477f4d22e55df0552f741d66995b0aac6115b7b9a455cd63d72ccd475eaaffd61bd680c9f3c622ca346afd8d8fc0097b61ad9ab12334f087a67c7db8010f7c096ac58b249dc453e705e6b70b9716f2b25be92b1eb2ea4059a580075ebeb08638351a23d7b00a8c28b989904e77edb5ac8824d97efec33916d5b90b359072a96490a2debe5f1b32fc52376a9168bd5407e6ca04ea62810ed78d584756600c738c189cd84c53ba8c86ba3340486e57e79c5068ca821e5e5622a977810e7536fe2d1bfe4125ffbdd0ad9f9b83266cd64570926612d130929c2112250755a1df6d8adb07d1d3b757cfea3a4b5e1cbfb061ec435c3f827ac25b40c556365dd410eff71a6ad47ffa5c832f44dc5fcf6a8cdae20850759df64b043b16a8782ee71de81812b06b2162dcc87eb34277dfd6ab7978e67653a8ec3a72a403478929a8cad89bba6088b54cfcbb25d1c3274dc8568229f1145c645c7e9fa9f28567d379bad2b467ce245223784576ec5b1cc2568153646b56ceaabb10396ab678b01ea61c28feba102284136d015cd8ce0c745ba0e8e2839ae928396b3446d7f824443ae92a8607196458799bc39ed67215a616366b7cfc2e216846441260d2dfd4c42039ca35bc53e1fb7885996ee8a1570e98a726e8a263898a6c9d885b4c88b81c6457587ed1959a02da5fb1ed3ae1decc14927c610010ce21f7297899167cea2231a99dc8b031e20c4d05987ff27ec2ecf9f90ccbad959e976ff9d2945d8975c9c4241fbd89af9164d3d0fc3fb12108304b33d6f50115362a518be54dd7b4bf213cd6f27a0257b8087f16b03997a68342f8ad5d253e27bab8f838211d79ae58cb0eb560c9994e3731c25cc3bf2e0ffbf13e746733da1f77c8b7f0ec2c93a9a27b7d56577f4aec10c270ddea7dc5b3f64feebf979aac54d155b903e4a7c946860d83d7aa53b80ecf86ec8d524a3d9ef3bb6b3d9b867f32282742b9e5792eddc0d466ac6e90971005d172d27cdbfa731e4cb1e5d6426a85d2d0bea19c7f27e3e6f781420bb79b7111e8959f99ea92b72a10c9c86f4f38e6700c93d9274f4572483ec8982e84fde86d11dc73a032cc66b5488a2945ee317ac4005aa33831e7737d3813e82618b9eecb8e454097622fd0bfd2a00994a223ac70d1f76ff21e64c886ba1fb8cea1fce2f8fd7221762f8925d17ee19eb345c631ea22cada57858fddf46753d894778012a7a5058b5765f9c96db357e9a7791a1edc2d7cd687ea67a63ed30f269c89f44530eaa5707faf6f1b897916e6df4df59e950d0ce371fdb54eedaf1ac74b51fb250a1e527439c67ae0945e5405f1ab6804732bf58c3744df95727d763de1f354a3945b9f8830c1c44ba02755ca10c9f765cab0f1bc3d3344aa91c468ead490629d19e64dcffe653d246832987a348f4284a95b53d9e661d2b6fb6509f45e7658ad3ef9985777fdc16b285e7534051ab31f50b365fee48302a13ae582446ef24213763c85f41210e34e8215ef3ad0d88c4369282bddabe3fae7ed243a08887647cdaf5b21b95d2cf03384ab5c9c19cec2bb04e016faba9c9c735803187f677377b84e3738635a49f452baee5060a4421d1eaa17aee81fa4ff6f9321d777a73128ab73affe7916491b6fd68a16e61b9d9f3a6f92769abe47542e4cb6501960d1a5ada70413cd2d19944891e65c67ec8979b5ee02468391a364d3bba313c4cf9ae99f364578c94b5554cb86a0f1ed71cc12cc6c4c4c8ba4d47b76c71d8dbd495bb608283b8edc2a02e74aea7073f07580e533e2d2fa2277c7bbc321ec1a42ddec9e120b85e8a6141400c6726692a58addb880c481a37dc0a6db923f9efae3c4ac3ab8f0c385d2cadf0620edfccb6896c98814f434ee126339f4ca360357faf27c49ae3bfec7b5b83e9b24f8b6fca947c15cb7ca433448f892af38725d337b2117b73fdce163c72d86f351cbd23c5e6da8fe4bb898da60a541cd719aced686896e20d8acff58365a4f75bf42333b7c29cadd998d7b1ff0977b119219e632d59818809827e1b3ecba476d259d2e55135f37138fd071ee7b42ace788aff5bef0df7cac215af38dadf99b6cd287139ccb4dd9a9c5ccb31c00a3a30b93ae95c78e67761143b711cccc2b13eff4ffee045cfb3efa4b15252f00c9ef41d4e9f537cf4270b5ff42454723f8f2b8501185f21bfe35e1013e01121ffae3a97333e8948498df714cdc6409e44f94e27bb995590badbc01f579e28fc3061f8997f556d7aff8f956a20b31f4ec87906e5d0cde8d8c8a44f0f3099fc8ae279af5968a02bb4b1fa06e9ba1629aac46ba0dc796f7813885d43717e332e0484a30383e374e26ab50afbc64883e8cfc7198904f877a09a75f05b189f0c8dcf42a452762d38c3bc3e261888cf4af346d1d87be963d66724ca46ad395784edc7e7956bac538b5adbc86d6ef51b708d548b5470f927700566332ec8b563909dbad42e90afff46e8b33fc66852d75bb2c3249cf12d21dc57be32c06a070d62dbc8b037f422cbb4ff7753e90eca15f28f24c1a5e37e3bb466d1448cc2693f198c8e8c75dc663f3254ac1a6e7d52756a6da5d755fbf301425c60650ababed9928efbeb8bb1bb9994742926763c43a2108cea9d5fd5a640879574d20ee3d4974f5647ca44353904927215b7918570c88e245ecc2385167fd1ca83618c821331d54d06b43224c3d6681db55d4b09d27db7915bb274051162b02a6cd64e8c4b0996650e0367652d652ef64fc13a8b3ed88c88e9532b56a2019c02583854f1952c028f82cffbcc030f370d193646b9aa076dc05fa057ca8769775140b55751297fa91698a9a82b89a614d96dfc153c52845913025ecc8984d333feaa50eca0002a885abb3ad5b513cc8409b040bac9ed8529a1a76c270a4df5b005356ac4220cd134d9434f901e6e7d96a374c80e4ed81977f36b27424304d879fe0889b50ada1da72a78e0070e35dc5ebb43d7c61ff52ff55e50ad298b00b97ad944dd161aed95f4009889927c24469403899bdd6dd7f8ecc195d6f5c9375164b331f915a29851d9b0230d07bab955091a141059a150d972739100035ae05c2bf9d8911e6b6171a6b4c2bcaa0e8567cf2a29fb6cb8adfe29e42e88094c36fa4e07bef31149bbd7d5166b620385bf422c51b4523e3eacab56ad54ee70d84572874a967779b737de35724502a3daaefc4ce1074bb11e9aad6879deb132ac240047af4e5e572edb5f122955a7b142b7bd96ef3cd069746f4b1dce2c94b6bf19e934a9d4f6edf3207172f1893cd8d35ed94f8ccda3d8ba3e7c5f886598bf8946df83fdd6a391c3b268b631c89ab7f2434bc02d3ecef208e236d06a4f14d1353012341ded0342cd2d580bbd0f88a14c56b4b9f12c2dece02fe02418c23e6d10b7d9ac6648165e47adf1857a4d0bb25c096aa510ce9f77671703bf7f887908fabcfcb26a7f1fca177ae3686e5e1db1bef474d155204ecd610d71fd90512192504f0cfc44fc38de414ffc5571ae72be4351c86d63be507982114afc33e38ee81a05910dafb240d4527082f85c61861233aeae8f3da8e2814c35ef709024ba08b53d5e26b8b855d8fd273012777c4517601252f7977189e9960667e8fb7c81fe544454c0ef2891c2fea071da9f9e2861b9cf50f74edf1baf98fb8e32d291e107603dd52b8f4225f50239e893f7320dc448305bb8f1f9ecdfe4480b7cb99095243cc576496b7d2a6ef2326b908ca525cae402b41ce45da7cc2f5356fab22a3693ef4107b9ee5cf150f8b263ba6868525ddb8e4e7c212f5764366025e5f1a1904eb7348269ae9a83aa5185be2e375f90883ed71bb7f542463ec0477042b91b88a8b1776e4e15333668bbf70271961ae39eb797e30f86dfd9a6b6393bbeeb47a43bf694b57b9e5dd4f312d3ebfa2040ea49a1700eab21c00ce2252ce3f68a5c65e0f390daa867cec74de2bddba3324dcec88d1c0c8850b4240d85fb5115410086924d5b6059b68a82d2a56edb7e535d8006be9771a5744167d06fa9f61e2e8e0e01a72b569b8ec559d2e776300077d535bcb55c89b732daf4438fafa26171a965bae949770a074f511abb445a34d26142d8dcfa5c66863ce79fde3d4f39bd205be5e4ce365ef0db4b9beca1c64784ee020af1c89094879134ab8e7511ec1f0127dca4ba124b53c4c11a169f1757ad8b59829202f4afa77d8c8b8d8755297e4c31c5b8500b39a4f884146b19522e5142bcd5fe6531607a421f17989c1c1b34d587f45690444a589c3d2153a8bfb50cf7fa0045603ac64a3ed43c0b15936b829949e5059e22782b418b245d08945155a80e24d468612fc9b59c285b53ba6cf553df1f189a1951858892655c8151c2c4b3bec9e315c8c418070405e4ef6a0f62e2469a0c4fa42058b516b941f2a25380b5a042b055bb94447046a507d7e6c12432ddeaf91482416f87b2f16bc0c219deb6c0c5cd3b400e7b9039e720232c56b15360961c30ba4b8e18fee5405018efd8e58215b434c6843e0b8be3967bd398d965f56347c7f320d6ac8636e57608091e2dc5700cff7203453fa3a563221bd1e742b09647084c602dd2ec7fbef818e1cea31616c76c6cf0964cc5b467c213045888d5ab16061f1fbd6c9318c9fc56848387326283a50d6579af007481788db0579c46b234c7c9e960cee926c1c944cbca122188bc215618ba717f4c6bcd4b4e6cde50bf9b43b67663001e581f5dc55086d8f197b7fcaa9f305f2f499f97403d0a68efb55e99916721ecfa16d9d0ea8a504c2be80a1afbc6e164973be524e82db0e69694d38afe22620bbd2862e27a180ef3fb6b07069dd3f5939438edbcd5031964490d202e95f799fe63de55fca280b4315a1e2d8dd52e8cf6e86e8f376f477de7e729410bd0544997de7359c77b4a6e0e21abbfd07e25fbcbf015e687d779b283e8aeb98309795296595feabe56ed322a1a8c90a36fd29c1471cabd0e32d6022988fae5fecb5dcbe1e8b2552e0a97f35b92c774a79aa6b1f117218ddbe97686ab63d61d95f160293aca171398cf3b3bb01fd8b529767166ed5a76ad17f3c217fcd8d9d9c85afa113f85eb65befb9c9029b34f24cda431b98217b7f43c79f9250ecd4828fb46023b6e8083f25e4d4c34056834159860dca5f529052c6c3b6c23993231862c9326076d88f4447a753ed5be0a6bfc34bac7d8fe34187b1d4f6f6cee1313052057225c88f9f0ba3e", 0xfe41}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0x1}], 0x1000000000000029, 0xa) (async)
ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000140)=0x1) (async)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async, rerun: 64)
write$tun(r3, &(0x7f0000000280)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x4, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x8}}}}}}, 0x2e) (rerun: 64)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) (async, rerun: 64)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 64)
openat$cgroup_freezer_state(r7, &(0x7f0000000380), 0x2, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
close(r8) (async)
setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000040)=0x2dbf6c21, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

28.927789587s ago: executing program 8 (id=3811):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x47, 0x0, &(0x7f0000000000)=0xe)
r1 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getuid()
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
pselect6(0x0, 0x0, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, 0x0, 0x4084)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000000), 0x4)

17.231086354s ago: executing program 0 (id=3854):
r0 = epoll_create1(0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_fd={0x18, 0x5}, @jmp={0x5, 0x1, 0x9, 0x3, 0x0, 0x4, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xffe, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x0, 0x6b85, 0x6}, 0x10, 0x1a3f, 0xffffffffffffffff, 0xfffffffffffffe62, &(0x7f0000000500)=[0x1], 0x0, 0x10, 0xfffffcf7}, 0x94)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000002fedbdf250f00000008000300", @ANYRES32=r5, @ANYBLOB="050035000e000000080034"], 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x8000)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x420, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x45}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x87b}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x8481)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x9}, 0x94)

17.047814951s ago: executing program 0 (id=3857):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
connect$can_j1939(r0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ee, 0xf83, 0x8}, 0x1c)
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r3, &(0x7f0000000280)="0100", 0x2, 0x0, &(0x7f0000000000)={0x11, 0x8100, r1, 0x1, 0xe0, 0x6, @remote}, 0x14)

16.803272319s ago: executing program 0 (id=3860):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3, 0x0, 0x0, 0x0, 0x4000000}}, 0x18}}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3, 0x0, 0x0, 0x0, 0x4000000}}, 0x18}}, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)

16.339162317s ago: executing program 0 (id=3862):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)={0x440, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @nested={0x36c, 0x5d, 0x0, 0x1, [@nested={0x2db, 0xe4, 0x0, 0x1, [@typed={0x14, 0x47, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @generic="3f6e3bc138432cf03239127ffd9ad6009c44a19ef237590d2d27717f2edb856b4c338e2d5a28019fb39039baa41b4789450d7877bfba5c29708ab62339657cff07a4b1bb0f6f6bdac2627788d831cec4af12127c8c59283cf803d6fa07762c89a519daf4", @nested={0x27, 0xc6, 0x0, 0x1, [@typed={0xc, 0xfa, 0x0, 0x0, @u64=0x6}, @generic="66790f9c64ff71b4bef45d6baf6c50da2fc49e", @nested={0x4, 0xa3}]}, @generic="740880a68b1f3328331b4378d7dfe633c06983215a71c0839460f59715c1a3b5d698050c56567ef820ebbe303631ad2007a5fcc603a91a9af803cc17210527d7877b877d06c0bf5bdfb297fa5d26d2ab560a5f85080a2b6b1053421351c0daac3a8b0e631e38f9fd8dd58b8e3e35", @nested={0x16d, 0x3a, 0x0, 0x1, [@nested={0x4, 0x134}, @nested={0x4, 0xa0}, @generic="97d9cd0f3ba4b8118b33e0e91a50bd44d22c1fc9b37f6077eddcf492da1fb3b73e062ead0de939", @typed={0x8, 0x25, 0x0, 0x0, @fd=r0}, @generic="1bf76edf33ec2407c427fb2a40a989d1d507b3c43a983e4d47a727eb5bb4df96fbceeb6448ef131905f0e2df4e0731fc728fdb61913c298845ead91a81aa5b1c5bcfc26f0e7108db6cca40af43f259649f567d67ba2634965ed5ec4096331e41a1243557f33eecb84a25d2790bbb5da05add5a0b54c2a7917bb87c647ab5cf64bc41eb792c5f6d5681aa4cb8cd4843444f5130387b7af80904d150bcfabc18ffb88ee0dbc159aa30a1931fb49d99cfb850f0d903a1d4da823bf825bb635b548884a580a3a259ca65be69f10665ac30533fd6dddd16ad0d04", @generic="a92037f659ba0cbab32ad4204367b249e49fe6289d2cd6070fe5f150862b47e3ead661a0536eeca5d5cfb2f9c6cce780512d4b994e3344f80d93c425dfacdf6e856f4d2200908f63dd35c44e6286ac2327f200659aa6", @typed={0x4, 0x55}]}, @generic="95122390bb1762bf9a84503a4a8d0c348aa36f15d2d85ece8c6ba406a4e1882c0aff256458eea77aaa9a98513e8834c9a7fde115b6d53ecae6eb213ee882430cfadd6a205a9efc453ea4968b22af5f81ac05f875b5d380d410"]}, @generic="60278815ea69290c9744331b80f570baf014ff92dfcceaf54fdaede59a008a9a28a0d3d120b114f7704b1f0374517f34bd16285eb019b0453dbc7d78e4950a0acc623fc69ebc385f825f2e0c1468a225f8253cd680009cc901eed270a39103e8a9bb95138f46fbfbedd450e01f0f444b6344cb358410084e3b0569a1ce3a47634c4e9a3600de6aeb817c", @generic="50f0"]}, @nested={0xb6, 0x1a, 0x0, 0x1, [@generic="bfaf8e7afd6eb65af043f8a4829454dcc7", @generic="6447fb85739e9be02143cb3dd3ec5328e22a27493b9b2a7a586b089c099ffd005bc63f207b1abe3d20267f9d808766ca133c7b7b80139ebe4c0a0e73b33d6854b33ece7cfb139b71e12aa6285d33ba0294b5b5d349dfbdcc98a41fe55254d7f1ce03a38cf9726891ad54f40a65cf24eea97ec945918eabc4bca43c2001141f1e223e74e7bba00bfa2dc1b2a379de732b39d888f4a4193e162fc28afd1b60f5f1d5"]}, @nested={0x4, 0x37}]}, 0x440}], 0x1}, 0x0)

16.14349422s ago: executing program 0 (id=3865):
r0 = socket(0x80000000000000a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
close(r0)

16.002816757s ago: executing program 0 (id=3867):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r2, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f00000002c0)=0x48, 0x800)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x290)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x48050)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x62040200)

13.700401668s ago: executing program 37 (id=3811):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x47, 0x0, &(0x7f0000000000)=0xe)
r1 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getuid()
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
pselect6(0x0, 0x0, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4)
sendmsg$DEVLINK_CMD_RATE_DEL(r4, 0x0, 0x4084)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000000), 0x4)

5.919693921s ago: executing program 9 (id=3937):
r0 = socket$inet(0x2, 0x3, 0x6)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000280)="ca59", 0x2}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}})
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x1c, {0x2, 0x0, @multicast2}, 'syz_tun\x00'})

5.7066672s ago: executing program 9 (id=3940):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x28, 0x0, 0x2, 0x983a}, {0x20, 0x0, 0xaf, 0xfffff034}, {0x6}]}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x4000, r3}, 0x18) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x4000, r3}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) (async)
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0)
bpf$MAP_CREATE(0x8001000000000000, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48)

4.943000633s ago: executing program 9 (id=3947):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
r3 = socket(0x1e, 0x5, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
recvmmsg(r3, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/245, 0xf5}], 0x1, &(0x7f0000000380)=""/201, 0xc9}, 0x3}], 0x1, 0x20, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="dc6f8658f9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="d91e42c42c19bc979aec39eda5f227c569ee8c5d0726d35839be5df50165c41e5f564757b66ea79fabce98b19055210f71b645b4ce5d53097350ec250158ee8baebea38cfd92354874a23c5cad022af3a3eec75a83e7efb4a07a424b1f30f2e3aefa86bef221ff3586b72a87d0a8e61176d00a369c62702e716ba94c6a0dce9f85dd979c33a441a4e5340c267d8fa780e1", 0x91}], 0x1}}], 0x2, 0x40480dc)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_RULES={0x28, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000840}, 0x45000)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000000", @ANYRES32], 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x4}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00e80000181100fe8000000000000000996800000000aafff100000000000000000000000000014e1d4e20001890780400000004000000df7f000000000000"], 0x0)

4.635499003s ago: executing program 9 (id=3948):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ee, 0xf83, 0x8}, 0x1c)
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r3, &(0x7f0000000280)="0100", 0x2, 0x0, &(0x7f0000000000)={0x11, 0x8100, r1, 0x1, 0xe0, 0x6, @remote}, 0x14)

4.390562528s ago: executing program 9 (id=3952):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x24)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0x2) (async)
connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x24) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

4.101719042s ago: executing program 9 (id=3953):
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x3, 0x1, 0x5, 0x3091f, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000, 0x1}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) (async)
writev(r0, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1)
recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xffffffffffffff21, 0x0, 0x0, &(0x7f00000005c0)=""/108, 0x6c}, 0x7fff}], 0x3fffffffffffcbe, 0x0, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
splice(r2, &(0x7f0000000000)=0x7, r2, &(0x7f0000000040)=0x9, 0x0, 0x4) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) (async)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000640)) (async)
r5 = accept$ax25(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @null}, [@bcast, @netrom, @bcast, @bcast, @default, @default, @netrom, @netrom]}, &(0x7f00000001c0)=0x48)
accept$ax25(r5, &(0x7f0000000500)={{0x3, @rose}, [@netrom, @null, @rose, @bcast, @null, @rose, @rose, @null]}, &(0x7f00000002c0)=0x48)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r6=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x2, 0x6}, 0xfffffffffffffdd9)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)={'syzkaller0\x00'}) (async)
r8 = socket$inet(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f0000000800)=""/221, 0xdd, 0x0, &(0x7f0000000a40)=""/171, 0xab}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0}) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x1f, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x18}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x32}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x5c}]}}]}, 0x4c}}, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140e, 0xc3ef2dc4aaddb62c, 0x70bd2a, 0x25dfdafe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}}, 0x10)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local, @remote, @void, {@canfd={0xd, {{0x4, 0x0, 0x1, 0x1}, 0x15, 0x2, 0x0, 0x0, "e09b1885a44980ae13a94c4d646c712fbc9fcf5c9b278e8ab2b87f6af6af41c64a96234c488c406daa7f41fd8e9ed0ab9afbf5f9ba4ec64bef255eb963c12424"}}}}, 0x0)

2.795196113s ago: executing program 3 (id=3962):
r0 = socket$inet(0x2, 0x5, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x2}, 0x1)

2.687770357s ago: executing program 7 (id=3963):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.541358695s ago: executing program 3 (id=3964):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0xfffffffffffffd54}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b7084797203677660000000001007b8af0ff00200000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="559cd1c9007239456cdfdc8c475bf79e6c8298e9bc3d8c15cf39f5be3673caed8748111d06410492c6a02f6017849812bffe697133f10740d4d0f90efa6d1cc4e265da44d8c4", 0x46}, {&(0x7f0000000100)="8b9ad7fd75c6989737ef622d783288d1c919e16e3551bb2dda3ec49c35769f32c823d47602af6ffbc0df636e838c793b2ff1bec4cf04829288fe93d788f03cea9b04f53ef53d22bdf724b4", 0x4b}, {&(0x7f0000000180)="ce784043880c", 0x6}, {&(0x7f00000001c0)="9e6028edc2f6ca53ed797d13430643f8885d21b398d32195b7fafbbf6e372e942c2055bc6f049d8c84d64cc54cf1fc9d474f09fb2ad2e78b67d458261cf9d439a3465346ac576a714363b85f99be43cff97188b411287e83a59b0d61216f96ee10c74540dbbadbb4ac149d12b4bb21557edfdb3ed1657c4569d33dfdbd8725a8a82517efc3e0b3faa6bad2cd1b761ecad6589fba140669440915d85eb3d4d3da2a44b0ca5bc39b99f5d37441bc91f23ba58f42d640c9cfe55824725301a4dd3fc5f586fd7520", 0xc6}, {&(0x7f0000000300)="9329c519e3d825568b6913f78848a772162d471fcefd16a2ac9ea672618562bb67b91a26945ade236da67b42b4e78ebce660115b82a50f59bd1ce1a78b1b6b08a961dd4e128a8620627272bf9acd3a3316049d6f12df2d3cf4f6514f0343849e0aad37d056f03c681fde26fd62de69f2c52b93cb964fbdf7cb81d49824eb63f2c590192a93fc6d3988337108088ce73f", 0x90}, {&(0x7f00000003c0)="9b59056010bd31b88031659f648f7050fb91dabaaf9fd7ea1aea6609ae85fa1bd272210ab382a3ae8c540bf3842f16c958be2fbab12a99a366a1e96377bf7a9b00ed41c2b6b75f611c490a24e68bdfcca0b6f95aaf4cf034beb38836c4e89b9c6321d848d876594249790e3cc534b0baaff84349c25edf423a013537a586516039e4d1606e68a96f55fc1b0e48a27745cbb8e1bc140c1ed1977aa15933b475b38843583d44feb17f3f49d8321a57be5d87211b3c4749204a59da14ec34218bd013a0", 0xc2}, {&(0x7f00000004c0)="5f270fa73639ff0257eb7ba01e82dbed1b5864d5dc7c7fb390c87206d5d982c466b2b6afee9ec904f6bb6a8909b90cb41b8004269ef364a4354d9c9be5599bcd6176f568d35c7960bdbb0bc8de518ebd3171c98ba2c61c99604fdf872a2506da04", 0x61}, {&(0x7f0000000540)="b877ebe0fa4b460dce10685abc7dcd8074e073c7dc5632c32df7d200057145fad0132dc7301e145a43bc3a333f6c708a9acdafc0f3ec003c36a40921f58dccef9968344a62fb4f5884765627b3b52aa8c5bf771002316d41d4a1ec6eda4ea323eefbdcf278546dd657aea8b90d22bd75be41242420012b1a9e930b00c5d67a943213972ca8f631457a7ffecd86d4f2490f2f30568dabbf026461e132cd47956ac246a47f5ee7a4b3ecc52442ca721f98efddac16309e0a499d3524888bc1cbc55a3f38e66caaef0761b4fdef6be1f56b967d5baf640816ec2e1913cad1fd28904109fb0e06139caf256c7afd40d3", 0xee}], 0x9, 0x4) (async)
vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="559cd1c9007239456cdfdc8c475bf79e6c8298e9bc3d8c15cf39f5be3673caed8748111d06410492c6a02f6017849812bffe697133f10740d4d0f90efa6d1cc4e265da44d8c4", 0x46}, {&(0x7f0000000100)="8b9ad7fd75c6989737ef622d783288d1c919e16e3551bb2dda3ec49c35769f32c823d47602af6ffbc0df636e838c793b2ff1bec4cf04829288fe93d788f03cea9b04f53ef53d22bdf724b4", 0x4b}, {&(0x7f0000000180)="ce784043880c", 0x6}, {&(0x7f00000001c0)="9e6028edc2f6ca53ed797d13430643f8885d21b398d32195b7fafbbf6e372e942c2055bc6f049d8c84d64cc54cf1fc9d474f09fb2ad2e78b67d458261cf9d439a3465346ac576a714363b85f99be43cff97188b411287e83a59b0d61216f96ee10c74540dbbadbb4ac149d12b4bb21557edfdb3ed1657c4569d33dfdbd8725a8a82517efc3e0b3faa6bad2cd1b761ecad6589fba140669440915d85eb3d4d3da2a44b0ca5bc39b99f5d37441bc91f23ba58f42d640c9cfe55824725301a4dd3fc5f586fd7520", 0xc6}, {&(0x7f0000000300)="9329c519e3d825568b6913f78848a772162d471fcefd16a2ac9ea672618562bb67b91a26945ade236da67b42b4e78ebce660115b82a50f59bd1ce1a78b1b6b08a961dd4e128a8620627272bf9acd3a3316049d6f12df2d3cf4f6514f0343849e0aad37d056f03c681fde26fd62de69f2c52b93cb964fbdf7cb81d49824eb63f2c590192a93fc6d3988337108088ce73f", 0x90}, {&(0x7f00000003c0)="9b59056010bd31b88031659f648f7050fb91dabaaf9fd7ea1aea6609ae85fa1bd272210ab382a3ae8c540bf3842f16c958be2fbab12a99a366a1e96377bf7a9b00ed41c2b6b75f611c490a24e68bdfcca0b6f95aaf4cf034beb38836c4e89b9c6321d848d876594249790e3cc534b0baaff84349c25edf423a013537a586516039e4d1606e68a96f55fc1b0e48a27745cbb8e1bc140c1ed1977aa15933b475b38843583d44feb17f3f49d8321a57be5d87211b3c4749204a59da14ec34218bd013a0", 0xc2}, {&(0x7f00000004c0)="5f270fa73639ff0257eb7ba01e82dbed1b5864d5dc7c7fb390c87206d5d982c466b2b6afee9ec904f6bb6a8909b90cb41b8004269ef364a4354d9c9be5599bcd6176f568d35c7960bdbb0bc8de518ebd3171c98ba2c61c99604fdf872a2506da04", 0x61}, {&(0x7f0000000540)="b877ebe0fa4b460dce10685abc7dcd8074e073c7dc5632c32df7d200057145fad0132dc7301e145a43bc3a333f6c708a9acdafc0f3ec003c36a40921f58dccef9968344a62fb4f5884765627b3b52aa8c5bf771002316d41d4a1ec6eda4ea323eefbdcf278546dd657aea8b90d22bd75be41242420012b1a9e930b00c5d67a943213972ca8f631457a7ffecd86d4f2490f2f30568dabbf026461e132cd47956ac246a47f5ee7a4b3ecc52442ca721f98efddac16309e0a499d3524888bc1cbc55a3f38e66caaef0761b4fdef6be1f56b967d5baf640816ec2e1913cad1fd28904109fb0e06139caf256c7afd40d3", 0xee}], 0x9, 0x4)

2.443040591s ago: executing program 7 (id=3965):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000e00)="fd", 0x0}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6}, @TCA_CT_ZONE={0x6, 0x4, 0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
sendmmsg$inet6(r1, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810)
r5 = socket(0x2c, 0x3, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0xe0, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x77}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async, rerun: 32)
socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32)
pipe(&(0x7f0000000200)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}, @const={0x0, 0x0, 0x0, 0xa, 0x4}]}}, 0x0, 0x46, 0x0, 0x1}, 0x28) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r7=>0x0}) (async)
setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) (async)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000080)=0x4) (async)
ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x2000004) (async)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000300)="00214717a70700000000030600710a5e31163ceb9d04", 0x16}], 0x1, 0x8, 0x1) (async)
sendto$packet(r6, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x6, r7}, 0x14)

2.377298517s ago: executing program 3 (id=3966):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e000005ba1d4a202ac1414aa00000000035b91ca96911fab4be5390e6998d5627047ed2ec0b66964f33e8e5c9c5086f742279b774d22a7d0a79f15df245a001baa8361653903eb6c6793592db5c380a195fb1af8454be48bf7fdcec33642ef7546924b97db5abc950fe00b77bbcc451ff31d17ebaafd2cebc016114754b8f4a6376ca258aaec41455369bffc68f4e637c7d7a990c6a67c9039643b46f6e35b444507a4cca64a6f387a21f6c9c0a1af793a329bdd44837872a1d7f05d7f9ea8ba9ed48818b7a8ca949840117332"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r1, 0x180000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0)

2.005441026s ago: executing program 7 (id=3967):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800)

1.698925416s ago: executing program 3 (id=3968):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r4, 0x91dabd4b569e2c23, 0x70bd28, 0x25dfdbfc, {{}, {0x0, 0x4108}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10)
setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000001600010a00000000010000000a0000000400ca802d877d45af6456cceadd6e2ee2e3579204a27fa3922fd243dd7f8d453d536e9dd0786e2cddae93c18b0c91e21be3a9aa62b448dde2340ca8be361fb91e4ce8aa438cfbbb193d6ea00cdd88fd0ecc3b6cb50b03a6d51df47af2199d38fe763015c74133ab4de610b94008730794a7bbf803cc1e74a0fe5fd1ff7fb6371343a5ef55721caf22584752fee03039b8545a7c0b593eb97b9dc2b59883d30aa36d2593e7362cd9756a3830d13181759fb7c1171009a0b1827259e75761bd813ffa86663b66bfcba5f060d5b3a3abbac1d22c5756a7e823ed6d85019dc364f0ec8d"], 0x18}}, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6e617400000000005191b2b10b6900000000000000000000030000006c690400b100"/45], 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
connect$inet6(r5, &(0x7f0000000280)={0xa, 0x4e21, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a008421"], 0x24}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32})
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0), 0x10)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
pwrite64(r1, &(0x7f0000000300)="572654b114b1a9e1879a390786dd", 0xc0, 0x100000000)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
socket$kcm(0x29, 0x7, 0x0)
writev(r11, &(0x7f00000001c0)=[{&(0x7f0000000200)="0232e60039536dc50c3eb346070000008ce2d4c1c866321c084bb58c3dd1666a19af3c73704fb3e6436512727a375df73783de35a42869d1e92883480dcb1e7130", 0xfffffffffffffe62}], 0x1)

1.686501202s ago: executing program 7 (id=3969):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240300030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000)
recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1000001}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000003d40)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000000680)=""/245, 0xf5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4120, 0x1018}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x2020, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5967c447}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32=0x0, @ANYRES8=r2, @ANYRESDEC=r3, @ANYRES8=0x0], 0x50)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x43, &(0x7f00000000c0)=0x2, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='f2fs_readdir\x00', r1, 0x0, 0x81}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000500), &(0x7f0000000440)=r6}, 0xfffffffffffffe31)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vcan0\x00'})
r8 = socket(0x2a, 0x2, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r10=>0x0})
sendto$packet(r9, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14)
r11 = socket$nl_route(0x10, 0x3, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

1.229750418s ago: executing program 1 (id=3972):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20810}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f931", 0x38}], 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
close(0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000020}, 0x8010)
sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x4000000)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0)
r7 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='sys_enter\x00'}, 0x1b)
sendmmsg$inet6(r7, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)

1.061361374s ago: executing program 1 (id=3973):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ee, 0xf83, 0x8}, 0x1c)
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r2, &(0x7f0000000280)="0100", 0x2, 0x0, &(0x7f0000000000)={0x11, 0x8100, 0x0, 0x1, 0xe0, 0x6, @remote}, 0x14)

914.113501ms ago: executing program 38 (id=3867):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r2, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f00000002c0)=0x48, 0x800)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x290)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x48050)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x62040200)

871.054159ms ago: executing program 1 (id=3975):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x7, 0xe, 0x800, 0x7fff, 0xa, 0x1, 0x6}, 0x1c)

726.515821ms ago: executing program 1 (id=3976):
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040))
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0x9}, {&(0x7f0000000100)="9189e9209b6fefc36408493e1e07b85d55a49f3a9dac653393c7d2ebee546bf09e6ec39a1d5fde89601d1766817cfcd1c651235e2afa644947471af3b5116a8938239d9b2c03479f5f168949f54392a16a9391c129d0f557c52cd3eaad0c59f60f8112f2de0dc16cd17168616ecea9fc6a73fd02a2a3d0d847f9854d6ba223059f6472cfe0865c36c8bda84afd396037", 0x90}, {&(0x7f0000000580)="ec8342c4d4cbe06e23bae16ff38395791f0aac14a230b81239bff48a83318228a160a7617c6690188d725d368f42e7b3bf813d02c2c35b85327b7015f665eb5094682915b9026c6a88e5189bf647940b1003e28d628b8fa6fc4b36310121544124f0f83d827f87c8ee06da64699b764df36b6403c7f52c6f8c5f10e7482942331b5c26eb69f87f5c8559ae8465bcafb380af48fd36e81db9aa8f79f83d5d86c4bbf23460cd31551d71dfb81f167d64e7b951028f0d836819f6c84b02beed758e0309d31303afd655da5ce60b84b77a1f6a4d8a", 0xd3}, {&(0x7f00000001c0)="bbc996adb24554747e162c21a330d32d87f7ab935c3bf948fb34cc9782135f9cac7a447ff22390966abd066c717a229bc0af078235f085a1a6e1673e4717c2429a0c5f3d33d2f42ea9428d094c24eb4b249d9fcf02a7dac868bffb7e0e844a44a5cfa2e55e63b704c8272698f479518aeb680c7a9bf6341122bf3ae2792d111f86c7a17fcead0d2822589903024f9813fc3c369c2e2e6a03ee436c1967ae079ea17fb2aa0c893c1fe20527acd869e54db600876f96fef232dc8d6912921944467fda051ffd51681eb8a1de8c4652b99d10c60512", 0xd4}], 0x4, 0x0, 0x0, 0x1f000000}, 0x600)

641.370631ms ago: executing program 3 (id=3977):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r1 = socket$packet(0x11, 0x2, 0x300)
close(r1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'ip6gre0\x00', {0xb}, 0x7})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x17)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7e, r5})

499.148015ms ago: executing program 1 (id=3978):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe47, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

390.380454ms ago: executing program 7 (id=3979):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800)

228.442993ms ago: executing program 3 (id=3980):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='mark_victim\x00', r0, 0x0, 0xd}, 0x18)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)={0x41, 0x4, 0x2}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
readv(r1, &(0x7f0000000400)=[{&(0x7f0000000380)=""/121, 0x79}], 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000000340)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @f={0x4, 0x3, 0x2, 0x80, {0x9, 0x1, '/'}, 0x1}}, 0xb)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000000202010f0000000000000000020000092c000280060003400004000014000180080001"], 0x40}, 0x1, 0x0, 0x0, 0x4c800}, 0x40000)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1a0}}, 0x20050800)

78.961098ms ago: executing program 1 (id=3981):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000013002108000600000021a5000000000000000000"], 0x18}], 0x1}, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000000))
ioctl$int_in(r2, 0x5452, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
shutdown(r0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r4, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000005c0)='veth0_to_hsr\x00', 0x10)
write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c0000001c0a01040000000000000000070000"], 0x364}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$bt_rfcomm(r10, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)

0s ago: executing program 7 (id=3982):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001280)=ANY=[@ANYBLOB="0a0000001600e808000000007f"], 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x2, 0x1})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r6, &(0x7f0000000400)={0x1d, r8, 0x2}, 0x18)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x438182, 0x0)

kernel console output (not intermixed with test programs):

 bytes leftover after parsing attributes in process `syz.2.2808'.
[  480.990549][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'.
[  481.276368][T16989] netlink: 'syz.4.2811': attribute type 1 has an invalid length.
[  482.497845][T17041] netlink: 'syz.3.2827': attribute type 1 has an invalid length.
[  482.592906][T11602] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  482.708388][T17046] netlink: 'syz.3.2828': attribute type 13 has an invalid length.
[  482.717709][T17046] netlink: 'syz.3.2828': attribute type 17 has an invalid length.
[  482.734206][T17046] ip6tnl0: left promiscuous mode
[  482.749334][T17046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  482.794094][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  482.914597][T17046] ÿÿÿÿÿÿ²DœL‰<Yÿ speed is unknown, defaulting to 1000
[  483.428365][T17067] netlink: 'syz.0.2832': attribute type 21 has an invalid length.
[  483.443528][T17067] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2832'.
[  483.456957][T17067] netlink: 'syz.0.2832': attribute type 5 has an invalid length.
[  483.465074][T17067] netlink: 'syz.0.2832': attribute type 6 has an invalid length.
[  483.473318][T17067] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2832'.
[  483.488595][T17067] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2832'.
[  483.512782][T17067] netlink: 'syz.0.2832': attribute type 10 has an invalid length.
[  483.525614][T17072] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2835'.
[  483.536129][T17067] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2832'.
[  483.562033][T17067] team0: entered promiscuous mode
[  483.581725][T17067] 8021q: adding VLAN 0 to HW filter on device team0
[  483.612781][T17067] bridge0: port 1(team0) entered blocking state
[  483.621815][T17067] bridge0: port 1(team0) entered disabled state
[  483.628707][T17067] team0: entered allmulticast mode
[  483.702855][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'.
[  483.720304][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'.
[  483.724018][T17077] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2836'.
[  483.747410][T17077] netlink: 'syz.4.2836': attribute type 11 has an invalid length.
[  484.485553][T17102] vlan3: left allmulticast mode
[  484.511049][T17102] bond0: left allmulticast mode
[  484.521560][T17102] vlan3: left promiscuous mode
[  484.526495][T17102] bond0: left promiscuous mode
[  484.540303][T17102] bridge0: port 1(vlan3) entered disabled state
[  485.080808][T17159] sctp: [Deprecated]: syz.1.2855 (pid 17159) Use of int in max_burst socket option.
[  485.080808][T17159] Use struct sctp_assoc_value instead
[  485.140107][T17166] netlink: 'syz.3.2857': attribute type 18 has an invalid length.
[  485.286537][T17166] netlink: 'syz.3.2857': attribute type 18 has an invalid length.
[  485.524523][T17184] netlink: 'syz.1.2860': attribute type 3 has an invalid length.
[  486.636471][T17208] smc: removing ib device syz0
[  486.968353][T17232] __nla_validate_parse: 9 callbacks suppressed
[  486.968375][T17232] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2876'.
[  487.023313][T17234] netlink: 'syz.4.2875': attribute type 13 has an invalid length.
[  487.041777][T17234] netlink: 'syz.4.2875': attribute type 17 has an invalid length.
[  487.054924][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'.
[  487.186879][T17234] 8021q: adding VLAN 0 to HW filter on device team0
[  487.210896][T17234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  487.256963][T17242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2878'.
[  487.301117][T17242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2878'.
[  488.150994][T17285] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2886'.
[  488.165721][T17285] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  488.364713][T17293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2890'.
[  488.375939][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2890'.
[  488.389027][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2890'.
[  488.407954][T17293] netlink: 'syz.4.2890': attribute type 18 has an invalid length.
[  488.417707][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2890'.
[  488.429119][T17293] netlink: 'syz.4.2890': attribute type 18 has an invalid length.
[  488.498258][T17262] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  488.524679][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2891'.
[  488.750619][T17311] netlink: 'syz.4.2895': attribute type 10 has an invalid length.
[  489.944410][ T5838] syz_tun (unregistering): left promiscuous mode
[  490.000970][ T5159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  490.013852][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  490.023495][ T5159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  490.033675][ T5159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  490.045773][ T5159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  490.093678][T17361] veth9: entered promiscuous mode
[  490.167992][T17367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  490.195815][T17367] syzkaller0: entered promiscuous mode
[  490.201547][T17367] syzkaller0: entered allmulticast mode
[  490.282938][T17365] tipc: Resetting bearer <eth:syzkaller0>
[  490.308272][T17365] tipc: Disabling bearer <eth:syzkaller0>
[  490.616895][T17360] chnl_net:caif_netlink_parms(): no params data found
[  491.725856][T11581] bond1 (unregistering): Released all slaves
[  491.743027][T11581] bond2 (unregistering): Released all slaves
[  491.875941][T11581] bond3 (unregistering): Released all slaves
[  492.012254][T11581] bond4 (unregistering): Released all slaves
[  492.071874][ T5840] Bluetooth: hci1: command tx timeout
[  492.145735][T11581] bond5 (unregistering): Released all slaves
[  492.269011][T11581] bond6 (unregistering): Released all slaves
[  492.399048][T11581] bond7 (unregistering): Released all slaves
[  492.415673][T11581] bond8 (unregistering): Released all slaves
[  492.557055][T11581] bond9 (unregistering): Released all slaves
[  492.688405][T11581] bond10 (unregistering): Released all slaves
[  492.704263][T11581] bond11 (unregistering): Released all slaves
[  492.718798][T11581] bond12 (unregistering): Released all slaves
[  492.737489][T11581] bond0 (unregistering): Released all slaves
[  492.754518][T17360] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.762567][T17360] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.770467][T17360] bridge_slave_0: entered allmulticast mode
[  492.779247][T17360] bridge_slave_0: entered promiscuous mode
[  492.789594][T17360] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.798590][T17360] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.810120][T17360] bridge_slave_1: entered allmulticast mode
[  492.820389][T17360] bridge_slave_1: entered promiscuous mode
[  494.152429][ T5840] Bluetooth: hci1: command tx timeout
[  495.879931][T11581] : left promiscuous mode
[  495.897026][T17413] __nla_validate_parse: 58 callbacks suppressed
[  495.897044][T17413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2923'.
[  495.999437][T11581] tipc: Disabling bearer <udp:syz2>
[  496.019520][T11581] tipc: Disabling bearer <eth:syzkaller0>
[  496.028649][T11581] tipc: Left network mode
[  496.047306][T17360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.088232][T17360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.235176][ T5840] Bluetooth: hci1: command tx timeout
[  496.310286][T17360] team0: Port device team_slave_0 added
[  496.346800][T17360] team0: Port device team_slave_1 added
[  496.503149][T17360] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.510218][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.538177][T17360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.552594][T17360] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.560126][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.592198][T17360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.840398][T17360] hsr_slave_0: entered promiscuous mode
[  496.847738][T17360] hsr_slave_1: entered promiscuous mode
[  496.854700][T17360] debugfs: 'hsr0' already exists in 'hsr'
[  496.860954][T17360] Cannot create hsr debugfs directory
[  497.269941][T17457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2937'.
[  497.458710][T17468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2940'.
[  497.546181][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2941'.
[  497.556363][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2941'.
[  497.565579][T17473] netlink: 'syz.0.2941': attribute type 13 has an invalid length.
[  497.780692][T17482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2945'.
[  497.890863][T17360] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  497.914823][T17360] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  497.950142][T17360] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  497.998281][T17360] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  498.200818][T17508] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  498.204429][T17360] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.263969][T17360] 8021q: adding VLAN 0 to HW filter on device team0
[  498.306203][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.312234][ T5840] Bluetooth: hci1: command tx timeout
[  498.313638][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  498.497911][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.505474][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  498.612807][T17515] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  498.761887][T17521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2954'.
[  498.774293][T17521] netlink: 211372 bytes leftover after parsing attributes in process `syz.2.2954'.
[  498.832664][T17521] netlink: zone id is out of range
[  498.866345][T17521] netlink: zone id is out of range
[  498.947920][T17521] netlink: zone id is out of range
[  498.961941][T17521] netlink: zone id is out of range
[  498.967389][T17521] netlink: zone id is out of range
[  498.975495][T17521] netlink: zone id is out of range
[  498.995300][T17521] netlink: zone id is out of range
[  499.006554][T17521] netlink: zone id is out of range
[  499.043260][T17521] netlink: get zone limit has 8 unknown bytes
[  499.155556][T17531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2957'.
[  499.182672][T17534] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2958'.
[  499.215601][T17360] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.668112][T17556] syzkaller0: refused to change device tx_queue_len
[  499.809527][T17360] veth0_vlan: entered promiscuous mode
[  499.844328][T17360] veth1_vlan: entered promiscuous mode
[  499.940207][T17360] veth0_macvtap: entered promiscuous mode
[  499.975276][T17360] veth1_macvtap: entered promiscuous mode
[  500.130066][T17360] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.199692][T17360] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.373797][T11586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.401429][T11586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.429983][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.446978][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.495473][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.523217][ T1159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.548782][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.580285][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.862353][T17598] veth0: entered promiscuous mode
[  500.905741][T17598] veth0: left promiscuous mode
[  501.123015][    C1] bridge0: port 1(erspan0) entered learning state
[  501.448760][T17614] netlink: 'syz.3.2980': attribute type 8 has an invalid length.
[  501.882955][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  501.895353][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  501.921689][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  501.933660][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  501.946238][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  502.029924][T17628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2986'.
[  502.085806][T17631] ip6gretap1: entered promiscuous mode
[  502.087782][T17629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2986'.
[  502.307760][T17636] syz_tun: entered promiscuous mode
[  502.412452][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  502.430761][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  502.439583][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  502.451296][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  502.460997][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  502.559726][T17625] chnl_net:caif_netlink_parms(): no params data found
[  502.764645][T17625] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.786176][T17625] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.793921][T17625] bridge_slave_0: entered allmulticast mode
[  502.796617][ T5851] Bluetooth: hci1: command 0x0405 tx timeout
[  502.810644][T17625] bridge_slave_0: entered promiscuous mode
[  502.848935][T17625] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.860172][T17625] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.868279][T17625] bridge_slave_1: entered allmulticast mode
[  502.876787][T17625] bridge_slave_1: entered promiscuous mode
[  503.045432][T17625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  503.067000][T17625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.316385][T17625] team0: Port device team_slave_0 added
[  503.328680][T17674] netlink: 'syz.3.2996': attribute type 2 has an invalid length.
[  503.331168][T17625] team0: Port device team_slave_1 added
[  503.349946][T17674] : entered promiscuous mode
[  503.467564][T17625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.475586][T17625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.502963][T17625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.548210][T17625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.555709][T17625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.583243][T17625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.746062][T17625] hsr_slave_0: entered promiscuous mode
[  503.766816][T17625] hsr_slave_1: entered promiscuous mode
[  503.780588][T17625] debugfs: 'hsr0' already exists in 'hsr'
[  503.787331][T17625] Cannot create hsr debugfs directory
[  503.870318][T17644] chnl_net:caif_netlink_parms(): no params data found
[  503.998585][ T5840] Bluetooth: hci0: command tx timeout
[  504.098453][T17701] netlink: 'syz.2.3002': attribute type 14 has an invalid length.
[  504.380534][T17644] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.388458][T17644] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.401844][T17644] bridge_slave_0: entered allmulticast mode
[  504.410191][T17644] bridge_slave_0: entered promiscuous mode
[  504.501814][T17644] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.532501][T17644] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.539929][T17644] bridge_slave_1: entered allmulticast mode
[  504.552063][ T5840] Bluetooth: hci5: command tx timeout
[  504.571060][T17644] bridge_slave_1: entered promiscuous mode
[  504.704084][T17644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.807498][T17644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.050166][T17644] team0: Port device team_slave_0 added
[  505.080512][T17644] team0: Port device team_slave_1 added
[  505.088567][T17733] netlink: 'syz.3.3007': attribute type 16 has an invalid length.
[  505.121746][T17733] netlink: 'syz.3.3007': attribute type 17 has an invalid length.
[  505.302832][T17739] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3008'.
[  505.316708][T17733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  505.343327][T17644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.350325][T17644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.387655][T17644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.400905][T17644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.408957][T17644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.438211][T17644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  505.539133][T17745] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3012'.
[  505.620190][T17644] hsr_slave_0: entered promiscuous mode
[  505.641869][T17644] hsr_slave_1: entered promiscuous mode
[  505.659927][T17644] debugfs: 'hsr0' already exists in 'hsr'
[  505.667111][T17644] Cannot create hsr debugfs directory
[  505.954575][T17625] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  506.007375][T17625] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  506.027491][T17625] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  506.071829][ T5840] Bluetooth: hci0: command tx timeout
[  506.089682][T17625] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  506.394147][T17644] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  506.431666][T17644] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  506.482888][T17776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3019'.
[  506.520027][T17644] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  506.572271][T17644] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  506.603089][T17785] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  506.631954][ T5840] Bluetooth: hci5: command tx timeout
[  506.710615][T17795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3021'.
[  506.748856][T17795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3021'.
[  506.822463][T17795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3021'.
[  506.846440][T17795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3021'.
[  506.855995][T17795] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3021'.
[  507.058517][T17625] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.115422][T17625] 8021q: adding VLAN 0 to HW filter on device team0
[  507.139866][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.147163][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.178971][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.186865][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.210721][T17644] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.275234][T17644] 8021q: adding VLAN 0 to HW filter on device team0
[  507.297831][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.305395][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.340402][T11602] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.347661][T11602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.673508][T17625] 8021q: adding VLAN 0 to HW filter on device batadv0
[  507.796506][T17625] veth0_vlan: entered promiscuous mode
[  507.834038][T17625] veth1_vlan: entered promiscuous mode
[  508.009991][T17625] veth0_macvtap: entered promiscuous mode
[  508.052843][T17625] veth1_macvtap: entered promiscuous mode
[  508.088244][T17830] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  508.113911][T17644] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.159326][ T5840] Bluetooth: hci0: command tx timeout
[  508.176023][T17836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  508.220127][T17625] batman_adv: batadv0: Interface activated: batadv_slave_0
[  508.246191][T17625] batman_adv: batadv0: Interface activated: batadv_slave_1
[  508.273275][T11611] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.302115][T11611] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.350582][T11611] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.369305][T11611] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.686977][T11611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.712405][ T5840] Bluetooth: hci5: command tx timeout
[  508.744788][T11611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.756882][T17859] __nla_validate_parse: 1 callbacks suppressed
[  508.756904][T17859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3036'.
[  508.799736][T17859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3036'.
[  508.842498][T17859] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3036'.
[  508.874947][T11584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.891422][T11584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.050601][T17644] veth0_vlan: entered promiscuous mode
[  509.072525][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2976'.
[  509.102211][T17869] netlink: 'syz.0.2976': attribute type 2 has an invalid length.
[  509.118280][T17644] veth1_vlan: entered promiscuous mode
[  509.205006][T17870] macsec1: entered promiscuous mode
[  509.210288][T17870] macsec1: entered allmulticast mode
[  509.221601][T17644] veth0_macvtap: entered promiscuous mode
[  509.254526][T17644] veth1_macvtap: entered promiscuous mode
[  509.312700][T17644] batman_adv: batadv0: Interface activated: batadv_slave_0
[  509.351117][T17644] batman_adv: batadv0: Interface activated: batadv_slave_1
[  509.418534][ T3541] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  509.438623][ T3541] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  509.486331][ T3541] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  509.547046][T17893] netlink: 'syz.2.3043': attribute type 30 has an invalid length.
[  509.662585][ T3541] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.063460][T17905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3045'.
[  510.078162][T11602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.109040][T11602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.237863][ T5840] Bluetooth: hci0: command tx timeout
[  510.245798][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  510.253986][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  510.434513][T17913] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  510.459666][T17912] netlink: 'syz.0.3048': attribute type 1 has an invalid length.
[  510.479080][T17912] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3048'.
[  510.614976][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2981'.
[  510.728749][T17921] syzkaller1: entered promiscuous mode
[  510.741697][T17921] syzkaller1: entered allmulticast mode
[  510.764173][T17921] netlink: 'syz.4.3049': attribute type 11 has an invalid length.
[  510.772684][T17921] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3049'.
[  510.791648][ T5840] Bluetooth: hci5: command tx timeout
[  511.103094][T17924] tipc: Started in network mode
[  511.108057][T17924] tipc: Node identity , cluster identity 4711
[  511.169198][T17924] tipc: Failed to obtain node identity
[  511.211775][T17924] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  511.323167][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3054'.
[  511.490643][T17931] syzkaller0: entered promiscuous mode
[  511.531876][T17931] syzkaller0: entered allmulticast mode
[  511.910852][T17959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3059'.
[  511.963850][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  511.996235][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  512.009090][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  512.048711][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  512.066782][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  514.152512][ T5851] Bluetooth: hci4: command tx timeout
[  514.345532][T17969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3061'.
[  514.502668][T17972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3062'.
[  514.573999][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3063'.
[  514.787783][T17990] netlink: 'syz.2.3066': attribute type 1 has an invalid length.
[  514.916858][T17990] 8021q: adding VLAN 0 to HW filter on device bond9
[  514.953878][T18004] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3069'.
[  514.958648][T17992] bond9: (slave veth11): Enslaving as an active interface with a down link
[  514.994438][T17995] 8021q: adding VLAN 0 to HW filter on device batadv1
[  515.007488][T17995] bond9: (slave batadv1): making interface the new active one
[  515.017623][T17995] batadv1: entered promiscuous mode
[  515.028465][T17995] bond9: (slave batadv1): Enslaving as an active interface with an up link
[  515.075619][T17992] bond9: (slave veth13): Enslaving as an active interface with a down link
[  515.128733][T18006] netlink: 'syz.0.3071': attribute type 13 has an invalid length.
[  515.175618][T17992] bond9: (slave veth15): Enslaving as an active interface with a down link
[  515.231209][T17992] bond9: (slave veth17): Enslaving as an active interface with a down link
[  515.281069][T17992] bond9: (slave veth19): Enslaving as an active interface with a down link
[  515.339338][T18017] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3073'.
[  515.532557][T18009] geneve2: entered promiscuous mode
[  515.630759][T17992] bond9: (slave veth21): Enslaving as an active interface with a down link
[  515.679573][T11585] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  515.700352][T11585] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  515.784008][T11611] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  515.820002][T11611] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  515.997757][T17960] chnl_net:caif_netlink_parms(): no params data found
[  516.235780][ T5851] Bluetooth: hci4: command tx timeout
[  516.507938][T18058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3080'.
[  516.508814][T17960] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.528538][T17960] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.542046][T17960] bridge_slave_0: entered allmulticast mode
[  516.550244][T17960] bridge_slave_0: entered promiscuous mode
[  516.581853][T18058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3080'.
[  516.581997][T17960] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.642315][T17960] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.649946][T17960] bridge_slave_1: entered allmulticast mode
[  516.661025][T17960] bridge_slave_1: entered promiscuous mode
[  516.669120][T18062] syzkaller1: entered promiscuous mode
[  516.678979][T18062] syzkaller1: entered allmulticast mode
[  516.824423][T17960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  516.839600][T17960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.019553][T17960] team0: Port device team_slave_0 added
[  517.059025][T17960] team0: Port device team_slave_1 added
[  517.092602][T18073] block nbd0: server does not support multiple connections per device.
[  517.112842][T18073] block nbd0: shutting down sockets
[  517.182717][T17960] batman_adv: batadv0: Adding interface: batadv_slave_0
[  517.200921][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.229595][T17960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  517.260102][T17960] batman_adv: batadv0: Adding interface: batadv_slave_1
[  517.268071][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  517.296562][T17960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  517.476746][T18098] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3088'.
[  517.588630][T18102] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3090'.
[  517.631257][T18102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3090'.
[  517.636486][T17960] hsr_slave_0: entered promiscuous mode
[  517.650162][T17960] hsr_slave_1: entered promiscuous mode
[  517.659504][T17960] debugfs: 'hsr0' already exists in 'hsr'
[  517.666024][T17960] Cannot create hsr debugfs directory
[  517.675520][T18100] netlink: 'syz.0.3089': attribute type 1 has an invalid length.
[  517.791003][T18103] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  518.270180][T17960] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.301847][T17960] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  518.313515][ T5851] Bluetooth: hci4: command tx timeout
[  518.323276][T17960] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  518.350207][T18128] FAULT_INJECTION: forcing a failure.
[  518.350207][T18128] name failslab, interval 1, probability 0, space 0, times 1
[  518.365478][T18128] CPU: 1 UID: 0 PID: 18128 Comm: syz.5.3098 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  518.365513][T18128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  518.365526][T18128] Call Trace:
[  518.365535][T18128]  <TASK>
[  518.365545][T18128]  dump_stack_lvl+0x189/0x250
[  518.365599][T18128]  ? __pfx____ratelimit+0x10/0x10
[  518.365630][T18128]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.365653][T18128]  ? __pfx__printk+0x10/0x10
[  518.365686][T18128]  ? __pfx___might_resched+0x10/0x10
[  518.365717][T18128]  ? fs_reclaim_acquire+0x7d/0x100
[  518.365745][T18128]  should_fail_ex+0x414/0x560
[  518.365793][T18128]  should_failslab+0xa8/0x100
[  518.365816][T18128]  __kmalloc_noprof+0xcb/0x4f0
[  518.365848][T18128]  ? kfree+0x4d/0x440
[  518.365873][T18128]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  518.365911][T18128]  tomoyo_realpath_from_path+0xe3/0x5d0
[  518.365940][T18128]  ? tomoyo_domain+0xd9/0x130
[  518.365972][T18128]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  518.365995][T18128]  tomoyo_path_number_perm+0x1e8/0x5a0
[  518.366020][T18128]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  518.366059][T18128]  ? __lock_acquire+0xab9/0xd20
[  518.366103][T18128]  ? __fget_files+0x2a/0x420
[  518.366124][T18128]  ? __fget_files+0x2a/0x420
[  518.366140][T18128]  ? __fget_files+0x3a0/0x420
[  518.366156][T18128]  ? __fget_files+0x2a/0x420
[  518.366177][T18128]  security_file_ioctl+0xcb/0x2d0
[  518.366200][T18128]  __se_sys_ioctl+0x47/0x170
[  518.366227][T18128]  do_syscall_64+0xfa/0x3b0
[  518.366254][T18128]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.366279][T18128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.366297][T18128]  ? clear_bhb_loop+0x60/0xb0
[  518.366319][T18128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.366336][T18128] RIP: 0033:0x7f4f29d8ebe9
[  518.366354][T18128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  518.366370][T18128] RSP: 002b:00007f4f2ac34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  518.366392][T18128] RAX: ffffffffffffffda RBX: 00007f4f29fb5fa0 RCX: 00007f4f29d8ebe9
[  518.366406][T18128] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000005
[  518.366418][T18128] RBP: 00007f4f2ac34090 R08: 0000000000000000 R09: 0000000000000000
[  518.366429][T18128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  518.366439][T18128] R13: 00007f4f29fb6038 R14: 00007f4f29fb5fa0 R15: 00007ffd69b86b18
[  518.366469][T18128]  </TASK>
[  518.366855][T18128] ERROR: Out of memory at tomoyo_realpath_from_path.
[  518.717607][T17960] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.739134][T17960] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  518.757075][T17960] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  518.845366][T17960] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  518.866447][T17960] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  518.895115][T17960] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  518.974288][T18136] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  519.029247][T17960] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  519.060164][T17960] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  519.091662][T17960] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  519.495836][T18161] __nla_validate_parse: 3 callbacks suppressed
[  519.495859][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3107'.
[  519.518432][T18161] veth1_macvtap: left promiscuous mode
[  519.569296][T18165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3109'.
[  519.608811][T17960] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  519.650137][T17960] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  519.685106][T18167] Bluetooth: MGMT ver 1.23
[  519.702643][T17960] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  519.735641][T17960] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  519.781235][T18171] FAULT_INJECTION: forcing a failure.
[  519.781235][T18171] name failslab, interval 1, probability 0, space 0, times 0
[  519.799988][T18171] CPU: 0 UID: 0 PID: 18171 Comm: syz.4.3111 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  519.800021][T18171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  519.800036][T18171] Call Trace:
[  519.800044][T18171]  <TASK>
[  519.800054][T18171]  dump_stack_lvl+0x189/0x250
[  519.800082][T18171]  ? __pfx____ratelimit+0x10/0x10
[  519.800114][T18171]  ? __pfx_dump_stack_lvl+0x10/0x10
[  519.800137][T18171]  ? __pfx__printk+0x10/0x10
[  519.800168][T18171]  ? __pfx___might_resched+0x10/0x10
[  519.800200][T18171]  ? fs_reclaim_acquire+0x7d/0x100
[  519.800229][T18171]  should_fail_ex+0x414/0x560
[  519.800270][T18171]  should_failslab+0xa8/0x100
[  519.800294][T18171]  __kmalloc_noprof+0xcb/0x4f0
[  519.800324][T18171]  ? tomoyo_encode+0x28b/0x550
[  519.800362][T18171]  tomoyo_encode+0x28b/0x550
[  519.800415][T18171]  tomoyo_realpath_from_path+0x58d/0x5d0
[  519.800450][T18171]  ? tomoyo_domain+0xd9/0x130
[  519.800492][T18171]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  519.800520][T18171]  tomoyo_path_number_perm+0x1e8/0x5a0
[  519.800551][T18171]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  519.800600][T18171]  ? __lock_acquire+0xab9/0xd20
[  519.800657][T18171]  ? __fget_files+0x2a/0x420
[  519.800683][T18171]  ? __fget_files+0x2a/0x420
[  519.800703][T18171]  ? __fget_files+0x3a0/0x420
[  519.800723][T18171]  ? __fget_files+0x2a/0x420
[  519.800750][T18171]  security_file_ioctl+0xcb/0x2d0
[  519.800778][T18171]  __se_sys_ioctl+0x47/0x170
[  519.800809][T18171]  do_syscall_64+0xfa/0x3b0
[  519.800840][T18171]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.800871][T18171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.800893][T18171]  ? clear_bhb_loop+0x60/0xb0
[  519.800920][T18171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.800942][T18171] RIP: 0033:0x7fb1fe98ebe9
[  519.800962][T18171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.800981][T18171] RSP: 002b:00007fb1ff744038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  519.801006][T18171] RAX: ffffffffffffffda RBX: 00007fb1febb5fa0 RCX: 00007fb1fe98ebe9
[  519.801022][T18171] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000005
[  519.801037][T18171] RBP: 00007fb1ff744090 R08: 0000000000000000 R09: 0000000000000000
[  519.801050][T18171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  519.801063][T18171] R13: 00007fb1febb6038 R14: 00007fb1febb5fa0 R15: 00007fff80fdfd18
[  519.801100][T18171]  </TASK>
[  519.801126][T18171] ERROR: Out of memory at tomoyo_realpath_from_path.
[  520.167683][T18170] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.358457][T18170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.393877][ T5851] Bluetooth: hci4: command tx timeout
[  520.477657][T18170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.562029][T18197] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode
[  520.685577][T18170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.705533][T18199] netlink: 'syz.5.3115': attribute type 10 has an invalid length.
[  520.733746][T18201] bridge_slave_0: left allmulticast mode
[  520.736434][T18202] netlink: 'syz.4.3114': attribute type 38 has an invalid length.
[  520.740105][T18201] bridge_slave_0: left promiscuous mode
[  520.763279][T18201] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.783276][T18201] bridge_slave_1: left allmulticast mode
[  520.789133][T18201] bridge_slave_1: left promiscuous mode
[  520.798133][T18201] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.824105][T18201] bond0: (slave bond_slave_0): Releasing backup interface
[  520.839126][T18201] bond0: (slave bond_slave_1): Releasing backup interface
[  520.868395][T18201] team0: Port device team_slave_0 removed
[  520.887460][T18201] team0: Port device team_slave_1 removed
[  520.897335][T18201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  520.906875][T18201] batman_adv: batadv0: Removing interface: batadv_slave_0
[  520.919548][T18201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  520.931190][T18201] batman_adv: batadv0: Removing interface: batadv_slave_1
[  520.990193][T18199] mac80211_hwsim hwsim35 wlan1: left allmulticast mode
[  521.021163][T18199] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.198130][T17960] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.280177][ T3541] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.291070][ T3541] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.297636][T18209] netlink: zone id is out of range
[  521.332467][T18209] netlink: zone id is out of range
[  521.344725][T11586] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.410592][T17960] 8021q: adding VLAN 0 to HW filter on device team0
[  521.430825][ T3541] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.496669][T11585] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.504098][T11585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.586825][T11602] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.594249][T11602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.324470][T17960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.509503][T17960] veth0_vlan: entered promiscuous mode
[  522.567979][T17960] veth1_vlan: entered promiscuous mode
[  522.648080][T18244] netlink: 4608 bytes leftover after parsing attributes in process `syz.4.3129'.
[  522.718692][T17960] veth0_macvtap: entered promiscuous mode
[  522.753124][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3129'.
[  522.800014][T17960] veth1_macvtap: entered promiscuous mode
[  522.895670][T17960] batman_adv: batadv0: Interface activated: batadv_slave_0
[  522.953224][T17960] batman_adv: batadv0: Interface activated: batadv_slave_1
[  522.993546][ T3541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  523.008562][ T3541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  523.037335][T18253] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3133'.
[  523.049143][T18254] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3131'.
[  523.058872][T18253] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  523.085116][ T3541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  523.095790][ T3541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  523.133447][T18256] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3131'.
[  523.424648][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3134'.
[  523.444739][T11585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.464788][T11585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.506192][T18259] netlink: 'syz.4.3134': attribute type 10 has an invalid length.
[  523.545792][T18264] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3135'.
[  523.588654][T18262] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3134'.
[  523.612460][T18259] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  523.657575][T11606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.812340][T11606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  524.814855][T18311] __nla_validate_parse: 5 callbacks suppressed
[  524.814893][T18311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3146'.
[  524.837848][T18313] pimreg: entered allmulticast mode
[  524.849903][T18311] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3146'.
[  524.904679][T18311] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3146'.
[  525.012887][T18318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3147'.
[  525.031186][T18318] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3147'.
[  525.048076][T18318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3147'.
[  525.061237][T18318] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3147'.
[  525.277904][T18328] netlink: 'syz.4.3151': attribute type 1 has an invalid length.
[  525.287594][T18328] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3151'.
[  525.307962][T18328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3151'.
[  525.325432][T18329] netlink: 'syz.4.3151': attribute type 1 has an invalid length.
[  525.349712][T18329] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3151'.
[  525.373239][T18326] tipc: Started in network mode
[  525.378515][T18326] tipc: Node identity 56ac22172199, cluster identity 4711
[  525.399088][T18326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  525.414313][T18331] tipc: Started in network mode
[  525.420321][T18331] tipc: Node identity be259a8c94ba, cluster identity 4711
[  525.429248][T18331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  525.439954][T18331] syzkaller0: entered promiscuous mode
[  525.447699][T18331] syzkaller0: entered allmulticast mode
[  525.468167][T18326] syzkaller0: entered promiscuous mode
[  525.476360][T18326] syzkaller0: entered allmulticast mode
[  525.518370][T18326] syzkaller0: mtu greater than device maximum
[  525.529648][T18326] netlink: 'syz.5.3150': attribute type 10 has an invalid length.
[  525.552103][T18326] team0: Port device dummy0 added
[  525.566110][T18324] tipc: Resetting bearer <eth:syzkaller0>
[  525.607408][T18324] tipc: Disabling bearer <eth:syzkaller0>
[  525.804692][T18347] openvswitch: netlink: IP tunnel TTL not specified.
[  525.819579][T18347] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  525.826871][T18347] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  526.180390][T18330] tipc: Resetting bearer <eth:syzkaller0>
[  526.210743][T18330] tipc: Disabling bearer <eth:syzkaller0>
[  526.503676][T11611] batadv1: left promiscuous mode
[  527.113677][ T5851] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  527.125676][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout
[  527.322266][T18377] netlink: 'syz.5.3166': attribute type 10 has an invalid length.
[  527.374485][T18381] netlink: 'syz.5.3166': attribute type 10 has an invalid length.
[  527.419468][T18381] team0: Port device dummy0 removed
[  527.503633][T18380] openvswitch: netlink: Key type 10512 is out of range max 32
[  528.008305][T18400] netlink: 'syz.0.3173': attribute type 11 has an invalid length.
[  528.350362][T18415] debugfs: 'netdev:licvf™Ôƒò' already exists in 'phy33'
[  528.926849][T18447] macsec2: entered promiscuous mode
[  529.654063][T18476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  529.661725][T18476] IPv6: NLM_F_CREATE should be set when creating new route
[  529.666584][T18474] openvswitch: netlink: Duplicate or invalid key (type 0).
[  529.668989][T18476] IPv6: NLM_F_CREATE should be set when creating new route
[  529.676884][T18474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.920614][T18487] __nla_validate_parse: 5 callbacks suppressed
[  529.920636][T18487] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3199'.
[  529.957786][T18487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3199'.
[  530.153859][T10253] IPVS: starting estimator thread 0...
[  530.195200][T18500] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  530.262868][T18497] IPVS: using max 30 ests per chain, 72000 per kthread
[  530.279112][T18504] netlink: 'syz.5.3201': attribute type 16 has an invalid length.
[  530.316570][T18504] netlink: 'syz.5.3201': attribute type 17 has an invalid length.
[  530.387055][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'.
[  530.422543][T18509] IPv6: NLM_F_REPLACE set, but no existing node found!
[  530.530429][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3201'.
[  531.193293][    C1] bridge0: port 1(erspan0) entered forwarding state
[  531.199984][    C1] bridge0: topology change detected, propagating
[  531.407983][T18507] bridge_slave_1: left allmulticast mode
[  531.433846][T18507] bridge_slave_1: left promiscuous mode
[  531.439903][T18507] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.492714][T18507] bridge_slave_0: left allmulticast mode
[  531.498456][T18507] bridge_slave_0: left promiscuous mode
[  531.530412][T18507] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.650750][T18527] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3205'.
[  531.689046][T11611] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.720745][T11611] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  531.750570][T11611] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.774212][T11611] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  531.808178][T18527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  532.004278][T18527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  532.056784][T18536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.139047][T11611] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  532.183785][T11611] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  532.226280][T11611] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  532.236700][T18536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3209'.
[  532.253746][T11611] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  532.600223][T18542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3211'.
[  532.612940][T18546] netlink: 'syz.3.3212': attribute type 29 has an invalid length.
[  532.833653][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  532.844807][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  532.854705][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  532.867332][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  532.878788][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  534.025920][T18572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'.
[  534.029777][T18550] chnl_net:caif_netlink_parms(): no params data found
[  534.418504][T18550] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.441111][T18550] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.460115][T18550] bridge_slave_0: entered allmulticast mode
[  534.492515][T18550] bridge_slave_0: entered promiscuous mode
[  534.536607][T18550] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.566944][T18550] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.616107][T18550] bridge_slave_1: entered allmulticast mode
[  534.653960][T18550] bridge_slave_1: entered promiscuous mode
[  534.884505][   T30] audit: type=1804 audit(1754556904.973:10): pid=18598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3224" name=7830303030303030303030303030303033303030303030303030303030303030303030303030303303 dev="tmpfs" ino=403 res=1 errno=0
[  534.915573][T18550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  534.954906][ T5840] Bluetooth: hci6: command tx timeout
[  534.968439][T18550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.979324][   T30] audit: type=1800 audit(1754556904.973:11): pid=18598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3224" name=7830303030303030303030303030303033303030303030303030303030303030303030303030303303 dev="tmpfs" ino=403 res=0 errno=0
[  535.102813][T18550] team0: Port device team_slave_0 added
[  535.136720][T18550] team0: Port device team_slave_1 added
[  535.365419][T18550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.389743][T18550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.446690][T18550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.488935][T18619] netlink: 'syz.0.3232': attribute type 6 has an invalid length.
[  535.518408][T18619] netlink: 'syz.0.3232': attribute type 6 has an invalid length.
[  535.520013][T18550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.536812][T18550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.580359][T18550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.812944][T18550] hsr_slave_0: entered promiscuous mode
[  535.820149][T18550] hsr_slave_1: entered promiscuous mode
[  535.827421][T18550] debugfs: 'hsr0' already exists in 'hsr'
[  535.833895][T18550] Cannot create hsr debugfs directory
[  536.434218][T18654] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3243'.
[  536.473167][T18657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3244'.
[  536.787871][T18669] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  536.884433][T18673] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3249'.
[  536.904836][T18669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  537.034597][ T5840] Bluetooth: hci6: command tx timeout
[  537.036025][T18550] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  537.123293][T18550] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  537.208773][T18550] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  537.369135][T18550] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  537.749400][T18550] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.879612][T18550] 8021q: adding VLAN 0 to HW filter on device team0
[  537.915529][T11606] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.922939][T11606] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.952404][T11611] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.959814][T11611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.114963][T18550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  538.254033][T18738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'.
[  538.358450][T18743] netdevsim netdevsim4: Direct firmware load for 2Q failed with error -2
[  538.381229][T18743] netdevsim netdevsim4: Falling back to sysfs fallback for: 2Q
[  538.511121][T18741] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  538.772162][T18550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  539.112116][ T5840] Bluetooth: hci6: command tx timeout
[  539.146096][T18775] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3271'.
[  539.167368][T18775] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3271'.
[  539.189467][T18775] netlink: 'syz.5.3271': attribute type 5 has an invalid length.
[  539.258977][T18779] syz_tun: entered allmulticast mode
[  539.286439][T18775] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3271'.
[  539.348807][T18775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3271'.
[  539.404994][T18783] netlink: 'syz.0.3273': attribute type 2 has an invalid length.
[  539.721947][T18793] batadv_slave_1: entered promiscuous mode
[  539.807666][T18800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3275'.
[  539.836901][T18799] netlink: 'syz.5.3277': attribute type 9 has an invalid length.
[  539.873373][T18799] netlink: 'syz.5.3277': attribute type 6 has an invalid length.
[  539.914763][T18550] veth0_vlan: entered promiscuous mode
[  540.142140][T18792] batadv_slave_1: left promiscuous mode
[  540.580331][T18550] veth1_vlan: entered promiscuous mode
[  540.878053][T18550] veth0_macvtap: entered promiscuous mode
[  540.890777][T18550] veth1_macvtap: entered promiscuous mode
[  540.977698][T18550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  541.041033][T18550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  541.068396][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3286'.
[  541.192358][ T5840] Bluetooth: hci6: command tx timeout
[  541.215008][T18833] bridge1: the hash_elasticity option has been deprecated and is always 16
[  541.238668][T18833] bridge1: entered allmulticast mode
[  541.290113][T11606] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.316287][T11606] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.366874][T11606] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.421652][T11606] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.671094][T18860] syzkaller0: entered promiscuous mode
[  541.690753][T18860] syzkaller0: entered allmulticast mode
[  541.758834][T18862] __nla_validate_parse: 1 callbacks suppressed
[  541.758855][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3292'.
[  541.839034][T11602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  541.863606][T11602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.074884][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.107204][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.150149][T18879] bridge0: entered allmulticast mode
[  542.203420][T18879] pim6reg: entered allmulticast mode
[  542.232094][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3299'.
[  542.241050][T18882] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3299'.
[  542.340178][T18882] geneve2: entered promiscuous mode
[  542.352653][T18882] geneve2: entered allmulticast mode
[  542.443439][T18890] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20000
[  542.485324][T18890] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  542.955096][T18921] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  542.974388][T18923] IPVS: stopping backup sync thread 18921 ...
[  543.207702][T18931] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  543.424961][T18938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3314'.
[  546.213450][T18951] bond0: entered promiscuous mode
[  546.247651][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'.
[  546.308988][T18961] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3319'.
[  547.216603][T18999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3329'.
[  547.269500][T18999] IPv4: Oversized IP packet from 127.202.26.0
[  547.662913][T19019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3336'.
[  549.572577][T19090] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3354'.
[  550.361997][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3361'.
[  550.852715][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3348'.
[  551.070857][T19159] netlink: 'syz.6.3370': attribute type 1 has an invalid length.
[  551.080553][T19158] netlink: 'syz.3.3371': attribute type 13 has an invalid length.
[  551.102579][T19158] netlink: 'syz.3.3371': attribute type 17 has an invalid length.
[  551.110907][T19159] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3370'.
[  551.520749][T19158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  551.728771][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'.
[  551.731009][T19173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  551.769257][T19173] syzkaller0: entered promiscuous mode
[  551.778943][T19173] syzkaller0: entered allmulticast mode
[  551.855381][T19175] netlink: 428 bytes leftover after parsing attributes in process `syz.3.3377'.
[  551.907267][T19184] netlink: 744 bytes leftover after parsing attributes in process `syz.3.3377'.
[  551.924711][T19173] tipc: Resetting bearer <eth:syzkaller0>
[  551.937911][T19175] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3377'.
[  552.597328][T19193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3382'.
[  552.628115][T19193] netlink: 'syz.3.3382': attribute type 74 has an invalid length.
[  552.697900][T19170] tipc: Resetting bearer <eth:syzkaller0>
[  552.871215][T10238] tipc: Node number set to 715102860
[  552.888283][T19170] tipc: Disabling bearer <eth:syzkaller0>
[  552.910550][T19201] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3383'.
[  552.989899][T19197] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[  553.069694][T19200] bridge_slave_0: left allmulticast mode
[  553.086421][T19200] bridge_slave_0: left promiscuous mode
[  553.096218][T19200] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.145464][T19200] bridge_slave_1: left allmulticast mode
[  553.191645][T19200] bridge_slave_1: left promiscuous mode
[  553.197611][T19200] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.232124][T19200] bond0: (slave bond_slave_0): Releasing backup interface
[  553.250360][T19200] bond0: (slave bond_slave_1): Releasing backup interface
[  553.283985][T19200] team0: Port device team_slave_0 removed
[  553.300773][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'.
[  553.300773][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'.
[  553.303344][T19200] team0: Port device team_slave_1 removed
[  553.327625][T19200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  553.336357][T19200] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.346583][T19200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  553.355671][T19200] batman_adv: batadv0: Removing interface: batadv_slave_1
[  553.545904][T19221] syz.3.3389 (19221) used obsolete PPPIOCDETACH ioctl
[  553.556058][T19222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3389'.
[  553.578653][T19221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3389'.
[  553.752862][T19229] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3391'.
[  554.450700][T19249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3397'.
[  554.482360][T19249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3397'.
[  554.588575][T19253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  554.694803][T19259] veth0: entered promiscuous mode
[  554.718071][T19259] veth0: left promiscuous mode
[  554.752337][T19261] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[  554.912433][T19263] netlink: 'syz.6.3401': attribute type 10 has an invalid length.
[  554.964409][T19266] netlink: 'syz.6.3401': attribute type 10 has an invalid length.
[  555.043430][T19265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3402'.
[  555.175144][T19263] team0: Port device dummy0 added
[  555.226692][T19266] team0: Port device dummy0 removed
[  555.259453][T19266] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  555.788123][T19282] netlink: zone id is out of range
[  555.811965][T19282] netlink: zone id is out of range
[  555.904673][T19282] netlink: zone id is out of range
[  555.910254][T19282] netlink: zone id is out of range
[  555.938588][T19282] netlink: zone id is out of range
[  555.949067][T19282] netlink: zone id is out of range
[  555.979686][T19297] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  556.001219][T19282] netlink: zone id is out of range
[  556.287730][T19308] netlink: 'syz.0.3412': attribute type 10 has an invalid length.
[  556.743706][T19308] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  556.980530][T19331] net_ratelimit: 97 callbacks suppressed
[  556.980551][T19331] openvswitch: netlink: Flow key attr not present in new flow.
[  557.094688][T19334] pim6reg1: entered promiscuous mode
[  557.103076][T19334] pim6reg1: entered allmulticast mode
[  557.136104][T19339] netlink: 'syz.3.3422': attribute type 1 has an invalid length.
[  557.438750][T19347] pim6reg1: entered promiscuous mode
[  557.454792][T19347] pim6reg1: entered allmulticast mode
[  558.248922][T19366] netlink: 'syz.4.3429': attribute type 1 has an invalid length.
[  558.525471][T19387] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20000
[  559.053301][T19418] __nla_validate_parse: 8 callbacks suppressed
[  559.053323][T19418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3442'.
[  559.076266][ T5840] block nbd0: Receive control failed (result -107)
[  559.085318][T19415] netlink: 'syz.5.3441': attribute type 10 has an invalid length.
[  559.129196][T19415] team0: Port device dummy0 added
[  559.162254][T19414] nbd0: detected capacity change from 0 to 32
[  559.199235][T19415] netlink: 'syz.5.3441': attribute type 10 has an invalid length.
[  559.297128][T19415] team0: Port device dummy0 removed
[  559.307686][T19415] dummy0: entered promiscuous mode
[  559.504357][T19434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3446'.
[  559.552845][T19433] batman_adv: batadv0: Adding interface: ip6gretap2
[  559.559554][T19433] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  559.603814][T19433] batman_adv: batadv0: Interface activated: ip6gretap2
[  560.403523][T19469] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3454'.
[  560.499983][T19465] netlink: 'syz.3.3455': attribute type 2 has an invalid length.
[  560.509136][T19465] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.3455'.
[  561.453186][T19511] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3465'.
[  562.003956][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3466'.
[  562.241299][T19523] bond0: (slave wlan1): Releasing backup interface
[  562.327499][T19528] tipc: Started in network mode
[  562.344614][T19528] tipc: Node identity 080211000001, cluster identity 4711
[  562.364862][T19528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  562.402626][T19528] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode
[  562.410552][T19528] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode
[  562.455604][T19528] tipc: Resetting bearer <eth:syzkaller0>
[  562.538030][T10261] IPVS: starting estimator thread 0...
[  562.545172][ T3541] tipc: Resetting bearer <eth:syzkaller0>
[  562.592285][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3476'.
[  562.641265][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3476'.
[  562.651985][T19551] IPVS: using max 26 ests per chain, 62400 per kthread
[  562.732790][T19537] bond0: (slave wlan1): Releasing backup interface
[  562.786848][T19556] dummy0: entered promiscuous mode
[  562.819814][T19556] macsec1: entered promiscuous mode
[  562.870290][T19556] bond0: entered promiscuous mode
[  562.879844][T19556] macsec1: entered allmulticast mode
[  562.909949][T19556] bond0: entered allmulticast mode
[  562.935633][T19556] dummy0: entered allmulticast mode
[  563.003816][T19556] bond0: left allmulticast mode
[  563.008772][T19556] dummy0: left allmulticast mode
[  563.069005][T19556] bond0: left promiscuous mode
[  563.089640][T19556] dummy0: left promiscuous mode
[  563.187464][T19557] dummy0: entered promiscuous mode
[  563.197507][T19557] macsec1: entered promiscuous mode
[  563.203674][T19557] bond0: entered promiscuous mode
[  563.212139][T19557] macsec1: entered allmulticast mode
[  563.226063][T19557] bond0: entered allmulticast mode
[  563.249003][T19557] dummy0: entered allmulticast mode
[  563.279592][T19557] bond0: left allmulticast mode
[  563.285780][T19557] dummy0: left allmulticast mode
[  563.294254][T19557] bond0: left promiscuous mode
[  563.306145][T19557] dummy0: left promiscuous mode
[  563.391736][T10261] tipc: Node number set to 134418688
[  564.880866][T19617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3488'.
[  564.963539][T19623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3490'.
[  564.979072][T19621] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  565.002400][T19623] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  565.011243][T19621] CPU: 0 UID: 0 PID: 19621 Comm: syz.0.3488 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  565.011275][T19621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  565.011289][T19621] Call Trace:
[  565.011297][T19621]  <TASK>
[  565.011306][T19621]  dump_stack_lvl+0x189/0x250
[  565.011344][T19621]  ? __pfx_dump_stack_lvl+0x10/0x10
[  565.011437][T19621]  ? __pfx__printk+0x10/0x10
[  565.011465][T19621]  ? kernfs_path_from_node+0x2c/0x260
[  565.011492][T19621]  ? kernfs_path_from_node+0x2c/0x260
[  565.011515][T19621]  ? kernfs_path_from_node+0x2c/0x260
[  565.011543][T19621]  ? kernfs_path_from_node+0x22c/0x260
[  565.011567][T19621]  ? kernfs_path_from_node+0x2c/0x260
[  565.011596][T19621]  sysfs_warn_dup+0x8e/0xa0
[  565.011622][T19621]  sysfs_do_create_link_sd+0xc0/0x110
[  565.011650][T19621]  device_add_class_symlinks+0x1cf/0x240
[  565.011684][T19621]  device_add+0x475/0xb50
[  565.011716][T19621]  wiphy_register+0x1ba6/0x28d0
[  565.011770][T19621]  ? __pfx_wiphy_register+0x10/0x10
[  565.011801][T19621]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  565.011835][T19621]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  565.011865][T19621]  ieee80211_register_hw+0x3425/0x4080
[  565.011912][T19621]  ? ieee80211_register_hw+0x1491/0x4080
[  565.011948][T19621]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  565.011979][T19621]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  565.012019][T19621]  ? __hrtimer_setup+0x187/0x210
[  565.012051][T19621]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  565.012090][T19621]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  565.012151][T19621]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  565.012176][T19621]  ? trace_kmalloc+0x1f/0xd0
[  565.012200][T19621]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  565.012231][T19621]  ? kstrndup+0xbf/0x160
[  565.012269][T19621]  hwsim_new_radio_nl+0xea4/0x1b10
[  565.012304][T19621]  ? __pfx___nla_validate_parse+0x10/0x10
[  565.012347][T19621]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  565.012404][T19621]  ? __nla_parse+0x40/0x60
[  565.012434][T19621]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  565.012472][T19621]  genl_family_rcv_msg_doit+0x215/0x300
[  565.012508][T19621]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  565.012549][T19621]  ? bpf_lsm_capable+0x9/0x20
[  565.012578][T19621]  ? security_capable+0x7e/0x2e0
[  565.012613][T19621]  genl_rcv_msg+0x60e/0x790
[  565.012645][T19621]  ? __pfx_genl_rcv_msg+0x10/0x10
[  565.012668][T19621]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  565.012713][T19621]  netlink_rcv_skb+0x205/0x470
[  565.012742][T19621]  ? __lock_acquire+0xab9/0xd20
[  565.012772][T19621]  ? __pfx_genl_rcv_msg+0x10/0x10
[  565.012798][T19621]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  565.012856][T19621]  ? down_read+0x1ad/0x2e0
[  565.012880][T19621]  genl_rcv+0x28/0x40
[  565.012903][T19621]  netlink_unicast+0x82c/0x9e0
[  565.012944][T19621]  ? __pfx_netlink_unicast+0x10/0x10
[  565.012975][T19621]  ? netlink_sendmsg+0x642/0xb30
[  565.013005][T19621]  ? skb_put+0x11b/0x210
[  565.013031][T19621]  netlink_sendmsg+0x805/0xb30
[  565.013078][T19621]  ? __pfx_netlink_sendmsg+0x10/0x10
[  565.013116][T19621]  ? aa_sock_msg_perm+0x94/0x160
[  565.013150][T19621]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  565.013176][T19621]  ? __pfx_netlink_sendmsg+0x10/0x10
[  565.013211][T19621]  __sock_sendmsg+0x219/0x270
[  565.013245][T19621]  ____sys_sendmsg+0x505/0x830
[  565.013277][T19621]  ? __pfx_____sys_sendmsg+0x10/0x10
[  565.013313][T19621]  ? import_iovec+0x74/0xa0
[  565.013350][T19621]  ___sys_sendmsg+0x21f/0x2a0
[  565.013392][T19621]  ? __pfx____sys_sendmsg+0x10/0x10
[  565.013466][T19621]  ? __fget_files+0x2a/0x420
[  565.013487][T19621]  ? __fget_files+0x3a0/0x420
[  565.013522][T19621]  __x64_sys_sendmsg+0x19b/0x260
[  565.013550][T19621]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  565.013589][T19621]  ? rcu_is_watching+0x15/0xb0
[  565.013631][T19621]  ? do_syscall_64+0xbe/0x3b0
[  565.013669][T19621]  do_syscall_64+0xfa/0x3b0
[  565.013700][T19621]  ? lockdep_hardirqs_on+0x9c/0x150
[  565.013729][T19621]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.013749][T19621]  ? clear_bhb_loop+0x60/0xb0
[  565.013776][T19621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.013797][T19621] RIP: 0033:0x7fd3ac98ebe9
[  565.013818][T19621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  565.013837][T19621] RSP: 002b:00007fd3ad876038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  565.013862][T19621] RAX: ffffffffffffffda RBX: 00007fd3acbb6180 RCX: 00007fd3ac98ebe9
[  565.013878][T19621] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  565.013892][T19621] RBP: 00007fd3aca11e19 R08: 0000000000000000 R09: 0000000000000000
[  565.013906][T19621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  565.013918][T19621] R13: 00007fd3acbb6218 R14: 00007fd3acbb6180 R15: 00007fff7ae36c08
[  565.013957][T19621]  </TASK>
[  565.550142][T19623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  565.679157][T19635] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3493'.
[  566.149757][T19630] syz_tun: left promiscuous mode
[  566.226936][T19630] syz_tun: left allmulticast mode
[  566.249923][T19669] vcan0: tx drop: invalid da for name 0x0000000000000001
[  567.000672][T19630] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  567.052569][T19630] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  567.383495][T19630] macsec1: left promiscuous mode
[  567.388832][T19630] macsec1: left allmulticast mode
[  567.405392][T19630] geneve2: left promiscuous mode
[  567.410843][T19630] geneve2: left allmulticast mode
[  567.427073][T19630] tipc: Resetting bearer <eth:syzkaller0>
[  567.456066][T19630] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode
[  567.463852][T19630] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode
[  567.475161][T19630] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  567.496654][T19637] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  567.523931][T10256] syz1: Port: 1 Link DOWN
[  567.529445][T11584] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.582787][T11584] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.612088][T11584] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.649021][T11584] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.807052][T19696] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3499'.
[  568.083775][T19709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3504'.
[  568.231756][T19705] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3503'.
[  568.758803][T19747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  568.838985][T19751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3514'.
[  569.256000][T19765] netlink: 'syz.3.3520': attribute type 4 has an invalid length.
[  570.773327][T19826] netlink: 'syz.0.3531': attribute type 1 has an invalid length.
[  570.957790][T19832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3533'.
[  571.601254][T19854] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3536'.
[  572.050645][T19865] IPv6: sit1: Disabled Multicast RS
[  572.257578][T19869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3540'.
[  572.323142][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3542'.
[  572.528641][T19873] netlink: 'syz.4.3542': attribute type 10 has an invalid length.
[  572.539635][T19873] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3542'.
[  572.557494][T19873] veth0_vlan: left promiscuous mode
[  572.575546][T19873] veth0_vlan: entered promiscuous mode
[  572.602648][T19873] veth0_vlan: entered allmulticast mode
[  572.639207][T19873] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  572.873883][T19891] syzkaller0: entered promiscuous mode
[  572.879502][T19891] syzkaller0: entered allmulticast mode
[  573.431675][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  574.327256][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'.
[  574.360170][T19933] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3554'.
[  574.393182][T19935] netlink: 'syz.0.3556': attribute type 1 has an invalid length.
[  574.402274][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'.
[  574.426579][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3555'.
[  574.448312][T19937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  574.460015][T19933] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3554'.
[  574.500756][T19935] 8021q: adding VLAN 0 to HW filter on device bond1
[  574.630771][T19935] bond1: (slave veth3): Enslaving as an active interface with a down link
[  574.683498][T19942] vlan2: entered allmulticast mode
[  574.705187][T19942] veth1: entered allmulticast mode
[  574.725136][T19942] veth1: entered promiscuous mode
[  574.746012][T19942] veth1: left promiscuous mode
[  574.757586][T19942] bond1: (slave vlan2): making interface the new active one
[  574.805195][T19942] veth1: entered promiscuous mode
[  574.822174][T19942] vlan2: entered promiscuous mode
[  574.828242][T19942] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  576.749832][T10263] IPVS: starting estimator thread 0...
[  576.852104][T20016] IPVS: using max 24 ests per chain, 57600 per kthread
[  576.863287][T20022] netlink: 'syz.0.3574': attribute type 6 has an invalid length.
[  576.990555][T20027] netlink: 'syz.4.3578': attribute type 2 has an invalid length.
[  577.009364][T20027] netlink: 'syz.4.3578': attribute type 1 has an invalid length.
[  577.017878][T20027] __nla_validate_parse: 126 callbacks suppressed
[  577.017899][T20027] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3578'.
[  577.703847][T20032] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  578.482105][T20066] syzkaller1: entered promiscuous mode
[  578.487755][T20066] syzkaller1: entered allmulticast mode
[  578.957371][T20092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3591'.
[  579.162999][T20097] veth1_vlan: mtu less than device minimum
[  579.302062][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3595'.
[  579.392285][T20105] veth1_to_bond: entered allmulticast mode
[  579.489684][T20103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3595'.
[  579.615960][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  579.626932][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  579.640390][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  579.657744][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  579.675728][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  579.686009][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3596'.
[  579.730933][T20103] bond0: (slave bond_slave_1): Releasing backup interface
[  579.769289][T20103] veth1_to_bond (unregistering): left allmulticast mode
[  580.586488][T20108] chnl_net:caif_netlink_parms(): no params data found
[  580.898518][T20154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.950628][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3607'.
[  581.144742][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3609'.
[  581.214619][T20154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.369769][T20108] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.380513][T20108] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.403397][T20108] bridge_slave_0: entered allmulticast mode
[  581.418368][T20108] bridge_slave_0: entered promiscuous mode
[  581.548623][T20154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.580193][T20108] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.594033][T20108] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.604669][T20108] bridge_slave_1: entered allmulticast mode
[  581.616389][T20108] bridge_slave_1: entered promiscuous mode
[  581.753292][ T5840] Bluetooth: hci7: command tx timeout
[  581.762210][T20154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.870727][T20108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  581.886043][T20108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.896948][T20182] netem: incorrect ge model size
[  581.903428][T20182] netem: change failed
[  582.026327][T20108] team0: Port device team_slave_0 added
[  582.043783][T20185] netlink: 'syz.4.3615': attribute type 10 has an invalid length.
[  582.051913][T20108] team0: Port device team_slave_1 added
[  582.066212][T20185] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3615'.
[  582.095711][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3616'.
[  582.106968][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3616'.
[  582.119026][T20186] netlink: 'syz.0.3616': attribute type 13 has an invalid length.
[  582.128173][T20186] netlink: 'syz.0.3616': attribute type 11 has an invalid length.
[  582.150349][T20185] team0: entered promiscuous mode
[  582.158732][T20185] team_slave_0: entered promiscuous mode
[  582.166984][T20185] team_slave_1: entered promiscuous mode
[  582.177338][T20185] 8021q: adding VLAN 0 to HW filter on device team0
[  582.217421][T11594] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.264408][T20108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  582.281968][T20108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.315890][T20108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  582.348138][T20108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  582.369350][T20108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.399816][T20108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  582.455371][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.641067][T11585] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.664783][T11585] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.713642][T20108] hsr_slave_0: entered promiscuous mode
[  582.743027][T20108] hsr_slave_1: entered promiscuous mode
[  582.775299][T20108] debugfs: 'hsr0' already exists in 'hsr'
[  582.781188][T20108] Cannot create hsr debugfs directory
[  582.799042][T20199] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3620'.
[  582.902082][T20209] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  583.467466][T20226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3626'.
[  583.571856][T20108] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  583.610222][T20108] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  583.654429][T20108] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  583.720075][T20108] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  583.832088][ T5840] Bluetooth: hci7: command tx timeout
[  584.100062][T20108] 8021q: adding VLAN 0 to HW filter on device bond0
[  584.130531][T20254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3632'.
[  584.163873][T20253] netlink: 'syz.0.3631': attribute type 10 has an invalid length.
[  584.193602][T20253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3631'.
[  584.211187][T20108] 8021q: adding VLAN 0 to HW filter on device team0
[  584.314463][T20253] team0: Port device geneve0 added
[  584.345684][T11594] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.353201][T11594] bridge0: port 1(bridge_slave_0) entered forwarding state
[  584.415541][T11594] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.423004][T11594] bridge0: port 2(bridge_slave_1) entered forwarding state
[  584.683008][T20272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3636'.
[  584.753904][T20271] netlink: 'syz.3.3637': attribute type 13 has an invalid length.
[  584.762402][T20271] netlink: 'syz.3.3637': attribute type 17 has an invalid length.
[  584.834388][T20271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  585.005408][T20281] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3639'.
[  585.239589][T20108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  585.375026][T20304] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode
[  585.393963][T20304] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode
[  585.416325][T20304] tipc: Resetting bearer <eth:syzkaller0>
[  585.417451][T20294] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3642'.
[  585.912836][ T5840] Bluetooth: hci7: command tx timeout
[  586.015726][T11606] vlan2: left promiscuous mode
[  586.143685][T20332] netlink: 'syz.0.3651': attribute type 1 has an invalid length.
[  586.186225][T20108] veth0_vlan: entered promiscuous mode
[  586.220583][T20108] veth1_vlan: entered promiscuous mode
[  586.335864][T20108] veth0_macvtap: entered promiscuous mode
[  586.390974][T20108] veth1_macvtap: entered promiscuous mode
[  586.483063][T20108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  586.534052][T20108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  586.557920][T20346] netlink: 'syz.4.3655': attribute type 1 has an invalid length.
[  586.589396][T20346] netlink: 'syz.4.3655': attribute type 1 has an invalid length.
[  586.602507][T11584] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  586.635485][T11584] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  586.654885][T11584] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  586.677226][T11584] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  586.722136][T20351] netlink: 'syz.4.3656': attribute type 1 has an invalid length.
[  586.772763][T20351] bond1: entered promiscuous mode
[  586.778708][T20351] 8021q: adding VLAN 0 to HW filter on device bond1
[  586.910491][T11584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  586.943933][T20359] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  586.954111][T11584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.054888][T11601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.074256][T11601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.454617][T20380] netlink: 'syz.7.3663': attribute type 28 has an invalid length.
[  587.733723][T20391] __nla_validate_parse: 4 callbacks suppressed
[  587.733745][T20391] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3668'.
[  587.993739][ T5840] Bluetooth: hci7: command tx timeout
[  588.434843][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3676'.
[  588.547918][T20419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3678'.
[  589.044762][T20434] dummy0: entered promiscuous mode
[  589.061096][T20434] vlan2: entered promiscuous mode
[  589.159141][T20439] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  589.166613][T20439] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  589.174723][T20439] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  589.182257][T20439] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  589.189792][T20439] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  589.197338][T20439] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  589.204806][T20439] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  589.212168][T20439] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  589.219432][T20439] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  590.230295][T20468] netlink: 'syz.7.3693': attribute type 15 has an invalid length.
[  590.246708][T20469] net_ratelimit: 55 callbacks suppressed
[  590.246730][T20469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  590.758841][T10238] IPVS: starting estimator thread 0...
[  590.782491][T20492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3698'.
[  590.873763][T20490] IPVS: using max 28 ests per chain, 67200 per kthread
[  590.957800][T20499] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  591.277878][T20513] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3705'.
[  591.600327][T20519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  592.104410][T20533] tipc: Started in network mode
[  592.109377][T20533] tipc: Node identity c6f1661d89a9, cluster identity 4711
[  592.117564][T20533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  592.126267][T20533] syzkaller0: entered promiscuous mode
[  592.132153][T20533] syzkaller0: entered allmulticast mode
[  592.569321][T20544] ipvlan2: entered promiscuous mode
[  592.849846][T20556] netlink: 'syz.7.3717': attribute type 10 has an invalid length.
[  592.874358][T20556] team0: Cannot enslave team device to itself
[  592.906540][T20555] pim6reg1: entered allmulticast mode
[  592.929887][T20532] tipc: Resetting bearer <eth:syzkaller0>
[  592.975658][T20532] tipc: Disabling bearer <eth:syzkaller0>
[  593.127518][T20561] openvswitch: netlink: Message has 8 unknown bytes.
[  593.352488][T20574] netlink: 'syz.7.3723': attribute type 1 has an invalid length.
[  593.508370][T20575] bond1: (slave gretap1): making interface the new active one
[  593.544020][T20575] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  593.792303][T20587] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20001
[  594.413522][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3730'.
[  594.571256][T20617] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3732'.
[  594.593898][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3730'.
[  594.612982][T20617] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3732'.
[  594.826936][T20630] netlink: 'syz.7.3736': attribute type 10 has an invalid length.
[  594.838350][T20630] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3736'.
[  594.863079][T20630] bridge0: port 3(dummy0) entered blocking state
[  594.870065][T20630] bridge0: port 3(dummy0) entered disabled state
[  594.878237][T20630] dummy0: entered allmulticast mode
[  594.887780][T20630] bridge0: port 3(dummy0) entered blocking state
[  594.894527][T20630] bridge0: port 3(dummy0) entered forwarding state
[  594.907536][T20632] netlink: 'syz.3.3737': attribute type 26 has an invalid length.
[  595.713018][T20658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3743'.
[  596.067099][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  596.079885][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  596.090499][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  596.124333][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  596.145348][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  596.189668][T20669] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[  596.217366][T20669] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  596.231676][T20676] netlink: 'syz.7.3748': attribute type 1 has an invalid length.
[  596.256345][T20676] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3748'.
[  596.289662][T20676] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3748'.
[  596.387466][T20679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  596.529731][T20679] syzkaller0: entered promiscuous mode
[  596.536261][T20679] syzkaller0: entered allmulticast mode
[  596.552483][T20679] tipc: Resetting bearer <eth:syzkaller0>
[  596.593199][T20678] tipc: Resetting bearer <eth:syzkaller0>
[  597.451695][T10238] tipc: Node number set to 1331193373
[  598.233911][ T5840] Bluetooth: hci8: command tx timeout
[  599.166282][T20678] tipc: Disabling bearer <eth:syzkaller0>
[  599.184210][T20696] veth1_to_team: entered allmulticast mode
[  599.406721][T20701] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3756'.
[  599.539387][T20668] chnl_net:caif_netlink_parms(): no params data found
[  599.796814][T20668] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.805322][T20668] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.813223][T20668] bridge_slave_0: entered allmulticast mode
[  599.822437][T20668] bridge_slave_0: entered promiscuous mode
[  599.850117][T20668] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.859196][T20668] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.876536][T20668] bridge_slave_1: entered allmulticast mode
[  599.895834][T20668] bridge_slave_1: entered promiscuous mode
[  600.017158][T20668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  600.045332][T20668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  600.136334][T20668] team0: Port device team_slave_0 added
[  600.155989][T20668] team0: Port device team_slave_1 added
[  600.227616][T20668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  600.239700][T20668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.266929][T20668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  600.292743][T20668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  600.300036][T20668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.329329][T20668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  600.336727][ T5840] Bluetooth: hci8: command tx timeout
[  600.420295][T20668] hsr_slave_0: entered promiscuous mode
[  600.429183][T20668] hsr_slave_1: entered promiscuous mode
[  600.436640][T20668] debugfs: 'hsr0' already exists in 'hsr'
[  600.442860][T20668] Cannot create hsr debugfs directory
[  600.978839][T20668] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  601.055452][T20668] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  601.109019][T20668] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  601.204918][T20668] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  601.264994][T20754] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3765'.
[  601.462700][T20771] netlink: 'syz.0.3768': attribute type 6 has an invalid length.
[  601.494451][T20772] netlink: 'syz.7.3769': attribute type 3 has an invalid length.
[  601.523693][T20777] netlink: 'syz.0.3768': attribute type 6 has an invalid length.
[  601.535165][T20772] netlink: 'syz.7.3769': attribute type 20 has an invalid length.
[  601.562720][T20772] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3769'.
[  601.585265][T20668] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.678761][T20668] 8021q: adding VLAN 0 to HW filter on device team0
[  601.727600][T20783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3770'.
[  601.759821][T11594] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.767137][T11594] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.813710][T20787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3772'.
[  601.815411][T11594] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.830270][T11594] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.831639][T20788] netlink: 1284 bytes leftover after parsing attributes in process `syz.7.3771'.
[  601.867648][T20787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3772'.
[  601.905819][T17625] cgroup: fork rejected by pids controller in /syz0
[  602.160563][T20795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  602.188562][T20796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  602.394784][ T5840] Bluetooth: hci8: command tx timeout
[  602.683066][T20668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  602.973381][T20815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3781'.
[  603.654870][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  603.667869][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  603.678587][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  603.694267][T20668] veth0_vlan: entered promiscuous mode
[  603.701847][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  603.710175][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  603.727868][T20668] veth1_vlan: entered promiscuous mode
[  603.786416][T20668] veth0_macvtap: entered promiscuous mode
[  603.828991][T20668] veth1_macvtap: entered promiscuous mode
[  603.893397][T20668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  603.954770][T20668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  603.991228][T11606] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  604.047065][T11606] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  604.071103][T11606] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  604.132142][T11606] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  604.471927][ T5840] Bluetooth: hci8: command tx timeout
[  604.485771][T11584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  604.555878][T11584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.720935][T20854] openvswitch: netlink: Flow key attr not present in new flow.
[  604.802534][T11606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  604.841756][T11606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.077385][T20831] chnl_net:caif_netlink_parms(): no params data found
[  605.093816][ T5851] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  605.109790][ T5851] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  605.120761][ T5851] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  605.131794][ T5851] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  605.140183][ T5851] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  605.220685][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3791'.
[  605.246319][T20868] netlink: 248 bytes leftover after parsing attributes in process `syz.8.3742'.
[  605.437349][T20877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3793'.
[  605.510420][T20880] Bluetooth: MGMT ver 1.23
[  605.646843][T20831] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.662192][T20831] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.669625][T20831] bridge_slave_0: entered allmulticast mode
[  605.683837][T20882] netlink: 'syz.7.3794': attribute type 1 has an invalid length.
[  605.707112][T20831] bridge_slave_0: entered promiscuous mode
[  605.753763][ T5840] Bluetooth: hci0: command tx timeout
[  605.809369][T20831] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.826943][T20831] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.854816][T20831] bridge_slave_1: entered allmulticast mode
[  605.879263][T20831] bridge_slave_1: entered promiscuous mode
[  606.399903][T20831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  606.409693][T20899] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  606.422485][T20831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.432004][T20899] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  606.754127][T20831] team0: Port device team_slave_0 added
[  606.777467][T20831] team0: Port device team_slave_1 added
[  607.095939][T20831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  607.122918][T20831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  607.172766][T20831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  607.192249][ T5840] Bluetooth: hci9: command tx timeout
[  607.220642][T20831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  607.228920][T20831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  607.265612][T20831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  607.687867][T20831] hsr_slave_0: entered promiscuous mode
[  607.713871][T20831] hsr_slave_1: entered promiscuous mode
[  607.731081][T20831] debugfs: 'hsr0' already exists in 'hsr'
[  607.740097][T20831] Cannot create hsr debugfs directory
[  607.832179][ T5840] Bluetooth: hci0: command tx timeout
[  607.970036][T20864] chnl_net:caif_netlink_parms(): no params data found
[  608.602700][T20864] bridge0: port 1(bridge_slave_0) entered blocking state
[  608.609927][T20864] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.618525][T20864] bridge_slave_0: entered allmulticast mode
[  608.628290][T20864] bridge_slave_0: entered promiscuous mode
[  608.658344][T20864] bridge0: port 2(bridge_slave_1) entered blocking state
[  608.676972][T20864] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.688204][T20864] bridge_slave_1: entered allmulticast mode
[  608.724163][T20864] bridge_slave_1: entered promiscuous mode
[  608.817052][T20965] bridge3: entered promiscuous mode
[  608.976984][T20864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.087010][T20864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  609.276215][ T5840] Bluetooth: hci9: command tx timeout
[  609.473574][T20831] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.497283][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3813'.
[  609.518974][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3813'.
[  609.544195][T20864] team0: Port device team_slave_0 added
[  609.579845][T20864] team0: Port device team_slave_1 added
[  609.726683][T20831] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  609.918042][ T5840] Bluetooth: hci0: command tx timeout
[  610.093475][T20831] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.177764][T20864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  610.191248][T20864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.224964][T20864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  610.267315][T20864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  610.279580][T20864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.307271][T20864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  610.337049][T20999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3816'.
[  610.355485][T20831] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.458251][T20864] hsr_slave_0: entered promiscuous mode
[  610.470720][T20864] hsr_slave_1: entered promiscuous mode
[  610.479279][T20864] debugfs: 'hsr0' already exists in 'hsr'
[  610.485945][T20864] Cannot create hsr debugfs directory
[  610.661971][T21001] netlink: 'syz.3.3817': attribute type 13 has an invalid length.
[  610.676432][T21001] netlink: 'syz.3.3817': attribute type 17 has an invalid length.
[  610.705453][T21001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  610.849634][T21002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3817'.
[  610.916659][T20831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  610.990882][T20831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  611.022822][T20831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  611.155888][T20831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  611.186409][T21005] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3818'.
[  611.352704][ T5840] Bluetooth: hci9: command tx timeout
[  611.526108][T20864] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  611.555209][T20864] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  611.577006][T20864] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  611.632881][T20864] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  611.793330][T20831] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.877681][T21020] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  611.913190][T21020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3819'.
[  611.923821][T21020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3819'.
[  611.926855][T21022] vlan2: entered allmulticast mode
[  611.993764][ T5840] Bluetooth: hci0: command tx timeout
[  612.048326][T20831] 8021q: adding VLAN 0 to HW filter on device team0
[  612.098950][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.106265][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  612.168768][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.176118][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  612.197632][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3821'.
[  612.415091][T20864] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.665016][T20864] 8021q: adding VLAN 0 to HW filter on device team0
[  612.728496][T11601] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.735807][T11601] bridge0: port 1(bridge_slave_0) entered forwarding state
[  612.787480][T11584] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.794803][T11584] bridge0: port 2(bridge_slave_1) entered forwarding state
[  612.846789][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'.
[  612.866583][T21042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3824'.
[  613.118395][T21051] syzkaller0: entered promiscuous mode
[  613.124739][T21051] syzkaller0: entered allmulticast mode
[  613.216356][T20831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.436202][ T5840] Bluetooth: hci9: command tx timeout
[  616.125717][T21063] __nla_validate_parse: 2 callbacks suppressed
[  616.125739][T21063] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3828'.
[  616.269693][T20831] veth0_vlan: entered promiscuous mode
[  616.379122][T20831] veth1_vlan: entered promiscuous mode
[  616.428084][T20864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  616.474014][ T5840] Bluetooth: hci1: command 0x0405 tx timeout
[  616.483263][T21074] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  616.627669][T20831] veth0_macvtap: entered promiscuous mode
[  616.663924][T20831] veth1_macvtap: entered promiscuous mode
[  616.775052][T20831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  616.819280][T20831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  617.016208][T11604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.052075][T11604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.102032][T11604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.125720][T11604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.247763][T21096] netlink: 'syz.7.3834': attribute type 64 has an invalid length.
[  617.300058][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3834'.
[  617.870878][T11601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.895447][T11601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.976371][T20864] veth0_vlan: entered promiscuous mode
[  617.994109][T21111] netlink: 'syz.7.3837': attribute type 2 has an invalid length.
[  618.025812][T20864] veth1_vlan: entered promiscuous mode
[  618.048854][T11584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.076415][T11584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.208269][T20864] veth0_macvtap: entered promiscuous mode
[  618.240432][T20864] veth1_macvtap: entered promiscuous mode
[  618.276593][T20864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  618.297187][T20864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  618.319498][T21123] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3779'.
[  618.408094][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  618.438173][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.480180][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  618.504242][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  618.714591][T21129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3842'.
[  618.736375][T11604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.747425][T11604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.916378][T11607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.927623][T11607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.938297][T21134] vlan0: entered promiscuous mode
[  618.988134][T21134] team0: Port device vlan0 added
[  619.244915][T21140] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link
[  619.362307][T21140] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3845'.
[  619.579562][T21159] Bluetooth: MGMT ver 1.23
[  619.754707][T21164] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3848'.
[  619.792773][T21164] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3848'.
[  620.634946][T21202] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  620.692725][T21202] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  620.919816][T21207] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  621.105087][T21215] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.3862'.
[  621.161964][T21215] caif0: entered allmulticast mode
[  621.233139][T21220] netlink: 666 bytes leftover after parsing attributes in process `syz.9.3863'.
[  621.420867][T21226] netlink: 'syz.7.3866': attribute type 2 has an invalid length.
[  621.470551][T21228] netlink: 'syz.7.3866': attribute type 2 has an invalid length.
[  622.283339][T21258] batadv0: entered promiscuous mode
[  622.289333][T21258] macsec1: entered allmulticast mode
[  622.322191][T21258] batadv0: entered allmulticast mode
[  622.356816][T21258] batadv0: left allmulticast mode
[  622.372383][T21258] batadv0: left promiscuous mode
[  622.485839][T21261] netlink: 'syz.0.3867': attribute type 12 has an invalid length.
[  622.536511][T21261] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3867'.
[  623.025110][T21272] xt_policy: neither incoming nor outgoing policy selected
[  623.175831][T21274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3881'.
[  623.202775][   T12] wlan1: Trigger new scan to find an IBSS to join
[  623.263714][T21274] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  623.414381][T21274] batman_adv: batadv0: Removing interface: batadv_slave_0
[  624.162064][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3886'.
[  624.495340][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  624.507194][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  624.515043][T21303] netlink: 'syz.9.3889': attribute type 21 has an invalid length.
[  624.530321][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  624.535170][T21303] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3889'.
[  624.563605][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  624.583780][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  625.235024][T21302] chnl_net:caif_netlink_parms(): no params data found
[  625.592840][T21302] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.617883][T21302] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.626972][T21302] bridge_slave_0: entered allmulticast mode
[  625.635754][T21302] bridge_slave_0: entered promiscuous mode
[  625.646453][T21302] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.672124][T21302] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.681040][T21302] bridge_slave_1: entered allmulticast mode
[  625.730492][T21302] bridge_slave_1: entered promiscuous mode
[  626.005479][T21302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  626.064359][T21302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  626.134071][T21347] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3901'.
[  626.160608][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3902'.
[  626.293112][T21350] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3901'.
[  626.416203][T21302] team0: Port device team_slave_0 added
[  626.455409][T21302] team0: Port device team_slave_1 added
[  626.564545][T21353] netlink: 440 bytes leftover after parsing attributes in process `syz.9.3903'.
[  626.566590][T21302] batman_adv: batadv0: Adding interface: batadv_slave_0
[  626.583285][T21302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  626.626804][T21302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  626.638859][ T5851] Bluetooth: hci10: command tx timeout
[  626.658639][T21302] batman_adv: batadv0: Adding interface: batadv_slave_1
[  626.666874][T21302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  626.693854][T21302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  626.706371][T21356] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3903'.
[  627.836486][T21302] hsr_slave_0: entered promiscuous mode
[  627.844761][T21302] hsr_slave_1: entered promiscuous mode
[  627.852764][T21302] debugfs: 'hsr0' already exists in 'hsr'
[  627.858760][T21302] Cannot create hsr debugfs directory
[  628.115243][T21376] netlink: 'syz.9.3908': attribute type 1 has an invalid length.
[  628.152322][T11607] wlan1: Trigger new scan to find an IBSS to join
[  628.265819][T21371] bridge0: port 3(dummy0) entered disabled state
[  628.272680][T21371] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.280665][T21371] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.643927][T21371] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  628.711954][ T5851] Bluetooth: hci10: command tx timeout
[  628.940541][T21376] 8021q: adding VLAN 0 to HW filter on device bond1
[  628.973634][T21385] netlink: 'syz.3.3910': attribute type 29 has an invalid length.
[  628.991868][T21385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3910'.
[  629.023975][   T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.053920][   T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.085329][T11594] wlan1: Creating new IBSS network, BSSID 56:fe:42:66:c8:0b
[  629.156662][   T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.182030][   T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  629.747879][T21302] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  629.870289][T21302] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.015647][T21302] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.070271][T21423] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3921'.
[  630.089198][T21423] netlink: 'syz.7.3921': attribute type 2 has an invalid length.
[  630.097300][T21423] netlink: 'syz.7.3921': attribute type 1 has an invalid length.
[  630.106699][T21423] netlink: 'syz.7.3921': attribute type 1 has an invalid length.
[  630.160193][T21302] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.467978][T21302] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  630.566550][T21302] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  630.599697][T21302] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  630.654180][T21302] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  630.792571][ T5840] Bluetooth: hci10: command tx timeout
[  630.949327][T21302] 8021q: adding VLAN 0 to HW filter on device bond0
[  631.067354][T21302] 8021q: adding VLAN 0 to HW filter on device team0
[  631.110814][T21456] syzkaller0: entered promiscuous mode
[  631.130911][T21456] syzkaller0: entered allmulticast mode
[  631.159725][T11606] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.167019][T11606] bridge0: port 1(bridge_slave_0) entered forwarding state
[  631.221934][T11606] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.229238][T11606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  631.602861][T21474] delete_channel: no stack
[  631.834626][ T5840] Bluetooth: hci5: command 0x0406 tx timeout
[  632.075710][T21302] 8021q: adding VLAN 0 to HW filter on device batadv0
[  632.565305][T21500] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3947'.
[  632.640010][T21302] veth0_vlan: entered promiscuous mode
[  632.834211][T21302] veth1_vlan: entered promiscuous mode
[  632.863579][T21509] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3949'.
[  632.883517][ T5851] Bluetooth: hci10: command tx timeout
[  632.962536][T21302] veth0_macvtap: entered promiscuous mode
[  632.999662][T21302] veth1_macvtap: entered promiscuous mode
[  633.097519][T21302] batman_adv: batadv0: Interface activated: batadv_slave_0
[  633.185716][T21515] 8021q: adding VLAN 0 to HW filter on device bond2
[  633.205327][T21302] batman_adv: batadv0: Interface activated: batadv_slave_1
[  633.317531][T11606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.372203][T11606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.386213][T11606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.406647][T11606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  633.480542][T21527] netlink: 'syz.9.3953': attribute type 9 has an invalid length.
[  633.541094][T21527] netlink: 'syz.9.3953': attribute type 6 has an invalid length.
[  633.618148][T11601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  633.642505][T11601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  633.717924][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  633.734075][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.265651][T21545] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3957'.
[  634.826260][T21551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3960'.
[  634.902253][T21559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3960'.
[  635.453763][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3966'.
[  635.495118][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3966'.
[  635.546894][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3966'.
[  635.834366][T21581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3970'.
[  635.849364][T21580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  635.909857][T21584] netlink: 'syz.3.3968': attribute type 1 has an invalid length.
[  635.982076][T21584] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3968'.
[  636.073341][T21586] bridge0: port 3(dummy0) entered disabled state
[  636.129291][T21586] batman_adv: batadv0: Adding interface: dummy0
[  636.143070][T21586] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  636.210328][T21586] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  636.914293][T21602] netlink: 'syz.3.3977': attribute type 1 has an invalid length.
[  636.990667][T21602] 8021q: adding VLAN 0 to HW filter on device bond2
[  637.339669][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  637.376522][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  637.385531][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  637.402974][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  637.413200][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  637.427111][T11604] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  637.442254][   T31] INFO: task syz.1.2870:17208 blocked for more than 143 seconds.
[  637.450134][   T31]       Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  637.524405][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  637.543574][   T31] task:syz.1.2870      state:D stack:24232 pid:17208 tgid:17207 ppid:5841   task_flags:0x400140 flags:0x00004004
[  637.571815][   T31] Call Trace:
[  637.580456][   T31]  <TASK>
[  637.586006][   T31]  __schedule+0x1737/0x4d30
[  637.590912][   T31]  ? disable_device+0x137/0x320
[  637.596914][   T31]  ? __ib_unregister_device+0x2cb/0x3f0
[  637.603305][   T31]  ? ib_unregister_device_and_put+0xb8/0xf0
[  637.609457][   T31]  ? ___sys_sendmsg+0x21f/0x2a0
[  637.615071][   T31]  ? schedule+0x165/0x360
[  637.619753][   T31]  ? __lock_acquire+0xab9/0xd20
[  637.638912][   T31]  ? __pfx___schedule+0x10/0x10
[  637.649881][   T31]  ? schedule+0x91/0x360
[  637.658267][   T31]  schedule+0x165/0x360
[  637.674847][   T31]  schedule_timeout+0x9a/0x270
[  637.684141][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  637.696724][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  637.723489][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  637.746553][   T31]  ? wait_for_completion+0x267/0x5d0
[  637.774817][   T31]  wait_for_completion+0x2bf/0x5d0
[  637.807538][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  637.838307][   T31]  ? up_write+0x1c4/0x420
[  637.853804][T21629] __nla_validate_parse: 2 callbacks suppressed
[  637.853827][T21629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3981'.
[  637.901537][   T31]  ? remove_client_context+0xc0/0x1e0
[  637.915552][   T31]  disable_device+0x1c6/0x320
[  637.948771][   T31]  ? __pfx_disable_device+0x10/0x10
[  637.961887][   T31]  __ib_unregister_device+0x2cb/0x3f0
[  638.001086][   T31]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  638.038711][   T31]  ib_unregister_device_and_put+0xb8/0xf0
[  638.102368][   T31]  nldev_dellink+0x2d1/0x320
[  638.107057][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[  638.147946][   T31]  ? rcu_is_watching+0x15/0xb0
[  638.168100][   T31]  ? apparmor_capable+0x137/0x1b0
[  638.208966][   T31]  ? bpf_lsm_capable+0x9/0x20
[  638.222579][   T31]  ? security_capable+0x7e/0x2e0
[  638.227819][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[  638.302889][   T31]  rdma_nl_rcv+0x6ae/0x980
[  638.319513][   T31]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  638.366256][   T31]  ? __lock_acquire+0xab9/0xd20
[  638.371234][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  638.412255][   T31]  netlink_unicast+0x82c/0x9e0
[  638.417119][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  638.452627][   T31]  ? netlink_sendmsg+0x642/0xb30
[  638.457655][   T31]  ? skb_put+0x11b/0x210
[  638.473851][   T31]  netlink_sendmsg+0x805/0xb30
[  638.478737][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  638.512173][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  638.517206][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  638.541940][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  638.547394][   T31]  __sock_sendmsg+0x219/0x270
[  638.566019][   T31]  ____sys_sendmsg+0x505/0x830
[  638.570876][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  638.581439][   T31]  ? import_iovec+0x74/0xa0
[  638.587840][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  638.607557][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  638.614955][   T31]  ? __fget_files+0x2a/0x420
[  638.619618][   T31]  ? __fget_files+0x3a0/0x420
[  638.625619][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  638.630624][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  638.652624][   T31]  ? rcu_is_watching+0x15/0xb0
[  638.657576][   T31]  ? do_syscall_64+0xbe/0x3b0
[  638.677438][   T31]  do_syscall_64+0xfa/0x3b0
[  638.682951][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  638.690717][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.714470][   T31]  ? clear_bhb_loop+0x60/0xb0
[  638.719242][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.741943][   T31] RIP: 0033:0x7fc33098ebe9
[  638.746445][   T31] RSP: 002b:00007fc33178b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  638.755641][   T31] RAX: ffffffffffffffda RBX: 00007fc330bb5fa0 RCX: 00007fc33098ebe9
[  638.763936][   T31] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 000000000000000a
[  638.772894][   T31] RBP: 00007fc330a11e19 R08: 0000000000000000 R09: 0000000000000000
[  638.781007][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  638.794763][   T31] R13: 00007fc330bb6038 R14: 00007fc330bb5fa0 R15: 00007ffd4bf8a708
[  638.807763][   T31]  </TASK>
[  638.811126][   T31] 
[  638.811126][   T31] Showing all locks held in the system:
[  638.820227][   T31] 1 lock held by khungtaskd/31:
[  638.826772][   T31]  #0: ffffffff8e13c4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  638.838189][   T31] 2 locks held by getty/5598:
[  638.862384][   T31]  #0: ffff8880347740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  638.876818][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  638.887845][   T31] 4 locks held by kworker/u8:29/11581:
[  638.898062][   T31]  #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  638.909874][   T31]  #1: ffffc9000b607bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  638.926939][   T31]  #2: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  638.947385][   T31]  #3: ffff8880762246d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  638.960779][   T31] 2 locks held by kworker/u8:51/11606:
[  638.967551][   T31] 2 locks held by syz.1.2870/17208:
[  638.973028][   T31]  #0: ffffffff99e12978 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  638.984577][   T31]  #1: ffff8880762246d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  638.998869][   T31] 2 locks held by syz.2.3084/18075:
[  639.005568][   T31]  #0: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  639.015798][   T31]  #1: ffff8880762246d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  639.028133][   T31] 2 locks held by syz.5.3482/19581:
[  639.037734][   T31]  #0: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  639.049981][   T31]  #1: ffff8880762246d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  639.067051][   T31] 2 locks held by syz.6.3603/20142:
[  639.076160][   T31]  #0: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  639.086386][   T31]  #1: ffff8880762246d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  639.100710][   T31] 2 locks held by syz.4.3683/20441:
[  639.106497][   T31]  #0: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  639.117307][   T31]  #1: ffff8880762246d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  639.132649][   T31] 2 locks held by syz.8.3811/20967:
[  639.137907][   T31]  #0: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  639.149463][   T31]  #1: ffff8880762246d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  639.161879][   T31] 2 locks held by syz.0.3867/21256:
[  639.167146][   T31]  #0: ffffffff8f4fc190 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  639.178072][   T31]  #1: ffff8880762246d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  639.192793][   T31] 1 lock held by syz.9.3953/21526:
[  639.200707][   T31]  #0: ffffffff8e141f38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  639.212482][   T31] 1 lock held by syz.1.3981/21629:
[  639.217632][   T31]  #0: ffff888054ad64d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100
[  639.228705][   T31] 2 locks held by syz.7.3982/21620:
[  639.236929][   T31]  #0: ffff888050191a08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  639.247352][   T31]  #1: ffff88805680b258 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x920
[  639.257448][   T31] 2 locks held by dhcpcd/21633:
[  639.263023][   T31]  #0: ffff88809681a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  639.273414][   T31]  #1: ffffffff8e141f38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  639.284842][   T31] 
[  639.302115][   T31] =============================================
[  639.302115][   T31] 
[  639.310609][   T31] NMI backtrace for cpu 0
[  639.310631][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  639.310658][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  639.310671][   T31] Call Trace:
[  639.310680][   T31]  <TASK>
[  639.310690][   T31]  dump_stack_lvl+0x189/0x250
[  639.310722][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  639.310746][   T31]  ? __pfx__printk+0x10/0x10
[  639.310796][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  639.310828][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  639.310857][   T31]  ? __pfx__printk+0x10/0x10
[  639.310890][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  639.310926][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  639.310956][   T31]  watchdog+0xf93/0xfe0
[  639.310993][   T31]  ? watchdog+0x1de/0xfe0
[  639.311029][   T31]  kthread+0x70e/0x8a0
[  639.311059][   T31]  ? __pfx_watchdog+0x10/0x10
[  639.311087][   T31]  ? __pfx_kthread+0x10/0x10
[  639.311115][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  639.311143][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  639.311171][   T31]  ? __pfx_kthread+0x10/0x10
[  639.311197][   T31]  ret_from_fork+0x3fc/0x770
[  639.311349][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  639.311389][   T31]  ? __switch_to_asm+0x39/0x70
[  639.311410][   T31]  ? __switch_to_asm+0x33/0x70
[  639.311433][   T31]  ? __pfx_kthread+0x10/0x10
[  639.311457][   T31]  ret_from_fork_asm+0x1a/0x30
[  639.311500][   T31]  </TASK>
[  639.458616][   T31] Sending NMI from CPU 0 to CPUs 1:
[  639.465200][    C1] NMI backtrace for cpu 1
[  639.465221][    C1] CPU: 1 UID: 0 PID: 21629 Comm: syz.1.3981 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  639.465244][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  639.465255][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x90
[  639.465286][    C1] Code: 7c 11 10 48 89 74 11 18 48 89 44 11 20 e9 48 f8 b2 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 00 9a 92 65 8b 0d 28 4b
[  639.465303][    C1] RSP: 0018:ffffc9000cc2f310 EFLAGS: 00000246
[  639.465320][    C1] RAX: 0000000000000001 RBX: ffffffff822e0aba RCX: ffff88803491bc00
[  639.465334][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  639.465344][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822e0aba
[  639.465356][    C1] R10: dffffc0000000000 R11: fffff94000461f11 R12: dffffc0000000000
[  639.465369][    C1] R13: 1ffffd4000461f13 R14: 000000000008c3e2 R15: ffff88813fffa620
[  639.465382][    C1] FS:  0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000
[  639.465397][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  639.465408][    C1] CR2: 0000200001000000 CR3: 000000000df38000 CR4: 00000000003526f0
[  639.465424][    C1] Call Trace:
[  639.465432][    C1]  <TASK>
[  639.465439][    C1]  pfn_valid+0xea/0x490
[  639.465460][    C1]  page_table_check_clear+0x21/0x700
[  639.465490][    C1]  ? vm_normal_page+0xb7/0x230
[  639.465511][    C1]  unmap_page_range+0x3249/0x41c0
[  639.465561][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  639.465587][    C1]  ? unmap_vmas+0x144/0x580
[  639.465618][    C1]  unmap_vmas+0x399/0x580
[  639.465642][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  639.465677][    C1]  exit_mmap+0x248/0xb50
[  639.465704][    C1]  ? uprobe_clear_state+0x20f/0x290
[  639.465727][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  639.465753][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  639.465789][    C1]  ? __pfx_exit_aio+0x10/0x10
[  639.465824][    C1]  ? uprobe_clear_state+0x274/0x290
[  639.465848][    C1]  __mmput+0x118/0x420
[  639.465877][    C1]  exit_mm+0x1da/0x2c0
[  639.465898][    C1]  ? __pfx_exit_mm+0x10/0x10
[  639.465921][    C1]  ? rcu_is_watching+0x15/0xb0
[  639.465951][    C1]  do_exit+0x648/0x22e0
[  639.465975][    C1]  ? do_raw_spin_lock+0x121/0x290
[  639.465998][    C1]  ? __pfx_do_exit+0x10/0x10
[  639.466028][    C1]  do_group_exit+0x21c/0x2d0
[  639.466049][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  639.466076][    C1]  get_signal+0x1286/0x1340
[  639.466115][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  639.466143][    C1]  ? __x64_sys_sendmsg+0x230/0x260
[  639.466164][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  639.466211][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  639.466238][    C1]  exit_to_user_mode_loop+0x75/0x110
[  639.466263][    C1]  do_syscall_64+0x2bd/0x3b0
[  639.466289][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  639.466313][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.466331][    C1]  ? clear_bhb_loop+0x60/0xb0
[  639.466352][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.466369][    C1] RIP: 0033:0x7f721138ebe9
[  639.466384][    C1] Code: Unable to access opcode bytes at 0x7f721138ebbf.
[  639.466393][    C1] RSP: 002b:00007f720f1d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  639.466411][    C1] RAX: 0000000000000364 RBX: 00007f72115b6270 RCX: 00007f721138ebe9
[  639.466423][    C1] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  639.466435][    C1] RBP: 00007f7211411e19 R08: 0000000000000000 R09: 0000000000000000
[  639.466446][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  639.466457][    C1] R13: 00007f72115b6308 R14: 00007f72115b6270 R15: 00007ffd9d26fde8
[  639.466480][    C1]  </TASK>
[  639.838646][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  639.845570][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) 
[  639.857237][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  639.867420][   T31] Call Trace:
[  639.870716][   T31]  <TASK>
[  639.873761][   T31]  dump_stack_lvl+0x99/0x250
[  639.878373][   T31]  ? __asan_memcpy+0x40/0x70
[  639.883164][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  639.888381][   T31]  ? __pfx__printk+0x10/0x10
[  639.893003][   T31]  panic+0x2db/0x790
[  639.896928][   T31]  ? __pfx_panic+0x10/0x10
[  639.901440][   T31]  ? __pfx___x2apic_send_IPI_mask+0x10/0x10
[  639.907358][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  639.913632][   T31]  watchdog+0xfd2/0xfe0
[  639.917824][   T31]  ? watchdog+0x1de/0xfe0
[  639.922286][   T31]  kthread+0x70e/0x8a0
[  639.926377][   T31]  ? __pfx_watchdog+0x10/0x10
[  639.931161][   T31]  ? __pfx_kthread+0x10/0x10
[  639.935771][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  639.941164][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  639.946471][   T31]  ? __pfx_kthread+0x10/0x10
[  639.951105][   T31]  ret_from_fork+0x3fc/0x770
[  639.955730][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  639.960869][   T31]  ? __switch_to_asm+0x39/0x70
[  639.965733][   T31]  ? __switch_to_asm+0x33/0x70
[  639.970542][   T31]  ? __pfx_kthread+0x10/0x10
[  639.975149][   T31]  ret_from_fork_asm+0x1a/0x30
[  639.979956][   T31]  </TASK>
[  639.995896][   T31] Kernel Offset: disabled
[  640.000264][   T31] Rebooting in 86400 seconds..