last executing test programs:

5m34.340737234s ago: executing program 3 (id=405):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x3, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket(0x1d, 0x802, 0x6)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"})
bind$inet6(r3, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r5, 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2})
setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x2, 0x0)

5m32.68251032s ago: executing program 3 (id=423):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) (async)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m31.671509878s ago: executing program 3 (id=436):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b40)={0x0, 0xffffffffffffff38}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc054)

5m31.035654626s ago: executing program 32 (id=438):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xac}], &(0x7f0000000180)='syzkaller\x00', 0xff58, 0xfc, &(0x7f00000001c0)=""/252, 0x40f00, 0x58, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000300)=[{0x4, 0x4, 0xf, 0x2}, {0x4, 0x3, 0xf}, {0x0, 0x1, 0x10, 0xc}, {0x3, 0x2}, {0x5, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xc, 0x1}, {0x5, 0x3, 0x7}, {0x1, 0x3, 0xb, 0xc}, {0x4, 0x4, 0x1, 0xb}, {0x0, 0x3, 0x6, 0x1}], 0x10, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0xe, 0xc3, &(0x7f0000000080)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0xfffffffffffffeb6}, 0x94)

5m30.916133488s ago: executing program 33 (id=439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x400, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

5m30.903819525s ago: executing program 3 (id=443):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14)
recvmmsg(r1, &(0x7f0000003180)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000300)=""/203, 0xcb}], 0x2, &(0x7f0000000400)=""/29, 0x1d}, 0xc}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000540)=""/59, 0x3b}, {&(0x7f0000000580)=""/15, 0xf}, {&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4}, 0xa}, {{&(0x7f00000016c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001980), 0x0, &(0x7f0000001a00)=""/251, 0xfb}, 0x2}, {{&(0x7f0000001b00)=@nfc, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b80)=""/222, 0xde}, {&(0x7f0000001c80)=""/120, 0x78}, {&(0x7f0000001d00)}], 0x3, &(0x7f0000001d80)=""/15, 0xf}, 0x200}, {{&(0x7f0000001dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e40)=""/40, 0x28}], 0x1, &(0x7f0000001ec0)=""/224, 0xe0}, 0x6}, {{&(0x7f0000001740)=@tipc, 0x80, &(0x7f0000003040)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x1, &(0x7f0000003080)=""/211, 0xd3}, 0x7}], 0x6, 0x40, &(0x7f0000003300)={0x0, 0x3938700})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8)
r4 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000001d00)=0x2, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd0900020073797a310000000008000340000000000800034000f4ffff070003"], 0x1ec}}, 0x0)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

5m30.899760744s ago: executing program 34 (id=443):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14)
recvmmsg(r1, &(0x7f0000003180)=[{{&(0x7f0000000040)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000300)=""/203, 0xcb}], 0x2, &(0x7f0000000400)=""/29, 0x1d}, 0xc}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000540)=""/59, 0x3b}, {&(0x7f0000000580)=""/15, 0xf}, {&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4}, 0xa}, {{&(0x7f00000016c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001980), 0x0, &(0x7f0000001a00)=""/251, 0xfb}, 0x2}, {{&(0x7f0000001b00)=@nfc, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b80)=""/222, 0xde}, {&(0x7f0000001c80)=""/120, 0x78}, {&(0x7f0000001d00)}], 0x3, &(0x7f0000001d80)=""/15, 0xf}, 0x200}, {{&(0x7f0000001dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e40)=""/40, 0x28}], 0x1, &(0x7f0000001ec0)=""/224, 0xe0}, 0x6}, {{&(0x7f0000001740)=@tipc, 0x80, &(0x7f0000003040)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x1, &(0x7f0000003080)=""/211, 0xd3}, 0x7}], 0x6, 0x40, &(0x7f0000003300)={0x0, 0x3938700})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8)
r4 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000001d00)=0x2, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd0900020073797a310000000008000340000000000800034000f4ffff070003"], 0x1ec}}, 0x0)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

5m30.525490392s ago: executing program 35 (id=444):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x41d, @empty, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12000000}, 0x4000000)

2m10.567653519s ago: executing program 36 (id=2378):
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0xfffff3ee}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000780)=@raw=[@call={0x85, 0x0, 0x0, 0xb4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @alu={0x7, 0x0, 0x4, 0x3, 0xa, 0x11, 0x1}], &(0x7f0000000380)='GPL\x00', 0x8, 0x89, &(0x7f0000000500)=""/137, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x2, 0x3, 0xc, 0xc}], 0x10, 0x1}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000780)=@raw=[@call={0x85, 0x0, 0x0, 0xb4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @alu={0x7, 0x0, 0x4, 0x3, 0xa, 0x11, 0x1}], &(0x7f0000000380)='GPL\x00', 0x8, 0x89, &(0x7f0000000500)=""/137, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x2, 0x3, 0xc, 0xc}], 0x10, 0x1}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x3, 0x4, 0x4, 0x10001}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000004e8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58)
r6 = accept4(r3, 0x0, 0x0, 0x0)
recvmsg$unix(r6, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x9100) (async)
recvmsg$unix(r6, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x9100)
splice(r0, &(0x7f0000000300)=0xf2, r3, &(0x7f0000000340)=0x3, 0x5, 0x2)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum64={0x8, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x7, 0x9, 0x8}, {0x6, 0x5, 0x80000004}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x0, 0x61, 0x61, 0x5f, 0x2e]}}, 0x0, 0x46, 0x0, 0x1, 0x5}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum64={0x8, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x7, 0x9, 0x8}, {0x6, 0x5, 0x80000004}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x0, 0x61, 0x61, 0x5f, 0x2e]}}, 0x0, 0x46, 0x0, 0x1, 0x5}, 0x28)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000400700000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000000f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x5) (async)
ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x5)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x15b247f81f189046}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1403, 0x30c, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}}, 0x40c4)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000001c0)=0x200, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000800), 0x4)
getsockname(r0, 0x0, &(0x7f0000001e00)) (async)
getsockname(r0, 0x0, &(0x7f0000001e00))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xef}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

2m9.235481267s ago: executing program 37 (id=2389):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async)
r1 = socket(0x8, 0x3, 0x0)
shutdown(r1, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000002000000000000005ff068138a17a8f500"/38], 0x0, 0x26, 0x0, 0x1}, 0x28) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x400000000010, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x6, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x40, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffe, 0x3, 0x1c, 0x4, 0x3, 0x0, 0x2, 0x101, 0x32, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x1, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x2, 0x9, 0x2, 0x9c8, 0xc, 0x200, 0x231e, 0xfff, 0xf, 0x0, 0x7, 0x8000, 0x5, 0x8, 0x2, 0x9, 0x2, 0x4, 0x7fffffff, 0xc, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xfffffffe, 0x6, 0xd, 0x64b, 0x100, 0x6e1c, 0xfffffff9, 0x2, 0x1, 0x5, 0x94, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x8000, 0x7, 0x9, 0x2, 0x7ff, 0xa38, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x20000, 0x240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x2, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffffe, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x7, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0xc, 0xfffffff8, 0x90b, 0xfe, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0xc, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x592, 0xc6a3, 0x4, 0x81, 0x120, 0x544, 0x2, 0x3, 0x6, 0xc0000000, 0xe, 0x8, 0xf, 0x1000, 0x48e, 0x6, 0x1, 0x4, 0x1b70, 0xff, 0x1, 0xffffffff, 0x1, 0x0, 0xdd6, 0x80000001, 0xffff, 0x0, 0x4, 0x80000000, 0xfff, 0x7fff, 0x136d, 0x9, 0x5, 0xfffffffa, 0x7, 0x0, 0x8, 0x8, 0xa97b, 0x81, 0x0, 0x8, 0x1, 0x1b93d89b, 0x2400000, 0xfffffffa, 0xff52, 0x6, 0x6, 0x1, 0x670, 0x7ff, 0x8, 0xbb7, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0x6, 0xfffffff7, 0x4, 0x764, 0x1, 0x80000000, 0x7fffffff, 0xb3, 0x2, 0xfc69, 0xffff0000, 0x0, 0x7, 0x400, 0x8, 0x1, 0x8, 0xa8d, 0x1, 0xffff7fff, 0x0, 0x5, 0xfffffff7, 0x94, 0x4, 0x8, 0xffff, 0x8, 0xfffffff5, 0x200, 0x9, 0x6, 0x3, 0x800, 0xf, 0x1, 0xfffffff0, 0x3, 0xffff, 0x80, 0xae0, 0x4, 0x1, 0xfffffffe, 0x800, 0xcc, 0xfffffffe, 0x4, 0x9, 0x10001, 0x7, 0xe, 0x2, 0x6, 0x4, 0x5f3, 0x5, 0x4, 0x8, 0x2, 0x6, 0x7, 0x7, 0xffffffff, 0x97e9, 0x9, 0x400, 0x7, 0xfffffff7, 0x5, 0x15, 0x1000, 0x100, 0x9, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x4, 0x79, 0x3, 0x5, 0x3, 0x3, 0x401, 0x1, 0xffffff80, 0xda29, 0x9, 0x200, 0x3, 0x2, 0x4, 0x800, 0x87, 0x1, 0x2, 0x8d, 0xa0, 0x80000001, 0x8, 0x5, 0x0, 0x8, 0x1, 0x32a0, 0x2, 0x0, 0x7f, 0x7d, 0x9, 0x34, 0x8, 0x5, 0x9, 0x1, 0x8, 0x7, 0x1, 0x1, 0x200, 0x10, 0x3, 0x3, 0x8000, 0x0, 0xf, 0x8, 0x7, 0x101, 0x8, 0x635, 0x1, 0xfff, 0x3, 0x4, 0x94c0, 0x10001, 0x7fff, 0x9, 0x7, 0xf, 0x10001, 0x0, 0x101, 0x79a1, 0x3ef, 0x7, 0x4, 0x2, 0xffffff01, 0x3, 0xc443, 0x8, 0x5, 0xb, 0x0, 0x8001, 0x80, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x4, 0x8, 0x5, 0x7, 0x7, 0x80000000, 0x2, 0x3, 0x200, 0x8, 0x133, 0x3ff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x4d800, 0x4d4, 0x7, 0xe, 0x7, 0x0, 0x9, 0x80000001, 0xbd8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0xe, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x8001, 0x3}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fc}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8010}, 0x408c014)
readv(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r6=>0x0, 0x10, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}}}}})
recvfrom$rxrpc(r1, &(0x7f0000000340)=""/226, 0xe2, 0x80000041, 0x0, 0x0) (async)
syz_open_procfs$namespace(0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="0300007c6c973a89a80000000000000000000800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000020000000080000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000015000500"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="188000002000000000005971713020df34710001fcffff78d5b9610df785ca596b206684bd93dafe4d20be2fd1649e855205ae1a", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)

2m0.631966649s ago: executing program 38 (id=2474):
r0 = socket$kcm(0x21, 0x2, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4) (async, rerun: 32)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async, rerun: 32)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
unshare(0x6a040000) (async, rerun: 64)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd645c374cf4861b8}, {0x8ea}}, 0x4}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) (async)
getpeername(r3, &(0x7f0000000000)=@pppol2tpv3, &(0x7f0000000100)=0x80)
unshare(0x400) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
unshare(0x46010600) (async)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000c0000004404000100"/36], 0xfffffffffffffe5b}, 0x800)

1m40.716408727s ago: executing program 39 (id=2651):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x9) (async)
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket$pppoe(0x18, 0x1, 0x0) (async)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
sendmsg$inet(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="b301916c88b830ac1d513d80506c351315b67509c34a558231904eb8a11147fe7558f28ca0899c1a5890b62ee3aa9a0422ba2a2f4ec31322fc8591ad4e877a21182a3c4bab1850e1dcbaacae38d6d322a52d56af07a854ff9f844a84f126cb9c29a9a0978ce84f464911cc7c97d7", 0x6e}, {&(0x7f00000007c0)="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", 0x605}], 0x2, &(0x7f00000018c0)=ANY=[], 0xf0}, 0x81) (async)
sendmsg$inet(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="b301916c88b830ac1d513d80506c351315b67509c34a558231904eb8a11147fe7558f28ca0899c1a5890b62ee3aa9a0422ba2a2f4ec31322fc8591ad4e877a21182a3c4bab1850e1dcbaacae38d6d322a52d56af07a854ff9f844a84f126cb9c29a9a0978ce84f464911cc7c97d7", 0x6e}, {&(0x7f00000007c0)="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", 0x605}], 0x2, &(0x7f00000018c0)=ANY=[], 0xf0}, 0x81)
r2 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x7, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
unshare(0x42000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0xbcff, 0x0, 0x0)
writev(r5, &(0x7f0000001300), 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000002c0)={0x73, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0xff}, @jumbo={0xc2, 0x4, 0xfb33}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0xdc, [0x538, 0x100, 0x3ff, 0x400]}}, @ra={0x5, 0x2, 0x200}]}, 0x70)
socket(0x200000000000011, 0x2, 0x0) (async)
socket(0x200000000000011, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)

1m38.357006456s ago: executing program 40 (id=2681):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64)
close(0x4) (async, rerun: 64)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r2 = socket(0x8, 0x3, 0x3)
ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x3ff) (async)
ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000080)=0x3) (async)
ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x88}}, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r4, 0x0) (rerun: 32)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)={0x0})
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)
sendmsg$sock(r5, 0x0, 0x0) (async, rerun: 32)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async)
close(r3) (async)
sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="13c983ed759433da84f4", 0xa}], 0x2}}], 0x1, 0xc0000)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xd8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) (async, rerun: 32)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m35.699103919s ago: executing program 3 (id=2812):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x60, 0x0, 0x1, 0xfffff010}]}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f00), r1)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r3 = socket(0x8, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x60, 0x0, 0x1, 0xfffff010}]}, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f00), r1) (async)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async)
socket(0x8, 0x3, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) (async)

1m22.53839642s ago: executing program 41 (id=2808):
unshare(0x6a040000) (async)
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0x4, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0)
sendmmsg(r0, 0x0, 0x0, 0xffe0) (async)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async)
r2 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
socket$netlink(0x10, 0x3, 0x10) (async)
ioctl$FIOCLEX(r1, 0x5451) (async)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x891d}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async)
unshare(0x6a040000) (async)
close(0xffffffffffffffff) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
listen(r4, 0x0) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x40)
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)

1m20.584384792s ago: executing program 42 (id=2812):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x60, 0x0, 0x1, 0xfffff010}]}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f00), r1)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r3 = socket(0x8, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x60, 0x0, 0x1, 0xfffff010}]}, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f00), r1) (async)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async)
socket(0x8, 0x3, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) (async)

1m12.884603152s ago: executing program 0 (id=2951):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffecc)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000000000001000000ffffff7f00000000ce65f719d019e567ecc6a0bdc1733019053199f8f3e3a96ce6970260466519013de824837d416ca146e3cc9a68ff5751a8df1ebddf94cba129033db6365393e28de4ae16f29619d56e39f1bd739d3a7238ff466f36033e9f566d23"], 0x28}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f0000000200)=0x10, 0x800)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000002c0)=<r3=>0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'veth0_macvtap\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@newtfilter={0x1c0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18c, 0x2, [@TCA_MATCHALL_ACT={0x180, 0x2, [@m_sample={0x17c, 0x9, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x899}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5c88, 0x2, 0x3, 0x10, 0x9}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0xfffffffb, 0x5, 0x4, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xd, 0x637d, 0x4, 0x9, 0x80000000}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x779062e8, 0x6, 0x4, 0xe}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x100}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffeff, 0x10, 0x4, 0x7fff, 0x12b9320}}]}, {0xae, 0x6, "a64d8658a4f0d498a95196a6a9c6f6625212e9f2c4fdd79d4a2c0395483726a0e0b5ffff04df725396461f08689db190cef93999d4311d99aa4eeb953cd9f8689abb1c018982f073c813bf861a7facee994b760fe57f1f5f235bfafa225170fcca2b84611090f7e170aa637c77f3431c2cac6a68f52c5a5640260f5e08af30cc52e9dd9e9404c63a82ecc75da6d610ce1338a9ed53f7a6ac05ef98a8bdf000cebe79564556e14124eb43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800)
r9 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000400)={'syz_tun\x00', <r12=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r10, r12, 0x25, 0x0, @val=@iter={&(0x7f00000004c0)=@task={0x0, r3}, 0x10}}, 0x20)
syz_emit_ethernet(0xd83, &(0x7f00000015c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x16, 0xd75, 0x67, 0x0, 0xa, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x9}, {"2655bb2623f35598dabbbb8f170af5551d67067e8071920b2402fc1d76e61ff43427242e76448552683fcc11a6d36eb2b49807183d1121ed28f83b865b828b9ce2e74bace03d50bbf71e33d4c5635d459ae3062adfce1c6556726e54e1918089796f1d0adf4f624127dd26f05a07468f6f1dbe1f5247b2342417f7329731912181499f29310838c231ec3a01ebf37b1bbf9569e7ca607b62317b8586464779a926a8109ff755280c6a3302c1d4192f009949e1e2716270aba8430ab14d04604f8f57c1530479ef458abe3930fce53668d2c35ee0f2d2f59ee740756785474a7062200e738d82dba6d1d4197973e13a42b1e9570d27b0421ae4c5a1a03be88a1957485752335a9f68e41d89843f37aa3c50c563c2b14ad89a2e24bdc473fa65b0ec001220613779bdec46ae1a00e615b62232de5c4fd337f83389fae4f49604c87ef6aae060705f9495f89a957f2f0482892db0bae284b6bb42946dd3511ae5c80179792e1aacbcb43aa15a0801c87c88fc3e9d29f2a4dd399dfbcc2fd3c4b77fddef38ee14beee427d4880d54a7f2b03298a04b06342a6b0f315734927a0053125957dcde8014164b82e8507d2430e9d65147b653a3a21e03f957b0277acf2cc1e0c134c9fce85ab7bc6a5a83e1e662b853132edb0dc141fa49d8d60ad1ee62c514cfc7bd5a8316814949a7502587a552d12741252a3ab4998b78a60e2e2b42374e4f9ac2087c94b9dd9415736e27e6806e84042bf65357807b92dfd197e47057eebe392d2e428827ddeda60b47d1ecfc7ef2fe56b088f2497be8c67ef905f04c6512f0b9b405a098ab0e59dfbde30e3038df25a74258703e5878cc1d8d3d72bd84454d3ae371c9076fd2385de476f033007f8f9a0acb7e1b737bed0ee20bcb0af206d146d77f645786a0d730342766b18e50876ff35ab173bb9cfdb57d51b0eea7536e4edb4fd9ecf26e939ac85e6a0152bc05d9c056797d62683669852cd880d831f5ab49c7b49bd6585d50abd3b62eadc2c65935203aac273f83cdacf40e874245b63f6e89f450cdf9f78542939a5c2bb33c7dc500b63e49a1be0bd7c01a0fe3eb16c677baf157d9a795e7a11e34e6c55c66b0f9132728fa88b8f5c96310dc0c83c44bcafabbf3741e92ae24fe71ac8ddccd565c7820fc3f3455fa8feee80efd663bc6747af61f9b138004829d211ed1e5e57bcdd5a3ecf2b51218586f8872b5ae026b5138e6c206e0bccf9831028f03c07051e87d24bb534c2967f44f85c0342285a30196aa3286651bfb604d7dfe28e7cbce7a47029ce734e0209070bf561c3c568e75fca4110d54f4e0b5c58a53b9b2f1969a47040323cfa3b53924ee81a8e5ada0958b9a238312f852e14dac9c6aaac11fe92d5194589955999c13d195223cb4024829481f3424843bb05d36a7378d4bfa59d98925b7f28c719595a5e3b3f881cc91db4c3926aa1ed23cc1967b579a3eba6895befabf99df00b6dde015b7fa2663a943cad383451c9aec3c1b63ff2b5ec20d1cf4f5dc4a29748c97c3966c559a17e973097a35d6848b822541b9364e8b65f1391471983121ae3fd4d46f5e7ca7fde8628f8181183870304effe6f6c9da08beb8c96264e6c254b40888f13d4ced9ea4609502a909476149e13bf4c33279363c03d0262b4cd414f16099e30129a17fc41aefadab4104ae139eb0e83541d398e6f62afc89d972822e38831ea8f6fdd508535e63d55c1d982c3967ef01287fa87c03971d9f7011ea6ebc589ea33be1a89f4d84e8452fc999b102c55ff5a99cb76cf9acf3ac21ea019d714bddfa95dc273a33b67b945b9d54c00fa708afb9c252131b58bea16d03a3ff05426ead5d4588822d2195530cea7ad47cfc8de87e536b83d3ffe2031702b99eeac36db9a55abd5c017db2efd3df6c0826e3ef49a8d35f189fb1531be3d26c4bac3525a45d050320f290ee292e28d2bc64bb99bbc53da1010f8b8a1a3a0e01e3511afc7acb05a4f37abc4d710794e75325b506cdfaa34a16d56cd4370ef3c75021f0395b0f08fda122137b49ab4156b2127f7bd8f6956f557807e262bd696d1d9c11769647ad34d1cdb831ed46990ab320b786df1958d6423d1eb1affeb411e7a1f9ac1186db813f26461d72bb6b8227dcba71867efa6bef91ea7c1d25406a1a6068e18c4c3802a4011aaa48a1129fd717d50580fc2c667e3e36da4b3800d689ae814fee4d6a67ddbd3edbd199bff4f1ab91ad197e6d2ea5d3c18a3ea8a6868eb6122ebaac809b94cbe324069742c316c581fafb059fb486e52725b57c456501be0aa7e7db75652a64c8d7fd3ac61f2de2179cbfe3077d98dfed4087f82eefa0ac8a7393d228d6e4cbd31ecf26c4fa4e0ec50a17c99d12b1f86098879a7c118f16cc216c58128cbd204fa2bacb9a85fc91eb2677e664fa26b593abbc7b49813b8671cde880e47dd1e50988faab3d99ac0d73183070406bed9b201d28af9b5d133c21f4d3ccb7fd36e73fb7bae75ffe0313a6ccde9abd07951f5c716a46c05ce2c1cfbbab27eece76df4f85cd11d36408cb589e236fd51ef8cf0d9483bb2340d85a368e0c7ed134b9cca20c3668d03d0fe18d82686de5d67b74cade4be3741eb14a4a44d8fb170c7c3acc06aa08425799540607c85753ed9531cf9f55f098d04462a38c80c73cd9e83d50bb7142c10564a8b6ba51ba2d987073237a4500deb5146050c4f9f56b89aaca75305d7263036cad2a72e1e74dbcaae4add635d1e053d5016c7ebf7286e9142fab406c67068438730605ca3fa73b2c7e736b969d27e62231b78f838ce985fcb7a3bcd9e54e05e5f7103d932621e57d6d6f13c308ad20eab709edd3461543d699d8a114bd96ee82c842efef8706ced293cb76b6bebeb01ff34d01cbd7886e29b88aa62cbbad827f523d98b2309744368eb1a243267ee0f01a41fed5d094a6ecb100eaeb2cc5d6718fe1059765552371d87e420aea7ab7df098d9f1943ff150cc1823d89a775abfb6bcbc0b3d357069e56a6d93bfa625cc7f2359244006a07feafec083078907ff819783478bd2dab182f17abf382194aa3f5e8a4f7bc120b45bf5ef503f505d050b60d6a436724116d6c44a3e8f408f1b97ecbe51f6282d2888e18b46d8895071966fc67745f270dce3b5560bca1cc0832431aede14f94d19ff54660a65cac55c849de77628afa8265ea082bb4f8c4eea2706ab41fbbfd16a1508c2e4a87f2fb2fbfc111b76068d73c3722604b90cf16054ee9af480203c3ef123686424134ab41fb29c4e820d1bf13cd543711763cd908e120261996ae69293017bc5d80b02afe7322726f263c82421cde298a8679d9129374b4c24f628c0ab18039396ae87dcb85c65c29c64b84245942ec745a04586dbb2766e8a291dde5edec63fb0f5e7b2820906902291f52d6fc446fc353b968ca2e9774b349f1e777ba3b4e04c3bf292c31885112ed929d70008daae88813b71aaafae6656a63904c2972feac3b5b9245bf86943c73501804481d6ea50668e969bce38d2ea1391f4b2ef6d6a38db730b0f8fd7c981ed81554c36f9b618501c0b6291ec87cde14955cdb2a55ae27fc319bdce34c9b5d7897fb5f36b1f03adbd7fc9c2e80943e498d06e7878ec7521507890b54b3eeef3d3032628dcd137a2766dd098aad41d1b6de76c78a3e1c6f8c22c0292eb34c3b8c2bc68853dab50aa1aad1f86105c8846a131c2acdf2d711650c915573643bd91e351fd63846e7f81af87118878233b234753caf0f6fa811ec73baab53e9977fe6d86ca7903f8a79e05e956a1f7639a6d00c13d7d73f9c992a2af8ab343eea086d73bff60c36388f8b9e22b9d091950202af5ef24e17525e340f22d66baec9bc6101f6f302aef91e8813948b51ca94967b5ec7f0504dd735765102e1f16c4a4c5c414e62caea58ccd86b36a9adf528ba1a1dc4b3c8738077556276c393522fa0ff8201a18f1349a719b5a057b202bf2e2ff1260413943a9531f53ee8f3a2dfcb4c17c85c484430936a575aa3f945f373c0dd2588c32419cfcfffb0ab80ed384c542cb87ef33f26e14e2e933add3e7f39423d7c42a69e62b7f5d16aa30a1866215ba65a4e9b0983a6377a4b7b04bb664fad0d57565c7a882c936cf39add7fb30571583290e610d5d4fae564dac16d8045e900087453edb04a94dec1c7ec7e9c76292218f1f161b616623cbe6d60068e4c847825302f4591110d5713e9060a67e096270891eeb26156b6a1ca5a3d54415b9a56efd3570dae4789b03424e453f3b3f9424b1c6023a190ae408faa56a4b64c23c3fb79a0dfae17f6049cbf0ab0e2cb478a2e425ea10ba42e600d61b9f8bc83414bbb74902b4e95496f7526ebee761f4634393362b8aaa37eabb22276125408ea9736bf22fbc1e7d41b4058108154db992590951434a92b808618cf740dcb5cd1b107d2c491572312ea0b8677789be7d13d8ca304a6c94e8fe26d8923ae56bfae628dd1dd626ba8bdc075a03ee3aaa37fdf6fd5137ff4bf8370668e482f4179d3e81fbccef27051f7cb1e838e1da90c61af986c5f08e861f576d722cdb5030689455ce6e4d8832b13039231d19bdf9c71a45e5d87073dbc197e6fab6b49cc9c55d2d6080186d44dda614d1e33d4c42823f6fe7002e1779e962f2a53ab2dfac3b01d2a224bfcbcdbbb96fbc3d930ad23bfe3b9f7bfe95f39a618be7d50afc2e56aa68c6c69b10f3fa35146791073b52d85383ebe138939c6b8ddeac6f17084e16e0e24898149fe20f4718da39eb06ea04a28fa01998bb8aa430ac4ee5d494b6ef95dd96908a4abfe8df74"}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_type(r9, &(0x7f0000000280), 0x9)
getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0)
r14 = openat$cgroup_subtree(r13, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000100)=ANY=[@ANYBLOB="2b7069647304"], 0x6)

1m12.512480218s ago: executing program 0 (id=2953):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
close(0x3)

1m12.319374617s ago: executing program 0 (id=2955):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='ext4_fc_commit_stop\x00', r9, 0x0, 0xffffffffffffffff}, 0x18)
r11 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r11, r10, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11)
r12 = gettid()
syz_open_procfs$namespace(r12, &(0x7f0000000040))
sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x2bc, 0x11, 0x2, 0x70bd2a, 0x25dfdbff, {0x1d}, [@generic="100c371ecf83fd1319e5e2e45d97e8271ecca0a5b9941278697fd87cc653b59e5cc4457419029031299e8149b3de1dbaab8cc0247d2c36ac223aedf3ea2c2adca97c1665a05928e5c02f561a0aeb3a3b6f18dc77c8eb6283e3d9cfb8cb1c71f2e26637eaa9bb95150619c53933d8a91f7e30d8b578dfcbc2216b779e37bf913067a099d48bbc4c9b12e63a126fed105aaac3961776ce283fd22262011a31ea641d52a7c5c98029e55ebc19c0c042a484356d31b86c68d5752da314492bbd3db09a122b32a5e99a4eb9f62daa78de01a236fa766febcf429281ead04cb462c1a0a50bdcb8a3d078", @nested={0xc, 0x124, 0x0, 0x1, [@nested={0x4, 0x2d}, @nested={0x4, 0x113}]}, @typed={0x8, 0xc4, 0x0, 0x0, @binary="c04b20d7"}, @generic="3db31cbb680ef1232339ff09f36e5a72088d73c75e0bfc405c6995749c1527476ea51b45785f0fd78234e24632f5edbad607159cf463eac2158eed147c492f8abd9ea213d78f65236aa500317f251cdee1a25ded01186f", @nested={0x4e, 0x84, 0x0, 0x1, [@generic="4c3ce1838ffd6770bc19e711b7946a336605519666dba1d67fa2015cefc0462e6046d678c9667d0a1ab8", @nested={0x4, 0xb}, @nested={0x4, 0x12f}, @typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x27}}, @nested={0x4, 0x130}, @typed={0x8, 0x138, 0x0, 0x0, @pid=r11}, @nested={0x4, 0xca}]}, @nested={0x104, 0xe1, 0x0, 0x1, [@generic, @typed={0x8, 0xb8, 0x0, 0x0, @pid=r12}, @typed={0x8, 0x45, 0x0, 0x0, @str='GPL\x00'}, @typed={0xed, 0x4f, 0x0, 0x0, @binary="3b5cfac95af8e71f2017b23b679c97e0124869e3a990f3bcaaa7163d4c71611bbc9b2291aa12e4b4315a652fc158d127c1511c1c940986e7feb5fc66538061e3e69f9666319af9138da89616dc003dec0ec0bbb8729d6f5e9c7bc413caf8f5fe95c5102600ee623f99f1a59b32f93c159f34d8456957c484fb7ee9bdf6a51bcf5ef95ad569004cb99012e4a3e1a2ade653a5b2e9eb74d45cfe0bbd8027579d977b70bf157aa09377ae4a154b0b2435123316ce360102317502739149643b1ea10fb6f8dc61fd10a21271fc6bafd76fc2f695fca00c272465cd8a4111d1fe17893378d7d6b0cf44c49c"}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40804}, 0x20008180)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r8}, &(0x7f00000004c0), &(0x7f0000000400)=r6}, 0x20)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010010)

1m12.004736168s ago: executing program 0 (id=2956):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000000000000100100000d000000", @ANYRES32=0x0, @ANYBLOB="80ee3600000000110a00"], 0x30}, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1c00000000000000100100000d000000", @ANYRES32=0x0, @ANYBLOB="80ee3600000000110a00"], 0x30}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r3}, 0x99)
sendto$isdn(r3, &(0x7f0000000340)={0x1ff, 0x6, "fb6dba9f2d9405000219d221aaf49f00398447506e11c86accf47e51fe253fc80c4cbd54118666032c22ed56083880be96c2051e94b3f968c514ed46cb7426f7241141638cb0453018a0d8b9d8814c40da7bc3bec43fcd46cdeb2a8a1b42cf33c30114ad398e3b7c129241cced213ab4968a2668676fd5f0344a5496c6475b25a89ae9d6f57c927fe24a784b1264864b812ee9785f02dfe073e7cd7653e7e121225a9197fe5631872200055c70a99c9a0f4f91bb767259b6c1792a91ee3704d93ca8d6b37784e7d3586bf9535e8d76b1295c3511ec90d7f4689d6860de493ab4f54353c031bc8cc48bde2aed0de581bae0d5cebefc632dd218a0136e19f2ef0e42441ee30b09bafc57e20d3b69e86899b6dfbb0acf89728d66886897764f802e29fabfb50449400dc05ca9845ef1c4e76900cad66bdf6b38cdb78898fff29f588639f737d7d7d10f22ca788dcf0ab1c7b11d8e5250e0ab272475a9b49512c70fbc46b44e8678e16b89fc55ac381811ba2b01ab90d58dfa5dc0777d9ce7966af2b768f299957eb8b161bdae75978523c615e9a3a33572ccdf7bac61206b846c1ee7ab414cbcf5fac68ffe96a1cd6463301f98341b2f0bf092c0e6120c856a8f964d24bb8f261166e1b3a1d374dca5d7bbc52718ebc617d75f1f07ed406e72cf1572ce8b3de4b7c1db14a3b81ef2fcff1f12436ae354a54fc0d3e78039810fa7efe5106b69a59d30ffeb9b340ad784b69b75856d06e2b39eb2f6493da440b81d3e5121093f0127b6ec5a2d1e1743d759a0e94c14f53e675b9ef6587d4b1b4176dcf89628acc027eac9ec91c0496e44a3ee3f0dfca5e697ff87942e6e6faf3c5ead356cbdbbe656e0ad40f79654a9341301930496235f4ee3ae60074d53d177e11e07e955bc163b90277faece85d5675501b4bd87874c8fe77ec54e0379e9bd7d47d7564c30547ba3e47f536639a1b7c54699ab69058b8a3cc7b2b988b1e49d97263133456daa6a87032402b2ff2ebf1f2520738c22fefb019a2b08379abc38ca7f55affd0d685996b9a99753ffa4f5bd51445c46eb40c39734c2e11a0b06d41e217aa4db693a852d72c0d944f0e31ea9b73e76cce2dbff54f279162c2241db5ef2444b38e48bc986f61eef9c9c31b66a469b8632f6d0d81c1f89c38efd607d8c4ee33d0d45b1ca2be67d21468a309dfb56b2c7542510eef9036aff00d93b5e52e5335ef008aea093566aa16ad75818d5158df0768c4559e34635a98e0da429623cfb52b99b6ca05ca40a098bac44965f4a1ed1bfc09c82745edf0846cd7874bfdc3aacf55e5e1e9e09483ddbd2849b852f6565a89d10ffa2c75a2908fb4c68c6818d4ef9f07e6df5c5c30866c0caf558c227ddc31afba5c8477aa19f9a9698b1d78d130d22a1b7ad6358da7dcf20e0fee069f9523380343912660bb7be831014a5fc86a903e13a8a27325883e87069043dbaaec00a742a17ee58d2e6c95b72b4f6dbf906f2f441e008934c8a09c8199624195c37fffc6228a5fe0b300b0e01ccdd1426c416ad91b430c342e281f9609d9f924d2061eb018affcefd5bc799d78ce0671e30fac240ede49e9e09d75ef1f9c76aa064d3bb4d538aa0a745aa9075572636963078b4fc453e7454c0d2e4fdca4c880f48f703c73e53fc8754a7eebb7358e1477e80e7874c60efa051b5111b62ffe93751dcf65ea63337b7ad8b0ee349bb9b22218ff4f1ade2bef07eb12f60695a862371593e611c55cd115b3838ab145fab7c9ada568bcc47f648277401eb9a6694149a5ab1883572b15c53678d9d27d636b629a6ae2319b866cc4558764957ad50658c348d1d023ce0bb0a6885078f3671ff1c6a75fb2d3cf10bd214897b97d56a681c05eef6dc0c10cbe747429398ecd317699f58931cd23c510ad400cc5211395b1205da45c57612dd4ee855188217436db65ae718734bd813ee3ee5428ecb5733010bf9163266facbc14bb2bde43d13a285ef9c4243717a3c437761fbbcf2ad698d0050d01bcf0203512050714cad899555f9c12eaebb7442128444e912251f356c8e6ee08bb660ef7a8c136400955dd93f007c8ab510d4a28f05a3e4f8d6ac12ae66e8d838e38b4dfd22db929c65ad3fbfddf99b05265e58bea0ce97f633306b3d365ccae9ab4f3c169fe8c1c7d4138973f97850927db08d2fd80213cc8d3bdf543aa551eb73e26fc791c13dcbe4fc49550aa283e3c645467cd45eddcab713341a170f3d43a8dd90a568ad3b5224e8778abebc9b5935e68e9b0727407302e5254ae9d491a682ddf3108ee514714e97e25ef33f646cf8cf96c5be5159563cc603772b85fe07cc1ebedc49b09a396ac55e26f54cda1ec6b285d5896449e1fd994aa18252c5e7417dab4752782dd8d01972803a920501de11e4844b81ed10defbaaf740fb4c2e7db8d00aab5cd1ca79444f2f2fcf5bc5295469c7d87e0c2c6b36c1acfb4dd01555b81a4c1f7bfb0b2e6ddc8a62622e16ad374c1fe220a6de2575f537c2a537ee02aeb2ffac5b41efd77aafeb25bea92bd94ca0f228bb4ac0b00b656669571e83c9345e183ebb4cce68af5d6f482b5333aa646020f7f12b9751086da2946cbed9b0d8a17eb47f723d7534ad0e70a3db8439f10504a65447a2e73982d13b47f10e0a913af528a44f16a9b80eccf90dee4a0c4f224c87d73cc2c1b42317ec1142a14db3d9fe4bc5e190c73be36eed27b33bf8d7f0d266c4476fa3d2e26314eb28e62f929acd171cfd36b41503e9fa166e982493877f481eca3f122c2b775a80577b13bc5fccda630305534bb205de596f970690a60ef0eeeb9c22ac455a294602c2c0f516b57995624a3f0dbcb1493d90428f92fc91ad1a37edb898fadddb327efd19b0896d6f536c5368bacaeff9f153f26344c13744966d660f0ce73d5a05495f8bc9c62d058cbbe01d8a4b65e2f30d2e586cc464bc23b3227a7a5ec457206336bff76183fc898e914591c74b9b2f72e5370896424d4c75a56de171e46b3b8c87d47607a5ec681b1cb571ad7b498bd96fbf98c112f83c71dc52890c48724af8622c7b16b40ec4a321bf0a0a2eba6ff408e69430ad5c288f98a3fb56fa7d2a6a5b19897d5980a1176c571b5da01fb0445ecdbe2da1f4578fff1bda60edbe8bbcf07618a416645d8f19d6f58a1fb7beec504aaa811e1d34ba3fcc57c3de8adc603bb6c46df0bf8a27556280d33aa70365c97545ca9f1ac3765fe489af3f030f24d2bf3ada4e0adbf308062b18356fe0335d0ffd34d4ee5d634b4f13b10aeb451fd1ab334f6c931561e7aa5e3c170db6cb73b4f5909fab12b82616df3746b3b30863e772b8e3dfb72ee28f5605c0268537106d0b1744a4a268b3063bc88af1d31d7494ea08439d8e3c4c201ccd96a2146766d375682f603728cc281ad716d3680fa3a41db100ce440ad98caff85474c57ea3c68d9c0ea6395bf42a2cad9f9a7848a4e18813e42dcf6505cd510ac79e59afa44d1e8d24aec844fea6d9ed99e811be4fef07b45646446e39b82aa65afbacd5c94099642beda12050cefa0c7631f9603a0323a8cce4ffc4817bafc6b0053e185913a697d3b506facb2845e4e725d0e9955b0f12e1bb17f92b75e873a95571a8486647ba226cd51a053432a272b5c65c47196fca0f38f162b79702188f645add256151413f5b7eb28394f0b8655e10788b68caaa0a340d5cf834d390818344f698f5e30466fe17a5e77a8934e1f3a58350c1f778879710f6d06ed02ac17b45c580b955224cd90bf54b59075a279cec74f22f9aa26dbc1c1746577380ba0ae097670f68816e2381668454ea734f75d7fb3e9b2811999734caa185f27849cf0c5e80ad77ca6031a274d3e73e3576022be1831b55c47a8cc9e4f96f53553625c1807de8b11aac92b721c0c2c47318a5f40e0245574d73ef91c3df5bd828c7e6260247cf33d105f57397677dd1aa43db709a31e291001875cc7351e685e603976a2eb75388b007394b171505d5d5313511621e600b5d1f80fbeef0fabe525931a216a6f19b8de743f3312e0f5be0a36cc59693eace4200ca82d41404672a6068c3d9edd13369c4cdab6d4181e4129491a816b6d3cf310e41f21fab1292bea3c22702924df6cc67e4fb5c46e31fdb15079b1671b408c2b5613af3a0a9951f68de685f28e8bf394d8075432e258eb9336d13437ed9c74c61255164f6db5aab9ad5ace8694ab26cb53c00e8d1dc4e7c691cec80f26bb6ba68ef6def95f0b4d5d88b6991b5f8848524b2b4960c14466a289f3464259b99b1e8f19c91ad70ba19e7de2397d58fe165f4ac4b85ed0c0977c23f2fcbe3cfe218fed45b7964b88898489d8a15e74f70b5aee0b9cb192bd31ece1556ba1dbe07def64ca884cf3fac2fd0de0adaa2b7c5364bc1a14cbceb0735845391dc1aca9a6871e60774added50be6e1841eaa3a82a2f707c44efc5ae84f4f30525934fce31525dcc7d7e229f58d670639f07dfd8ef29ee35bf754deb50574691e6f1c011705045947b3f349fcaf3f70e4c078c3f6471d3413be879062fb7d7857f3c8f292c96e5adc6d7802b6103c7764ac3861de2d4b78ca39de800f3b9f4058fca960c33a04c633d156a10610f8aee26d39488d039474e5b8489d4bdc72c4ff5cc04f9bf24141cafbed7f95017508369b748d1c07d46a5821e598e40a8ebfda6232fea17bfd2977ed0bdf845246ce9db0795b994349a0492f60a3eeff9b737e0e303c14eb4178c4b33b6d800a449096d3a2cfd8b471ae6d684794b3c5d4c4ed0d1ff9053826dc8481a89513ce1caa56d8ac4e9ba05ee57e6ef27f8819e7567bb5013b3a9a17c47b15358240ece7ba5e09acbcadeb4e71f4dcddb8ff27c279685751885bad739ad24cf213310e361680c561b88fff48f78a76c24e2a9f1c040777ab4605f612a00828c3eebac264415145c4fb5c579719c81eef5c144ba1e48e1a800893ec6f3d98764b713eb3fec743eb4a9f2c2a1e002279b5767c1c1793c55322420a4365cf678562debcb3bada2428448089e872b684f8207c39c86e884cb4753cd97e2d26ce4efd40447fe03ba843ade46b56b7fd1148c9595cee6f334f901b2f160133b790de201579c68b05043407b4c2389df60fd0c782d8a8a978f4bb6e3b80c1a50d3f1bd902ae9aa3f85cc29d015ffae57262728db10dd50e4c7539a78f679975ba5fe3277a18d1b6716b630572f1e97ad190944009a10e013d747cc8b49ba437f6f6c31b89e7d005cd540b0f17bfa76f14e68e38f949b562c7f39b8ffc2000e64f6c3855985a1081a122b2b12de9fdfed6ef0482ab3d0af2b69a8542a81082345ef1aa47e4e97c51dad50b180efa31cfcb34ec550076b31d1c365fed62a4318466b316c2b126bb8dfb533d17188a2877798eee16c4d93a2c12ceec1bd74af7434f24fcfbd78c7640d3358515536a24f7f860adce0d7ce4bf393851a4701e6f1ceace68ead069549d51a188d8a932ab75186fd97c6bf1ec8a8a61c583a2a6037a67f1fc505d834db1df1469488b42552bfe2f25b4be0c3d5a7d5a8ec13e7d5c235d5f6d51120454a4acfcee9540d2b13abee9c087157ab34435809ca0195d33623e84cb02c114e59e9711164ba1680c52a55f3d58ce4ebc95f2db74051450e683f3958f244bc8655fb8a09fea2b9c7fe665be5eb7ddb14167fc5724edecc700c279ec2486c39725c551c04742ef945ff3283ace62460bacf6b931279473bc6ecca21827ff860facc99de298187c62ec290edc7664ed5142bf9473ff841c0f9cc97fa151ddd1"}, 0x1008, 0x88c0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000100)=0x68)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d000a80"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010001fff00220000800000", @ANYRES32=0x0, @ANYBLOB="00000000003f00002400128009000100626f6e64000000001400028008000200", @ANYRES32=0x0, @ANYBLOB="0500010001000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'veth0_to_bond\x00', @random="0131013000"})
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x186, 0x400, 0x2, 0x0, 0xf, 0x7d, 0x7}, 0x1c) (async)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x186, 0x400, 0x2, 0x0, 0xf, 0x7d, 0x7}, 0x1c)

1m11.779585634s ago: executing program 0 (id=2958):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff})
bind$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0xe1, &(0x7f0000000100)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@llc_tr={0x11, {@llc={0x7e, 0xff, '=', "7fc6b78451f2ae8761a284b6032b88ca1f47bfac2eeaa396f82db20c348dc29e91d17404b1d803d6c25222e048b1e282552d573110c346b1bcaa0d30d0561b9ad5f188eed8e010f11506ee16f5bf4872a9ce78340553d4b267d225b1d47847dd9d48041427a7a01d58390104971e4657c111f21fa5c27129b3ca663721e7d47871627c3001010ea2453f73b3ce0bd634fc3b6bab3cc0069a674476868a70ece6f3524a9f9aa7b09369bd3e9f4f4e9b122e5f009e12a5549406341379a69ae5d686caf896ff417a45c475bc44"}}}}}, &(0x7f0000000300)={0x0, 0x4, [0xdf6, 0x405, 0x80d, 0x75a]})
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
read(r7, &(0x7f0000000080)=""/38, 0x26)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ec0)={@cgroup, 0xffffffffffffffff, 0x18, 0x20}, 0x20)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001300)=r8, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m11.232771006s ago: executing program 0 (id=2961):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, @can={0x1d, r2}, @sco, @ethernet={0x306, @remote}, 0xa, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)='vxcan1\x00', 0x80000000, 0x0, 0x4})
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x342, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x7, 0x20005})
r4 = socket$netlink(0x10, 0x3, 0x15)
bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r6, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/103, 0x67}], 0x1, 0x4, 0x0)
accept4$x25(r6, 0x0, &(0x7f0000000080), 0x80000)
getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x400200, 0x3, 0x800, 0x8, 0x3, 0x2, 0x200, {<r7=>0x0, @in6={{0xa, 0x4e20, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}}, 0x7fffffff, 0x2, 0x5, 0xff, 0x3}}, &(0x7f00000001c0)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000200)={r7, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x9, 0x401}, &(0x7f00000002c0)=0x90)

1m3.951764317s ago: executing program 9 (id=3039):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="96568ed295283c8c3e95c1178c1400000014000100000000000000000004000080"], 0x14}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB="0000000000000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r7}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x894, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x2, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x1, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x75b, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xaa84911, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x894}}, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

1m3.102809004s ago: executing program 9 (id=3044):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000580)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r5=>0x0})
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r5, 0x25, 0x4}, 0x14) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async)
sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) (async)
recvmsg$unix(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) (async)
recvmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4081, 0xff1}], 0x1}, 0x1) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x50) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x0, 0x0}, 0x10) (async)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) (async)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
close(0x4) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1m2.880707458s ago: executing program 9 (id=3048):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x1, 0x0, 0x5, 0xc02, 0x5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'dvmrp1\x00'})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
connect$ax25(r6, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

1m1.901454814s ago: executing program 9 (id=3056):
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000003040)=""/3, &(0x7f0000003080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xfce)

1m1.428601837s ago: executing program 9 (id=3059):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000540012800b00010065727370616e000044000280060010004e230000040012000600030000f800000600180091d6000008000a03", @ANYBLOB="04001200080005"], 0x7c}}, 0x0)

1m1.325005159s ago: executing program 9 (id=3061):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) (async)
unshare(0x62040200) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_getnexthop={0x1c, 0x6a, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x3, 0x1)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async)
ppoll(&(0x7f0000000080)=[{r3, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000005c0)={<r4=>0x0, 0xd6, "f4d6234b4ca3f86a355c3178df3559e493dd499bed9fb352318309350151e2b735bbb7076077c55ceef5fe31a80619137d0194fec6795c95821c76fd1a6896c7406a71b4c19aac857996dd14eead14515fdc152ef8c0e77a6dcad4c7941734d6b0c134cab808c65da0eaf7ec07ea0930f104a8209eee1ae5ef72fdb6a41fb803486bd1ed57a60c9bddb8e38f9ddae3e93757e1af1ac8b82b0b8c593dfa8f2099f432f36931b8ebc233cc763f86ee29f5a9814822d84db2ad0e120813278a39774d71783ee0344e0314c1a86f5599cd6f7a5272953a51"}, &(0x7f0000000040)=0xde)
setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r4, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r5, 0x1) (async)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000300), &(0x7f0000000640)=0x8) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r6=>0x0, 0x2f, 0xf, 0x8, 0xfff, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x12}, 0x10, 0x8000}})
setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000440)={@mcast1, r6}, 0x14)
sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async)
r8 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r8) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) (async)
writev(r9, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}], 0x3)
sendmmsg$inet6(r8, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad2", 0x43}], 0x1}}], 0x1, 0x4000040)

56.15281017s ago: executing program 43 (id=2961):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, @can={0x1d, r2}, @sco, @ethernet={0x306, @remote}, 0xa, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)='vxcan1\x00', 0x80000000, 0x0, 0x4})
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x342, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x7, 0x20005})
r4 = socket$netlink(0x10, 0x3, 0x15)
bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r6, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/103, 0x67}], 0x1, 0x4, 0x0)
accept4$x25(r6, 0x0, &(0x7f0000000080), 0x80000)
getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x400200, 0x3, 0x800, 0x8, 0x3, 0x2, 0x200, {<r7=>0x0, @in6={{0xa, 0x4e20, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}}, 0x7fffffff, 0x2, 0x5, 0xff, 0x3}}, &(0x7f00000001c0)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000200)={r7, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x9, 0x401}, &(0x7f00000002c0)=0x90)

47.403786684s ago: executing program 8 (id=3172):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="a875e6eed3c2e7d7c429b641824c40f7cd5ac53b86cbb3ed0ad478a8da29e27576f7bd566885b3d282e9a18a5249936143cab59ffc0ebfd0d1e5a7ff5c61e6bbbc6f746fb5eee4d44a74ed96b1e2a9fc8bf3dba7e7dd817589f9291a23562aecc0fe2f6d2976467416d92fff1702c93a0545771947bffa6024f446ded22c6b61f5fe144ab45a027f27661fef7e0055028f1db41ed4db093b5510e85a601bd360cdac", 0xa2}], 0x1, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="8bf5d1bf23a73e08d8d1c070728d230a669b4f8b546d27607e016a470cafa55fac55342de55cfbd00f1ea1af2f5163f9bbf328d507b670a68408cd9d63b8", 0x3e}, {&(0x7f00000006c0)="f62fa1946d716df83bce0015848a561bae4f25062bd1fe9726eecd88bdad2110c689a015caceda583377bcfe050d49f4b415ce53752850479e03ec060819e574b1ec251378e919974a44d672c3d69b3eb5dc1d10c8e9c33ba9633f78f0e02a0972054e0c3229059afff7d596d7da8dfeb15a452bde7781ce0dc2f5d62876eb0985c6bfaf875432253611448661252ffafc4f8712572d68bdd1d56a128ba763ba2ca051b3d16d3826519b77248bf1cb6ed78690657dbca23f996f1bb12431c21427d77624d225c9725a8919ed2692761bb646be8736288f1de03862cae785e6", 0xdf}, {&(0x7f00000007c0)="cfa8892d93a49ef918c825162f61c559e4dcbe3be9d363eb2241131de7a935a00a6bac5ce77a4e493587314cc7a831b6404af367b68f97fa467354193d2a19df4a67d0d41b850ae321167bedf54869fae7531dcc4d11d4266583b507282a1ab0b88c2fc594f13264c94e62eb2826860c8b7887f3f5827c145f0e9342a81aa325752f0412720f9a4455914e6f8eccb1e7eb3de0f411dd5f29ad1719241a84cc0b1f80b1a92a6fd8e13a", 0xa9}], 0x3, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30, 0x8}], 0x2, 0x9f3a4d12ad61e740)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a80)=ANY=[@ANYBLOB="30000000779b14c069bf510c71c5890dd56e9bc7faca61384c5b3e18c9929836d47a5bafd42506e34d486b3e8833b91904295bb021fcbed8cff623f042d47f409d13f148e1a9be195de43012cc04190847266b31f0e30e02b19945252873d47ca12ff14776e25e501dfead24a47eda199170d7bd79f0d9e788fc408850076cd3975e7fd9", @ANYRES16=0x0, @ANYBLOB="000826bd7000fddbdf250800000008000200050000001400050020010000000000000000000000000002"], 0x30}, 0x1, 0x0, 0x0, 0x40011}, 0x10008084)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0)
setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f0000000240), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
pipe(&(0x7f0000000100)={<r8=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r9, 0x0, 0x21, 0x5)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xf, 0x20000004, 0x8, 0x8, 0x0, r9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000200"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
socket$packet(0x11, 0x2, 0x300)

46.26936368s ago: executing program 44 (id=3061):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) (async)
unshare(0x62040200) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_getnexthop={0x1c, 0x6a, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x3, 0x1)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async)
ppoll(&(0x7f0000000080)=[{r3, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000005c0)={<r4=>0x0, 0xd6, "f4d6234b4ca3f86a355c3178df3559e493dd499bed9fb352318309350151e2b735bbb7076077c55ceef5fe31a80619137d0194fec6795c95821c76fd1a6896c7406a71b4c19aac857996dd14eead14515fdc152ef8c0e77a6dcad4c7941734d6b0c134cab808c65da0eaf7ec07ea0930f104a8209eee1ae5ef72fdb6a41fb803486bd1ed57a60c9bddb8e38f9ddae3e93757e1af1ac8b82b0b8c593dfa8f2099f432f36931b8ebc233cc763f86ee29f5a9814822d84db2ad0e120813278a39774d71783ee0344e0314c1a86f5599cd6f7a5272953a51"}, &(0x7f0000000040)=0xde)
setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r4, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r5, 0x1) (async)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000300), &(0x7f0000000640)=0x8) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r6=>0x0, 0x2f, 0xf, 0x8, 0xfff, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x12}, 0x10, 0x8000}})
setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000440)={@mcast1, r6}, 0x14)
sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (async)
r8 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r8) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) (async)
writev(r9, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}], 0x3)
sendmmsg$inet6(r8, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad2", 0x43}], 0x1}}], 0x1, 0x4000040)

46.217948541s ago: executing program 8 (id=3185):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$kcm(0x23, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000940))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)=<r3=>0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/ipc\x00') (async)
syz_open_procfs$namespace(r3, &(0x7f0000000100)='ns/time_for_children\x00') (async)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
syz_open_procfs$namespace(0x0, &(0x7f000000b940)='ns/cgroup\x00')

45.960323648s ago: executing program 8 (id=3187):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
listen(0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000001580)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f00000000c0)="d5b13a3cfdcaa954930620c9a25aade99fc1c3c656efa97a7891a68413141686feb2d01e920218eef2f07381e35d454e0dd2ca76e3fea9cb4980008e359d32ad7667b1012dc60ec0005b4a8e736d6dfeac6a5fe991a0476a12c6abfa1a17b0662eb12b0f342e9d4700c791e6d7c037d993ed8e3bf44bdd721c17d21942bfc145763c7a7131f709f812781a6b1b3123", 0x8f}, {&(0x7f0000000300)="0337b2135c88425886463f08299d0d47cfbbc6e9d007ee7f13a2559e0d45a7f3b1ff9c398daab4a7061c354e0f4a53d861af500f3c360b56592d04816bc19bbd1e5d454dcb5ea4fbd42e0a5cb267526a8146bc0f1216013ded086ff7b027b62673c0fc19877df835a5cee01ab25fe9f9c8e537171b6e5511692f1f7c52b45ff6750b4d2de55149f8e1bdf917a0eb1bae9b5abd885e9c907318ce8059e91bafc055c2829460383623e85c9bdb783a96ade1ffb1322f93f32c274985a0e9a07c2f2b251af2aa34e7dfa1e2cef79e51f9abb23c373ede3fbd89a571eeb0e6894eaa5743e35aca48fd88d1dccf479671b79dc4699b4ceadd99ef22d46958", 0xfc}, {&(0x7f0000000400)="a26ed4b0ad27fc3dfcc437f62ee194d525c164367ca28537f1ae6286cf1d973ef263fb1df583a16042fd3041e15c459f6b951599ca0268e594fafe42c10dc7f1443feb967324b39849aa414d474c433bad7d8b9bb63ffbaf81f3e3bd402b28d64ebaba8c4b04000cc464de9aae2db04b9bb4063dae6d8f07c21e50df5859747ca0fbdaba7d86b58d7ff1df3046b476f70013da95621bc88f14fbd2c80b0e56865223eea84a7d15d9dbae602bfdb338c83ed3547c81b2d6fdf6a41b130e3d314d64c8a55d9686b43b6d48b18e5c30bf52b66b28f0", 0xd4}, {&(0x7f0000000040)="3a07a9443d7ce13e13bd71092ce1b857d0640db8850437e43b1ec8e946fc48bc387009b4391595a4438114a7674417335d9a7d58729b06309585a39c9bbe", 0x3e}, {&(0x7f0000000180)="888b38a4632c8dfe350f53047ee7b54be2ebc97937354b486902982abb3c8369f229d4f178bbef332da78a60773d1e7fb7ad3cbe030683046cb671e39f6b362bb3b5c67370b6a4403fe52f9ff73f815436c832ebe6de39", 0x57}, {&(0x7f0000000240)="80a45c53f37f1f66ba", 0x9}], 0x7)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff004)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
close(0x3)

45.284274511s ago: executing program 8 (id=3193):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
socket(0x2, 0x80805, 0x0) (async)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000140)=0x8)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x1, @null, @bpq0, 0xa, 'syz0\x00', @null, 0xffe, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default]})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000005840), r4)
sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005880)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x90) (async)
sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005880)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x90)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32=r3, @ANYRES64], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890)

44.810892137s ago: executing program 8 (id=3198):
r0 = socket$kcm(0x2, 0x200000000000004, 0x106)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4)
close(0x3)

44.55152414s ago: executing program 8 (id=3202):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008006df776a53c00fc91070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4100)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x30, 0xffffffffffffffff, 0x0)
r7 = socket(0x1e, 0x4, 0x0)
r8 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x4, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x1}], 0x100)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

29.28439096s ago: executing program 45 (id=3202):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008006df776a53c00fc91070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4100)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x30, 0xffffffffffffffff, 0x0)
r7 = socket(0x1e, 0x4, 0x0)
r8 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x4, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x1}], 0x100)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

27.39989931s ago: executing program 1 (id=3387):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0x7, 0x8}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20)
syz_emit_ethernet(0x76, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0)

27.256605486s ago: executing program 1 (id=3389):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r0], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0xf, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000000400000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095807beeb28113e458e78b3e4085385191714269bda5bee48dd0bf9e8e697e83ae255e76543bf250299b4e5ff6e1babd9a320e3ec82b70cd0a77851f15427bfca306fdece9f5f66fb0fad47df478fe2713e55b9fc3ccbdef15e3bd9d00020000bac8ddc7d7ff870b3fa396ad31564cada3b4a7cda9", @ANYBLOB="41c5a76bae8182d48d504ba62dcf1e1b0ebc46cbd9197803c2f8f602657b93fb876b574f6ced699d7d", @ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001100010027bd7000fd3d0a0126889684d9359f5d63effb347bdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x2, 0x0, 0x73, 0x8000, 0x4, 0x7}, {{@in=@multicast2, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000100), 0xa, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000001580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)=@RTM_DELMDB={0xb8, 0x55, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x16}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@private=0xa010102, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x44}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x35}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20048080}, 0xc060)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014})
r10 = socket$netlink(0x10, 0x3, 0x6)
writev(r10, 0x0, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fcfea7dc401f4db9f1a5419052c6cb0e53fbc116a0f561e1d1cb50412038f3bc4d6c492ed3d952aefd85df0eeda915385569c1027bd8d91d198753fe8095b9b1b2d7fc06d76215a26f1ba7015d3f21a3fe20baef491e5617c3f051df1e8ecde622d2ce154b4ae4f9d1c1623a2aa606000000071a007f7b08cdccf86c2236db94e79910e8b14c8b632a76a9f7221801263db74448b8423309da8410843b981aed5298f66d396445459dd30f9186a65e658be0419b2fa7cd7258e1b8c3b14b43ea6afbdd57f5f9dc1576312716261d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'veth1_to_bridge\x00', <r12=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r6, 0xe0, &(0x7f0000000bc0)={0x0, <r13=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001280)=ANY=[@ANYRES32=r13, @ANYRES16=0x0, @ANYRESHEX=r13, @ANYRESHEX=r4, @ANYBLOB="080003000100f2040000000000000000080001009e18a5ff91cfc0fa3d8e2800"/44, @ANYRESDEC=r2, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="3c0001801400020070696d7265673000000000000000000008000100", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=r12, @ANYBLOB="300000000900000000000852471e", @ANYRES32=r14, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000300030000000c00018008000300030000001400018008000300030000000800030002000000", @ANYRES32=r11, @ANYRESHEX=r14], 0xf0}, 0x1, 0x0, 0x0, 0x4400c000}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x13, &(0x7f00000015c0)=ANY=[@ANYBLOB="180000000600000000000000070000001811000035438f9e64944ee343afbe015d7010766823cef79377386c9539bb1513c7c37b232adc4eab0e9dd417cc2c6d9ed6caf0e5ace2f2f207dbda55deb35bf4362afa0639eba290debdf7d2e05aa1194a0f235c94f3b62e3b706a3c40618508d800bcbdd3787c3f16ae5fa0f3f27e11a018a480bdbcd74cdfb741456792ee2070faa1d1fbf65b85a1d6aac5440c5e2b67", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185b000000000000000000000000000018360000010000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100000000000300000000118c5b", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700200100000000000000000000000000001400350077673100"/56], 0x50}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)

26.365428326s ago: executing program 1 (id=3400):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x1b4, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x91, 0x8, "d789d6872b89943d72bbdf5139672ae77b452d7b24075f511006e1a0cfd0c39350c4cb5c35c225721312747b0e2ad7f97f275e8f71e63d9d8aab464662570f407feb1d8024967f3ef558513b6c9ab8851ab095776667aedacf66f90afd3fcda51bff0e0ce3147bf9c51c1c3d890f758864c92511d712bfcb94733ffbbcd00dfffc173670a698c214caba88440c"}, @NFTA_OBJ_USERDATA={0x52, 0x8, "57465797b99a9a3227a1bd2e279f9756722366ae893dd9cb9640590df4a10b6f7e1141a203c2d030b735044945cf1f798cd1b59e134b5dad7204a1cf660d33bb5c70b2c15d19035f01c3ca2e669f"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x8a, 0x8, "042b206813ab2870bdfaea4a07da030f24b47a546108ff5882357eede123adeed42ba27d72835905dd045b2b0a2e2441a1ed8d7e5170a3831fac67c6a49762e9f39490f943df022461eb82ef041fd72f60724fe9286781535c032d739f3b9bac1c3b3ea7f6d9f66734223126d39f33ea0b3643ab4f2a13aa9d9556c7bc02aa2cb35116927ed5"}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0xbcc8c9aebf91a27f}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x230}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r1, 0x10, 0x10000, 0xffdffffc, {0x26}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044841}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0xc810)

26.337239721s ago: executing program 1 (id=3402):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
recvfrom(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000000)=0x68) (async)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @typed={0x4, 0x25}]}, 0x18}], 0x1, 0x0, 0x0, 0x804}, 0x0)

26.124861722s ago: executing program 1 (id=3404):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0x8}}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}}, 0x8000)

25.613786915s ago: executing program 1 (id=3411):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00')
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) (async)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x472881, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x472881, 0x0)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x40000) (async)
sendmsg$nl_route(r3, 0x0, 0x40000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
r4 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @empty, @local, {[@hopopts={0xff}]}}}}}, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000100)=0x7fff, 0x4)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x90a9891b}], 0x4, 0x4020, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
recvfrom$packet(r5, 0x0, 0x0, 0x10122, 0x0, 0x0) (async)
recvfrom$packet(r5, 0x0, 0x0, 0x10122, 0x0, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)

22.608858999s ago: executing program 6 (id=3439):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendmsg$inet6(r2, &(0x7f0000001840)={&(0x7f0000000100)={0xa, 0x9, 0x6, @private0, 0xf}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000000002900000004000000840000000000000024000000000000002900000032000000fefc"], 0x40}, 0x44058) (async)
sendmsg$inet6(r2, &(0x7f0000001840)={&(0x7f0000000100)={0xa, 0x9, 0x6, @private0, 0xf}, 0x1c, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000000002900000004000000840000000000000024000000000000002900000032000000fefc"], 0x40}, 0x44058)
r3 = socket$kcm(0x2, 0xa, 0x2)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000740))
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="d91c0fddbdbfad9e1bb8579dc72f416935c99cf38d71b059eef208784dd7ad02e0dd333a8b4fb1bb033b77b48607c150e3619e3c7bf990ef33866f9e7a1ee599243ce59f3328eb4a52ec", @ANYRES32, @ANYBLOB="000000000000000018480000faffffff0000000000000000185900000500"/40], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, &(0x7f0000000280)=""/47, 0x29, 0x2f, 0x1, 0xffffffff}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='rpcgss_svc_authenticate\x00', r4, 0x0, 0x40}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='rpcgss_svc_authenticate\x00', r4, 0x0, 0x40}, 0x18)

22.527882325s ago: executing program 6 (id=3440):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x11, r1, 0xde324000)
mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtaction={0xb4, 0x30, 0x200, 0x1, 0x25dfdbfd, {}, [{0xa0, 0x1, [@m_csum={0x9c, 0x1e, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x53, 0x6, "cfdc7d0145042ed41950ce9e8ac55560ac53a649bc3cde2c17364174b0db4038b06f06cf10831f90818e0918a0e29a9c68163635e504c7de19c7edbea212ed12650200000000000000f404f6bac662"}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000880000009500040000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xf6, &(0x7f0000000440)=""/246, 0x0, 0x11}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x138}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r7}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r8, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10010, r8, 0xa10ef000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="10020000000000000000220000000080654dd70008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x2, 0x0)

22.267879066s ago: executing program 6 (id=3442):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x10, 0x6, @broadcast}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

22.132745833s ago: executing program 6 (id=3443):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = socket$inet6(0xa, 0x5, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0)
sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x4}, 0x1c)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2000)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r10 = accept4(r9, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmmsg$unix(r10, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0)
pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xfc}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)

20.944017606s ago: executing program 6 (id=3458):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES64, @ANYRES32, @ANYRESOCT], 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x3a, 0x301, 0x270bd24, 0x24dfdbfa, {0x8}}, 0x14}}, 0x4000000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0)
sendmsg$IPVS_CMD_DEL_DEST(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40050}, 0x404c800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r4=>r3})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000050)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032bbd7000060000000600000008000300", @ANYRES32=r6, @ANYBLOB="0a000600ffffffffffff00000a0006000802110000000000"], 0x34}}, 0x4004050)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000001080)=0x4)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000001100)={r8, 0x9, 0x30, 0x7f, 0x1}, &(0x7f0000001140)=0x18)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRESOCT=r3], 0xfffffd55)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
shutdown(r7, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x3}, 0x7}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r9, 0x8b2c, &(0x7f0000000040))
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000480)={0x0, 'bridge_slave_0\x00', {}, 0xfff7})
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

20.480143979s ago: executing program 6 (id=3461):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
unshare(0x44000000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2) (async)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
recvfrom(r4, &(0x7f0000000100)=""/60, 0x3c, 0x4100, 0x0, 0x0) (async)
recvfrom(r4, &(0x7f0000000100)=""/60, 0x3c, 0x4100, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000140)="9bcd51546d1bed", 0x7, 0x18d0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r1, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r1, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000a4b000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xffffc000) (async)
mmap(&(0x7f0000a4b000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xffffc000)
mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

10.448162816s ago: executing program 46 (id=3411):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00')
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) (async)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x472881, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x472881, 0x0)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x40000) (async)
sendmsg$nl_route(r3, 0x0, 0x40000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
r4 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @empty, @local, {[@hopopts={0xff}]}}}}}, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000100)=0x7fff, 0x4)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x90a9891b}], 0x4, 0x4020, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
recvfrom$packet(r5, 0x0, 0x0, 0x10122, 0x0, 0x0) (async)
recvfrom$packet(r5, 0x0, 0x0, 0x10122, 0x0, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)

5.426160546s ago: executing program 47 (id=3461):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
unshare(0x44000000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2) (async)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
recvfrom(r4, &(0x7f0000000100)=""/60, 0x3c, 0x4100, 0x0, 0x0) (async)
recvfrom(r4, &(0x7f0000000100)=""/60, 0x3c, 0x4100, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000140)="9bcd51546d1bed", 0x7, 0x18d0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r1, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r1, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000a4b000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xffffc000) (async)
mmap(&(0x7f0000a4b000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xffffc000)
mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

4.730402121s ago: executing program 3 (id=3574):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x1, 0x0, 0x5, 0xc02, 0x5}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'dvmrp1\x00'})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(0x0, r3)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
connect$ax25(r5, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

2.855321751s ago: executing program 7 (id=3600):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0xfffffffd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0xfffffffd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x28000, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x28000, 0x0)
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000001c0)=r3)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}}, 0x20}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000070000008500000006000000154bfcffffffffff95"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a00000800000500"], 0x50}}, 0x4000850)

2.704504653s ago: executing program 5 (id=3602):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c0900fa"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e)

2.154765565s ago: executing program 7 (id=3607):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1, 0x0, 0x1000, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x3e, 0x0, 0x0, 0x0, "0411575f860000000000000009cd6ac579e8e83b944b666113f3ed71231e6653a1a832f17b33825c2dcd1be14f53b9fc9b0000002000"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000300)=ANY=[], 0x8)
setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080)=0x1ff, 0x4)
sendmmsg$inet6(r3, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000018"], 0x40, 0x7ffffff7}}], 0x1, 0x4880)
close(0x4)

1.964073808s ago: executing program 7 (id=3608):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x9)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000001c0)={0x3, 'veth1_to_bridge\x00', {0x7fffffff}, 0x5b8b})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)

1.699085674s ago: executing program 2 (id=3611):
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0xfb, &(0x7f0000000040)=0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x4f, 0x0, 0x3, 0x6a, 0x5e, 0x76, 0x8, 0xa5, 0x51, 0x9, 0x7f, 0x0, 0x1}, 0xe)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', r2, 0x700, 0x7, 0xd02, 0x3, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @private=0xa010100, {[@cipso={0x86, 0x27, 0x0, [{0x6, 0xd, "78d1943da0ec976cbf8361"}, {0x6, 0x5, "c2aedc"}, {0x7, 0xf, "be3bdb33b59d59a97c0f201016"}]}]}}}}})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={<r3=>0x0, 0xfffffffb}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r4=>r3, 0x30, &(0x7f0000000240)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000002c0)=0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000300))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc8, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8152, 0x63}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x10}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1c}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x13}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xb}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xc}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xff}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "fcfec70ca6a9ead0"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "c9695772166bb829"}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x10}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2000a8a2}, 0x10)
sendto$inet6(r0, &(0x7f0000000540)="2f84a5458a2fe40e", 0x8, 0x0, &(0x7f0000000580)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c)
pipe(&(0x7f00000005c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000b00)={<r9=>r4, 0x9ab, 0x8db, 0x5, 0x2, 0xffffffff}, &(0x7f0000000b40)=0x14)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000b80)={<r10=>r4, 0xffffffff, 0x2, 0x5}, &(0x7f0000000bc0)=0x10)
sendmmsg$inet_sctp(r8, &(0x7f0000000cc0)=[{&(0x7f0000000600)=@in6={0xa, 0x4e24, 0x10, @local, 0xfff}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000640)="09c857b800280cf1abce8e8d92a3e969e74dcffa452e08e282c7a3767b4dceb4ebc7551afc80611072466001f3e1d372e747587f9ef546fd0f50d459f9135182853e10e19a251992a0c080b3a8182c2b097af7", 0x53}, {&(0x7f00000006c0)="c6b8ae0fecff62ffcaa70dd1f026420b57903a8b251542cb5b184c9885cbdc12640b2ef9826820bd3399346a10c6c7a7129fe5d01bdfdb004d9d85644ae15ebcfce4f1080aef0d21508792f3439b553714babbdc956a99328fde47e5c7651777e777d61b86f3bb4829132012a402c58801113254b580dc51744786ae724c454005f96df0577fcb7961d75338b91a75bc59206f3c13e374a51a171f5abfaa8baf324d7374119cdfebfa6673eba53f1d00e58d398483", 0xb5}, {&(0x7f0000000780)='XP`', 0x3}, {&(0x7f00000007c0)="4507c3442922be16bdcf921a7356de5744a6cc8442c64b354864eaf02eedf6609e35922672eba32611a72427f5ce9a946ce683db7c3d4c28e47da81714cef7cc5fc622d09efd8f19a17de4f4fe2f2d9ea01ce6cd48921b1244d843d8b9ec9a3df907077021a034a9f33ce10e", 0x6c}, {&(0x7f0000000840)="e3a41b9d53398e78e1341b5aaefb38c0006380a33bba4c38ff5f304a8db99356624e6deefcb1e054103e94e94c8559ffea453f077959b0dbe10a0efcf936b9fc331d419e61de1a3376", 0x49}, {&(0x7f00000008c0)="8f921d0ff7ff901a0fea6938b691824facab8b593ad041df454b28cc0a4b23d66102f6a523679a12d7ea4d3e01b997a1ffd6052ae75ee836571d9008a64a5db95dbaccf3d5c3c24570bd1e932ed3bc2f3b47df1fda7f9e6039a66db4baf4ee19fff1db0a19143067610bc7593eac4420e4d9d66fca0b762f0c7b1f6eba1d70a777d4ca7884b37681ee877a45892a44d0b2df6c86f7f46bb8ce9e2c8a22bc8ae6cb42ce2973", 0xa5}, {&(0x7f0000000980)="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", 0xff}], 0x7, &(0x7f0000000c00)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0xfff7, 0x6, 0x3, 0x3, 0x9, 0xecc, 0xb, r9}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x7, 0x6, 0x0, 0x63, 0x9, 0x7, 0x772d, r10}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x6}}], 0xa8}], 0x1, 0x42040)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r7)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r11, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000e40)={<r12=>0x0, 0x5}, &(0x7f0000000e80)=0x8)
r13 = socket$caif_seqpacket(0x25, 0x5, 0x2)
ioctl$sock_inet_SIOCSIFNETMASK(r13, 0x891c, &(0x7f0000000ec0)={'wg1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}})
sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3ff}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x31e5}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20040010)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001080)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r14, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x58, r6, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x0, 0x3b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x8004)
ioctl$PPPIOCSMRU1(r8, 0x40047452, &(0x7f00000011c0)=0x1000)
recvmsg(r7, &(0x7f0000001540)={&(0x7f0000001200)=@caif=@dbg, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/202, 0xca}, {&(0x7f0000001380)=""/224, 0xe0}, {&(0x7f0000001480)=""/13, 0xd}], 0x3, &(0x7f0000001500)=""/30, 0x1e}, 0x40000000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000001580)={<r16=>r12, 0x8001}, &(0x7f00000015c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001600)={r16, @in6={{0xa, 0x4e23, 0x101, @empty, 0x9}}, 0x3b96, 0xffffffff, 0x80, 0x3, 0x5}, &(0x7f00000016c0)=0x98)

1.667453855s ago: executing program 7 (id=3612):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x0, 0x5, 0x401}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_ECN={0xffffffffffffffb0}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x104, r4, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x406c33ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b23c87b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x284d4783}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb89}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2534ad20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4eca8f5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24b72b36}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e2350c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x321e0f3c}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x565058b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x121751d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d89}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdc0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ab604a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc10}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dc51c58}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71918c91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3a8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x275043ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaaa4}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd077}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc29}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x104}}, 0x4008000) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000a80)={r6}, &(0x7f0000000180)=0x8) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
getsockopt(r7, 0xb18c, 0x2, &(0x7f0000000040)=""/179, &(0x7f0000000100)=0xb3)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r9=>0x0) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async, rerun: 64)
r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=<r14=>0x0) (async)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r16)
sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r17, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=<r18=>0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r12, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001a00010027bd7001000000000a0080010008fd0b0021000005001b0006000000"], 0x24}}, 0x200048d4)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x588, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x230, 0x358, 0x0, {}, [@common=@srh={{0x30}, {0x8, 0x7f, 0x7, 0x1, 0x4, 0x1, 0x60}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bond\x00', {0x23, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x2, 0x78}, {0x9}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:var_auth_t:s0\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x28}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffffff], 'veth0_virt_wifi\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x21, 0x7d, 0x6, 0x52}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@hl={{0x28}, {0x0, 0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x5, 0xffffffff, 0x978367ab, 'snmp\x00', 'syz0\x00', {0xfffffffffffffeab}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8)

1.356745089s ago: executing program 7 (id=3614):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x4, 0x14e, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40c0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xfcf3}, {&(0x7f00000004c0)=""/146, 0x92}], 0x2, 0x3, 0x1)
pipe(&(0x7f0000000e00)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xcc}}, 0x0)
shutdown(r7, 0x0)
splice(r7, 0x0, r6, 0x0, 0x400000107ffff000, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'rose0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
unshare(0x6020480)
bind$inet6(r12, 0x0, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r10], 0x20}}, 0x0)

1.260825039s ago: executing program 5 (id=3615):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="757a0004000000000000000000"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)

1.139470934s ago: executing program 5 (id=3616):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x21, 0x0)

984.789349ms ago: executing program 5 (id=3617):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c000180080001"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xe4, 0xfffffffe}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0800004a00010000000000000000e4f54af59c6be0ee211408000a0080"], 0x1c}}, 0x4040858)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r5=>0x0, @initdev, @multicast1}, &(0x7f00000004c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x8ab238297ca3960d, 0xf, 0xb, 0x6, 0x5, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0xac0, 0x4}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000000000c2b0d53297ae54fecfc42aa168eb5f2648e60000090a0104000000000000000007000000090001e673797a30000000000c000b400000001caff5004008000a40000000050900020073797a32000000001400150010000100000000ed925934d7b024eba00000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x10000002}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140))
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r9)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, 0x0, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r12 = accept4(r11, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}, 0x1, 0x0, 0x0, 0x40}, 0x20040010)
recvmsg(r12, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000400)=""/11, 0xb}], 0x1}, 0x2000)
readv(r12, &(0x7f0000000b00)=[{&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f00000006c0)=""/177, 0xb1}, {&(0x7f0000000780)=""/65, 0x41}, {&(0x7f0000000800)=""/91, 0x5b}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000000a00)=""/248, 0xf8}], 0x7)

932.024809ms ago: executing program 4 (id=3618):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', <r0=>0x0}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410000204", 0x2e}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad64d86fb4780827ca784a8af3376c2567bfde74dc50e16c81b71450af026459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be66884103af11ff46315cdc9f", 0x407}], 0x2}, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
r4 = socket(0xb, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$ax25(r3, &(0x7f0000000140)="42e0bc0222eb682a188ed3a61e2ad5c43f077179893a653f50a36eadad8487c1c973eae5a6282da23472eac8a59b472c36edaf1130095cbdb5b626cc94a36bc0f975a085ab637a01b020db2d49f408c54761c5a972f0fc159183b74e9873bbf6fe89463ee25c", 0x66, 0x24008010, &(0x7f00000002c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRESOCT=r5, @ANYBLOB="5a84cc01c0d00b1269415ad13ac6bde3a4acd6f7ceccdd09cd7c3e5f6f8586232244f01c", @ANYRES32=0x0], 0x90}}, 0x0)

862.675366ms ago: executing program 5 (id=3619):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fcffffff320000001800018014000200"], 0x2c}}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ec0)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[], 0x26}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x1b9, &(0x7f0000001040)='zKa~s\xa6\x81\xeaD\xc8\xe6\xdb\xday\xf0\x8aM\xa3\xb9\x89\xcd\x90d\xf2\x1d\x06=b\xc0c\x14\xc5\\\x02\'\xed.\x81q\xc4\xa5Vs7U\x9c\xa3\xea\x05\xf5\x0fS\xfb\x18\xe9J\x18H\xbf\x8d\xd0Xv\xc5\xebr@\xa41\x8f\x05\x83\xc0\x1c\xf43\x18\xd9\xe7\xf0\xe2\xfc`\xfd \xe9\x8f\xfc\xc2H=R\xd0\xb8\x12\xc5\xbakm\x9e\xf7O\xa6$\xe1\xd5\'\xb4\xa3a\x1a\xd4\x18\x1b\xc9\x02\xe5\xfbOOm\x9b\b\xda;\tD\x17n\xb5@\xa3g\xe0\xc6xKq\xb0\xbd\xb9\x1d!&l \xf4\xe4|\xa1IX\x95\xaa\x88\x16\x15\xfb\xd4\xb0j\xbb`\x05\xe98*\x03x\xeaH\xdd\x06\xafp\xf1t\xfc\x82\x84J\xbd\xd9x\x9d\x8ci\xb4\xdc\x88\xd9\x00\x18\\m\xaa\x04\x9b\rty\n@a\x84\xcc\x7fw\x15W\xeb\xa0\xc4n\x92\x95\xc1`m]\x1bN\x84C\x80#\x99}\x9e\x84\xb4\x97\x97.\x92G\b\x7f\"\xe1\xaej\x98\x02A\xbc\xa4K\xe2\xef\xf9B\xdd\xd3\xb2\xdf\xbd\x80}VK\xcb\xf33\xd3O \x84\xd7,>\x04fF\xd2Y@f\xb3\xff\xc18\x8d\x96X\x0eO\xff\xba\x00F\xed\xd9\xd7\x15\x85\"6,\x8e\x1f\xa1\xef_\x91\xf8\\\xb0{\xcfT\x0f\xbc\x9e\xbf\xdd\x1e&\x1f\x83m\xd8]\x13\x81sgSq\xf9\xc3\x03\x99\xe1:\xe3Bv\a\xe3\xb8(.)&\xeak\xfc\x1a\xc4\xbf\xc5\x19\xeb\xa3\x1do3\xd6zm\xd8H\xe9\xfb\x9d=B\xab\xbb\xe0+\xaf\x9c2@\b\x8dH\x8a\xee\xd7\x1dv\xaf\xcc\xde\x8f\x8d\x8c\x9a\x04\x9a\x8a\x94v\x9fM\x18q[\x90\"\xb4\x1f\x10\x06Xcb\xc4\xfa\xdd\x1a)\x7f\xf1r\x13\x9d\xb3H\x02^@l\xf3\xcd\xe8\xees\xf2e)\xc3jXkg\x86\x15'}, 0x30) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmsg$unix(r1, &(0x7f0000000900)={&(0x7f00000006c0), 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/255, 0xff}, {0x0}, {&(0x7f0000000980)=""/184, 0xb8}, {&(0x7f0000000a40)=""/156, 0x9c}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000bc0)=""/97, 0x61}], 0x8, &(0x7f0000000dc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

788.738811ms ago: executing program 7 (id=3620):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x4044890)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000b00)="66b88c73b297848e54", 0x9}], 0x1)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x4, 0x4001}, 0xc)
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x0, 0x1c0, 0xd0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffff00, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffff00, 0xff000000], 'ip6gretap0\x00', 'bond0\x00', {0xff}, {}, 0x0, 0xe, 0x4, 0x42}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_hsr\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x25dfdbfd, {0x2, 0x18, 0x0, 0x0, 0x0, 0x4, 0xff, 0x1, 0x2000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=<r10=>r9, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0)
getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000300)={@private2, <r11=>0x0}, &(0x7f0000000800)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000008c0)={0x5c, r9, 0x400, 0x70bd2e, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4ca}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa000}, 0x20000010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRESOCT=r10, @ANYRES16=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94)

786.883258ms ago: executing program 4 (id=3621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000040900010073797a310000000038000480100001800c0001006e6f747261636b00240001800b0001006578746864720000140002800800064000000005080007400000000b0900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async, rerun: 32)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x18, 0x2, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4880}, 0x0) (rerun: 32)

708.75555ms ago: executing program 2 (id=3622):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1)
syz_init_net_socket$ax25(0x3, 0x3, 0xc4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {0x4f}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r5}, 0x18)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}})

674.177293ms ago: executing program 5 (id=3623):
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x50bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

620.779199ms ago: executing program 4 (id=3624):
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x410040, 0x0)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x7fffffff, 0x4, 0xd}, &(0x7f0000000380)=0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @remote}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000070a050000000000000000000a0040010900010073797a31000000000900020073797a32000000000c0003"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="850000006f00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
socket$can_j1939(0x1d, 0x2, 0x7)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) (async)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0xc6e9f000)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0xffffe000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r5, 0x2000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

620.176876ms ago: executing program 2 (id=3625):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='nilfs2_collection_stage_transition\x00'}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)='%ps    \x00'}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000080)=ANY=[], 0x141)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf1ecd033ab9e1916, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="23002dbd7000fbdbdf252800000006000400feff00000a0001007770616e31000000060006000200000005002b00"], 0x38}}, 0x20000000)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0xb47, r7}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x20, 0x3, 0x2, 0x8, 0x40202, 0xffffffffffffffff, 0xa1b7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x77f}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4f}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x8, r0}, 0x18)

413.554757ms ago: executing program 4 (id=3626):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030212590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095d6"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000000003000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa900000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r3, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x8eb2e000f2c28467, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e29}, 0x94)

240.6338ms ago: executing program 2 (id=3627):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x3)
connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa)
close(r1)

124.835489ms ago: executing program 4 (id=3628):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x2b, 0x0, @val=@netfilter={0xa, 0x0, 0x8, 0x1}}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000440))
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

123.908062ms ago: executing program 2 (id=3629):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="07002abd70000000000002d4440eb10000000c0001800500020006000000"], 0x20}}, 0x0)

74.749033ms ago: executing program 2 (id=3630):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030c0000000000000000020000000900010073797a310000000040000000030a01020000000000000000020000000900030073797a320000000014000480080002400000000408000140000000020900010073797a3100000000140000001100010000000000000000000500000a3e3d883c211f2f3f8a98d4179509e9d510e56a52d719ceaf0036fb3563dc8411f2e6107c3ade781822634aef5e9dfb30ffa805815b792205ef2d9f41d9a1b786b77db0b75c1b767d91c8e6e5e25ba4bd9483642950e348dd800a2280395ac8d65ae807b3e6eeb46b8f3dd0e9de52454eda745c040c972bc5cbf9fd5db4811f827dcaf72afe1cb368160a452ecb89dbdf50c96b1dc184b348a829dae610891f0563cb70acf59e589d83720d8e4cc1966052ea701e2f"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r8, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r8, 0x80)
accept$netrom(r8, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x1b, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d2ba7", 0x2a}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x7}, {0x1, 0xe}, {0x2, 0xffe9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x402c080)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x57, 0x7e}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000040)

0s ago: executing program 4 (id=3631):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800000000000}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)

kernel console output (not intermixed with test programs):

sim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.825132][T10207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.837697][T10207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.847879][T10207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.884965][   T53] Bluetooth: hci8: command tx timeout
[  364.048352][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.056910][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.087175][T16930] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  364.102065][T16930] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  364.114430][   T53] Bluetooth: hci9: command tx timeout
[  364.118989][T16930] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  364.133067][T16930] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  364.140628][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.148748][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.341463][T16930] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.382972][T16991] wg1 speed is unknown, defaulting to 1000
[  364.416016][T16930] 8021q: adding VLAN 0 to HW filter on device team0
[  364.440067][T10207] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.447553][T10207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.509855][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.517059][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.602011][T16995] wg1 speed is unknown, defaulting to 1000
[  364.864687][ T1149] net_ratelimit: 8 callbacks suppressed
[  364.864705][ T1149] bond4: (slave bridge3): failed to get link speed/duplex
[  364.923183][T16930] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.987782][T16930] veth0_vlan: entered promiscuous mode
[  365.005571][T16930] veth1_vlan: entered promiscuous mode
[  365.045017][T16930] veth0_macvtap: entered promiscuous mode
[  365.058750][T16930] veth1_macvtap: entered promiscuous mode
[  365.075103][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  365.099854][T16930] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.117695][T16930] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.138809][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.162503][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.173369][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.184978][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.235876][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  365.286518][T10207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.303936][T10207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.339195][ T6391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.347973][ T6391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.374414][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  365.443111][T17014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.495495][ T1149] bond4: (slave bridge3): failed to get link speed/duplex
[  365.651361][ T1149] bond4: (slave bridge3): failed to get link speed/duplex
[  365.779655][ T1149] bond4: (slave bridge3): failed to get link speed/duplex
[  365.955025][   T53] Bluetooth: hci8: command tx timeout
[  365.974329][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  366.094737][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  366.127687][T17043] bridge0: port 3(vlan2) entered blocking state
[  366.135981][T17043] bridge0: port 3(vlan2) entered disabled state
[  366.142573][T17043] vlan2: entered allmulticast mode
[  366.150346][T17043] bridge0: entered allmulticast mode
[  366.167864][T17043] vlan2: left allmulticast mode
[  366.172912][T17043] bridge0: left allmulticast mode
[  366.200575][   T53] Bluetooth: hci9: command tx timeout
[  366.415321][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  366.429236][T17050] netlink: 'syz.1.2849': attribute type 3 has an invalid length.
[  366.483165][T17046] wg1 speed is unknown, defaulting to 1000
[  366.699719][T17064] netlink: 'syz.1.2853': attribute type 21 has an invalid length.
[  366.822701][T17072] __nla_validate_parse: 8 callbacks suppressed
[  366.822718][T17072] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2857'.
[  366.900085][T17076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2858'.
[  367.008312][T17079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  367.021580][T17079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.035568][T17079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  367.556733][T17087] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20003
[  368.046076][   T53] Bluetooth: hci8: command tx timeout
[  368.283930][   T53] Bluetooth: hci9: command tx timeout
[  368.661167][T17079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  368.672541][T17079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.683531][T17079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  368.774686][T17079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  368.785234][T17079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.796304][T17079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  368.880693][T17079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  368.891221][T17079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.902829][T17079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  369.000987][   T68] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  369.009989][   T68] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  369.018457][   T68] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  369.034469][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'.
[  369.039749][ T6391] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  369.043560][T17105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2869'.
[  369.051833][ T6391] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  369.051863][ T6391] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  369.065089][ T6391] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  369.095272][ T6391] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  369.103389][ T6391] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  369.117369][ T6391] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  369.126017][ T6391] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  369.134535][ T6391] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  369.148881][T17105] netlink: 'syz.1.2869': attribute type 13 has an invalid length.
[  369.253143][T17105] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.260856][T17105] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.362873][T17105] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.377382][T17105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.525826][T10207] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.539487][T10207] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.548588][T10207] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.559592][T10207] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  369.657937][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'.
[  369.719505][T17116] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  369.731193][T17116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2872'.
[  369.841040][T17124] wg1 speed is unknown, defaulting to 1000
[  369.923419][T17130] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.2875'.
[  369.943910][ T6386] net_ratelimit: 12 callbacks suppressed
[  369.943928][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  370.064216][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  370.247697][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  370.355268][   T53] Bluetooth: hci9: command tx timeout
[  370.364794][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  370.474218][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  370.567270][T17142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2877'.
[  370.583793][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  370.705255][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  370.814069][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  370.925502][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  370.948397][T17156] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2882'.
[  371.013043][T17158] wg1 speed is unknown, defaulting to 1000
[  371.074337][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  371.295974][T17169] syz_tun: entered allmulticast mode
[  371.303305][T17168] syz_tun: left allmulticast mode
[  371.471932][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2887'.
[  374.964211][T10207] net_ratelimit: 33 callbacks suppressed
[  374.964231][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  375.084358][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  375.194194][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  375.304262][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  375.414003][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  375.534382][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  375.644171][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  375.753958][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  375.864127][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  375.974046][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  377.414870][T17188] netlink: 'syz.0.2893': attribute type 10 has an invalid length.
[  377.441069][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'.
[  377.466307][T17193] netlink: 'syz.0.2893': attribute type 10 has an invalid length.
[  377.470006][T17188] team0: Failed to send options change via netlink (err -105)
[  377.485842][T17188] team0: Port device dummy0 added
[  377.497892][T17192] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2894'.
[  377.507647][T17193] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  377.551650][T17193] team0: Failed to send options change via netlink (err -105)
[  377.592334][T17193] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  377.623535][T17193] team0: Port device dummy0 removed
[  377.646600][T17193] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  377.776159][ T5837] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  377.777150][T17197] wg1 speed is unknown, defaulting to 1000
[  377.792092][ T5837] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  377.802447][ T5837] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  377.811048][ T5837] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  377.819247][ T5837] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  377.932627][T17200] netlink: 'syz.1.2895': attribute type 3 has an invalid length.
[  377.970449][T17200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2895'.
[  378.508243][T17201] wg1 speed is unknown, defaulting to 1000
[  378.522008][T17207] wg1 speed is unknown, defaulting to 1000
[  378.635657][T17212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2897'.
[  378.642367][T17214] netlink: 'syz.9.2898': attribute type 1 has an invalid length.
[  378.685279][T17214] bond3: entered promiscuous mode
[  378.690898][T17214] 8021q: adding VLAN 0 to HW filter on device bond3
[  378.733472][T17214] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  378.747020][T17214] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  378.759225][T17214] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  378.855489][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2899'.
[  379.062220][T17201] chnl_net:caif_netlink_parms(): no params data found
[  379.179763][T17232] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2901'.
[  379.207598][T17201] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.216243][T17201] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.223533][T17201] bridge_slave_0: entered allmulticast mode
[  379.231319][T17201] bridge_slave_0: entered promiscuous mode
[  379.241202][T17201] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.249690][T17201] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.257103][T17201] bridge_slave_1: entered allmulticast mode
[  379.266622][T17201] bridge_slave_1: entered promiscuous mode
[  379.327847][T17201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.343585][T17201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.402984][T17201] team0: Port device team_slave_0 added
[  379.428845][T17201] team0: Port device team_slave_1 added
[  379.545271][T17201] batman_adv: batadv0: Adding interface: batadv_slave_0
[  379.565699][T17201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  379.624442][T17201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  379.648713][T17201] batman_adv: batadv0: Adding interface: batadv_slave_1
[  379.667070][T17201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  379.728718][T17201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  379.765819][T17243] netlink: 'syz.1.2906': attribute type 13 has an invalid length.
[  379.795761][T17243] netlink: 'syz.1.2906': attribute type 17 has an invalid length.
[  379.827756][T17243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2906'.
[  379.840111][ T5837] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  379.851624][ T5837] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  379.860737][ T5837] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  379.870360][T17244] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2906'.
[  379.880699][ T5837] Bluetooth: hci10: command tx timeout
[  379.904961][ T5837] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  379.915884][ T5837] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  380.025447][T17201] hsr_slave_0: entered promiscuous mode
[  380.039824][T17201] hsr_slave_1: entered promiscuous mode
[  380.057637][T17201] debugfs: 'hsr0' already exists in 'hsr'
[  380.067831][T17201] Cannot create hsr debugfs directory
[  380.192289][T17252] wg1 speed is unknown, defaulting to 1000
[  380.245043][T17246] wg1 speed is unknown, defaulting to 1000
[  380.466737][T17264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2912'.
[  380.530520][T17264] team_slave_1: Caught tx_queue_len zero misconfig
[  380.582676][T17267] macsec1: entered promiscuous mode
[  380.590019][T17267] macsec1: entered allmulticast mode
[  380.671383][T17201] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.682762][T17201] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.813044][T17201] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.823474][T17201] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.919509][T17201] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.930975][T17201] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.955365][ T6391] net_ratelimit: 19 callbacks suppressed
[  380.955383][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  380.989351][T17246] chnl_net:caif_netlink_parms(): no params data found
[  381.016748][T17201] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  381.026673][T17201] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.135398][T17302] netlink: 212360 bytes leftover after parsing attributes in process `syz.9.2921'.
[  381.230418][T17246] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.241514][T17246] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.250783][T17246] bridge_slave_0: entered allmulticast mode
[  381.258463][T17246] bridge_slave_0: entered promiscuous mode
[  381.280969][T17246] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.289499][T17246] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.297658][T17246] bridge_slave_1: entered allmulticast mode
[  381.306717][T17246] bridge_slave_1: entered promiscuous mode
[  381.398724][T17246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.408634][T17307] wg1 speed is unknown, defaulting to 1000
[  381.412436][T17246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.483157][T17201] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  381.521667][T17310] syzkaller0: entered promiscuous mode
[  381.528260][T17310] syzkaller0: entered allmulticast mode
[  381.550624][T17201] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  381.578406][T17246] team0: Port device team_slave_0 added
[  381.584840][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  381.598003][T17201] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  381.612060][T17246] team0: Port device team_slave_1 added
[  381.651610][T17310] tipc: Started in network mode
[  381.657316][T17310] tipc: Node identity daedc6fb2b7, cluster identity 4711
[  381.668091][T17310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.674892][T17201] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  381.701293][T17246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.708565][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.735556][T17246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.754340][T17246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.761370][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.788075][T17246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.806774][T17309] tipc: Resetting bearer <eth:syzkaller0>
[  381.857602][T17309] tipc: Disabling bearer <eth:syzkaller0>
[  381.948293][T17325] syzkaller1: entered promiscuous mode
[  381.954520][ T5837] Bluetooth: hci11: command tx timeout
[  381.960951][ T5837] Bluetooth: hci10: command tx timeout
[  381.963761][T17325] syzkaller1: entered allmulticast mode
[  381.991828][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  382.145937][T17332] netlink: 'syz.1.2928': attribute type 9 has an invalid length.
[  382.168643][T17246] hsr_slave_0: entered promiscuous mode
[  382.176944][T17246] hsr_slave_1: entered promiscuous mode
[  382.184725][T17246] debugfs: 'hsr0' already exists in 'hsr'
[  382.190573][T17246] Cannot create hsr debugfs directory
[  382.580116][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  382.729754][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  382.950389][T17201] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.071294][T17246] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.108235][T17246] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  383.163276][T17201] 8021q: adding VLAN 0 to HW filter on device team0
[  383.195262][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.202685][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.228804][T17347] __nla_validate_parse: 2 callbacks suppressed
[  383.228821][T17347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2931'.
[  383.284571][T17246] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.302150][T17246] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  383.354403][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.361557][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.458321][T17246] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.489152][T17246] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  383.638625][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  383.749793][T17246] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.785320][T17365] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2936'.
[  383.798858][T17246] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  383.884966][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  383.994323][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  384.038147][ T5837] Bluetooth: hci10: command tx timeout
[  384.044318][   T53] Bluetooth: hci11: command tx timeout
[  384.116724][T17381] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2939'.
[  384.126781][ T1149] bond4: (slave bridge3): failed to get link speed/duplex
[  384.162677][T17201] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.167078][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2939'.
[  384.220464][T17381] netlink: 31 bytes leftover after parsing attributes in process `syz.9.2939'.
[  384.229984][T17246] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  384.231055][T17384] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.2940'.
[  384.247240][T17381] netlink: 'syz.9.2939': attribute type 3 has an invalid length.
[  384.264452][T17384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  384.267487][T17246] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  384.292925][T17386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2940'.
[  384.304368][T17381] netlink: 'syz.9.2939': attribute type 2 has an invalid length.
[  384.312116][T17381] netlink: 31 bytes leftover after parsing attributes in process `syz.9.2939'.
[  384.338016][T17246] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  384.370705][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  384.393704][T17381] netlink: 'syz.9.2939': attribute type 2 has an invalid length.
[  384.402006][T17246] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  384.542845][T17397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2941'.
[  384.752209][T17246] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.822316][T17246] 8021q: adding VLAN 0 to HW filter on device team0
[  384.859302][T10205] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.866496][T10205] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.906954][T17201] veth0_vlan: entered promiscuous mode
[  384.947301][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.954503][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  385.061823][T17201] veth1_vlan: entered promiscuous mode
[  385.096845][T17246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  385.226045][T17201] veth0_macvtap: entered promiscuous mode
[  385.241838][T17201] veth1_macvtap: entered promiscuous mode
[  385.249636][T17413] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2945'.
[  385.266885][T17201] batman_adv: batadv0: Interface activated: batadv_slave_0
[  385.280201][T17201] batman_adv: batadv0: Interface activated: batadv_slave_1
[  385.351121][T10205] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.373016][ T1149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.387930][ T1149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.432999][ T1149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.528055][T17420] netlink: 'syz.9.2946': attribute type 4 has an invalid length.
[  385.546789][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.567884][T17420] netlink: 'syz.9.2946': attribute type 4 has an invalid length.
[  385.568695][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.582540][T17246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.653169][ T6391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.662102][ T6391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.929131][T17428] wg1 speed is unknown, defaulting to 1000
[  386.075391][T10205] net_ratelimit: 10 callbacks suppressed
[  386.075412][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  386.114383][ T5837] Bluetooth: hci10: command tx timeout
[  386.119059][   T53] Bluetooth: hci11: command tx timeout
[  386.254444][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  386.363738][ T1149] bond4: (slave bridge3): failed to get link speed/duplex
[  386.416838][T17246] veth0_vlan: entered promiscuous mode
[  386.466981][T17246] veth1_vlan: entered promiscuous mode
[  386.562761][T17246] veth0_macvtap: entered promiscuous mode
[  386.617099][T17246] veth1_macvtap: entered promiscuous mode
[  386.658701][T17246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  386.690416][T17246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  386.736479][ T6391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.767092][ T6391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.784898][ T6391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.833303][ T6391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.902593][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  387.036633][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  387.167776][T17454] netlink: 'syz.9.2952': attribute type 1 has an invalid length.
[  387.180391][T10205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.193973][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  387.211815][T10205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.279547][T17454] 8021q: adding VLAN 0 to HW filter on device bond4
[  387.334329][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  387.525899][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  387.575065][T17458] bond4: option lacp_rate: unable to set because the bond device is up
[  387.668114][T10205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.704208][T10205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.756571][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  387.897770][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  388.056394][T17470] : renamed from veth0_to_bond (while UP)
[  388.086779][T17474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.175371][T17476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.187544][T17474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.195000][   T53] Bluetooth: hci11: command tx timeout
[  388.263512][T17483] __nla_validate_parse: 5 callbacks suppressed
[  388.263529][T17483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'.
[  388.427353][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2902'.
[  388.645858][T17497] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2960'.
[  388.659281][T17495] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2960'.
[  388.807419][T17499] wg1 speed is unknown, defaulting to 1000
[  388.842084][T17503] tipc: Started in network mode
[  388.854127][T17503] tipc: Node identity 2e770b3390c5, cluster identity 4711
[  388.884418][T17503] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.938448][T17503] syzkaller0: entered promiscuous mode
[  388.946001][T17503] syzkaller0: entered allmulticast mode
[  388.963138][T17507] netlink: 'syz.4.2963': attribute type 13 has an invalid length.
[  389.265527][T17507] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.273282][T17507] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.530539][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2966'.
[  389.831148][T17507] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  389.848632][T17507] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  389.884235][T13458] tipc: Node number set to 3199339315
[  390.030788][T17541] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2968'.
[  390.122336][T17502] vlan2: entered allmulticast mode
[  390.160744][T17545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2968'.
[  390.171779][T17500] tipc: Resetting bearer <eth:syzkaller0>
[  390.189084][T17500] tipc: Disabling bearer <eth:syzkaller0>
[  390.196951][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2969'.
[  390.210345][T17530] batadv_slave_0: entered promiscuous mode
[  390.217064][T17533] batadv_slave_0: left promiscuous mode
[  390.226396][ T6386] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.237346][ T6386] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.257451][T17546] bridge_slave_1: left allmulticast mode
[  390.263129][T17546] bridge_slave_1: left promiscuous mode
[  390.270454][T17546] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.288815][T17546] bridge_slave_0: left allmulticast mode
[  390.294982][T17546] bridge_slave_0: left promiscuous mode
[  390.300781][T17546] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.411382][ T6386] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.427849][ T6386] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.488021][T17549] bond1: option arp_validate: invalid value (18446744073491447809)
[  390.506732][T17549] bond1 (unregistering): Released all slaves
[  390.532038][T17532] wg1 speed is unknown, defaulting to 1000
[  391.155841][ T6386] net_ratelimit: 14 callbacks suppressed
[  391.155862][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  391.241773][T17585] IPVS: Scheduler module ip_vs_ not found
[  391.254905][T17585] IPVS: length: 24 != 12792
[  391.294285][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  391.413874][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  391.524883][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  391.634834][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  391.642520][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2984'.
[  391.699218][T17608] ªªªªªª: renamed from wg2
[  391.884338][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  391.934878][T17613] netlink: 'syz.6.2990': attribute type 1 has an invalid length.
[  391.947166][T17613] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2990'.
[  391.994221][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  392.115261][T17623] veth3: entered promiscuous mode
[  392.240777][T17630] erspan0: entered allmulticast mode
[  392.247334][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  392.365233][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  392.474304][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  392.620973][T17639] netlink: 'syz.1.2997': attribute type 5 has an invalid length.
[  392.650491][T17643] FAULT_INJECTION: forcing a failure.
[  392.650491][T17643] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  392.699565][T17643] CPU: 1 UID: 0 PID: 17643 Comm: syz.4.2998 Not tainted syzkaller #0 PREEMPT(full) 
[  392.699591][T17643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  392.699606][T17643] Call Trace:
[  392.699613][T17643]  <TASK>
[  392.699620][T17643]  dump_stack_lvl+0x189/0x250
[  392.699648][T17643]  ? __pfx____ratelimit+0x10/0x10
[  392.699672][T17643]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.699694][T17643]  ? __pfx__printk+0x10/0x10
[  392.699711][T17643]  ? __might_fault+0xb0/0x130
[  392.699744][T17643]  should_fail_ex+0x414/0x560
[  392.699772][T17643]  _copy_from_iter+0x1de/0x1790
[  392.699798][T17643]  ? rcu_is_watching+0x15/0xb0
[  392.699821][T17643]  ? kmalloc_reserve+0xbd/0x290
[  392.699839][T17643]  ? __pfx__copy_from_iter+0x10/0x10
[  392.699861][T17643]  ? __build_skb_around+0x262/0x3f0
[  392.699881][T17643]  ? netlink_sendmsg+0x642/0xb30
[  392.699897][T17643]  ? skb_put+0x11b/0x210
[  392.699926][T17643]  netlink_sendmsg+0x6b2/0xb30
[  392.699954][T17643]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.699976][T17643]  ? aa_sock_msg_perm+0xf1/0x1d0
[  392.700002][T17643]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  392.700019][T17643]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.700037][T17643]  __sock_sendmsg+0x21c/0x270
[  392.700063][T17643]  ____sys_sendmsg+0x505/0x830
[  392.700088][T17643]  ? __pfx_____sys_sendmsg+0x10/0x10
[  392.700117][T17643]  ? import_iovec+0x74/0xa0
[  392.700141][T17643]  ___sys_sendmsg+0x21f/0x2a0
[  392.700162][T17643]  ? __pfx____sys_sendmsg+0x10/0x10
[  392.700218][T17643]  ? __fget_files+0x2a/0x420
[  392.700234][T17643]  ? __fget_files+0x3a0/0x420
[  392.700260][T17643]  __x64_sys_sendmsg+0x19b/0x260
[  392.700283][T17643]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  392.700311][T17643]  ? __pfx_ksys_write+0x10/0x10
[  392.700339][T17643]  ? do_syscall_64+0xbe/0xfa0
[  392.700365][T17643]  do_syscall_64+0xfa/0xfa0
[  392.700386][T17643]  ? lockdep_hardirqs_on+0x9c/0x150
[  392.700409][T17643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.700427][T17643]  ? clear_bhb_loop+0x60/0xb0
[  392.700447][T17643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.700469][T17643] RIP: 0033:0x7f6e52b8f6c9
[  392.700485][T17643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.700499][T17643] RSP: 002b:00007f6e53a20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  392.700519][T17643] RAX: ffffffffffffffda RBX: 00007f6e52de5fa0 RCX: 00007f6e52b8f6c9
[  392.700532][T17643] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  392.700543][T17643] RBP: 00007f6e53a20090 R08: 0000000000000000 R09: 0000000000000000
[  392.700554][T17643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  392.700565][T17643] R13: 00007f6e52de6038 R14: 00007f6e52de5fa0 R15: 00007ffe42c842e8
[  392.700599][T17643]  </TASK>
[  393.128366][T17649] sch_fq: defrate 2 ignored.
[  393.491738][   T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  393.529588][T17660] batadv1: entered promiscuous mode
[  393.625771][T17675] __nla_validate_parse: 5 callbacks suppressed
[  393.625788][T17675] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3002'.
[  393.636450][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3005'.
[  393.650867][T17672] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3005'.
[  393.788334][T17675] wg1 speed is unknown, defaulting to 1000
[  393.964511][T17692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3009'.
[  393.979663][T17685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3009'.
[  394.271389][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'.
[  394.346746][T17706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3013'.
[  394.383402][T17706] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1
[  394.395124][T17706] erspan1: entered allmulticast mode
[  394.403094][T17716] netlink: 'syz.6.3016': attribute type 5 has an invalid length.
[  394.630596][T17729] batadv_slave_0: entered promiscuous mode
[  394.674037][   T30] audit: type=1804 audit(1762619454.750:2): pid=17729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3020" name="x000000000000001000000000000000000000020" dev="tmpfs" ino=773 res=1 errno=0
[  394.727647][   T30] audit: type=1800 audit(1762619454.780:3): pid=17729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3020" name="x000000000000001000000000000000000000020" dev="tmpfs" ino=773 res=0 errno=0
[  395.295484][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3034'.
[  395.305483][T17764] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3034'.
[  395.333416][T17764] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1
[  395.346108][T17764] erspan1: entered allmulticast mode
[  395.620940][T17773] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  395.870575][T17773] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3037'.
[  395.931159][T17782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.940171][T17782] syzkaller0: entered promiscuous mode
[  395.946981][T17782] syzkaller0: entered allmulticast mode
[  396.050609][T17787] FAULT_INJECTION: forcing a failure.
[  396.050609][T17787] name failslab, interval 1, probability 0, space 0, times 0
[  396.074467][T17787] CPU: 0 UID: 0 PID: 17787 Comm: syz.1.3041 Not tainted syzkaller #0 PREEMPT(full) 
[  396.074493][T17787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  396.074504][T17787] Call Trace:
[  396.074512][T17787]  <TASK>
[  396.074519][T17787]  dump_stack_lvl+0x189/0x250
[  396.074555][T17787]  ? __pfx____ratelimit+0x10/0x10
[  396.074579][T17787]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.074602][T17787]  ? __pfx__printk+0x10/0x10
[  396.074626][T17787]  ? __pfx___might_resched+0x10/0x10
[  396.074644][T17787]  ? fs_reclaim_acquire+0x7d/0x100
[  396.074673][T17787]  should_fail_ex+0x414/0x560
[  396.074704][T17787]  should_failslab+0xa8/0x100
[  396.074724][T17787]  __kvmalloc_node_noprof+0x158/0x910
[  396.074750][T17787]  ? alloc_netdev_mqs+0xa6/0x11b0
[  396.074780][T17787]  alloc_netdev_mqs+0xa6/0x11b0
[  396.074800][T17787]  ? __pfx_erspan_setup+0x10/0x10
[  396.074831][T17787]  rtnl_create_link+0x31f/0xd10
[  396.074859][T17787]  rtnl_newlink_create+0x25c/0xb00
[  396.074893][T17787]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  396.074916][T17787]  ? __pfx___mutex_lock+0x10/0x10
[  396.074943][T17787]  ? ns_capable+0x8a/0xf0
[  396.074965][T17787]  rtnl_newlink+0x16e4/0x1c80
[  396.075001][T17787]  ? __pfx_rtnl_newlink+0x10/0x10
[  396.075021][T17787]  ? is_bpf_text_address+0x26/0x2b0
[  396.075046][T17787]  ? is_bpf_text_address+0x292/0x2b0
[  396.075064][T17787]  ? is_bpf_text_address+0x26/0x2b0
[  396.075087][T17787]  ? __lock_acquire+0xab9/0xd20
[  396.075118][T17787]  ? __lock_acquire+0xab9/0xd20
[  396.075157][T17787]  ? is_bpf_text_address+0x26/0x2b0
[  396.075180][T17787]  ? is_bpf_text_address+0x292/0x2b0
[  396.075197][T17787]  ? is_bpf_text_address+0x26/0x2b0
[  396.075229][T17787]  ? __lock_acquire+0xab9/0xd20
[  396.075273][T17787]  ? __pfx_rtnl_newlink+0x10/0x10
[  396.075289][T17787]  rtnetlink_rcv_msg+0x7cf/0xb70
[  396.075305][T17787]  ? __lock_acquire+0xab9/0xd20
[  396.075324][T17787]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  396.075340][T17787]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  396.075375][T17787]  netlink_rcv_skb+0x208/0x470
[  396.075391][T17787]  ? __lock_acquire+0xab9/0xd20
[  396.075408][T17787]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  396.075426][T17787]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  396.075458][T17787]  ? netlink_deliver_tap+0x2e/0x1b0
[  396.075485][T17787]  netlink_unicast+0x82f/0x9e0
[  396.075519][T17787]  ? __pfx_netlink_unicast+0x10/0x10
[  396.075552][T17787]  ? netlink_sendmsg+0x642/0xb30
[  396.075568][T17787]  ? skb_put+0x11b/0x210
[  396.075590][T17787]  netlink_sendmsg+0x805/0xb30
[  396.075619][T17787]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.075641][T17787]  ? aa_sock_msg_perm+0xf1/0x1d0
[  396.075668][T17787]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  396.075685][T17787]  ? __pfx_netlink_sendmsg+0x10/0x10
[  396.075705][T17787]  __sock_sendmsg+0x21c/0x270
[  396.075732][T17787]  ____sys_sendmsg+0x505/0x830
[  396.075759][T17787]  ? __pfx_____sys_sendmsg+0x10/0x10
[  396.075788][T17787]  ? import_iovec+0x74/0xa0
[  396.075813][T17787]  ___sys_sendmsg+0x21f/0x2a0
[  396.075836][T17787]  ? __pfx____sys_sendmsg+0x10/0x10
[  396.075896][T17787]  ? __fget_files+0x2a/0x420
[  396.075911][T17787]  ? __fget_files+0x3a0/0x420
[  396.075940][T17787]  __x64_sys_sendmsg+0x19b/0x260
[  396.075962][T17787]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  396.075993][T17787]  ? __pfx_ksys_write+0x10/0x10
[  396.076019][T17787]  ? do_syscall_64+0xbe/0xfa0
[  396.076047][T17787]  do_syscall_64+0xfa/0xfa0
[  396.076068][T17787]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.076091][T17787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.076108][T17787]  ? clear_bhb_loop+0x60/0xb0
[  396.076129][T17787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.076146][T17787] RIP: 0033:0x7f51c558f6c9
[  396.076161][T17787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.076175][T17787] RSP: 002b:00007f51c6437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.076195][T17787] RAX: ffffffffffffffda RBX: 00007f51c57e5fa0 RCX: 00007f51c558f6c9
[  396.076208][T17787] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  396.076219][T17787] RBP: 00007f51c6437090 R08: 0000000000000000 R09: 0000000000000000
[  396.076230][T17787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  396.076238][T17787] R13: 00007f51c57e6038 R14: 00007f51c57e5fa0 R15: 00007fff6bc84fe8
[  396.076271][T17787]  </TASK>
[  396.520789][T10209] net_ratelimit: 29 callbacks suppressed
[  396.520808][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  396.631511][T17781] tipc: Resetting bearer <eth:syzkaller0>
[  396.679320][T17781] tipc: Disabling bearer <eth:syzkaller0>
[  396.734580][T17784] bond1: option arp_validate: invalid value (18446744073491447809)
[  396.747842][T17784] bond1 (unregistering): Released all slaves
[  396.825840][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  396.858328][T17799] syz_tun: entered allmulticast mode
[  396.877138][T17801] siw: device registration error -23
[  396.938512][T17804] erspan1: entered allmulticast mode
[  396.955122][T17795] syz_tun: left allmulticast mode
[  396.974741][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  397.104978][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  397.217186][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  397.248983][T17826] FAULT_INJECTION: forcing a failure.
[  397.248983][T17826] name failslab, interval 1, probability 0, space 0, times 0
[  397.266059][T17826] CPU: 1 UID: 0 PID: 17826 Comm: syz.1.3052 Not tainted syzkaller #0 PREEMPT(full) 
[  397.266086][T17826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  397.266096][T17826] Call Trace:
[  397.266104][T17826]  <TASK>
[  397.266112][T17826]  dump_stack_lvl+0x189/0x250
[  397.266141][T17826]  ? __pfx____ratelimit+0x10/0x10
[  397.266166][T17826]  ? __pfx_dump_stack_lvl+0x10/0x10
[  397.266188][T17826]  ? __pfx__printk+0x10/0x10
[  397.266212][T17826]  ? __pfx___might_resched+0x10/0x10
[  397.266237][T17826]  should_fail_ex+0x414/0x560
[  397.266268][T17826]  should_failslab+0xa8/0x100
[  397.266288][T17826]  kmem_cache_alloc_lru_noprof+0x79/0x6d0
[  397.266312][T17826]  ? __d_alloc+0x36/0x7a0
[  397.266338][T17826]  __d_alloc+0x36/0x7a0
[  397.266363][T17826]  d_alloc_parallel+0xe1/0x1610
[  397.266384][T17826]  ? __lock_acquire+0xab9/0xd20
[  397.266414][T17826]  ? __lock_acquire+0xab9/0xd20
[  397.266437][T17826]  ? __pfx_d_alloc_parallel+0x10/0x10
[  397.266473][T17826]  ? __raw_spin_lock_init+0x45/0x100
[  397.266497][T17826]  ? __init_waitqueue_head+0xa9/0x150
[  397.266525][T17826]  __lookup_slow+0x116/0x3d0
[  397.266548][T17826]  ? __pfx___lookup_slow+0x10/0x10
[  397.266580][T17826]  ? d_lookup+0x8a/0xa0
[  397.266600][T17826]  ? lookup_noperm+0x112/0x220
[  397.266624][T17826]  simple_start_creating+0xfd/0x1e0
[  397.266643][T17826]  ? __pfx_simple_start_creating+0x10/0x10
[  397.266674][T17826]  debugfs_start_creating+0x10f/0x180
[  397.266701][T17826]  __debugfs_create_file+0x79/0x4f0
[  397.266731][T17826]  debugfs_create_file_full+0x3f/0x60
[  397.266759][T17826]  ref_tracker_dir_debugfs+0x14e/0x270
[  397.266777][T17826]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  397.266826][T17826]  ? trace_kmalloc+0x1f/0xd0
[  397.266845][T17826]  ? __kvmalloc_node_noprof+0x5ed/0x910
[  397.266875][T17826]  ? __raw_spin_lock_init+0x45/0x100
[  397.266900][T17826]  alloc_netdev_mqs+0x272/0x11b0
[  397.266921][T17826]  ? __pfx_erspan_setup+0x10/0x10
[  397.266952][T17826]  rtnl_create_link+0x31f/0xd10
[  397.266985][T17826]  rtnl_newlink_create+0x25c/0xb00
[  397.267010][T17826]  ? __lock_acquire+0xab9/0xd20
[  397.267032][T17826]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  397.267056][T17826]  ? __pfx___mutex_lock+0x10/0x10
[  397.267084][T17826]  ? ns_capable+0x8a/0xf0
[  397.267106][T17826]  rtnl_newlink+0x16e4/0x1c80
[  397.267139][T17826]  ? __pfx_rtnl_newlink+0x10/0x10
[  397.267162][T17826]  ? is_bpf_text_address+0x26/0x2b0
[  397.267186][T17826]  ? is_bpf_text_address+0x292/0x2b0
[  397.267203][T17826]  ? is_bpf_text_address+0x26/0x2b0
[  397.267227][T17826]  ? __lock_acquire+0xab9/0xd20
[  397.267258][T17826]  ? __lock_acquire+0xab9/0xd20
[  397.267298][T17826]  ? is_bpf_text_address+0x26/0x2b0
[  397.267322][T17826]  ? is_bpf_text_address+0x292/0x2b0
[  397.267339][T17826]  ? is_bpf_text_address+0x26/0x2b0
[  397.267367][T17826]  ? __lock_acquire+0xab9/0xd20
[  397.267412][T17826]  ? __pfx_rtnl_newlink+0x10/0x10
[  397.267429][T17826]  rtnetlink_rcv_msg+0x7cf/0xb70
[  397.267445][T17826]  ? __lock_acquire+0xab9/0xd20
[  397.267471][T17826]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  397.267488][T17826]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  397.267524][T17826]  netlink_rcv_skb+0x208/0x470
[  397.267541][T17826]  ? __lock_acquire+0xab9/0xd20
[  397.267558][T17826]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  397.267577][T17826]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  397.267609][T17826]  ? netlink_deliver_tap+0x2e/0x1b0
[  397.267637][T17826]  netlink_unicast+0x82f/0x9e0
[  397.267672][T17826]  ? __pfx_netlink_unicast+0x10/0x10
[  397.267698][T17826]  ? netlink_sendmsg+0x642/0xb30
[  397.267714][T17826]  ? skb_put+0x11b/0x210
[  397.267737][T17826]  netlink_sendmsg+0x805/0xb30
[  397.267766][T17826]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.267789][T17826]  ? aa_sock_msg_perm+0xf1/0x1d0
[  397.267815][T17826]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  397.267831][T17826]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.267851][T17826]  __sock_sendmsg+0x21c/0x270
[  397.267877][T17826]  ____sys_sendmsg+0x505/0x830
[  397.267903][T17826]  ? __pfx_____sys_sendmsg+0x10/0x10
[  397.267933][T17826]  ? import_iovec+0x74/0xa0
[  397.267958][T17826]  ___sys_sendmsg+0x21f/0x2a0
[  397.267981][T17826]  ? __pfx____sys_sendmsg+0x10/0x10
[  397.268042][T17826]  ? __fget_files+0x2a/0x420
[  397.268058][T17826]  ? __fget_files+0x3a0/0x420
[  397.268086][T17826]  __x64_sys_sendmsg+0x19b/0x260
[  397.268109][T17826]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  397.268140][T17826]  ? __pfx_ksys_write+0x10/0x10
[  397.268169][T17826]  ? do_syscall_64+0xbe/0xfa0
[  397.268197][T17826]  do_syscall_64+0xfa/0xfa0
[  397.268217][T17826]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.268240][T17826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.268258][T17826]  ? clear_bhb_loop+0x60/0xb0
[  397.268278][T17826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.268295][T17826] RIP: 0033:0x7f51c558f6c9
[  397.268312][T17826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  397.268326][T17826] RSP: 002b:00007f51c6437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  397.268346][T17826] RAX: ffffffffffffffda RBX: 00007f51c57e5fa0 RCX: 00007f51c558f6c9
[  397.268359][T17826] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  397.268369][T17826] RBP: 00007f51c6437090 R08: 0000000000000000 R09: 0000000000000000
[  397.268380][T17826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.268390][T17826] R13: 00007f51c57e6038 R14: 00007f51c57e5fa0 R15: 00007fff6bc84fe8
[  397.268425][T17826]  </TASK>
[  397.858191][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  398.034616][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  398.144433][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  398.365355][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  398.523713][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  398.660156][T17864] __nla_validate_parse: 8 callbacks suppressed
[  398.660173][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3062'.
[  398.704847][ T6386] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  398.715213][ T6386] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  398.744550][ T6386] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  398.753382][ T6386] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  398.777395][T17871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3063'.
[  398.827788][T17871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3063'.
[  398.846422][T17867] wg1 speed is unknown, defaulting to 1000
[  398.862935][T17873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3064'.
[  398.889044][T17871] FAULT_INJECTION: forcing a failure.
[  398.889044][T17871] name failslab, interval 1, probability 0, space 0, times 0
[  398.902093][T17871] CPU: 0 UID: 0 PID: 17871 Comm: syz.4.3063 Not tainted syzkaller #0 PREEMPT(full) 
[  398.902117][T17871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  398.902126][T17871] Call Trace:
[  398.902133][T17871]  <TASK>
[  398.902138][T17871]  dump_stack_lvl+0x189/0x250
[  398.902157][T17871]  ? __pfx____ratelimit+0x10/0x10
[  398.902172][T17871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  398.902184][T17871]  ? __pfx__printk+0x10/0x10
[  398.902197][T17871]  ? __pfx___might_resched+0x10/0x10
[  398.902208][T17871]  ? fs_reclaim_acquire+0x7d/0x100
[  398.902225][T17871]  should_fail_ex+0x414/0x560
[  398.902241][T17871]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  398.902262][T17871]  should_failslab+0xa8/0x100
[  398.902273][T17871]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  398.902285][T17871]  kmem_cache_alloc_lru_noprof+0x79/0x6d0
[  398.902298][T17871]  ? alloc_inode+0x6a/0x1b0
[  398.902311][T17871]  ? __pfx_simple_start_creating+0x10/0x10
[  398.902322][T17871]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  398.902335][T17871]  alloc_inode+0x6a/0x1b0
[  398.902349][T17871]  new_inode+0x22/0x170
[  398.902361][T17871]  __debugfs_create_file+0x14d/0x4f0
[  398.902377][T17871]  debugfs_create_file_full+0x3f/0x60
[  398.902392][T17871]  ref_tracker_dir_debugfs+0x14e/0x270
[  398.902403][T17871]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  398.902429][T17871]  ? trace_kmalloc+0x1f/0xd0
[  398.902439][T17871]  ? __kvmalloc_node_noprof+0x5ed/0x910
[  398.902455][T17871]  ? __raw_spin_lock_init+0x45/0x100
[  398.902470][T17871]  alloc_netdev_mqs+0x272/0x11b0
[  398.902483][T17871]  ? __pfx_erspan_setup+0x10/0x10
[  398.902501][T17871]  rtnl_create_link+0x31f/0xd10
[  398.902517][T17871]  rtnl_newlink_create+0x25c/0xb00
[  398.902532][T17871]  ? __mutex_lock+0x5bb/0x1350
[  398.902544][T17871]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  398.902557][T17871]  ? __pfx___mutex_lock+0x10/0x10
[  398.902572][T17871]  ? ns_capable+0x8a/0xf0
[  398.902588][T17871]  rtnl_newlink+0x16e4/0x1c80
[  398.902607][T17871]  ? __pfx_rtnl_newlink+0x10/0x10
[  398.902619][T17871]  ? is_bpf_text_address+0x26/0x2b0
[  398.902633][T17871]  ? is_bpf_text_address+0x292/0x2b0
[  398.902642][T17871]  ? is_bpf_text_address+0x26/0x2b0
[  398.902655][T17871]  ? __lock_acquire+0xab9/0xd20
[  398.902671][T17871]  ? __lock_acquire+0xab9/0xd20
[  398.902692][T17871]  ? is_bpf_text_address+0x26/0x2b0
[  398.902705][T17871]  ? is_bpf_text_address+0x292/0x2b0
[  398.902715][T17871]  ? is_bpf_text_address+0x26/0x2b0
[  398.902730][T17871]  ? __lock_acquire+0xab9/0xd20
[  398.902754][T17871]  ? __pfx_rtnl_newlink+0x10/0x10
[  398.902762][T17871]  rtnetlink_rcv_msg+0x7cf/0xb70
[  398.902771][T17871]  ? __lock_acquire+0xab9/0xd20
[  398.902781][T17871]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  398.902790][T17871]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  398.902809][T17871]  netlink_rcv_skb+0x208/0x470
[  398.902819][T17871]  ? __lock_acquire+0xab9/0xd20
[  398.902828][T17871]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  398.902838][T17871]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  398.902855][T17871]  ? netlink_deliver_tap+0x2e/0x1b0
[  398.902869][T17871]  netlink_unicast+0x82f/0x9e0
[  398.902888][T17871]  ? __pfx_netlink_unicast+0x10/0x10
[  398.902903][T17871]  ? netlink_sendmsg+0x642/0xb30
[  398.902911][T17871]  ? skb_put+0x11b/0x210
[  398.902924][T17871]  netlink_sendmsg+0x805/0xb30
[  398.902940][T17871]  ? __pfx_netlink_sendmsg+0x10/0x10
[  398.902952][T17871]  ? aa_sock_msg_perm+0xf1/0x1d0
[  398.902967][T17871]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  398.902976][T17871]  ? __pfx_netlink_sendmsg+0x10/0x10
[  398.902986][T17871]  __sock_sendmsg+0x21c/0x270
[  398.903002][T17871]  ____sys_sendmsg+0x505/0x830
[  398.903018][T17871]  ? __pfx_____sys_sendmsg+0x10/0x10
[  398.903038][T17871]  ? import_iovec+0x74/0xa0
[  398.903052][T17871]  ___sys_sendmsg+0x21f/0x2a0
[  398.903064][T17871]  ? __pfx____sys_sendmsg+0x10/0x10
[  398.903096][T17871]  ? __fget_files+0x2a/0x420
[  398.903105][T17871]  ? __fget_files+0x3a0/0x420
[  398.903120][T17871]  __x64_sys_sendmsg+0x19b/0x260
[  398.903133][T17871]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  398.903149][T17871]  ? __pfx_ksys_write+0x10/0x10
[  398.903164][T17871]  ? do_syscall_64+0xbe/0xfa0
[  398.903180][T17871]  do_syscall_64+0xfa/0xfa0
[  398.903192][T17871]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.903205][T17871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.903215][T17871]  ? clear_bhb_loop+0x60/0xb0
[  398.903227][T17871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.903236][T17871] RIP: 0033:0x7f6e52b8f6c9
[  398.903246][T17871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  398.903255][T17871] RSP: 002b:00007f6e53a20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  398.903271][T17871] RAX: ffffffffffffffda RBX: 00007f6e52de5fa0 RCX: 00007f6e52b8f6c9
[  398.903278][T17871] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  398.903284][T17871] RBP: 00007f6e53a20090 R08: 0000000000000000 R09: 0000000000000000
[  398.903290][T17871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  398.903295][T17871] R13: 00007f6e52de6038 R14: 00007f6e52de5fa0 R15: 00007ffe42c842e8
[  398.903314][T17871]  </TASK>
[  398.903338][T17871] debugfs: out of free dentries, can not create file 'netdev@ffff88804b9c4618'
[  399.169870][T17881] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3064'.
[  399.302938][T17877] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3065'.
[  399.322881][T17873] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode
[  399.518061][T17884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3065'.
[  399.568241][T17884] hsr_slave_0: left promiscuous mode
[  399.585845][T17884] hsr_slave_1: left promiscuous mode
[  400.136481][T17897] wg1 speed is unknown, defaulting to 1000
[  400.368272][T17905] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3070'.
[  400.501887][T17910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3072'.
[  400.932904][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3077'.
[  401.367899][T17949] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  401.471160][T17955] netlink: 'syz.6.3084': attribute type 2 has an invalid length.
[  401.479778][T17955] netlink: 'syz.6.3084': attribute type 1 has an invalid length.
[  401.547423][ T6386] net_ratelimit: 22 callbacks suppressed
[  401.547444][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  401.562470][   T53] Bluetooth: hci11: command tx timeout
[  401.637264][T17959] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  401.660889][T17959] bond1 (unregistering): Released all slaves
[  401.773026][T17966] virt_wifi0 speed is unknown, defaulting to 1000
[  401.785212][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  401.798319][T17966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.946059][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  402.078395][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  402.194327][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  402.304324][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  402.414411][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  402.524448][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  402.654406][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  402.763920][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  403.631216][T17994] wg1 speed is unknown, defaulting to 1000
[  403.726353][T17991] syzkaller1: entered allmulticast mode
[  403.970671][T18010] __nla_validate_parse: 8 callbacks suppressed
[  403.970689][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3099'.
[  404.018381][T17994] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3094'.
[  404.052997][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3100'.
[  404.066980][T18013] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  404.227416][ T5837] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  404.238701][ T5837] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  404.248472][ T5837] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  404.258428][ T5837] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  404.266981][ T5837] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  404.319229][T18016] wg1 speed is unknown, defaulting to 1000
[  404.569034][T18026] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3104'.
[  404.750756][T18016] chnl_net:caif_netlink_parms(): no params data found
[  404.985109][T18016] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.993009][T18016] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.000547][T18016] bridge_slave_0: entered allmulticast mode
[  405.011774][T18016] bridge_slave_0: entered promiscuous mode
[  405.022344][T18016] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.030294][T18016] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.045483][T18016] bridge_slave_1: entered allmulticast mode
[  405.054499][T18016] bridge_slave_1: entered promiscuous mode
[  405.061991][T18037] veth0: entered promiscuous mode
[  405.092443][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3106'.
[  405.253507][T18016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.288342][T18016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.367967][T18016] team0: Port device team_slave_0 added
[  405.377548][T18016] team0: Port device team_slave_1 added
[  405.477667][T18016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.494830][T18016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.544193][T18016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.580124][T18016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.594320][T18016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.621256][T18016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.641158][T18049] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3111'.
[  405.727218][T18016] hsr_slave_0: entered promiscuous mode
[  405.743028][T18016] hsr_slave_1: entered promiscuous mode
[  405.750417][T18016] debugfs: 'hsr0' already exists in 'hsr'
[  405.757136][T18016] Cannot create hsr debugfs directory
[  406.130452][T18071] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci12/hci12:200/input8
[  406.338357][T18074] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3118'.
[  406.354642][ T5837] Bluetooth: hci12: command tx timeout
[  406.563496][T18079] batadv_slave_1: entered promiscuous mode
[  406.572836][T18016] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  406.593542][T18016] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  406.621908][T18016] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  406.642571][T18016] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  406.681547][T18078] batadv_slave_1: left promiscuous mode
[  406.725497][ T6386] net_ratelimit: 23 callbacks suppressed
[  406.725524][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  406.825766][T18092] syzkaller1: entered promiscuous mode
[  406.831277][T18092] syzkaller1: entered allmulticast mode
[  406.865944][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  406.986179][T18016] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.015676][T18016] 8021q: adding VLAN 0 to HW filter on device team0
[  407.030400][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.037601][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.083439][T10209] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.090678][T10209] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.115360][T18107] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3124'.
[  407.216362][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  407.336438][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  407.453857][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  407.564480][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  407.602705][T18016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  407.675062][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  407.701192][T18121] netlink: 'syz.6.3129': attribute type 12 has an invalid length.
[  407.796853][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  408.006836][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  408.028153][T18130] netlink: 'syz.4.3131': attribute type 21 has an invalid length.
[  408.082879][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3132'.
[  408.100592][T18135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3132'.
[  408.125723][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  408.235066][T18016] veth0_vlan: entered promiscuous mode
[  408.271456][T18016] veth1_vlan: entered promiscuous mode
[  408.341421][T18016] veth0_macvtap: entered promiscuous mode
[  408.375578][T18016] veth1_macvtap: entered promiscuous mode
[  408.408148][T18016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.421040][T18016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.434795][ T5837] Bluetooth: hci12: command tx timeout
[  408.560577][T10207] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.584938][T10207] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.594765][T10207] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.608365][T10207] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.617831][T18148] wg1 speed is unknown, defaulting to 1000
[  408.810186][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.831625][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.921091][T10207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.943337][T10207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.082454][T18168] __nla_validate_parse: 4 callbacks suppressed
[  409.082471][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3140'.
[  409.528391][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'.
[  409.913156][T18204] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3146'.
[  409.937373][T18200] netlink: 'syz.1.3144': attribute type 39 has an invalid length.
[  410.031897][T18211] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3148'.
[  410.129637][T18219] wg1 speed is unknown, defaulting to 1000
[  410.285979][T18222] xt_HMARK: spi-set and port-set can't be combined
[  410.514539][ T5837] Bluetooth: hci12: command tx timeout
[  410.691593][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3154'.
[  411.374457][T18261] netlink: 'syz.1.3158': attribute type 1 has an invalid length.
[  411.661333][T18268] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3162'.
[  411.797397][T10209] net_ratelimit: 27 callbacks suppressed
[  411.797415][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  411.938498][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  412.055739][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  412.107303][T18293] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  412.224124][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  412.334507][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  412.504179][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  412.595094][ T5837] Bluetooth: hci12: command tx timeout
[  412.618981][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3174'.
[  412.634585][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  412.667734][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3174'.
[  412.754780][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  412.782213][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3174'.
[  412.832507][T18327] netlink: 'syz.4.3176': attribute type 9 has an invalid length.
[  412.842611][T18327] netlink: 'syz.4.3176': attribute type 7 has an invalid length.
[  412.851085][T18327] netlink: 'syz.4.3176': attribute type 8 has an invalid length.
[  412.873776][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  412.902141][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3177'.
[  412.984993][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  413.087986][T18340] FAULT_INJECTION: forcing a failure.
[  413.087986][T18340] name failslab, interval 1, probability 0, space 0, times 0
[  413.101699][T18340] CPU: 0 UID: 0 PID: 18340 Comm: syz.4.3180 Not tainted syzkaller #0 PREEMPT(full) 
[  413.101716][T18340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  413.101722][T18340] Call Trace:
[  413.101726][T18340]  <TASK>
[  413.101730][T18340]  dump_stack_lvl+0x189/0x250
[  413.101749][T18340]  ? __pfx____ratelimit+0x10/0x10
[  413.101763][T18340]  ? __pfx_dump_stack_lvl+0x10/0x10
[  413.101775][T18340]  ? __pfx__printk+0x10/0x10
[  413.101789][T18340]  ? __pfx___might_resched+0x10/0x10
[  413.101800][T18340]  ? fs_reclaim_acquire+0x7d/0x100
[  413.101817][T18340]  should_fail_ex+0x414/0x560
[  413.101834][T18340]  should_failslab+0xa8/0x100
[  413.101845][T18340]  __kvmalloc_node_noprof+0x158/0x910
[  413.101868][T18340]  ? alloc_netdev_mqs+0xa4b/0x11b0
[  413.101885][T18340]  alloc_netdev_mqs+0xa4b/0x11b0
[  413.101901][T18340]  rtnl_create_link+0x31f/0xd10
[  413.101917][T18340]  rtnl_newlink_create+0x25c/0xb00
[  413.101930][T18340]  ? __lock_acquire+0xab9/0xd20
[  413.101943][T18340]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  413.101955][T18340]  ? __pfx___mutex_lock+0x10/0x10
[  413.101971][T18340]  ? ns_capable+0x8a/0xf0
[  413.101984][T18340]  rtnl_newlink+0x16e4/0x1c80
[  413.102002][T18340]  ? __pfx_rtnl_newlink+0x10/0x10
[  413.102014][T18340]  ? is_bpf_text_address+0x26/0x2b0
[  413.102028][T18340]  ? is_bpf_text_address+0x292/0x2b0
[  413.102037][T18340]  ? is_bpf_text_address+0x26/0x2b0
[  413.102050][T18340]  ? __lock_acquire+0xab9/0xd20
[  413.102066][T18340]  ? __lock_acquire+0xab9/0xd20
[  413.102087][T18340]  ? is_bpf_text_address+0x26/0x2b0
[  413.102099][T18340]  ? is_bpf_text_address+0x292/0x2b0
[  413.102109][T18340]  ? is_bpf_text_address+0x26/0x2b0
[  413.102124][T18340]  ? __lock_acquire+0xab9/0xd20
[  413.102147][T18340]  ? __pfx_rtnl_newlink+0x10/0x10
[  413.102155][T18340]  rtnetlink_rcv_msg+0x7cf/0xb70
[  413.102164][T18340]  ? __lock_acquire+0xab9/0xd20
[  413.102174][T18340]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  413.102182][T18340]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  413.102207][T18340]  netlink_rcv_skb+0x208/0x470
[  413.102222][T18340]  ? __lock_acquire+0xab9/0xd20
[  413.102238][T18340]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  413.102256][T18340]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  413.102284][T18340]  ? netlink_deliver_tap+0x2e/0x1b0
[  413.102310][T18340]  netlink_unicast+0x82f/0x9e0
[  413.102338][T18340]  ? __pfx_netlink_unicast+0x10/0x10
[  413.102353][T18340]  ? netlink_sendmsg+0x642/0xb30
[  413.102361][T18340]  ? skb_put+0x11b/0x210
[  413.102374][T18340]  netlink_sendmsg+0x805/0xb30
[  413.102389][T18340]  ? __pfx_netlink_sendmsg+0x10/0x10
[  413.102401][T18340]  ? aa_sock_msg_perm+0xf1/0x1d0
[  413.102416][T18340]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  413.102426][T18340]  ? __pfx_netlink_sendmsg+0x10/0x10
[  413.102436][T18340]  __sock_sendmsg+0x21c/0x270
[  413.102452][T18340]  ____sys_sendmsg+0x505/0x830
[  413.102466][T18340]  ? __pfx_____sys_sendmsg+0x10/0x10
[  413.102482][T18340]  ? import_iovec+0x74/0xa0
[  413.102497][T18340]  ___sys_sendmsg+0x21f/0x2a0
[  413.102509][T18340]  ? __pfx____sys_sendmsg+0x10/0x10
[  413.102540][T18340]  ? __fget_files+0x2a/0x420
[  413.102550][T18340]  ? __fget_files+0x3a0/0x420
[  413.102564][T18340]  __x64_sys_sendmsg+0x19b/0x260
[  413.102577][T18340]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  413.102593][T18340]  ? __pfx_ksys_write+0x10/0x10
[  413.102610][T18340]  ? do_syscall_64+0xbe/0xfa0
[  413.102626][T18340]  do_syscall_64+0xfa/0xfa0
[  413.102638][T18340]  ? lockdep_hardirqs_on+0x9c/0x150
[  413.102652][T18340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.102662][T18340]  ? clear_bhb_loop+0x60/0xb0
[  413.102674][T18340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.102683][T18340] RIP: 0033:0x7f6e52b8f6c9
[  413.102693][T18340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  413.102702][T18340] RSP: 002b:00007f6e53a20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.102714][T18340] RAX: ffffffffffffffda RBX: 00007f6e52de5fa0 RCX: 00007f6e52b8f6c9
[  413.102721][T18340] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  413.102727][T18340] RBP: 00007f6e53a20090 R08: 0000000000000000 R09: 0000000000000000
[  413.102733][T18340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  413.102738][T18340] R13: 00007f6e52de6038 R14: 00007f6e52de5fa0 R15: 00007ffe42c842e8
[  413.102756][T18340]  </TASK>
[  413.997548][   T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  414.009019][   T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  414.025398][   T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  414.052479][   T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  414.060715][   T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  414.100104][T18359] __nla_validate_parse: 3 callbacks suppressed
[  414.100122][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3186'.
[  414.205954][T18360] wg1 speed is unknown, defaulting to 1000
[  414.286700][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3186'.
[  414.612156][T18382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3191'.
[  414.669420][T18378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3191'.
[  414.736303][T18384] wg1 speed is unknown, defaulting to 1000
[  414.771925][T18360] chnl_net:caif_netlink_parms(): no params data found
[  414.971732][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'.
[  414.981251][T18394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3195'.
[  415.019254][T18397] netlink: 'syz.4.3196': attribute type 1 has an invalid length.
[  415.121042][T18360] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.161628][T18360] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.203416][T18360] bridge_slave_0: entered allmulticast mode
[  415.233083][T18360] bridge_slave_0: entered promiscuous mode
[  415.281745][T18415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3201'.
[  415.309383][T18360] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.328493][T18360] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.344499][T18360] bridge_slave_1: entered allmulticast mode
[  415.368052][T18360] bridge_slave_1: entered promiscuous mode
[  415.368733][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3202'.
[  415.391596][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3202'.
[  415.397581][T18415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3201'.
[  415.403115][T18410] netlink: 'syz.1.3199': attribute type 4 has an invalid length.
[  415.675614][T18360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  415.714486][T18360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  415.778667][T18360] team0: Port device team_slave_0 added
[  415.790873][T18421] wg1 speed is unknown, defaulting to 1000
[  415.793543][T18360] team0: Port device team_slave_1 added
[  415.878758][T18442] netlink: 'syz.1.3207': attribute type 21 has an invalid length.
[  416.032378][T18360] batman_adv: batadv0: Adding interface: batadv_slave_0
[  416.045906][T18360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.073547][T18360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  416.106788][T18360] batman_adv: batadv0: Adding interface: batadv_slave_1
[  416.115217][T18360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.123994][   T53] Bluetooth: hci13: command tx timeout
[  416.144749][T18360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  416.305203][T18360] hsr_slave_0: entered promiscuous mode
[  416.311860][T18360] hsr_slave_1: entered promiscuous mode
[  416.318464][T18360] debugfs: 'hsr0' already exists in 'hsr'
[  416.326071][T18360] Cannot create hsr debugfs directory
[  416.565533][T18460] vlan3: entered promiscuous mode
[  416.570684][T18460] hsr_slave_1: entered promiscuous mode
[  416.577177][T18460] vlan3: entered allmulticast mode
[  416.582753][T18460] hsr_slave_1: entered allmulticast mode
[  416.648578][T18460] wg1 speed is unknown, defaulting to 1000
[  417.050126][T18474] net_ratelimit: 16 callbacks suppressed
[  417.050160][T18474] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  417.083132][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  417.095379][T18474] netlink: 'syz.1.3215': attribute type 4 has an invalid length.
[  417.206780][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  417.359092][T18484] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.371133][T18484] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.395219][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  417.426965][T18360] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  417.441058][T18360] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  417.485043][T18484] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.495608][T18484] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.512685][T18360] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  417.533198][T18360] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  417.580533][T18484] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.591260][T18484] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.668757][T18484] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.679586][T18484] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.704968][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  417.817084][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  417.831911][T18360] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.866372][ T6386] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  417.884254][ T6386] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.909648][ T6386] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  417.918768][ T6386] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.940226][ T6391] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  417.951400][ T6391] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.963577][T18360] 8021q: adding VLAN 0 to HW filter on device team0
[  417.983228][ T6391] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  417.992197][ T6391] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.008776][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.015983][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.041626][T10205] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.048842][T10205] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.073738][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  418.175033][T18503] FAULT_INJECTION: forcing a failure.
[  418.175033][T18503] name failslab, interval 1, probability 0, space 0, times 0
[  418.196573][   T53] Bluetooth: hci13: command tx timeout
[  418.215881][T18503] CPU: 0 UID: 0 PID: 18503 Comm: syz.6.3221 Not tainted syzkaller #0 PREEMPT(full) 
[  418.215906][T18503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  418.215916][T18503] Call Trace:
[  418.215923][T18503]  <TASK>
[  418.215930][T18503]  dump_stack_lvl+0x189/0x250
[  418.215957][T18503]  ? __pfx____ratelimit+0x10/0x10
[  418.215979][T18503]  ? __pfx_dump_stack_lvl+0x10/0x10
[  418.215999][T18503]  ? __pfx__printk+0x10/0x10
[  418.216022][T18503]  ? __pfx___might_resched+0x10/0x10
[  418.216037][T18503]  ? fs_reclaim_acquire+0x7d/0x100
[  418.216066][T18503]  should_fail_ex+0x414/0x560
[  418.216096][T18503]  should_failslab+0xa8/0x100
[  418.216123][T18503]  __kvmalloc_node_noprof+0x158/0x910
[  418.216148][T18503]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  418.216170][T18503]  ? alloc_netdev_mqs+0xc89/0x11b0
[  418.216189][T18503]  ? alloc_netdev_mqs+0xbf8/0x11b0
[  418.216215][T18503]  alloc_netdev_mqs+0xc89/0x11b0
[  418.216243][T18503]  rtnl_create_link+0x31f/0xd10
[  418.216270][T18503]  rtnl_newlink_create+0x25c/0xb00
[  418.216295][T18503]  ? __lock_acquire+0xab9/0xd20
[  418.216318][T18503]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  418.216339][T18503]  ? __pfx___mutex_lock+0x10/0x10
[  418.216367][T18503]  ? ns_capable+0x8a/0xf0
[  418.216389][T18503]  rtnl_newlink+0x16e4/0x1c80
[  418.216424][T18503]  ? __pfx_rtnl_newlink+0x10/0x10
[  418.216441][T18503]  ? __pfx___schedule+0x10/0x10
[  418.216484][T18503]  ? preempt_schedule+0xae/0xc0
[  418.216503][T18503]  ? __dev_queue_xmit+0x284/0x3740
[  418.216526][T18503]  ? preempt_schedule_common+0x83/0xd0
[  418.216549][T18503]  ? preempt_schedule+0xae/0xc0
[  418.216571][T18503]  ? __pfx_preempt_schedule+0x10/0x10
[  418.216591][T18503]  ? nlmon_xmit+0xb0/0x100
[  418.216613][T18503]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  418.216636][T18503]  ? preempt_schedule_thunk+0x16/0x30
[  418.216662][T18503]  ? __local_bh_enable_ip+0x13e/0x1c0
[  418.216681][T18503]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  418.216703][T18503]  ? __dev_queue_xmit+0x284/0x3740
[  418.216725][T18503]  ? __dev_queue_xmit+0x284/0x3740
[  418.216744][T18503]  ? __dev_queue_xmit+0x1bfb/0x3740
[  418.216772][T18503]  ? __lock_acquire+0xab9/0xd20
[  418.216813][T18503]  ? __pfx_rtnl_newlink+0x10/0x10
[  418.216829][T18503]  rtnetlink_rcv_msg+0x7cf/0xb70
[  418.216851][T18503]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  418.216866][T18503]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  418.216891][T18503]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  418.216925][T18503]  netlink_rcv_skb+0x208/0x470
[  418.216942][T18503]  ? rcu_is_watching+0x15/0xb0
[  418.216962][T18503]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  418.216980][T18503]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  418.217011][T18503]  ? netlink_deliver_tap+0x2e/0x1b0
[  418.217038][T18503]  netlink_unicast+0x82f/0x9e0
[  418.217073][T18503]  ? __pfx_netlink_unicast+0x10/0x10
[  418.217099][T18503]  ? netlink_sendmsg+0x642/0xb30
[  418.217120][T18503]  ? skb_put+0x11b/0x210
[  418.217143][T18503]  netlink_sendmsg+0x805/0xb30
[  418.217172][T18503]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.217194][T18503]  ? aa_sock_msg_perm+0xf1/0x1d0
[  418.217220][T18503]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  418.217236][T18503]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.217255][T18503]  __sock_sendmsg+0x21c/0x270
[  418.217282][T18503]  ____sys_sendmsg+0x505/0x830
[  418.217308][T18503]  ? __pfx_____sys_sendmsg+0x10/0x10
[  418.217338][T18503]  ? import_iovec+0x74/0xa0
[  418.217363][T18503]  ___sys_sendmsg+0x21f/0x2a0
[  418.217385][T18503]  ? __pfx____sys_sendmsg+0x10/0x10
[  418.217445][T18503]  ? __fget_files+0x2a/0x420
[  418.217461][T18503]  ? __fget_files+0x3a0/0x420
[  418.217489][T18503]  __x64_sys_sendmsg+0x19b/0x260
[  418.217512][T18503]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  418.217550][T18503]  ? do_syscall_64+0xbe/0xfa0
[  418.217577][T18503]  do_syscall_64+0xfa/0xfa0
[  418.217599][T18503]  ? lockdep_hardirqs_on+0x9c/0x150
[  418.217622][T18503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.217639][T18503]  ? clear_bhb_loop+0x60/0xb0
[  418.217660][T18503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.217677][T18503] RIP: 0033:0x7f263598f6c9
[  418.217692][T18503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  418.217705][T18503] RSP: 002b:00007f26367ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.217724][T18503] RAX: ffffffffffffffda RBX: 00007f2635be5fa0 RCX: 00007f263598f6c9
[  418.217736][T18503] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  418.217747][T18503] RBP: 00007f26367ab090 R08: 0000000000000000 R09: 0000000000000000
[  418.217757][T18503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  418.217768][T18503] R13: 00007f2635be6038 R14: 00007f2635be5fa0 R15: 00007ffe5170fb28
[  418.217801][T18503]  </TASK>
[  418.689260][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  418.738610][T18507] x_tables: duplicate underflow at hook 3
[  418.805415][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  418.916072][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  419.020616][T18360] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.105962][T18522] netlink: 'syz.6.3224': attribute type 1 has an invalid length.
[  419.237713][T18522] 8021q: adding VLAN 0 to HW filter on device bond1
[  419.275092][T18523] __nla_validate_parse: 10 callbacks suppressed
[  419.275116][T18523] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3226'.
[  419.299117][T18523] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3226'.
[  419.357993][T18513] bond1: (slave wlan0): Opening slave failed
[  419.557461][T18360] veth0_vlan: entered promiscuous mode
[  419.609900][T18360] veth1_vlan: entered promiscuous mode
[  419.693347][T18537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3230'.
[  419.698028][T18360] veth0_macvtap: entered promiscuous mode
[  419.721641][T18360] veth1_macvtap: entered promiscuous mode
[  419.749168][T18360] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.771837][T18360] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.805081][ T6386] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.814688][ T6386] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.823423][ T6386] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.847128][ T6386] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.008539][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.021030][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.062647][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.072467][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.275236][   T53] Bluetooth: hci13: command tx timeout
[  420.487273][T18562] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
[  420.619610][T18578] netlink: 'syz.5.3240': attribute type 9 has an invalid length.
[  420.651623][T18578] xt_TCPMSS: Only works on TCP SYN packets
[  420.825525][T18586] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3241'.
[  421.196605][T18604] wg1 speed is unknown, defaulting to 1000
[  421.241879][T18608] syzkaller1: entered promiscuous mode
[  421.248004][T18608] syzkaller1: entered allmulticast mode
[  421.379121][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3253'.
[  421.390872][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3253'.
[  421.403431][T18617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3253'.
[  421.413025][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3253'.
[  421.879600][T18630] netlink: 'syz.5.3257': attribute type 62 has an invalid length.
[  422.104292][ T6386] net_ratelimit: 24 callbacks suppressed
[  422.104315][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  422.236759][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  422.259643][T18640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3259'.
[  422.354318][   T53] Bluetooth: hci13: command tx timeout
[  422.445157][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  422.555586][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  422.571699][T18655] batadv1: entered promiscuous mode
[  422.664308][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  422.830179][T18658] bond1 (unregistering): Released all slaves
[  422.884270][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  422.996198][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  423.134479][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  423.141813][T18688] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3273'.
[  423.243902][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  423.353970][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  423.451228][T18703] wg1 speed is unknown, defaulting to 1000
[  424.012558][T18727] syzkaller0: entered promiscuous mode
[  424.031051][T18727] syzkaller0: entered allmulticast mode
[  424.337248][T18744] netlink: 'syz.5.3289': attribute type 10 has an invalid length.
[  424.355418][T18744] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  424.417437][T18746] bond1: (slave bond_slave_1): Device is not our slave
[  424.425707][T18746] bond1: option active_slave: invalid value (bond_slave_1)
[  424.436211][   T53] Bluetooth: hci13: command tx timeout
[  424.437078][T18746] bond1 (unregistering): Released all slaves
[  424.652021][T18762] Bluetooth: MGMT ver 1.23
[  424.672050][T18762] __nla_validate_parse: 5 callbacks suppressed
[  424.672067][T18762] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3295'.
[  424.726169][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3295'.
[  424.804638][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3295'.
[  424.898067][T18769] batman_adv: batadv0: Adding interface: dummy0
[  424.904897][T18769] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.932249][T18769] batman_adv: batadv0: Interface activated: dummy0
[  425.103185][T18776] rdma_op ffff888038c1b1f0 conn xmit_rdma 0000000000000000
[  425.115980][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3297'.
[  425.603537][T18801] netlink: 'syz.4.3308': attribute type 1 has an invalid length.
[  425.677506][T18801] 8021q: adding VLAN 0 to HW filter on device bond1
[  425.704441][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3309'.
[  425.922699][T18821] wg1 speed is unknown, defaulting to 1000
[  426.029214][T18830] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3312'.
[  426.078306][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3312'.
[  426.168138][T18837] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3317'.
[  426.856606][T18869] tipc: Invalid UDP bearer configuration
[  426.856661][T18869] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  426.924309][T18876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3327'.
[  426.964008][T18876] unsupported nlmsg_type 40
[  427.087357][T18885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3328'.
[  427.165911][ T6386] net_ratelimit: 30 callbacks suppressed
[  427.165930][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  427.225596][T18881] wg1 speed is unknown, defaulting to 1000
[  427.314533][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  427.398410][T18890] netlink: 'syz.1.3330': attribute type 7 has an invalid length.
[  427.424407][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  427.574727][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  427.684193][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  427.795569][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  427.920518][T18919] macvlan2: entered promiscuous mode
[  427.934360][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  428.011795][T18924] x_tables: duplicate underflow at hook 1
[  428.044403][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  428.156217][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  428.371119][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  428.520871][T18940] netlink: 'syz.4.3347': attribute type 1 has an invalid length.
[  428.785298][T18957] erspan0: left allmulticast mode
[  428.848023][T18957] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.058192][T18966] netlink: 'syz.6.3351': attribute type 2 has an invalid length.
[  429.479360][T18980] tipc: Started in network mode
[  429.491110][T18980] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711
[  429.525384][T18980] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  429.600880][T13456] IPVS: starting estimator thread 0...
[  429.633459][T18991] No such timeout policy "syz1"
[  429.681273][T18994] tipc: Started in network mode
[  429.699425][T18994] tipc: Node identity 62e3e797fd9f, cluster identity 4711
[  429.710766][T18994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.713943][T18987] IPVS: using max 25 ests per chain, 60000 per kthread
[  429.728799][T18994] syzkaller0: entered promiscuous mode
[  429.738768][T18994] syzkaller0: entered allmulticast mode
[  429.835388][T18994] tipc: Resetting bearer <eth:syzkaller0>
[  429.847164][T18992] tipc: Resetting bearer <eth:syzkaller0>
[  429.868226][T18992] tipc: Disabling bearer <eth:syzkaller0>
[  429.889128][T19003] netlink: 'syz.1.3362': attribute type 2 has an invalid length.
[  429.918064][T19006] wg1 speed is unknown, defaulting to 1000
[  429.990278][T19005] wg1 speed is unknown, defaulting to 1000
[  430.181377][T19013] __nla_validate_parse: 10 callbacks suppressed
[  430.181394][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3364'.
[  430.202394][T19007] netlink: 'syz.6.3363': attribute type 16 has an invalid length.
[  430.232306][T19007] netlink: 'syz.6.3363': attribute type 17 has an invalid length.
[  430.865551][T19026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3368'.
[  431.025000][T19029] netlink: 'syz.6.3369': attribute type 101 has an invalid length.
[  431.061096][T19029] netlink: 'syz.6.3369': attribute type 7 has an invalid length.
[  431.280250][ T5837] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  431.299201][ T5837] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  431.312150][ T5837] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  431.332135][ T5837] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  431.341404][ T5837] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  431.385219][T19041] wg1 speed is unknown, defaulting to 1000
[  431.792461][T19055] netlink: 'syz.5.3377': attribute type 4 has an invalid length.
[  431.892381][T19041] chnl_net:caif_netlink_parms(): no params data found
[  432.009819][T19063] netlink: 'syz.5.3380': attribute type 6 has an invalid length.
[  432.056454][T19063] netlink: 'syz.5.3380': attribute type 6 has an invalid length.
[  432.156956][T19041] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.166968][T19041] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.175771][T19041] bridge_slave_0: entered allmulticast mode
[  432.184043][T19041] bridge_slave_0: entered promiscuous mode
[  432.193168][T19041] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.201674][T19041] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.209736][T19041] bridge_slave_1: entered allmulticast mode
[  432.218122][T19041] bridge_slave_1: entered promiscuous mode
[  432.318598][T19041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.370260][T19041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.411213][   T68] net_ratelimit: 26 callbacks suppressed
[  432.411233][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  432.534890][T19041] team0: Port device team_slave_0 added
[  432.546499][T19041] team0: Port device team_slave_1 added
[  432.689104][T19041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.697900][T19092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3389'.
[  432.712520][T19041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.752646][T19041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.777253][T19041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.787680][T19041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  432.833109][T19041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.854940][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  433.039838][T19041] hsr_slave_0: entered promiscuous mode
[  433.060179][T19110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3394'.
[  433.062683][T19041] hsr_slave_1: entered promiscuous mode
[  433.077757][T19041] debugfs: 'hsr0' already exists in 'hsr'
[  433.083508][T19041] Cannot create hsr debugfs directory
[  433.335293][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  433.395359][   T53] Bluetooth: hci14: command tx timeout
[  433.451423][T19041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.533723][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  433.617548][T19041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.630627][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3401'.
[  433.728997][T19041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.780041][T19139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3404'.
[  433.832281][T19139] 8021q: adding VLAN 0 to HW filter on device bond1
[  433.902577][T19041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.978391][T19139] erspan0: entered allmulticast mode
[  434.000562][T19139] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  434.161780][T19154] geneve2: entered promiscuous mode
[  434.168262][T19158] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3409'.
[  434.176905][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  434.314475][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  434.379704][T19041] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  434.456201][T19041] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  434.522870][T19041] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  434.546831][T19173] netlink: 'syz.4.3412': attribute type 2 has an invalid length.
[  434.569113][T19041] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  434.597847][T19167] wg1 speed is unknown, defaulting to 1000
[  434.606188][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  434.712175][T19185] tipc: Started in network mode
[  434.718246][T19185] tipc: Node identity 5ead9f151d89, cluster identity 4711
[  434.726008][T19185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.748949][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3415'.
[  434.791017][T19185] syzkaller0: entered promiscuous mode
[  434.800548][T19185] syzkaller0: entered allmulticast mode
[  434.831164][T19182] tipc: Resetting bearer <eth:syzkaller0>
[  434.849664][T19182] tipc: Disabling bearer <eth:syzkaller0>
[  434.875255][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  434.959289][T19041] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.012018][T19041] 8021q: adding VLAN 0 to HW filter on device team0
[  435.024169][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  435.072618][T10209] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.079826][T10209] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.101229][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.108485][ T6391] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.157872][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  435.205423][T19205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3417'.
[  435.237445][T19205] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  435.255125][T19205] bond1 (unregistering): Released all slaves
[  435.418500][T19211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3418'.
[  435.474497][   T53] Bluetooth: hci14: command tx timeout
[  435.539356][T19215] sctp: [Deprecated]: syz.5.3419 (pid 19215) Use of int in max_burst socket option.
[  435.539356][T19215] Use struct sctp_assoc_value instead
[  435.569501][T19041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.688559][T19041] veth0_vlan: entered promiscuous mode
[  435.728915][T19041] veth1_vlan: entered promiscuous mode
[  435.789182][T19041] veth0_macvtap: entered promiscuous mode
[  435.804975][T19041] veth1_macvtap: entered promiscuous mode
[  435.852885][T19041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.898214][T19041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.939223][T10207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.952193][T10207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.967752][T10209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.978863][T10209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.122156][ T6386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.131047][ T6386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.193182][ T6386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.207472][ T6386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.654192][T19271] netlink: 'syz.5.3432': attribute type 30 has an invalid length.
[  437.167911][T19288] wg1 speed is unknown, defaulting to 1000
[  437.266347][T19292] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3437'.
[  437.279712][T19292] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3437'.
[  437.494519][T10207] net_ratelimit: 15 callbacks suppressed
[  437.494541][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  437.554648][   T53] Bluetooth: hci14: command tx timeout
[  437.597004][T19304] x_tables: duplicate underflow at hook 3
[  437.624688][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  437.666357][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3442'.
[  437.748742][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  437.895194][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  438.010247][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  438.136518][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  438.286429][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  438.414401][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  438.490555][T19347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3454'.
[  438.548428][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  438.672249][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  439.027773][T19359] sctp: [Deprecated]: syz.6.3458 (pid 19359) Use of int in max_burst socket option.
[  439.027773][T19359] Use struct sctp_assoc_value instead
[  439.054398][T19360] batadv_slave_1: entered promiscuous mode
[  439.459485][T19365] wg1 speed is unknown, defaulting to 1000
[  439.642550][   T53] Bluetooth: hci14: command tx timeout
[  439.761900][T19378] pimreg3: entered allmulticast mode
[  439.771193][T19356] batadv_slave_1: left promiscuous mode
[  439.841848][T19383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3464'.
[  439.854463][T19383] xt_TCPMSS: Only works on TCP SYN packets
[  439.957861][T13453] IPVS: starting estimator thread 0...
[  439.972024][T19385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3465'.
[  439.981742][T19385] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3465'.
[  440.055466][T19386] IPVS: using max 27 ests per chain, 64800 per kthread
[  440.097519][T19390] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3467'.
[  441.362250][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3477'.
[  441.715127][   T53] Bluetooth: hci14: command tx timeout
[  441.756191][T19424] 8021q: adding VLAN 0 to HW filter on device team0
[  442.574388][   T68] net_ratelimit: 33 callbacks suppressed
[  442.574409][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  442.694317][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  442.738376][T19432] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  442.835071][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  442.928541][T19443] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3482'.
[  442.944052][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  443.053814][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  443.132672][T19451] syzkaller0: entered promiscuous mode
[  443.138377][T19451] syzkaller0: entered allmulticast mode
[  443.194042][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  443.304652][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  443.414118][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  443.528807][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  443.608458][T19459] netlink: 'syz.4.3486': attribute type 1 has an invalid length.
[  443.648937][T19459] 8021q: adding VLAN 0 to HW filter on device bond3
[  443.664140][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  444.536203][T19488] wg1 speed is unknown, defaulting to 1000
[  444.882950][T19492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3495'.
[  444.966689][T19488] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3494'.
[  445.301170][T19509] wg1: entered promiscuous mode
[  445.318395][T19509] wg1: entered allmulticast mode
[  445.404526][T19514] tipc: Cannot configure node identity twice
[  446.290765][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3504'.
[  446.677473][T19541] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3510'.
[  446.732722][T19544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3511'.
[  446.814670][T19548] wg1 speed is unknown, defaulting to 1000
[  447.244956][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  447.521364][T19564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3517'.
[  447.644860][T19570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3519'.
[  447.744787][ T6386] net_ratelimit: 30 callbacks suppressed
[  447.744806][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  447.778039][ T6386] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x22
[  447.796674][T19581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3521'.
[  447.876353][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  448.076471][T19588] bond1 (unregistering): Released all slaves
[  448.125196][ T6391] bond4: (slave bridge3): failed to get link speed/duplex
[  448.249915][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  448.370003][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  448.388910][T19601] netlink: 'syz.2.3524': attribute type 2 has an invalid length.
[  448.410736][T19601] : entered promiscuous mode
[  448.418215][T19601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3524'.
[  448.484582][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  448.605431][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  448.731557][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  448.855391][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  449.182890][T19609] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.225281][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  449.304261][T19609] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.411693][T19609] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.578376][T19609] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.786887][T10207] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.822694][T10207] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.861126][T10207] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.900715][T10207] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.062481][ T5837] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  450.075447][ T5837] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  450.085556][ T5837] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  450.094437][ T5837] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  450.107671][ T5837] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  450.174160][T19633] wg1 speed is unknown, defaulting to 1000
[  450.197469][ T6391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.221524][ T6391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.245817][T19641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  450.406062][T19633] chnl_net:caif_netlink_parms(): no params data found
[  450.557542][T19633] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.568630][T19633] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.578141][T19633] bridge_slave_0: entered allmulticast mode
[  450.590211][T19633] bridge_slave_0: entered promiscuous mode
[  450.602656][T19633] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.611145][T19633] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.619185][T19633] bridge_slave_1: entered allmulticast mode
[  450.628234][T19633] bridge_slave_1: entered promiscuous mode
[  450.691430][T19633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.706218][T19633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.742402][T19633] team0: Port device team_slave_0 added
[  450.751603][T19633] team0: Port device team_slave_1 added
[  450.806735][T19633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  450.818394][T19633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.854029][T19633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.877539][T19633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.884822][T19633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.913173][T19633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.059362][T19663] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3542'.
[  451.065215][T19633] hsr_slave_0: entered promiscuous mode
[  451.069621][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3542'.
[  451.080840][T19633] hsr_slave_1: entered promiscuous mode
[  451.091894][T19633] debugfs: 'hsr0' already exists in 'hsr'
[  451.103382][T19633] Cannot create hsr debugfs directory
[  451.431381][T19633] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.495092][T19681] vlan2: entered promiscuous mode
[  451.501984][T19681] vlan2: entered allmulticast mode
[  451.511729][T19681] hsr_slave_1: entered allmulticast mode
[  451.551237][T19633] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.647495][T19633] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.688865][T19692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3549'.
[  451.699580][T19692] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3549'.
[  451.702820][T19633] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.763518][T19695] gretap0: entered promiscuous mode
[  451.776133][T19695] vlan3: entered promiscuous mode
[  451.886162][T19698] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3547'.
[  451.937151][T19633] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  451.952456][T19633] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  451.970211][T19633] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  451.988113][T19633] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  452.102065][T19633] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.147206][T19633] 8021q: adding VLAN 0 to HW filter on device team0
[  452.162979][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.169673][T19717] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3555'.
[  452.170161][ T6380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.180468][T19717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3555'.
[  452.204495][   T53] Bluetooth: hci15: command tx timeout
[  452.233580][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.240780][ T6380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.355971][   T53] Bluetooth: hci5: command 0x0406 tx timeout
[  452.371455][T19721] nbd: socks must be embedded in a SOCK_ITEM attr
[  452.748735][T19633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.768962][T10209] net_ratelimit: 16 callbacks suppressed
[  452.768981][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  452.812308][T19746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3562'.
[  452.903835][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  453.027939][ T6386] bond4: (slave bridge3): failed to get link speed/duplex
[  453.060987][T19633] veth0_vlan: entered promiscuous mode
[  453.082440][T19633] veth1_vlan: entered promiscuous mode
[  453.144583][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  453.161410][T19633] veth0_macvtap: entered promiscuous mode
[  453.188773][T19633] veth1_macvtap: entered promiscuous mode
[  453.228635][T19633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.274451][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  453.286069][T19633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.335158][ T6391] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.356448][ T6391] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.377115][ T6391] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.406786][ T6391] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.454841][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  453.579186][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  453.784684][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  453.847273][T10207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.869415][T10207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.889413][T19766] netlink: 'syz.2.3566': attribute type 25 has an invalid length.
[  453.905841][T19766] netlink: 'syz.2.3566': attribute type 7 has an invalid length.
[  453.913590][T19766] netlink: 'syz.2.3566': attribute type 1 has an invalid length.
[  453.926088][T19766] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3566'.
[  453.936053][T19768] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3567'.
[  453.946166][T19766] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.994733][T10209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.002583][T10209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.009643][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  454.155025][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  454.242634][T19786] Bluetooth: MGMT ver 1.23
[  454.281199][ T5837] Bluetooth: hci15: command tx timeout
[  454.353224][T19770] wg1 speed is unknown, defaulting to 1000
[  455.034431][   T53] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  455.044528][   T53] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  455.053855][   T53] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  455.062229][   T53] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  455.070614][   T53] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  455.082428][T19813] Bluetooth: hci16: Opcode 0x0c1a failed: -4
[  455.118227][T19814] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3579'.
[  455.130887][T19820] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3580'.
[  455.790856][T19854] No such timeout policy "syz0"
[  455.910836][T19863] xt_recent: hitcount (4294967294) is larger than allowed maximum (65535)
[  456.133315][ T5836] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  456.146344][ T5836] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  456.155186][ T5836] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  456.167692][ T5836] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  456.176137][ T5836] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  456.227985][T19880] veth0: entered promiscuous mode
[  456.291665][T19868] netlink: 'syz.2.3589': attribute type 10 has an invalid length.
[  456.361930][ T5836] Bluetooth: hci15: command tx timeout
[  456.436795][T19874] wg1 speed is unknown, defaulting to 1000
[  456.534578][T19880] wg1 speed is unknown, defaulting to 1000
[  456.566132][T19890] netlink: 'syz.7.3593': attribute type 3 has an invalid length.
[  456.986842][T19911] __nla_validate_parse: 2 callbacks suppressed
[  456.986860][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3599'.
[  457.042159][T19874] chnl_net:caif_netlink_parms(): no params data found
[  457.070195][T19909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3598'.
[  457.325118][T19921] netlink: 'syz.5.3602': attribute type 13 has an invalid length.
[  457.332973][T19921] netlink: 'syz.5.3602': attribute type 17 has an invalid length.
[  457.478116][ T5836] Bluetooth: hci6: command 0x0406 tx timeout
[  457.690133][T19921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  457.710940][T19933] wg1 speed is unknown, defaulting to 1000
[  457.755313][T19921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  457.770601][T19874] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.779026][T19874] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.787077][T19874] bridge_slave_0: entered allmulticast mode
[  457.795763][T19874] bridge_slave_0: entered promiscuous mode
[  457.797880][T19940] netlink: 'syz.2.3605': attribute type 2 has an invalid length.
[  457.811045][T19940] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3605'.
[  457.822495][T19874] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.832485][T19874] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.843001][T19874] bridge_slave_1: entered allmulticast mode
[  457.851280][T19874] bridge_slave_1: entered promiscuous mode
[  458.007082][T19874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.052370][T19952] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3608'.
[  458.066800][T19874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.077370][T19952] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3608'.
[  458.083262][T19954] syzkaller1: entered promiscuous mode
[  458.093333][T19954] syzkaller1: entered allmulticast mode
[  458.099039][T19952] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3608'.
[  458.099098][T19952] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3608'.
[  458.194922][ T5837] Bluetooth: hci16: command tx timeout
[  458.263090][T19963] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3612'.
[  458.296751][T19874] team0: Port device team_slave_0 added
[  458.310021][T19874] team0: Port device team_slave_1 added
[  458.351363][T19874] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.360319][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.387972][T19874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.402002][T19874] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.409745][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.436920][ T5837] Bluetooth: hci15: command tx timeout
[  458.446495][T19874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.559363][T19975] netlink: 'syz.7.3614': attribute type 13 has an invalid length.
[  458.665970][T19977] netlink: 'syz.7.3614': attribute type 11 has an invalid length.
[  458.832585][T19874] hsr_slave_0: entered promiscuous mode
[  458.842337][T19874] hsr_slave_1: entered promiscuous mode
[  458.852204][T19874] debugfs: 'hsr0' already exists in 'hsr'
[  458.859165][T19874] Cannot create hsr debugfs directory
[  458.989868][T19985] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3618'.
[  459.002884][T19985] net_ratelimit: 22 callbacks suppressed
[  459.002900][T19985] openvswitch: netlink: Tunnel attr 15060 out of range max 16
[  459.184104][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  459.337788][T19874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.373030][T20005] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.423834][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  459.469641][T19874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.512566][T20005] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.603258][T19874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.657953][T20005] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.693843][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  459.739406][T19874] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.786996][T20005] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.815403][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  459.875445][   T31] INFO: task syz.6.2378:15224 blocked for more than 143 seconds.
[  459.888617][   T31]       Not tainted syzkaller #0
[  459.893589][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  459.914847][   T31] task:syz.6.2378      state:D stack:25320 pid:15224 tgid:15221 ppid:7767   task_flags:0x400140 flags:0x00080002
[  459.934345][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  459.954856][   T31] Call Trace:
[  459.958183][   T31]  <TASK>
[  459.961276][   T31]  __schedule+0x1798/0x4cc0
[  459.984172][   T31]  ? validate_chain+0x897/0x2140
[  459.989300][   T31]  ? __lock_acquire+0xab9/0xd20
[  459.995360][   T31]  ? __pfx___schedule+0x10/0x10
[  460.000423][   T31]  ? schedule+0x91/0x360
[  460.017805][   T31]  schedule+0x165/0x360
[  460.025440][   T31]  schedule_timeout+0x9a/0x270
[  460.034851][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  460.040368][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  460.062430][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.098203][   T31]  ? wait_for_completion+0x267/0x5d0
[  460.116016][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  460.140611][   T31]  wait_for_completion+0x2bf/0x5d0
[  460.154314][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  460.160000][   T31]  ? up_write+0x1c4/0x420
[  460.184139][   T31]  ? remove_client_context+0xc0/0x1e0
[  460.189572][   T31]  disable_device+0x1c6/0x320
[  460.206004][   T31]  ? __pfx_disable_device+0x10/0x10
[  460.211261][   T31]  __ib_unregister_device+0x2cb/0x3f0
[  460.217794][   T31]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  460.224512][   T31]  ib_unregister_device_and_put+0xb8/0xf0
[  460.230298][   T31]  nldev_dellink+0x2d1/0x320
[  460.235673][   T31]  ? __lock_acquire+0xab9/0xd20
[  460.240541][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[  460.246172][   T31]  ? apparmor_capable+0x137/0x1b0
[  460.251294][   T31]  ? bpf_lsm_capable+0x9/0x20
[  460.256198][   T31]  ? security_capable+0x7e/0x2e0
[  460.256215][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  460.268509][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[  460.274389][ T5837] Bluetooth: hci16: command tx timeout
[  460.275381][   T31]  rdma_nl_rcv+0x6ae/0x980
[  460.288648][   T31]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  460.294233][   T31]  ? __lock_acquire+0xab9/0xd20
[  460.299103][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  460.304817][   T31]  netlink_unicast+0x82f/0x9e0
[  460.309616][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  460.316915][   T31]  ? netlink_sendmsg+0x642/0xb30
[  460.321873][   T31]  ? skb_put+0x11b/0x210
[  460.326491][   T31]  netlink_sendmsg+0x805/0xb30
[  460.331268][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.336961][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  460.342035][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  460.347682][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.352985][   T31]  __sock_sendmsg+0x21c/0x270
[  460.358239][   T31]  ____sys_sendmsg+0x505/0x830
[  460.363023][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  460.368679][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  460.368679][   T31]  ? import_iovec+0x74/0xa0
[  460.368709][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  460.385956][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.391196][   T31]  ? __fget_files+0x2a/0x420
[  460.396458][   T31]  ? __fget_files+0x3a0/0x420
[  460.401165][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  460.406494][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  460.411967][   T31]  ? do_syscall_64+0xbe/0xfa0
[  460.417842][   T31]  do_syscall_64+0xfa/0xfa0
[  460.422380][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.428051][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.434640][   T31]  ? clear_bhb_loop+0x60/0xb0
[  460.439309][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.445983][   T31] RIP: 0033:0x7f645b38f6c9
[  460.450418][   T31] RSP: 002b:00007f645c22c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  460.459318][   T31] RAX: ffffffffffffffda RBX: 00007f645b5e6090 RCX: 00007f645b38f6c9
[  460.467678][   T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005
[  460.475995][   T31] RBP: 00007f645b411f91 R08: 0000000000000000 R09: 0000000000000000
[  460.484204][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  460.491556][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.499616][   T31] R13: 00007f645b5e6128 R14: 00007f645b5e6090 R15: 00007fff3f6398f8
[  460.507701][   T31]  </TASK>
[  460.510818][   T31] INFO: task syz.4.2389:15274 blocked for more than 143 seconds.
[  460.535128][   T31]       Not tainted syzkaller #0
[  460.540197][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  460.559523][T10207] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.568574][   T31] task:syz.4.2389      state:D stack:26152 pid:15274 tgid:15269 ppid:5826   task_flags:0x400140 flags:0x00080003
[  460.581016][   T31] Call Trace:
[  460.584999][   T31]  <TASK>
[  460.587947][   T31]  __schedule+0x1798/0x4cc0
[  460.592477][   T31]  ? __lock_acquire+0xab9/0xd20
[  460.598243][   T31]  ? __lock_acquire+0xab9/0xd20
[  460.603118][   T31]  ? __pfx___schedule+0x10/0x10
[  460.610422][T10207] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.615411][   T31]  ? schedule+0x91/0x360
[  460.624365][   T31]  schedule+0x165/0x360
[  460.628551][   T31]  schedule_preempt_disabled+0x13/0x30
[  460.633712][T10207] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.636780][   T31]  __mutex_lock+0x7e6/0x1350
[  460.642181][T10207] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.647617][   T31]  ? __mutex_lock+0x5bb/0x1350
[  460.660789][   T31]  ? rdma_dev_change_netns+0x39/0x300
[  460.667015][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  460.672050][   T31]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  460.678506][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  460.686667][   T31]  ? do_raw_spin_unlock+0x122/0x240
[  460.691892][   T31]  ? _raw_spin_unlock+0x28/0x50
[  460.697049][   T31]  rdma_dev_change_netns+0x39/0x300
[  460.702240][   T31]  rdma_dev_exit_net+0x203/0x340
[  460.707594][   T31]  ? __pfx___might_resched+0x10/0x10
[  460.712869][   T31]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  460.718673][   T31]  ? net_generic+0x1e/0x240
[  460.723174][   T31]  ? mutex_is_locked+0x17/0x50
[  460.728750][   T31]  ? rtnl_is_locked+0x15/0x20
[  460.733444][   T31]  ops_undo_list+0x49a/0x990
[  460.738315][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  460.743426][   T31]  ? ops_init+0x469/0x5c0
[  460.748542][   T31]  setup_net+0x2d6/0x320
[  460.752821][   T31]  ? __pfx_setup_net+0x10/0x10
[  460.758099][   T31]  ? copy_net_ns+0x337/0x4e0
[  460.762710][   T31]  ? down_read_killable+0x1d1/0x350
[  460.768633][   T31]  ? preinit_net+0x47d/0x780
[  460.773247][   T31]  copy_net_ns+0x34e/0x4e0
[  460.777839][   T31]  create_new_namespaces+0x3f3/0x720
[  460.783121][   T31]  ? security_capable+0x7e/0x2e0
[  460.788311][   T31]  unshare_nsproxy_namespaces+0x11c/0x170
[  460.794166][   T31]  ksys_unshare+0x4c8/0x8c0
[  460.798680][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  460.803927][   T31]  ? do_user_addr_fault+0xc85/0x1380
[  460.809230][   T31]  __x64_sys_unshare+0x38/0x50
[  460.814267][   T31]  do_syscall_64+0xfa/0xfa0
[  460.818754][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.824407][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.831033][   T31]  ? clear_bhb_loop+0x60/0xb0
[  460.836784][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.842795][   T31] RIP: 0033:0x7fd37438f6c9
[  460.847442][   T31] RSP: 002b:00007fd3725ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  460.856335][   T31] RAX: ffffffffffffffda RBX: 00007fd3745e6180 RCX: 00007fd37438f6c9
[  460.864638][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  460.872615][   T31] RBP: 00007fd374411f91 R08: 0000000000000000 R09: 0000000000000000
[  460.880856][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.889305][   T31] R13: 00007fd3745e6218 R14: 00007fd3745e6180 R15: 00007ffec9442288
[  460.897558][   T31]  </TASK>
[  460.903359][   T31] 
[  460.903359][   T31] Showing all locks held in the system:
[  460.926336][   T31] 1 lock held by khungtaskd/31:
[  460.937710][   T31]  #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  460.949980][   T31] 4 locks held by kworker/u8:2/36:
[  460.956775][   T31]  #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  460.970676][   T31]  #1: ffffc90000ac7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  460.982101][   T31]  #2: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820
[  461.004475][   T31]  #3: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.016493][   T31] 2 locks held by getty/5597:
[  461.021184][   T31]  #0: ffff88803383d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  461.032740][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  461.043564][   T31] 2 locks held by kworker/1:9/13449:
[  461.049629][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  461.061198][   T31]  #1: ffffc90002f97ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  461.072400][   T31] 3 locks held by kworker/1:11/13456:
[  461.079558][   T31]  #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  461.091026][   T31]  #1: ffffc90002ef7ba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  461.108288][   T31]  #2: ffff88803d3ad240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0
[  461.119049][   T31] 2 locks held by syz.6.2378/15224:
[  461.125012][   T31]  #0: ffffffff99b65918 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  461.136546][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  461.149506][   T31] 2 locks held by syz.4.2389/15274:
[  461.159931][   T31]  #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  461.204424][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.224573][   T31] 2 locks held by syz.8.2474/15596:
[  461.229805][   T31]  #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  461.254157][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.284380][   T31] 2 locks held by syz.5.2651/16278:
[  461.289614][   T31]  #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  461.314587][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.326785][   T31] 2 locks held by syz.2.2681/16367:
[  461.332017][   T31]  #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  461.343714][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.355902][   T31] 2 locks held by syz.7.2808/16853:
[  461.361201][   T31]  #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  461.370845][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.382237][   T31] 2 locks held by syz.3.2812/16991:
[  461.387713][   T31]  #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  461.398079][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.409862][   T31] 2 locks held by syz.0.2961/17499:
[  461.415196][   T31]  #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  461.424793][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.436142][   T31] 2 locks held by syz.9.3061/17867:
[  461.441940][   T31]  #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  461.452082][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.464229][   T31] 2 locks held by syz.8.3202/18421:
[  461.469434][   T31]  #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  461.479691][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.491589][   T31] 2 locks held by syz.1.3411/19167:
[  461.497108][   T31]  #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  461.507009][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.518978][   T31] 2 locks held by syz.6.3461/19365:
[  461.524998][   T31]  #0: ffffffff8f2becf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  461.534698][   T31]  #1: ffff888057c70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  461.547235][   T31] 4 locks held by syz-executor/19874:
[  461.552614][   T31]  #0: ffff8880b176cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  461.564284][   T31]  #1: ffff8880b176c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  461.574159][   T31]  #2: ffffffff8f435c68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  461.584617][   T31]  #3: ffff888067645338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  461.594275][   T31] 1 lock held by syz.7.3620/19989:
[  461.599368][   T31]  #0: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  461.610711][   T31] 3 locks held by syz.5.3623/20005:
[  461.616288][   T31]  #0: ffff888047a1cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  461.626567][   T31]  #1: ffff888047a1c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  461.638612][   T31]  #2: ffffffff8f435c68 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  461.649169][   T31] 5 locks held by syz.4.3631/20024:
[  461.655844][   T31]  #0: ffff88808e7a2488 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  461.666341][   T31]  #1: ffffffff8f330070 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  461.677697][   T31]  #2: ffffffff8f2cbc88 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[  461.687599][   T31]  #3: ffff8880ada78788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6e0
[  461.698820][   T31]  #4: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  461.710260][   T31] 
[  461.717894][   T31] =============================================
[  461.717894][   T31] 
[  461.733725][   T31] NMI backtrace for cpu 1
[  461.733744][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  461.733770][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  461.733780][   T31] Call Trace:
[  461.733789][   T31]  <TASK>
[  461.733796][   T31]  dump_stack_lvl+0x189/0x250
[  461.733826][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  461.733849][   T31]  ? __pfx__printk+0x10/0x10
[  461.733880][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  461.733905][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  461.733929][   T31]  ? __pfx__printk+0x10/0x10
[  461.733951][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  461.733979][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  461.734003][   T31]  watchdog+0xf60/0xfa0
[  461.734025][   T31]  ? watchdog+0x1e2/0xfa0
[  461.734049][   T31]  kthread+0x711/0x8a0
[  461.734074][   T31]  ? __pfx_watchdog+0x10/0x10
[  461.734091][   T31]  ? __pfx_kthread+0x10/0x10
[  461.734114][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  461.734134][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  461.734154][   T31]  ? __pfx_kthread+0x10/0x10
[  461.734175][   T31]  ret_from_fork+0x4bc/0x870
[  461.734193][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  461.734216][   T31]  ? __switch_to_asm+0x39/0x70
[  461.734228][   T31]  ? __switch_to_asm+0x33/0x70
[  461.734239][   T31]  ? __pfx_kthread+0x10/0x10
[  461.734261][   T31]  ret_from_fork_asm+0x1a/0x30
[  461.734292][   T31]  </TASK>
[  461.734298][   T31] Sending NMI from CPU 1 to CPUs 0:
[  461.889403][    C0] NMI backtrace for cpu 0
[  461.889419][    C0] CPU: 0 UID: 0 PID: 19989 Comm: syz.7.3620 Not tainted syzkaller #0 PREEMPT(full) 
[  461.889437][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  461.889447][    C0] RIP: 0010:check_preemption_disabled+0x5c/0x120
[  461.889468][    C0] Code: 84 27 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 <f7> 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 50 6e 92 41 f6 47 2f
[  461.889481][    C0] RSP: 0018:ffffc9001a71f438 EFLAGS: 00000046
[  461.889495][    C0] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 0000000080000000
[  461.889505][    C0] RDX: ffffc9001a71f601 RSI: ffffffff8d7230c9 RDI: ffffffff8bbf0760
[  461.889517][    C0] RBP: dffffc0000000000 R08: ffffc9001a71f5f8 R09: 0000000000000000
[  461.889528][    C0] R10: ffffc9001a71f658 R11: fffff520034e3ecd R12: ffffc9001a71f608
[  461.889539][    C0] R13: ffffffff81738d25 R14: ffffffff8df3d660 R15: ffff888040e38000
[  461.889551][    C0] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[  461.889564][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  461.889574][    C0] CR2: 000055fe5402e000 CR3: 000000000dd38000 CR4: 00000000003526f0
[  461.889588][    C0] Call Trace:
[  461.889594][    C0]  <TASK>
[  461.889602][    C0]  lock_release+0xbc/0x3e0
[  461.889617][    C0]  ? deref_stack_reg+0x19f/0x230
[  461.889637][    C0]  ? unwind_next_frame+0xa5/0x2390
[  461.889653][    C0]  unwind_next_frame+0x19a9/0x2390
[  461.889673][    C0]  ? unwind_next_frame+0xa5/0x2390
[  461.889690][    C0]  ? __unwind_start+0xf8/0x760
[  461.889710][    C0]  __unwind_start+0x5b9/0x760
[  461.889728][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  461.889748][    C0]  arch_stack_walk+0xe4/0x150
[  461.889768][    C0]  ? arch_stack_walk+0xe4/0x150
[  461.889786][    C0]  stack_trace_save+0x9c/0xe0
[  461.889803][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  461.889827][    C0]  save_stack+0xf5/0x1f0
[  461.889849][    C0]  ? __pfx_save_stack+0x10/0x10
[  461.889880][    C0]  __reset_page_owner+0x71/0x1f0
[  461.889901][    C0]  __free_frozen_pages+0xbc4/0xd30
[  461.889927][    C0]  vfree+0x25a/0x400
[  461.889945][    C0]  ? __pfx_kcov_close+0x10/0x10
[  461.889960][    C0]  kcov_close+0x28/0x50
[  461.889973][    C0]  __fput+0x44c/0xa70
[  461.890001][    C0]  task_work_run+0x1d4/0x260
[  461.890022][    C0]  ? __pfx_task_work_run+0x10/0x10
[  461.890042][    C0]  ? do_exit+0x6b0/0x2300
[  461.890059][    C0]  ? kmem_cache_free+0x19b/0x690
[  461.890083][    C0]  do_exit+0x6b5/0x2300
[  461.890104][    C0]  ? do_raw_spin_lock+0x121/0x290
[  461.890124][    C0]  ? __pfx_do_exit+0x10/0x10
[  461.890150][    C0]  do_group_exit+0x21c/0x2d0
[  461.890169][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  461.890191][    C0]  get_signal+0x1285/0x1340
[  461.890217][    C0]  arch_do_signal_or_restart+0xa0/0x790
[  461.890238][    C0]  ? task_work_run+0x1d4/0x260
[  461.890258][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  461.890287][    C0]  ? exit_to_user_mode_loop+0x40/0x130
[  461.890303][    C0]  exit_to_user_mode_loop+0x72/0x130
[  461.890317][    C0]  do_syscall_64+0x2bd/0xfa0
[  461.890338][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.890353][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  461.890368][    C0]  ? clear_bhb_loop+0x60/0xb0
[  461.890384][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.890399][    C0] RIP: 0033:0x7f8009f8f6c9
[  461.890411][    C0] Code: Unable to access opcode bytes at 0x7f8009f8f69f.
[  461.890419][    C0] RSP: 002b:00007fff32331238 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  461.890434][    C0] RAX: 0000000000000000 RBX: 00007f800a1e7da0 RCX: 00007f8009f8f6c9
[  461.890444][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  461.890453][    C0] RBP: 00007f800a1e7da0 R08: 0000000000000198 R09: 000000173233152f
[  461.890463][    C0] R10: 00007f800a1e7cb0 R11: 0000000000000246 R12: 0000000000070486
[  461.890473][    C0] R13: 00007f800a1e6270 R14: ffffffffffffffff R15: 00007fff32331350
[  461.890494][    C0]  </TASK>
[  464.044190][   T68] net_ratelimit: 17 callbacks suppressed
[  464.044206][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  464.164230][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  464.274043][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  464.384076][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  464.494128][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  464.604540][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  464.716111][ T6380] bond4: (slave bridge3): failed to get link speed/duplex
[  464.846036][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  464.964297][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  465.074163][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  469.114337][   T68] net_ratelimit: 35 callbacks suppressed
[  469.114357][   T68] bond4: (slave bridge3): failed to get link speed/duplex
[  469.234016][T10207] bond4: (slave bridge3): failed to get link speed/duplex
[  469.343946][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  469.454265][T10205] bond4: (slave bridge3): failed to get link speed/duplex
[  469.564442][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  469.674217][T10209] bond4: (slave bridge3): failed to get link speed/duplex
[  469.783788][T10205] bond4: (slave bridge3): failed to get link speed/duplex