last executing test programs:

2m37.429800846s ago: executing program 1 (id=157):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$key(0xf, 0x3, 0x2)
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f00000000c0)=0x7a42, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x6f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60e400ff003f3a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006000060000001100fc0200000032430796d65500000000000000000000000000000000000000ffffac14140017e0ff182e8079f39200"/125], 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r4, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000300)={r0})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0)
recvmmsg(r8, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x22, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000050110c00000000008510000002000000850000000500000095000000000000009500a505000000003ae8633ddd8dcee12a8af778a01aad5559906c9a79d4f8ad11b18855a006a80dbbe6c19d37b07f7674b96e32b4a6b1d122c5f1d6db76ba024285600fa5119b0310a47d3daa8a38490886d1f3c3ad8ffe096b7b07fa89197e7a379b869144e12174b639e716e721df57e9960a8816fdd7"], &(0x7f0000000080)='GPL\x00', 0xa, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

2m23.587329526s ago: executing program 32 (id=150):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
accept4$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$key(0xf, 0x3, 0x2)
unshare(0x6a040000) (async)
socket(0x8, 0x3, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async)
listen(r2, 0x0) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x6f, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x39, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "17c1ff182e8079f392"}}}}}}}, 0x0) (async)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
accept(r2, 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x48040}, 0x20000000)

2m23.536193478s ago: executing program 33 (id=148):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x40480c4}, 0x4004800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="002c49728688000000000000000000000000010186dd"], 0x38}}, 0xc4c4)

2m21.602517752s ago: executing program 34 (id=157):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$key(0xf, 0x3, 0x2)
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f00000000c0)=0x7a42, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x6f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60e400ff003f3a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006000060000001100fc0200000032430796d65500000000000000000000000000000000000000ffffac14140017e0ff182e8079f39200"/125], 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r4, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000300)={r0})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0)
recvmmsg(r8, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x22, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000050110c00000000008510000002000000850000000500000095000000000000009500a505000000003ae8633ddd8dcee12a8af778a01aad5559906c9a79d4f8ad11b18855a006a80dbbe6c19d37b07f7674b96e32b4a6b1d122c5f1d6db76ba024285600fa5119b0310a47d3daa8a38490886d1f3c3ad8ffe096b7b07fa89197e7a379b869144e12174b639e716e721df57e9960a8816fdd7"], &(0x7f0000000080)='GPL\x00', 0xa, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

2m4.379897906s ago: executing program 35 (id=175):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="f07ca2a5ddef2d495ba3c21a71e6da3785230a40f3a5dfedbc1ec673e7334f395602b4da2aa2612d9bb0601c6a07014f12b5d7fcb2bf9321a7720d5d35edc88f5d6efa0a01b86e07ba3951267ec41fd398895774152bbf131785011d5e329f623e4a54cab4978df5fff95c923dad73bbae58", @ANYRES32=r0, @ANYRES32=r0], 0x48) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00', 0xfffffffd})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r3, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async)
shutdown(r1, 0x1)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xd, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7800, 0x8020, 0x14853, 0x400000}}) (async)
r4 = socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000080000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766aadb6d2ffbac2100ae3e4", @ANYRES32=0x0, @ANYRES32], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a0000000", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e65746465767369"], 0x4c}}, 0x0) (async)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000200)={0x0, 0xfffffffffffffcd9, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1404, 0x1, 0x70bd28, 0x24dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) (async)
r10 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendmsg$inet(r10, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0xffff, @private=0xa010102}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="08001efdff00f180", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x400c890)

1m53.849273488s ago: executing program 36 (id=280):
unshare(0x62040200) (async)
write$tun(0xffffffffffffffff, 0x0, 0x3e) (async)
getsockopt(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x1, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000100)=@buf={0x68, &(0x7f0000000180)="beb591e0a2c55f9ad5e474289e154efcc5b350b6b34d6104168217e719f26889817553426707c57704147a4fab4ef4c2d2debaaacccd53b75ccc532b7241c03c6bbea7ab8f0637df65c75e39d3aead6cbf1a594a9b62bbe18df15bd4531586a192814340cf03fec7"})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) (async)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x8a, 0x0, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0xf}}, 0x1c}}, 0x42094) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000009"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)

1m43.584395468s ago: executing program 37 (id=340):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async)
r0 = socket(0x8, 0x3, 0x0)
shutdown(r0, 0x1)
readv(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', 0x0}) (async)
syz_open_procfs$namespace(0x0, 0x0) (async)
unshare(0x6a040000) (async)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0), &(0x7f00000002c0)=0x4)

1m37.765955213s ago: executing program 8 (id=486):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r0, 0x300, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000080)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1000, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000380)="f6", 0x1, 0x4008005, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

1m37.696489616s ago: executing program 8 (id=488):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x6}]}}}]}, 0x44}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@empty, 0x4e23, 0x4000, 0x0, 0x9, 0xa, 0x0, 0x30, 0x0, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1bd}, {0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4}, 0xfffbffff, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8)
sendmmsg$inet6(r0, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xf7ffff7f00000000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth1_to_team\x00', 0x1000})

1m37.689812616s ago: executing program 8 (id=490):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000043000000080a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a3000000000140000001100010000000000000000000a00221e"], 0x8c}}, 0x0)

1m37.615226616s ago: executing program 8 (id=491):
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r1, 0x0, 0x3ffffffe}, 0x18)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100fe0006", @ANYRES16=0x0], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4000)

1m37.505867898s ago: executing program 8 (id=492):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x6a040000)
r2 = socket(0x11, 0x3, 0x1000)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r1, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRESOCT=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x44d1d2d2}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='afs_call\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x13, 0x0, "69581d697ea5eb7d897346c6a689c5c2b87a0770b314008d37d3a037371e3242a33d6831a00495b63e21a8b1ed27cd4626acc229839f95059a164925277bc131da641967e304a7c92e0476679299d17d"}, 0xd8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r0, @ANYBLOB="7a7bbc355d73cc26d5809ed6a9f8a570a7822bdfac046178c2b33f3e7775f8104dd287d1fab90b165183e00f74d4a232dabcbde7ffe497d3a047eadcfbeaaf9732b5d48760fdaaad7aea69d66d0c7562456e24b86cad90563a785ffb712c1309de472cd03a3392e02e7f5dfcf220d86ae91a7eb468f4a3640c8abf64eed81f422194d57071a9ddb5f17d46389485e5f709217d59fb0eead55a5987dc8457fcd31f0be60bcc59bf584cbbc10e4e5f9853d213be586f1fd904e9", @ANYRES64=r3], 0x0, 0x51, 0x0, 0x3, 0xa392}, 0x28)
r4 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0)
r6 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r7 = socket$inet(0x2, 0x2, 0x1)
r8 = socket(0x2, 0x2, 0x1)
bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = getpid()
ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f0000000000)=r10)
socket(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000150001c035748ce4bb0510000b000000080002000a01010260796957d81517775554350927dd44d928879ced18ca48a99d144a3ee81570e2b770a72ef1730c37c4489d8711383eb548dbde4aafe8"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x44040)
r12 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r13=>0x0})
bind$can_j1939(r12, &(0x7f0000000080)={0x1d, r13, 0x2, {0x2, 0x1, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r12, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x582bdc175908feae, 0x0, 0x4}}, 0x18, &(0x7f0000000000)={0x0}}, 0x20048801)

1m37.417018964s ago: executing program 8 (id=495):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a320000000014000580080002400000000208000140e1"], 0xa0}}, 0x0)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
socket(0x10, 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x4, 0x4, 0x9c34, 0xc0}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x48884)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, 0xee01}, {0x0, 0x0, 0xffff, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x3, 0x0, 0x0, 0xb7, 0xffffffff, 0x0, 0x1}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010305000000000000000000000605000100070000000900020073797a310000000014000780080013000000000008001240000000000500050002000000050004000000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$packet(0x11, 0x2, 0x300)
unshare(0x40020000)

1m34.580873717s ago: executing program 38 (id=398):
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff69, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40884}, 0x4010)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000065778d01e1bad51c2cbd94a59e013b90808a29e38fd35e4de3660b33c745bd7ef3cf414b92a41607402411f7b750385fe24d415d1aa3231ee5badc230cbd13e2308a11def9fb1e7735c5cf1318294211020979c654bd45b12232e0263b101b323290c78cf501730e051638ea6c57b6b59e0e01219b12f636640e517d36354a9b3f94af6644baef564415e94367d9284234b97191479710b8999e459d33b19ac12acc4fc05511ec1162fe00a95ca812d4f0ba49c09212fad84d0411f7b165c2d76d09", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000065778d01e1bad51c2cbd94a59e013b90808a29e38fd35e4de3660b33c745bd7ef3cf414b92a41607402411f7b750385fe24d415d1aa3231ee5badc230cbd13e2308a11def9fb1e7735c5cf1318294211020979c654bd45b12232e0263b101b323290c78cf501730e051638ea6c57b6b59e0e01219b12f636640e517d36354a9b3f94af6644baef564415e94367d9284234b97191479710b8999e459d33b19ac12acc4fc05511ec1162fe00a95ca812d4f0ba49c09212fad84d0411f7b165c2d76d09", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
unshare(0x4000000)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000300)=[{0x7, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet(0x2, 0x4, 0x0) (async)
r1 = socket$inet(0x2, 0x4, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800002000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='btrfs_add_block_group\x00', r4}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='btrfs_add_block_group\x00', r4}, 0x18)
unshare(0x68040200)
socket(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000009000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000d96e3a08da79f7020fb54961b09319000000000000000095536ce4179a"], &(0x7f0000000280)='GPL\x00', 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000009000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000d96e3a08da79f7020fb54961b09319000000000000000095536ce4179a"], &(0x7f0000000280)='GPL\x00', 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadd2db8662", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c0000001800835e010000000000000002000000fd00fe030000000008000400", @ANYRES32=r9, @ANYBLOB="d0bf1d9bffffffbf329696ad6e02884fd1e60f6b1b5ad052d0f4a79efe9a2b71f1db282bc054d171a006285c38a5fc8041bcbd6f68770246d6b55e96370d5f7a4dae6c5556f93caac9d543d12dac58234c3ba80049672028d42cdf6311db4149d9cb91fa95746adeb1e3f3a90d3777b7b6ee34e610bbdd3da3"], 0x2c}, 0x1, 0xffffff7f}, 0x84)

1m31.624287118s ago: executing program 9 (id=530):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x1000004, 0x0, {0x80}}, 0x14}}, 0x0)

1m31.53579031s ago: executing program 9 (id=531):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000a80)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x6, 0x6, "e295e6", 0x8, 0x11, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {0x4e20, 0x4e21, 0x8}}}}}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000380)={'gretap0\x00', <r6=>0x0, 0x40, 0x20, 0x6, 0x4, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x65, 0x0, 0x8, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x31}, {[@noop, @noop, @cipso={0x86, 0x41, 0x2, [{0x0, 0x9, "a7ae1feb18181f"}, {0x2, 0x10, "f86150e0ab9a21ce705d704e35a6"}, {0x1, 0x3, "c1"}, {0x2, 0x2}, {0x2, 0x7, "71f917a2a6"}, {0x6, 0x6, "1ed55c48"}, {0x7, 0x10, "eaf738be1453105573c24a11555e"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r9}, 0x10)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000700)={<r10=>0x0, @broadcast, @broadcast}, &(0x7f0000000140)=0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wg0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000008c0)={'team0\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r16=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000050400"/20, @ANYRES32=r16, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800800140000000000050016000000000006000dffef00000004001200"], 0x50}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x2, 0x7fff, {{0xe, 0x4, 0x2, 0x3a, 0x38, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x24, 0x66, 0x1, 0x3, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xcd6f}, {@remote, 0x3}, {@multicast2, 0x98}]}]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000a00)={@mcast2, <r17=>0x0}, &(0x7f0000000a40)=0x14)
r18 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000000c0)={'lo\x00', <r19=>0x0})
sendmsg$nl_route(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r19, @ANYBLOB="800202000a0002"], 0x48}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x58000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="a0080000", @ANYRES16=0x0, @ANYBLOB="000329bd7000ffdbdf250100000008000100", @ANYRESDEC, @ANYBLOB="400102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f3ffffff080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="ec0102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000101000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="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", @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="bc000280380001002400010061637400000000000000050003000300000008000400000000000000", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000c00000008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0400028008000100", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400bd73000008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004001000000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004007e00000008000600", @ANYRES64=r15, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff01000008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000800003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\a\x00\x00\x00', @ANYRES32=r19, @ANYBLOB="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"], 0x8a0}, 0x1, 0x0, 0x0, 0x48880}, 0x40013)
r20 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r20, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)

1m31.528726642s ago: executing program 9 (id=532):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x24, 0x21, 0xffffffffffffffff, @void, @void, @void, @value=0xffffffffffffffff}, 0x20)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x6}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0xfd, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0xb, 0xffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000b80)=0x400, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r8 = socket$l2tp(0x2, 0x2, 0x73)
getsockname(r8, 0x0, &(0x7f0000000180))
sendto$inet(r7, &(0x7f00000003c0)="25d719", 0x3, 0x8014, 0x0, 0x0)
sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xa0)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf25110000006c000380080001000100000008000300000000001400020076657468305f746f5f687372000000000800030004000000080001000000000006d589a5bf854357e04c0007004e22000014000600fc0100000000000000000000000000000800010000000000080003000400000005000800000000005800018008000800040000000800080009000000080009005b000000070006006c630000060004004e230000060004004e24000008000600776c6300070006006e710000080006006f7666000a0006006c626c63720000000c000380060007004e22000008000600360d0000"], 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x8004)
close(r0)

1m31.42375757s ago: executing program 9 (id=533):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
unshare(0x400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x4, 0x4}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x4)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r8, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r4}, 0xfffffffffffffdf4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r9, r6, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r10)
sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x44, r11, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)

1m31.35484555s ago: executing program 9 (id=534):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x5f}}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x20, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x10, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8"}]}, 0x20}], 0x1}, 0x0)

1m31.352330676s ago: executing program 9 (id=535):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
unshare(0x6a040000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) (async)
write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98)
write$bt_hci(r3, 0x0, 0xb) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async)
r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) (async)
pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r8 = socket(0x2000000000000021, 0x1, 0x10000000000002)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020600000000000000000000000500000000000000001b7f5b920d6a47d20c0000000900020200000000000000001100030068f733e31f58"], 0x58}}, 0x0)
connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async)
sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async)
recvmmsg(r8, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) (async)
recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0xfffffffffffffda2, 0x0, 0xffffffffffffffba}, 0x40006021) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='cachefiles_write\x00', r0, 0x0, 0x1}, 0x37)

1m25.424918138s ago: executing program 4 (id=572):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0x10}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x240000b4)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}}, 0x0)

1m25.173554496s ago: executing program 4 (id=573):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'pimreg\x00', {0x1}, 0x5})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x7, 0x4, 0x0, 0x0, 0x3, 0x10010}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e22}}]}, 0x4c}}, 0x4850)

1m25.173276351s ago: executing program 4 (id=574):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe46, &(0x7f00000003c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0xffffffffffffff44, 0x6, 0x0, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0)

1m25.095658225s ago: executing program 4 (id=575):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

1m25.030898757s ago: executing program 4 (id=576):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000180000000000000b8000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x2)

1m24.954153979s ago: executing program 4 (id=577):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='fsi_master_aspeed_cfam_reset\x00', r0}, 0x18)
socket$igmp(0x2, 0x3, 0x2) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000840)=ANY=[], 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000005d00)=ANY=[@ANYRES32=r3], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
recvfrom(r4, 0x0, 0x0, 0x40002000, 0x0, 0x0) (async)
recvfrom(r4, 0x0, 0x0, 0x40002000, 0x0, 0x0)
socket(0x2, 0x80805, 0x0) (async)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x40000) (async)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x40000)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000240)={r7}, &(0x7f0000000280)=0x8)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
unshare(0x62040200) (async)
unshare(0x62040200)
write$tun(0xffffffffffffffff, 0x0, 0x3e) (async)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]})
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYRES64=0x0], 0x328}}, 0x84)

1m21.568921194s ago: executing program 39 (id=495):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a320000000014000580080002400000000208000140e1"], 0xa0}}, 0x0)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
socket(0x10, 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x4, 0x4, 0x9c34, 0xc0}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x48884)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, 0xee01}, {0x0, 0x0, 0xffff, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x3, 0x0, 0x0, 0xb7, 0xffffffff, 0x0, 0x1}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010305000000000000000000000605000100070000000900020073797a310000000014000780080013000000000008001240000000000500050002000000050004000000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$packet(0x11, 0x2, 0x300)
unshare(0x40020000)

1m15.521158504s ago: executing program 40 (id=535):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
unshare(0x6a040000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) (async)
write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98)
write$bt_hci(r3, 0x0, 0xb) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async)
r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) (async)
pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r8 = socket(0x2000000000000021, 0x1, 0x10000000000002)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020600000000000000000000000500000000000000001b7f5b920d6a47d20c0000000900020200000000000000001100030068f733e31f58"], 0x58}}, 0x0)
connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async)
sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async)
recvmmsg(r8, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) (async)
recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0xfffffffffffffda2, 0x0, 0xffffffffffffffba}, 0x40006021) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='cachefiles_write\x00', r0, 0x0, 0x1}, 0x37)

1m9.94313547s ago: executing program 41 (id=577):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='fsi_master_aspeed_cfam_reset\x00', r0}, 0x18)
socket$igmp(0x2, 0x3, 0x2) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000840)=ANY=[], 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000005d00)=ANY=[@ANYRES32=r3], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
recvfrom(r4, 0x0, 0x0, 0x40002000, 0x0, 0x0) (async)
recvfrom(r4, 0x0, 0x0, 0x40002000, 0x0, 0x0)
socket(0x2, 0x80805, 0x0) (async)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x40000) (async)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x40000)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000240)={r7}, &(0x7f0000000280)=0x8)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
unshare(0x62040200) (async)
unshare(0x62040200)
write$tun(0xffffffffffffffff, 0x0, 0x3e) (async)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]})
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYRES64=0x0], 0x328}}, 0x84)

1m6.729962129s ago: executing program 1 (id=642):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000003c0)={'batadv_slave_0\x00', @random})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', <r2=>0x0, 0x0, 0x1, 0xc1, 0xffff, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8, 0x6, 0xfffffff7}})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x6c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20080010)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x4, 0x4, 0x9c34, 0xc0}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x48884)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x2, 0x9, 0x0, 0x0, 0x2, 0x20, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x3, 0xcd96}, {0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x80, 0x1}}, 0xe8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$packet(0x11, 0x2, 0x300)
unshare(0x40020000)

1m6.194816664s ago: executing program 1 (id=682):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async, rerun: 32)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) (async, rerun: 32)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
setsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000040), 0x4) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x10001}, 0x1c) (async, rerun: 32)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) (async)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r5, 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x4c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, &(0x7f0000000180)=""/118, 0x1b, 0x76, 0x0, 0xd792}, 0x28)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x30, r9, 0xa66d7000)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getpeername(r10, 0x0, 0x0) (async, rerun: 64)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x110, 0xffffffffffffffff, 0x2ecd6000) (rerun: 64)
syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, <r11=>0x41424344}, 0x4, 0xffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x4, 0x0, &(0x7f0000001680)="ca300000"}, 0x50) (async, rerun: 64)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r11, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0) (rerun: 64)

1m6.092656082s ago: executing program 1 (id=685):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r2, 0x7, 0x0, 0x40000000, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x34}}, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x7, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x47810, 0x3}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
sendto$inet6(r0, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c)
r5 = socket(0xb, 0x80404, 0x400)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r8=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d8fb0ce7e755a79d84000000020000000a000400280000000b000002", @ANYRES32=r8], 0x20, 0x2400e044}, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={r8, 0x2}, &(0x7f0000000140)=0x8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@dellinkprop={0x54, 0x6d, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0xa200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_UMCAST={0x6}]}}}, @IFLA_PHYS_SWITCH_ID={0xf, 0x24, "f1415abb975aecb22ea77c"}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='highspeed\x00', 0xa)
shutdown(r0, 0x1)

1m5.18354907s ago: executing program 1 (id=695):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000408c1454a3000000000000"], 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x21, 0x2, 0xc, 0x5, 0x200, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0xea, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x5457, 0x10}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x9, &(0x7f00000003c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000000340)='GPL\x00', 0xfffffffd, 0xd8, &(0x7f0000000440)=""/216, 0xe3b80, 0x40, '\x00', r2, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x3, &(0x7f00000009c0)=[r8, 0xffffffffffffffff, r9, r10], &(0x7f0000000a00)=[{0x5, 0x2, 0xc, 0x9}, {0x2, 0x2, 0xf, 0x9}, {0x5, 0x1, 0x6, 0x195a7ce0ec4c37}], 0x10, 0x6}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

1m5.034374307s ago: executing program 1 (id=696):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"})
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x4, 0x4, 0x9c34, 0xc0}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x48884)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) (async)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@RTM_NEWNSID={0x1c, 0x58, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8}]}, 0x1c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001540)={&(0x7f0000000d00)={0x80c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x57f8, 0x8, 0xfe, 0x400}, {0x100, 0xe, 0x6, 0x236}, {0xfff, 0x8, 0x7f, 0x4}, {0x2, 0x2, 0x22, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x80c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001540)={&(0x7f0000000d00)={0x80c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x57f8, 0x8, 0xfe, 0x400}, {0x100, 0xe, 0x6, 0x236}, {0xfff, 0x8, 0x7f, 0x4}, {0x2, 0x2, 0x22, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x80c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x3, 0x0, 0x0, 0xb7, 0xffffffff, 0x0, 0x1}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$packet(0x11, 0x2, 0x300)
unshare(0x40020000)
mmap(&(0x7f0000838000/0xf000)=nil, 0xf000, 0x0, 0x80010, 0xffffffffffffffff, 0x10199000) (async)
mmap(&(0x7f0000838000/0xf000)=nil, 0xf000, 0x0, 0x80010, 0xffffffffffffffff, 0x10199000)
socket$nl_xfrm(0x10, 0x3, 0x6)

50.029386715s ago: executing program 42 (id=696):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"})
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x4, 0x4, 0x9c34, 0xc0}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x48884)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) (async)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@RTM_NEWNSID={0x1c, 0x58, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8}]}, 0x1c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001540)={&(0x7f0000000d00)={0x80c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x57f8, 0x8, 0xfe, 0x400}, {0x100, 0xe, 0x6, 0x236}, {0xfff, 0x8, 0x7f, 0x4}, {0x2, 0x2, 0x22, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x80c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001540)={&(0x7f0000000d00)={0x80c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x57f8, 0x8, 0xfe, 0x400}, {0x100, 0xe, 0x6, 0x236}, {0xfff, 0x8, 0x7f, 0x4}, {0x2, 0x2, 0x22, 0x9}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x80c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffffffffffc, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x3, 0x0, 0x0, 0xb7, 0xffffffff, 0x0, 0x1}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$packet(0x11, 0x2, 0x300)
unshare(0x40020000)
mmap(&(0x7f0000838000/0xf000)=nil, 0xf000, 0x0, 0x80010, 0xffffffffffffffff, 0x10199000) (async)
mmap(&(0x7f0000838000/0xf000)=nil, 0xf000, 0x0, 0x80010, 0xffffffffffffffff, 0x10199000)
socket$nl_xfrm(0x10, 0x3, 0x6)

47.723175249s ago: executing program 2 (id=856):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100000400000000010000000000000000000000005f2060"], 0x0, 0x35}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000040)=""/50, &(0x7f0000000080)=0x32) (async)
getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000040)=""/50, &(0x7f0000000080)=0x32)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000380)={0x2, 0x1, 0x2})
openat$cgroup(r0, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) (async)
r5 = openat$cgroup(r0, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup=r5, 0x31, 0x1, 0x7fffffff, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000400)="a9708d65bbb257acf31bfd74fe61ffdd3f864920e6cfade6660c9eab26df235221c9bcb4a3e5b715dac6d469e752014c7b80cebb9a7671ef0f3d745880af5bd1ae22bdbcc101d5b9f9284ddcaa697fafd369dc5c0116ae4c06efd559ff9ce0cacd976bc3658c9a7d3cb82a420202d7f92eba6fd8d1499778bdc1b85b77df97cc1dcf9b54", 0x84}], 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010102, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x98}, 0x4000000) (async)
sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000400)="a9708d65bbb257acf31bfd74fe61ffdd3f864920e6cfade6660c9eab26df235221c9bcb4a3e5b715dac6d469e752014c7b80cebb9a7671ef0f3d745880af5bd1ae22bdbcc101d5b9f9284ddcaa697fafd369dc5c0116ae4c06efd559ff9ce0cacd976bc3658c9a7d3cb82a420202d7f92eba6fd8d1499778bdc1b85b77df97cc1dcf9b54", 0x84}], 0x1, &(0x7f0000000540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010102, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x98}, 0x4000000)

47.523898899s ago: executing program 2 (id=859):
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

47.452392609s ago: executing program 2 (id=860):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000400be95f964c2ac0000020000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x28, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x28}}, 0x20004000)
r3 = socket$packet(0x11, 0x2, 0x300)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000340)={r4, 0x1, 0x6, @local}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x2000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000037c000018003780130003007174722834141faa532df09a"], 0x2c}}, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r10, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r5, 0xff)
sendmsg$sock(r7, &(0x7f0000000840)={&(0x7f0000000400)=@l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)="298936939cbaeb8c2abef628d97d2b901b57e183f35f48778950cd174d9cb02b65f2b7beaf52fa6d4496f9b38165fc6a7e97efe1296514cdcebe534ff597fdb09072", 0x42}, {&(0x7f00000005c0)="4af6beaff4275e0cd7b023d89dea6840575d1f979940328b5082e7e44ca1134181bc6c60c3783b15eba8e841e365dd06b211cf95044459a948108bcbf1aaf341e46995cb0d75af8200f8f246a9dc8d854f4536bdc0f63a67a5648c5f9c6a7a6856758e1e378fc38aede6113aa7fbbe901e1c7275bd65a1b5dd01165401d8b8f2d23ae69f04a4bd64b492f382222ef50d2aa4ad09cc8de12181fad0b97c97c4a6637c393cf48b9a0ee7c70e1cff67d7a1400df6e4f905f16404fc9e3ad29b12f6427464b9707628e4a6f6355e78479cd839530db3eaf58ed84292ab04011330407634b8ef9bca4e4f95c35cac3df1e02709", 0xf1}, {&(0x7f00000006c0)="6ffa4590fa0aa30d319091f62e53fe60e8171d865273e018b4b0ea086b9a36332a5e5cafa91f563b8b4e41cd723df3f824b4300ca4593f54cd7f0a72ba8aa873dee097a49f3072bc1d59d14ee5eb62525bcc558c7f6356312ed7bb7382", 0x5d}, {&(0x7f0000000480)="5472b5b17d5b611b9511a6d3cb9e7b3734e2123a5cc5894de747130362f886093520667bd0480929", 0x28}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000000740)="406d5a6f647837dfe84151cd5db0ea82e78b6625ac9f5d4316627d87a1f6289680", 0x21}], 0x6, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x20044c00)
r11 = socket$netlink(0x10, 0x3, 0x8000000004)
sendto$unix(r11, &(0x7f0000000380)="09ec077d1c1f688a45c9d3db766b70de385083c5c81033d51a45a662e6117f4159fe9289653f01fb5b69294e68ca46464f360177211b00f42024c187aba888f9a1117b16e8d6b8465a221811eb029b4cb03895218578566a065c30abed44d2f8bd3bc3c3d79549abfa54a727bad95c715c7c52b9781b8d6f", 0x78, 0x4010, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
writev(r11, &(0x7f0000000000), 0x0)

47.293086432s ago: executing program 2 (id=862):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)="a4d73f6acddec7d480865a571958707d909bce8d4d0c9c9ecdd6fd7e0a248e0aba48ea8dd74e0b010c4ad784d7d4d2e72713dd37c89922f835083b0ffd41ddf8b53771e8e4b8c37ad6f766507b0baef508f81b55ba814138f1e06bbe90ed1090af8d59ecb0eee41c69733b56", 0x6c}], 0x1}, 0x480c0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20048000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000180)=ANY=[], 0x141)
unshare(0x8000400)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4004af07, &(0x7f0000000000)={0x2000000, 0xa000000000002, [0x3, 0x5, 0x9, 0x4, 0x9, 0xff]})
sendto$inet(r0, 0x0, 0x0, 0x24048f4d, &(0x7f0000e68000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x98, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x800)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_ifreq(r7, 0x8919, &(0x7f0000000280)={'gretap0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
sendmmsg$inet(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000080)="97", 0x1}], 0x1}}], 0x1, 0x44000)
clock_gettime(0x0, &(0x7f0000000180)={<r8=>0x0, <r9=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0x7, 0x3, 0x10, 0xfff, 0x5, 0xd05, 0x7ff, 0xf}, &(0x7f0000000100)={0x7ff, 0x2, 0x2, 0xf3, 0x1000, 0xfffffffffffffffe, 0x9, 0x1}, &(0x7f0000000140)={0x6, 0x0, 0x4, 0x5, 0x6, 0x7, 0x9, 0x576f}, &(0x7f00000001c0)={r8, r9+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0xa]}, 0x8})

47.002559033s ago: executing program 2 (id=864):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1700000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r2, &(0x7f0000000340)=""/49, 0x31)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000806010800008b4658203ff3c95de209000000c2082d4edc5fd0ca855e24be72230b000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x8044)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
sendto$inet6(r0, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0)
writev(r0, &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x4, 0x10}, {0x7, 0xe}, {0xd, 0x4}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040)

46.790768272s ago: executing program 2 (id=866):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) (async)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
unshare(0x6a040000) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) (async)
r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x2fc, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xa5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x2b4, 0x111, 0x0, 0x1, {0x2b0, 0x5, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x277}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x337}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x218}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x129}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4002000}, 0x20000000) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380200001600010127bd7000fedbdf250a010100000000000000000000000000fc0100000000000000000000000000014e2480014e244de20a0080802c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x0)

42.222449221s ago: executing program 0 (id=904):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept(r0, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x6)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20)
recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r5, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x2}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r7=>0x0})
unshare(0x64000600)
gettid()
r8 = socket(0x10, 0x803, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r7, @ANYBLOB="049c01000750050008001300", @ANYRES16=r9, @ANYBLOB="140003002e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004886}, 0x24004800)

41.972308417s ago: executing program 0 (id=905):
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) (async)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000380)="cebdd21fe03e57c125bd9c3965b579407c9962373117b122c45bf84c98a973ecb6b9ad663b6a07bdfb5c17a5a2cd48dc09da2f20c69872e6399874332704872ec2a432d22928522671038af0783ef06a2f8ef5bf4c1852cc25f1ab39b7c146d2cb25084504d5606202f98d0b03dc", 0x6e}, {&(0x7f0000000040)="dc", 0x1}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x70bd2b, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20}, {0xd}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24044044}, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='*\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)

41.861595352s ago: executing program 0 (id=906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}}, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x40, 0xa, 0x0, 0xeac, 0x3}}, {0x4}}]}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x54}}, 0x0)

41.8023159s ago: executing program 0 (id=907):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000206010100000000000000075ec2ab13bba5da000a0000000900020073797a300000000005000100"], 0x30}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x2, 0x3e, 0x50, 0x69, 0x0, 0x4, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xd, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2}, {@private=0xa010102, 0x5}]}, @lsrr={0x83, 0x7, 0x68, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x3, 0x9a}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x6}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x9, 0x4062, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x1000, 0x72, &(0x7f0000002900)="a2d4ccb6517f977cee51e5a560d50e21d41affea096434e29598817a7fb4a5a4334448e70d7b22ea7e2490812d22c7989aa16710474de7fc398741055c094c6b4c09cff3b32266bee0cee13543167fdb1af66c2ffe6b7182bc58ee99fcf3d25b540f96caeac34886e308bec904d97177cbae9bad114d94f16530929625d81c11aba105646d9416c8d55d8b8c5ebc5bb2b120a3f1b5df27a0bc8e951f42cb84126dca2f717c28bf0010b158db132282bf882edab96bc0c3576310d3004a542df616cb4bfad76f916b704a17e79fea31753933d29e16f17cd750c2c62d6f9027f047f7363ac3c87cfe45d98a379cc4e6a5eb34a7c8ce5440b0967dce63dd4a9f64cd76682cfb7d7c39840c24fd38e6e9797a4d80013adcddf6dba5c1835444b41edfd36aad52b525152d5f660952a2d473b3c8846be37d4d5c4d386fb0922746100e16ca9e4e4eec27260828da44b2db7239ed33256360e834bec1039fdf7a05f8f37cc5bdcf10b9b875617eaf9e7612d2d17e2125069813fb76e706c3e23382edb6e0411a9af29468a075ecd2ec1d0112959226fd69cf0dc6f20164e571a54ca4c0ff255f1c7ee764f3ac1e336b303fae89bbd43591d7a2d4e6ce5b78712a698465877bf3bc217758fe41558e4b40bdb3ae339530f6b76173bdbee217feffcc1ea86f1fae0702f5ae0afc631df3281717b00ac8f4650c7ad0bc300e49d78082df267b67a8ca24fbe7a87dc0097daeb6a00fe3f75e3bda98508adf53d2f08e1ef21a83184d4e1c1742a66378cf58db69984cdc87731e33dec016d2f8d9e222e515acf5c2baa2c8b776a024a20a74e7d9e58cecd6452f928953e03ebe8d54baa27d4606a384a4fbdcd786a3676475ee9bda12f267cf2203f34f50f7dcfd63431b45171a652fa12982921f066833e6aacb1d8e1ef0896882efcdf0e17b49dc38884d1c6485d920cf8eee94d436a7fcf081669a2c2e23ca8e01a3bde2461a263e8b94be2085bff9da5e85dca5975f52e3a2343301358d405112dd8990d77a6767516854b49703c50c7f36d1484b40d359b27e3f4b61d58e2ea2b23ca01ba5e8783b85e1df7b451d240d8a82140c226c593f0a0e0034d2688d7c5ef87c7d0b5eaba4cd6b5addcecdcd46089ba2c6f2bc21035825ec212f3fcbf467056d90e7607fcbb19082164a3c9a32239aa009959ec9c8d14a54be900ee3794df46e888055134ba65cf518d2c2abcb0d5f043cf6733d341dcbc607de6081f1b87c4726bba9290c7bae7ca0b984471820aeb7002ea038b6ce0e9b8549acee85d0ca8eb6fb5b2dbbda3358bc3fd754a915d619bcbffbb8aac23a4f8ae93a09044cb09873162201e874e360eafd33844677053b91e49139115d13df468c570cd5d46ce2687a92d5d05915741bd07fd5bab2527563c498697ae7fb7ab200d3d3d27238352ebce620fe727d64ab7d547593965e5ad387d62827c540b6150d1cc0f9f459dd8d7d4dd6dea59289f3f1f4e0e67aa04d0bc84b1b5e5301018bd4862f4103c77db9c5f28940acc7459b29313479fe64688a841078967cbb58777c57b66bee54a9e9e11520a9ee4cb1fd89b50aca22cbb478062e0cb45b8a535354ac5afc56ecb2d62c84922f4ea0e41456fa78c4981bf4177e9612c2595736f0beed63082ff3a791e351854e63c4d0552812646526f46d982ae3341248c60a9eebd160a7895494a6107a9e35f1c9ded42ee417e08bef17fce804bedcfb674a2f0d0127d4976ee139f528ac7e2877780ee7b5da9ef4dbd5164f255df25f7705fd84526fa3ab94cebe40fc21b6964c8154d2d061c167476edd2aac6786989fac87750b55195078a475fac562bde5e6c5750ee77a46d599f13ddf61ef0b11a7c816344207bd700b78c873309d84b307980451e00566124b12be8d1fa4077ff7291a2958d4e6b69e800e73fd4cfe785b369e95a16541ed0261cb563b552ab7ee818466173169c29e49bfd6b1d3da20b667222121f26397f8b3a5934e88ea553bc1135321eee0ca06acdc78fd62c353dc6e802c581f87a2cffc3d2fad195698b78361640b8cb259957dedee3e2fda6e3ddfdc60979c6e068e908a1a4dafbb01b7d0bc34afd5cf5cd216d3a512113a8a770703b4551a47824f6f10d92dde7b8cc4fcc2bbd63aaa698391d0727ce03725b83344d5d8fb8579c4508dbaf8a7e4f1e5d66a8fdbd4ad71ffba84002c94dc69f88aa9bbfa52cc1e8b0a890733d6bfd0c52c52cd1bbc4fb3b8026ccfb431482086c3989609fcba10e66e3c60dcaa847f2eb999d724b2789e4879cea4ad1d1785e4a2a66f9eeb6a45117207e49c25123e2e7143ba569a5a9bca90df182c19fbbd41e2727946feac0910aa110bf11026db21423ba85062f62a14b279981c8e34b29bd7eb45889aed44329030ecf094de7eac54ebd8e3c30ddc4bb9de524f5707a34ab50c176ed6ae7d0e0d831cfaf38a65c2913389bb94f25bb965bd0fac7dfd5ce6cc27b7ad746eeb50ea956ab8d56a92c068c5f0175d493a2ae053615e7b423f5d1a25d51f3b609fd61bbcb4a78e28fe30561f16367f85d90d6b6108582e98add0b9044ea6bb5f9d88fca388bf088f44b42897abe2cee93bffc4ffb1b3b2ff3748d41307a7bab02a88cf51922da691c0258447ea05ada74fdea4ae39819241d101838c6938e519bf0c25a47a0c34b6b6316b18b1c4b83be3ea866ccd46590bf804a47f2a359c70f38d076f4007372ba2855817b580036eb782d81d42a976c42e7425931caeb675413cd23f993c240e2cdbb50043196f508cc541042e39ee0c3ab54ae98d3d25b0103d160f19a87a0ef625cf1b2348d8984cc6cde435f0d41341cce4b2557c1e2beb0f5ff80b9797d3391efa1f48a58d3e74972d6293cc7b28470141941e0f9eff19376710017bb514fac3bf7e3061d194f51cc40afbe382fc66dd0db7b7b2a486136a9885afb7142f507e8ceeb424761732b35ca2b599f993074bb7dcecc52a5139ab109d2d902f3fc3340b8fea41522334bc5941cd7265cc49f36a591fe68a266c9f6c5fa7e1658426a76b12673de656197a9126d00fe89eaf40db27130391d6c7ed738d9fa30629d02456729be7854f29f6f9d724725057b1661def21b23a145426bf38f9ed2ef6f3e80dfdb8ce2755bdbb0a77edb754a9f2ce81259f2e84b461fecc25a1534b2d3babf9053f2898c07ba01c2f3c32a4374fd997486121f4e1a9f6d8d9d54517af3483088d02b87249409d89f71499cc4a6e10093fa8e292d27104c81a5327abfad59bec1a78e21d7a4bd215ba5f5883595eafcfd6ed060f4fa2039fe004ee6ee7bff71196724ba500407827a8322cb570161ca5439b289261681c49c65a8b048b536f11a8f4490e657c19ff72fca9d26f9cdd59e0ae25a2f1fa4f790de85c9b64fd9f13808f9f6b6434d70174b7d5791354dfabb9b9229d84df151d19e5d99f2d52d7d7860ae1edcdd68ced254151a33e72a4385d195698b0d8f8488b05cb03107d35ad08f4ce5989f2f9d4f8ba8c2efff7767477359de8e661e35f8583226d0adb5ee733e9576a679fe86a9a6cfa5e4332e02b243bdc988b4e82105c37735d46bda7f04cc86590ac6482131b834c0a45245a17243cb92db48513dd223439a7f82524114c5817331e97b209f6534234e5af1f857a589d922eb862e22e63d966797e2dcaf21fc59f5b1670e7d4d0d901afb4a3a966129177900f9f713340caffef8f103cede9286706f8967fdc93d5b44b8d950430b89349289de42900edb2bdcc325b5b8a4180ba980dbe5a74f16a5901410a56ca3334267fcecc5db02ccb05ca91e1cd60dd2f3acf383bb8d3b3df6ca7780ab4c44c34332678e72a1ab5719066737d33229f6c7acc6c323a15fe6a974c04e88fcdef7ff4c6295f587cda201054a66289dbb51cf40160f30930956cc01d4bb685fa377b2e325513760a3e73242f678852c60bc12bc282485934ce87cb0eacda9611ff0379e4d223ba0d08b142fd2d3157cff3630eea6f908acbda88e29ac7a749b17bddcc951c64d8aa4a9e706f91a825c4a2f05e0eced4911e610711b65316762c1413a74852ee4abd1ae7893633bc31ac1e85dab82e999685cc0c146e00984fe4d07bfbd80bc1b0d3033ed089e67aaf7c12d60e94fab29f8959700b1c7c0132499050d05d9bad9f5e635f5218f952a0c916d83466f8f57490dce13c1be6362469886f90a3ec8101125eb86bc0178ab2a80d5b9aaf40775926c487e02d44cd5ee248415d741ce63f22729ace95eb17681e6d5ae4289e2ad3105153336534521c42fe52a0d3177e0def09349913f4233d8fdc254805be4338b85ce1b297d3a0e66c1da37104bacad45e00d19849445ae38be0598d6cdda71c759937b13973a2a98d6ddb4970cecf150eed4793bef8aedb3308e5446c7d87fe45a5a8e2a24fbccc61a03b7bac90df31c892be4ece5e44623f92a4bf0bca660ace09242dad904ae16d664b3960cb0bbccabf7404399211e5a8fc049a938b14b7031537247fa96bf4071aa504c6f6dde10263c0ea894a47f4510e2face6ce83817038640f06bba2b9b35a8e6944056928b45adcd1cb2b23240d92f075893a6b5d95e81203f8551bba6b3b568337946a7847d981541289a0579f6302da6b32765b318dcb9c109f42e29c5293dab2f5fcdb00db561ec44602b2f9723922d90fcf51c0ce75db121ea9e789c4104bc0ece85ded29ec47251507c286d89770de36f4e0d2c9981e9c31d327d20bd51fb7cb3623f695aa8c589bfd7e5eaa61ddaa63d7ffaa7aad65df757ea912ae3717997ff4923cb9cad84a2ba183d822ccfdfef4ea1400505ecdfba9f55562430c88912f857312804b225bdfe71ad5d07436a9f056d69653a10fcbe1dcc26085c999b7f763bf02a286a7b528ce3097f778b3d29b88fb420a74763d9fc0740865b578fed518409c58c19b42c3ed4fd739354698dd9ceff5c06e4bd1647b08f5898dc8814aea3f60d3b89cea720598cc4149eb7dea33f3d2b7e49dd014bbe9e8f0345f7518d1d5be90dfe39563400cf97487fad3a8698cb7e2187205fb6b6c3b6903dd0e5a11e2b0793935f39cd051f5e45ebf8c38450f2174091a8bf373ea0ac8350b8cc47617526d982d0ab499f2942deffebde29f46744ac80fc1abb7407db14a35f42870c709df14c15902b20d8637f63cd6dcb7acee1e6b61abea110da07c93d1b8c8c84914d2e9a712558c8036bbd07866384bfb0d4a318495fd887587b11ae504790665c4dee660077abc0fcb46ca35173ff6a964ab8428f671f52fd1d2732443b2cc518e015943d48102ff06ad24c14365dfe64ac1856e2b8da45ab523729512a49967ae6ac5a8dde2492404f92420549502ed5598f8384556660db2714510e15acc365692a26ee718080df7189c1b2df99a410d239fe59f381df36788decb003cd01ee794b3e39e281f79fe2cdf8d177ab7a6cac37c318b0e573c8d4b679654f6b18de8a3c91ca32c4a134e0da2a03e031fa7a51d09a9cc4d9736442807a1f3babd9f22cb688d56c35db1b2b7d32345c37a31957ebb26df03ea3cd29683b729bf3aa5d5da659176b3ac98e537ec7107aca89b13acf085d8e57d5f8c0bda88439d5c4190b8d68920937ce71fe98ec449dc79b1df7243c5d58523cfbd035e64b50bd133622e83ce5398f5cd519ed071192ec6cda1eccf54edc9d764431336b6f0c9d9f26695e3e14d13a77a2b2a5a1c85697b2fba5079908ab9a5a9aacd93db18b8540590db3fad601387fd052a2518ab6a560e40cb09e00ea8", &(0x7f0000000340)=""/114, 0x8, 0x0, 0x36, 0x0, &(0x7f00000001c0)="99cebee1a88c87f52d9ccf77a99c2cc6df56e08447193014028cf560d802b9187a835f67a490a6247dd636e58087e98444cd419a305f", &(0x7f0000000480), 0x6, 0x0, 0x1}, 0x50)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)

41.731796842s ago: executing program 0 (id=908):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kvm_set_spte_hva\x00', r0, 0x0, 0x40000000100000}, 0x18)
unshare(0x62040200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r1, 0x1, 0x20, &(0x7f00000005c0)=""/85, &(0x7f0000000780)=0x55)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
splice(r5, 0x0, r7, 0x0, 0x1, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0)
write(r4, 0x0, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)

40.752648873s ago: executing program 0 (id=915):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="98d5", 0x2}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x20048889) (async)
recvmsg$can_j1939(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000223) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
r2 = socket(0x21, 0xa, 0x10000) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) (async)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) (async)
recvfrom$netrom(r2, 0x0, 0x0, 0x12000, 0x0, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x4000) (async)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x48000280) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)

31.794853493s ago: executing program 43 (id=866):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) (async)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
unshare(0x6a040000) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) (async)
r4 = openat$cgroup(r3, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x2fc, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xa5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x2b4, 0x111, 0x0, 0x1, {0x2b0, 0x5, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x277}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x337}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x218}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x129}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4002000}, 0x20000000) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380200001600010127bd7000fedbdf250a010100000000000000000000000000fc0100000000000000000000000000014e2480014e244de20a0080802c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x0)

27.332036411s ago: executing program 3 (id=998):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000001340), 0xede8, r0}, 0x38) (async, rerun: 64)
unshare(0x22020600) (async, rerun: 64)
r2 = socket(0x2, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x72) (async)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
epoll_create1(0x80000) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000240)=@req3={0x0, 0x1, 0xfffffff8, 0x2100, 0xe, 0x0, 0x3}, 0x1c) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) (async, rerun: 32)
setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000000), 0x4) (async, rerun: 32)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000980)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080d4}, 0x24044010)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async)
close(0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@ipv6_newrule={0x8c, 0x20, 0x400, 0x6, 0x25dfdbfe, {0xa, 0x14, 0x10, 0x2, 0xfb, 0x0, 0x0, 0x4, 0x10002}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, @FRA_DST={0x14, 0x1, @remote}, @FRA_DST={0x14, 0x1, @empty}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc80}, 0x200000c0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010066bd7000ffdbdf250900020073797a300000000008004100736977001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) (async)
socket(0x10, 0x803, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x20)

26.971868588s ago: executing program 3 (id=1001):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x9)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getrule={0x14, 0x22, 0x4, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0xa, 0x0, 0x1, [@nested={0x4, 0x410}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
socket$igmp(0x2, 0x3, 0x2) (async)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) (async)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="070000000400000000070000000700002c"], 0x50)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept4$bt_l2cap(r11, 0x0, 0x0, 0x800) (async)
accept4$bt_l2cap(r11, 0x0, 0x0, 0x800)
ioctl$sock_inet_SIOCGIFDSTADDR(r10, 0x8917, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x0, @multicast1}}) (async)
ioctl$sock_inet_SIOCGIFDSTADDR(r10, 0x8917, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x0, @multicast1}})
sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010700000000fbdbdff2a90000000800c300000000000800c40000000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010700000000fbdbdff2a90000000800c300000000000800c40000000000"], 0x24}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r13=>0x0})
r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r14, 0x303, 0x70bd2b, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)

26.76283303s ago: executing program 3 (id=1003):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x24048194}, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
close(0x3)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x7d, &(0x7f0000000040), 0x8)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}})
write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x1}]}}]}, 0x44}}, 0x44080)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0)

26.622771881s ago: executing program 3 (id=1004):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) (async)
r2 = accept4(r0, 0x0, 0x0, 0x80000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
sendmmsg$inet(r7, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) (async)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async)
getsockopt(r6, 0x111, 0x1, 0x0, &(0x7f0000000080)) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000002000010000000000000000000a202000000000000000000008000d000a00000014000200000000000000000000000000050016002f00000014000100fe8000000000000000000000000000bb00000000"], 0x54}}, 0x0) (async, rerun: 64)
socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) (async)
setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2)
sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000008c0)={0x64, r4, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async)
r10 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
r11 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r11, &(0x7f00000000c0), 0x10)

26.621462173s ago: executing program 3 (id=1005):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000080)=0x9, 0x4)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000004c0))
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x7c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x200}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40830}, 0x20004000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r5 = accept(r4, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r5)
setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000180), 0x4)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000003c40)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff00000000030000001100000000000000000000020000c9"], 0x0, 0x4a}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYRESHEX, @ANYRES16=r8], 0x20}}, 0x40090)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x1c}], 0x1}, 0x0)
close(r0)

25.759650445s ago: executing program 44 (id=915):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="98d5", 0x2}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x20048889) (async)
recvmsg$can_j1939(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000223) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
r2 = socket(0x21, 0xa, 0x10000) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) (async)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) (async)
recvfrom$netrom(r2, 0x0, 0x0, 0x12000, 0x0, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x4000) (async)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x48000280) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)

25.710643032s ago: executing program 3 (id=1010):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r4 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b70200000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079227e98cc07c09c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b9267aa0b28d69a74ffdea613e892f0f9ff9468e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff180aa18b625d1667459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da21f6f57020dd4f1f4f15edd7a0b1e24c6f79e3ea72a29c7928f000000006c5c8dddea685405273c7967d2c1a14efe0d53cb4b95a1ed7203000000ed52e5c08822cdcf2bc058ff9aab481926312fc7c88b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c8b10ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e40891"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES8=r5, @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4044800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="002c49728688000000000000000000000000010186dd"], 0x38}}, 0xc4c4)

10.507861826s ago: executing program 45 (id=1010):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14}}, 0x74}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r4 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b70200000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079227e98cc07c09c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b9267aa0b28d69a74ffdea613e892f0f9ff9468e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff180aa18b625d1667459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31044c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d7d714ff3a85586b9b452301f5470d0e0ae5d7f82f178f0c7c9c8f44c390c8a2c5be9e24a125420912ec9a3149f87b35ef1169f05e49164a4944e7b4da21f6f57020dd4f1f4f15edd7a0b1e24c6f79e3ea72a29c7928f000000006c5c8dddea685405273c7967d2c1a14efe0d53cb4b95a1ed7203000000ed52e5c08822cdcf2bc058ff9aab481926312fc7c88b1044e8c1c17d8c562edf69f4db96e059c49ec69a6086b5a3d24f4c8b10ab5f6a9f9eb5c881883e5671bbca4614df48103ca6e40891"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES8=r5, @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4044800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000003000010000060000000000000500000a40000000030a0fdb00000000000000000a0000050900030073797a3000e60014000480080002403cb140bb0800014000000003140000001100010000000000000000000100000a00000000000000000000000000ea8bdeba2c3409622e06cc07a92525d6272dc9a3580f5f2195b40617e1abfd71bfa83cf97956854859c761e8c8f3b9c6c29d3a59e5223ecadee466ddf2740ec6c79879e7c3ee15af61f9871104756f92cbcedc71537570a8e0abbf5ec726a507130115f1fc8e9112207e284e2717bf6aebb5736d12c27f82d4484a023697a7bb946840176393b04b23a5f07f9061d314d28566e2ff6a7f9e71404714dfcc4622783e330fac19213c7270d1e03e977960a2bac7290ada1e2e77637ea5c7f9120eaa72f5fc2c53fcc6b6be9090640bd1214969bcd6ac59f8418acb950ef8be62c9af25c372e6695f177c53898f52fb09b128a4beded9eb75524083035b1591457c5e21f824b0af6b7d7e81a04c7e6be99e526c298a8a381c797a8e181f0d8f0610dba023850c5b36de0530d562e5e7469cc56fcbfe02da4593b93bcd961615b1f69d5db86c5951eb6b04ba1363c32bc753cf7aa1d9e8e69aed6366377062d410128b652ffda9b6ddee925af857e786eebe3813c6c6235f71bbd111c8b46b7f4cee8c7c66277a678a63362dcc0fdfe022471026213e82f69ac73c16e6f91b00185f4151bbd9efed2daf7adea99af9faec8d5fe22648d5b96338ae64d9e43500f0c8be0cbb6c4fdfa5edca6aa1f3cd3f2e53f81b1814c662b21026cef05bdaa2c73386eed752484b459f1dd74a48d0205ccc5652f1581d82a98abf0aefd305"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="002c49728688000000000000000000000000010186dd"], 0x38}}, 0xc4c4)

2.550609073s ago: executing program 5 (id=1200):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0) (async)
r4 = socket(0x8, 0x3, 0x0)
socket(0x2, 0x80805, 0x0) (async)
r5 = socket(0x2, 0x80805, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
getsockopt$bt_hci(r5, 0x84, 0x1, &(0x7f0000000000)=""/4087, &(0x7f0000001000)=0xff7)
r6 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xe, 0x6, &(0x7f0000002100)=ANY=[@ANYRES32=r2, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="85465037f4b5b7f70b3146e0933e78d0b0a16a95ac17eff440bd64dc3b03fe5af244c6a11c2b0993a0eebda51d56f82195dc9f5ac23186a5b078388fd39e296b9d89ea0b6c5dcab0fae5d550b8463f01c5e3f2d93d6eda9053a634470c77228b5e6ba42da844425da41f8e79d5073b079f51f58c6af8bd13a9a5417a8d4a2b3737b86d2b27b833", @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
r7 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r7, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000400)=0xfffffffffffffff7)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002", @ANYRES8=r6], 0x10}}, 0x0) (async)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002", @ANYRES8=r6], 0x10}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000060000", @ANYRES64=r9, @ANYBLOB="00000000280012800b000100677265"], 0x48}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0800000025000000040000000800000000000000fcc5856322ec53b55ffdd3dd61767c1371d9f67e94f3f6d716e8296374267209b99317460f73559364d8f90b5810029e6009866e2f9ba0fafa8a74a7197a74f73143f4298ad30c43b31560cbfc5745e69a133e6027c88b5c8c1e9c2110dadf476e1b9f284aed3c050c0945dfddedfd1ff5478bee027fa3d78c30de956a1f4ea78e8b1d1cd7c45b44abcf62cd697c6223be9636e73e26b75cae1eeca0e2909efccf65a935f99f3873f069c86787d02590cb782cd42ad260293abb9bbc4511bc70ad3201b8e96a247328d70a49a48d2d01deb975ac4a169c782564dabe9ca85a7cba49be3934cac18e3fc60f3b2fea9d0872b7a4ae9adc7c70fd68f11f2c7d502f2a6771957eaf27f93807363dca805615d69ea6", @ANYRESOCT=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
openat$cgroup_ro(r8, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async)
r11 = openat$cgroup_ro(r8, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10}, &(0x7f0000000180), &(0x7f0000000340)=r11}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10}, &(0x7f0000000180), &(0x7f0000000340)=r11}, 0x20)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r12, 0x1, 0x7, &(0x7f00000000c0)=0x41004, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000080)=0x2, 0xfffffffffffffe96)
getsockname$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f00000003c0)=0x1c)

2.398692264s ago: executing program 5 (id=1203):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$ax25(0x3, 0x2, 0x7)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c00f6000000000000000000140001000000000000000000000000000000000050bb2d0067d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f0000cf5fb1c7d3e8f53b7d4198f470efd0dbbd524970ce62bbc3e024ea5b74d91342dc38ac01883c978c4869c454bca39b27e7bfe65c938dded8f855b744f6e66589d3d59cde913f60677c9c54c5ba57346bedea97cf951f7423c6fedf783d8c6d81490fd9e706950fad54990a7ff9194eb22164bdfcb191c50db0e98dbc4c1555a7427a346d7934c2572d780e833e85a6ef0555f5076dcf3d9da4ac8b71752122ea9496cdf9b474cb1e04894c5337c53afb663c4df4cb40f3ba0c694b0a853a563689023309465f1da53ca32112ffc966663c49277c7e"], 0x114}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}, 0x1, 0x0, 0x0, 0x88ff}, 0x0)

2.321218517s ago: executing program 5 (id=1204):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)=""/262, 0x106}, {&(0x7f0000000140)=""/81, 0x51}], 0x9}, 0xf}, {{&(0x7f0000000280)=@can, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1}, 0x86}, {{&(0x7f0000000540)=@generic, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/11, 0xb}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2}, 0x3}, {{&(0x7f0000001780)=@xdp, 0x80, &(0x7f0000000700)=[{&(0x7f0000001800)=""/90, 0x5a}, {&(0x7f0000000640)=""/35, 0x23}], 0x2, &(0x7f0000001880)=""/108, 0x6c}, 0xffffff7f}], 0x4, 0x400001c3, 0x0)

2.242889045s ago: executing program 5 (id=1205):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x95, 0x8, 0x2371}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000380)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x24040890) (async)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0x0) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180002000000000000000500000d000000000abe00000500000006000000020000000900000005000072b0afa20006000000010000000c000000010044ad4639a7e8e5e8fa43ef9625de4394c920e701d994a779ff07818f0739059f076ce68f7b759196fe2c1f9027fc5553efbd7f687bceee7364fda333a134057165aaba4e3608f54ac991a847c133"], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async)
r6 = socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)

2.242553466s ago: executing program 5 (id=1206):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r2)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0x1c, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = socket(0x8000000010, 0x2, 0x0)
write(r5, &(0x7f00000002c0)="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", 0xfc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @broadcast}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}})
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1, r1}, 0x94)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000841)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2)
setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f0000000080), 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000040)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}, {&(0x7f0000000a00)="8bb8d67e1fd8c1b6dd3f885fbd55ded38542982ba3c53d0b48dcbef14affa7a0d21d050270b12ac8413453eebcce142de99047e76bcf079fbdf4520013f5051865952c8020d45112ae0a1c8451cdbe3070672c1204c1663a619478f87175bc9cc23f28e3db95c2b09a365d9a77077e45fa4fd7d2f2a2a67ec3d2951208eea162ae1315abb0bbada1aa70df04733ca8", 0x8f}, {&(0x7f0000000140)}, {&(0x7f0000000280)="7c7091bc5c7f56d77a87e3", 0xb}], 0x4}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000ec00000b0000001400"], 0x36)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)

2.115271862s ago: executing program 5 (id=1208):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
accept4$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$key(0xf, 0x3, 0x2)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close(r3) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x0) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x6f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60e400ff00393a00fe880000000000000000000000000001ff02000000000000000000000000100000009078000000006000000000001100fc02000000000000000000000000000000000000000000000000ffffac140a0017c1ff182e8079f39267a5ff44c8f27af8784c5ad83f7d98d720c26803613f1babde8f27836b3c4dc0aea30cc195eaf02ce92fbb3f4a43fb5bbf69a0f24f4fc8e849b3cb332ef60035eb5c3deafecae98fd762aab56e9b7f70d23b40cdadc3"], 0x0) (async)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
accept(r4, 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

1.868327395s ago: executing program 7 (id=1213):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="010000002100000000000000000000008580000075220000a500000023000000a9"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='afs_call_state\x00', r1, 0x0, 0x1}, 0x18)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r2, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r2, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98)
write(r5, 0x0, 0x0)
close(r7)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r11)
sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x34, r12, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xfe}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8c00)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x24, r12, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x41}]}, 0x24}}, 0x4000)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014008000008080002"], 0x1ec}}, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
poll(&(0x7f0000000080)=[{r0, 0x4220}, {r0, 0x50}, {r0, 0x2087}, {r0, 0x1001}], 0x4, 0x5)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0)

1.868006643s ago: executing program 6 (id=1214):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0xb}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002500)={r1, &(0x7f0000000000), &(0x7f0000000140)=@tcp6=r2}, 0x20)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004)

1.79056968s ago: executing program 6 (id=1215):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000180)=""/220, 0x4a, 0xdc, 0x1}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2f, 0x1f, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbc5e}}, @jmp={0x5, 0x0, 0x2, 0x3, 0xc, 0x4, 0xb2937087089baef9}, @jmp={0x5, 0x1, 0x8, 0x2, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0xa3, &(0x7f00000001c0)=""/163, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000000c0)=[{0x3, 0x1, 0xa, 0xa}, {0x2, 0x4, 0xd, 0xa}, {0x2, 0x4, 0x5, 0x3}], 0x10, 0x8}, 0x94)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a8008"], 0x44}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, r2, 0x25, 0xb, @void}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f000000d540)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f00000121c0)={0x0, 0x0, &(0x7f0000012180)={&(0x7f0000012140)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000005c0)={'wpan0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000600)={0x5, 0xfffffffe, 0x817d, 0xfffffff9}, 0x10)

1.567889059s ago: executing program 7 (id=1216):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001002bbd7000fbdbdf2504004f8008003300", @ANYRES32=0x0, @ANYBLOB="1f0021800c002e8008009200d4080000090013"], 0x3c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.567014584s ago: executing program 6 (id=1217):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010000000000000000000a8014002000000800000000040002"], 0x44}, 0x1, 0x0, 0x0, 0x20048081}, 0x48080)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
r4 = socket(0xa, 0x3, 0x3a) (async, rerun: 32)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
readv(r4, &(0x7f0000000380)=[{&(0x7f0000000440)=""/169, 0xa9}], 0x1) (async)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x34, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x5, 0x0, 0x1, [@generic="a8"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

1.490450631s ago: executing program 7 (id=1218):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x19, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040)
r2 = socket(0x2, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x44040)
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="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", 0xfa}, {&(0x7f00000000c0)}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000200)="01c9f4c4b2010e2e196fdd692e6f96fd2091f3279b5e9326cc83ddc47a9a28d6a8ae484cad241fc9204cf38f3bc2f1d98ca8d6cc953ae27bf8c9643722959dbec5868be21b6d020d0ceb75ded3", 0x4d}], 0x4, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}], 0x20}}, {{&(0x7f0000000340)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000500)="0c4c6513f7ae31ae89dc55e026ea15cfcef32a8edbabee77769f6670179df3065aa8a0f38f1728e10d8adda2c3a0f1b44ac4c548c024240c69b53caf9c91a8f911b0535c9bf499d5c3604ef3642bf67854b9feacead90edac7a1e38ade19f531908ef13056201162dff64c138c348b4dc091241fd37c1bf9ecb91b51a55c2babb2a31923a13940f98c37167f473b9b450546defa287ebd26ee4bd75e71d25137ef358beb5e21236a569cc23dca526f802c06", 0xb2}, {&(0x7f00000005c0)="a29f298729a0404102e8af841da9888f6276aaae9a378df0515aa5211525a37c8923e98decc635d93304a4226faeabea5c9fb1c096735c281123839ba2745dedba7d681e43dfc72e5fe0ec625e7d2493dae4481ba5f8e281d53b45e1025ba9c21eecf6af806103c4c9", 0x69}, {&(0x7f0000000380)="aa6b9b26d92195cb099a648e6692cf3bdc59af628a076f1159f31b638c805d872516b011c3e92dbc7562bd3ff9c4d8f0de479eb0bde3fe7aa227c3fa9854a1", 0x3f}, {&(0x7f0000000640)="9892aa0b2f1353b547011a3e8309df6c8156e861c3529382dc13a2888251274a2d1d39fd1e6733a905c3d158a298c72a6ef99718feaf4aee5e5eeae4fdec24eb5d792c8fafbde7e6155e0efe101d7bc921ffe70e199d08e8826233fd5899acdd4ae52349f42ac076796696de690e261a16a95d45860887bffd978226d99d85b9e7377b960eecc920952884abc3b183a1f8e4b03de0fec2606721da1232b2b41152c71b2a13653fd4d2eecabd74122fe15be90e750d1ec353402e2ef95b0e024f4e38fde0ddcf3b2938d0", 0xca}, {&(0x7f0000000740)="223874cfd2486ebf54908f2647a9d495dd48c8cf8e36f2c87779f0203ffe689d8221a1f1fbb139913c7e53c3aff4acd12555f23f4de16b6cdacf824eae0f67229438ada644802181cf7ac4cde5f421982ca9d3fc997fc96e4e3036457c0557d346166f0b51414666d3a3e246976bcb6a52ec23c662936cdb5efd3e528a556338b7ebd0d63688075651a172c52e54408f9e0eab1f41104aee10ea1b74b7ed80bee9becbb1c7011d36ad45111bd69241900c274abc50ea56d1be1f06063932c82b207b80e265f4a1855ac42891687abc9bf83c6f001a071a937cc1ff2aba915b3f38fc597bf46645b13c067f16d4d779", 0xef}, {&(0x7f0000000840)="b770bd5fb824a75651449289d41b7034a6cbd85ce66ec99671026cd4fd265fd1e35f2c72f92f56c7edb8376a2d6f3752a5b6890b9e110c56401e7f1febcbfbff4535cbdff954363460d498eb3a8ed380ffb45e39d71aed3cd34617bbb7a6cd00d3d37f6616ed8b6ade523378c45d7585583686a0eedac8414b99d1fd62def85dc781cf3a6f02dc366122405c44bb499a8bd3834692e77e86c138eadff670578183638041b81aa906e973df6dd8496e0b900208a2d49d8192c62f163f", 0xbc}, {&(0x7f0000000900)="34ebe9eac41f8469574bd5ed2f34da583795445368e8061cac7e65f01d30b54f0bd8fa0ef4a45f6d40d986a0668ada16c25d6ee82921b89b6443625db8e9f5eb16463f9f3e5a6f72b27fe6acb2408868acd360ce02e5c1ab6754e9c6b86271a12a1bdd466e6bd238e92b9a871797afaa01cac80f6953f8f1b62f0f934a9de02449a46cd1b41f0450e1282fe93d94fdfadd5a2e4341ed18188a758e029246499023ce37b23f16a7561674a3a01babd9df42cfa61cee256b7e1a9025fc080da2a53e54e76c79696654b8628a983a9ae4ff994ec23209ccab802ff91017ec2d69113bd9d8b5efb2", 0xe6}, {&(0x7f0000000a00)="d4", 0x1}], 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000000000000000000000100000003000000000000001100000000000000000000000100000009000000000000001400000000000000000000000100000084000000000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="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"], 0x180}}], 0x2, 0x8d0)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x922, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb15e}}]}, 0x50}}, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)=@bcast)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

1.291479247s ago: executing program 7 (id=1219):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req={0xb, 0x7, 0x9, 0x400}, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)

1.240923535s ago: executing program 7 (id=1220):
r0 = socket(0x1e, 0x3, 0xfffffefe) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r3, @ANYBLOB="0500330011"], 0x2c}}, 0x80) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000140))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) (async, rerun: 32)
syz_genetlink_get_family_id$nl802154(0x0, r4) (async, rerun: 32)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x20, r6, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000485}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xfffff8a5, 0x10001}}, @TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x41, 0xfffffffe}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) (async)
accept4(r8, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000300)=0x80, 0x0) (async)
r10 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r11 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64)
r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000200)='macvtap0\x00', 0x10) (async)
sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x5, @local, 0xa}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0xa}, 0x8000854) (async)
r13 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r14 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'lo\x00', <r15=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff, r15}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) (async)
ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000600}})

1.189309189s ago: executing program 7 (id=1221):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x6a040000) (async)
unshare(0x6a040000)
r1 = socket(0x2a, 0x800, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0xfc41) (async)
bpf$TOKEN_CREATE(0x24, 0x0, 0xfc41)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8)
socket$key(0xf, 0x3, 0x2) (async)
r2 = socket$key(0xf, 0x3, 0x2)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x1}, 0x6)
recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000400)=0xfffffffffffffff7)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r5 = socket$kcm(0x10, 0x2, 0x10)
ioctl(r4, 0x1, &(0x7f0000000280)="f4b35d61be48743f2a1f4ff97fe199274e7716389c7aa4ad0b9ffe8ceac16ef5af1c24df8b65af0cd83aafec3a7ef8646c5795c7d9149e189bb3bd762e7144b128cd0c3c00159b25601321772fbbcdb59f8261177c27d6ee963b26a9da9a45291c6e2355f255e732d713e06094fb13d60155bbdb0a79933aded75d391dd8435fd9aabc97") (async)
ioctl(r4, 0x1, &(0x7f0000000280)="f4b35d61be48743f2a1f4ff97fe199274e7716389c7aa4ad0b9ffe8ceac16ef5af1c24df8b65af0cd83aafec3a7ef8646c5795c7d9149e189bb3bd762e7144b128cd0c3c00159b25601321772fbbcdb59f8261177c27d6ee963b26a9da9a45291c6e2355f255e732d713e06094fb13d60155bbdb0a79933aded75d391dd8435fd9aabc97")
r6 = socket(0x2c, 0x3, 0xff)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x673}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x40010142, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40)

570.060243ms ago: executing program 6 (id=1222):
r0 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x6, 0x401}]}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={<r2=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x135, @mcast2, 0x6}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x0, 0x20, 0x9, 0x3}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4}, @from_mac=@broadcast, @broadcast, @device_a, {0xf, 0x4}, "", @value={0x0, 0x1, 0x3, 0x0, 0x7f}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x7aa)
getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000cc0), &(0x7f0000000d00)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="7a3c82680dfb", @device_b, @device_b, {0x9, 0x8}, "", @void, @value=@ver_80211n={0x0, 0xc, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}}, 0x1c)
sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xf0, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa45}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x24c7427e}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x4008084)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x12c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xbd, 0x16}}}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f9721768ab7650a88db0e6601f20d084"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "496f6a5e51cd231a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0xcc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="09e283c690bcee7df83e594e4778d1240c3ddd3697b4eed2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="20a3245a10ce9b4deba59ae521fd47fc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ca76df5f003d183e10339bb0240b6e648b0278a74cb309e01e2fae28af21e7d5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="634a78595c618a0400e63a952b0f1bd5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "630db4a6de7c9a95"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="55ed09e5d5c86e3368dd05d6a489533b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "23c7280b200c878a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5c20830516f9a479"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0f970aae93c8dd457fb1cc3f098f236f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5067f40ed81ae15fb5837ecb88acbe75"}]}]}, 0x12c}}, 0x811)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
ioctl$SIOCAX25NOUID(r4, 0x89e3, &(0x7f0000001440))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000014c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000001980)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001500)={0x340, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "592ddc98b257debc62f042df8d75928ac874510f7958098c74086e41e7d58e5fc74d941550c8bc2136e7c267a4f57994e2fd3b024839c211cc6c56f166fbc1b974df3dffe86ce3452f378e0ad3b239b4001ee95f82c57e5aa458f48c243010e5b699"}, @NL80211_ATTR_FRAME_MATCH={0x87, 0x5b, "b2da3f1ff32da934078c0713813bc25a39fa46d8cd0578d350de247f8b911422eca149a52ccb03f73646dd7f0eca53ca918b28a6a3d32be9996d02fb6b7bd9f31015d40d1a0c5a8a4ce1f698e0761eab3bd5e737959a5dd4f269754deeabae393d66653d50a8e59167628ce168a6ce8ae3fa93325ad9d1c87c76beab81870eaf348671"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc1}, @NL80211_ATTR_FRAME_MATCH={0xa0, 0x5b, "37e61e56d11b6926af498030438ed5d68add05d5da1747ff6526d43f5b1223706282b2cfa25963c13db4143d2b89bc04a3dea4b25696a8225f8b3028bd5f4e25d29a3fa69e9f5162c605c1e00fc5d54c7421142470db5cb5fb3a688079c6a3aaf1544b0b96158a22e945bc5aa969c02d92650e9b2c3b79fcf7fd2ca2e11e4810d8fa57457e505be1f41c67108bc96d6224dea4aa01268c719355025c"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0x93, 0x5b, "2f7426b10e2ebc9c77a43510cee37cfc88cd02a81f83a0e3eaa009fdae36a1709a8d06fa23c18b29946125595d8326098c0eeec0e431c5fd665b33affd785d8dbae7f8f9b22bbcf7d8593e9e8eea8a4ba9207d992c4f31c70bd98ce6eff8a8759678bf91d1ca068b5b2a4df74069b20c6dee1b1b3f1d504d9cb35f8592a85dd3bd63c7fb6e3deadbc3e70e38c22edb"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff6}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0xe3, 0x5b, "0316eb67fb4e2b5ea15e5a2ec817bca43f5ecde444b5e9bd822656e1f17e68c132a3b5e0248be7e954afcbc537dfbaadba8c6d05a509d94466b897cd527aea3d8ec49d1d1a3c92733707da6a06ea36892f37cca44fb07f7bd38bb77be0b81a4b030b9c2e1b7de877ad26eeb349f475128b79de5263ea0eee3eb1449580dd4310397b975fc5c281b20d30b32b6e8730811763cb54cd201e795395faaca440faf9bda73916568149c29d83b71ac26bf6c8684d0d052d9882f09541ea71b19571062370b1dd2feb720cd78918ab175dd55376c5820f819b72267dfd804e5df276"}]}, 0x340}, 0x1, 0x0, 0x0, 0xc884}, 0x20004000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, 0x0)
r6 = socket$inet(0x2, 0x4, 0x3a275baf)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, 0x0)
pipe(0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001a40), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001c00)={@loopback, @empty, <r7=>0x0}, &(0x7f0000001c40)=0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f80)={0xffffffffffffffff, 0xe0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001d40)=[0x0, 0x0, 0x0], <r8=>0x0, 0xda, &(0x7f0000001d80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001dc0), &(0x7f0000001e00), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@o_path={&(0x7f0000001fc0)='./file0\x00'}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_lsm={0x1d, 0x18, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@alu={0x7, 0x1, 0x3, 0xc, 0x3, 0xa, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x18405f880550f3db}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000001bc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c80)={0x0, 0x3, 0xf, 0x6}, 0x10, r8, 0x0, 0x3, &(0x7f0000002040)=[r9, 0xffffffffffffffff], &(0x7f0000002080)=[{0x1, 0x1, 0x1, 0x4}, {0x0, 0x2, 0xa, 0x6}, {0x0, 0x1, 0xb, 0x1}], 0x10, 0x7}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002180)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10)
writev(r1, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002440)="5d2d06bcdeefd6302fd89b889944c73e67165c49e1ceab59d8abeb", 0x1b}, {&(0x7f0000002480)="546fa77cd68ee3cbb97ebfc45d5de76c0c32c3e642c1e99d941c8ba4e10b4a05193fc61f0a92ea333cfd8e8c5766e8707c44fd10f6a2f77f1b3e7d386cac1ce5ffeb2c3cf4c7294468e46e3493ce64f8b1098b47363363b15424493ab1", 0x5d}], 0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)

401.395µs ago: executing program 6 (id=1223):
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000140)="482b11195f5b3ae9", 0x0, 0x0, 0x0, 0xe}, 0x38) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r0}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="21000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

0s ago: executing program 6 (id=1224):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}}, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x40000022, 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x10, 0x1e, 0x505}, 0x10}], 0x1}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010)
syz_genetlink_get_family_id$fou(0x0, r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

kernel console output (not intermixed with test programs):

at: no rx connection found
[  126.752052][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.755132][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.757636][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.760328][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.762817][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.765229][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.767807][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.770431][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.773061][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.775697][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.778354][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.781222][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.783926][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.786470][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.789099][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.791702][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.794267][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.796850][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.799512][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.802068][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.804686][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.807228][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.810207][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.812835][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.815473][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.818032][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.820531][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  126.823251][    C1] vxcan1 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  126.932788][ T7314] chnl_net:caif_netlink_parms(): no params data found
[  126.991506][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.994012][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.996905][ T7314] bridge_slave_0: entered allmulticast mode
[  127.000225][ T7314] bridge_slave_0: entered promiscuous mode
[  127.004628][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.007057][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.009793][ T7314] bridge_slave_1: entered allmulticast mode
[  127.012638][ T7314] bridge_slave_1: entered promiscuous mode
[  127.036519][ T7314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.044604][ T7314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.073821][ T7314] team0: Port device team_slave_0 added
[  127.077742][ T7314] team0: Port device team_slave_1 added
[  127.099139][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.102078][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.111940][ T7314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.117469][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.120789][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.131142][ T7314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.168143][ T7314] hsr_slave_0: entered promiscuous mode
[  127.171165][ T7314] hsr_slave_1: entered promiscuous mode
[  127.174037][ T7314] debugfs: 'hsr0' already exists in 'hsr'
[  127.176224][ T7314] Cannot create hsr debugfs directory
[  127.325097][ T7314] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  127.331606][ T7314] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  127.336438][ T7314] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  127.341910][ T7314] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  127.425926][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.439305][ T7314] 8021q: adding VLAN 0 to HW filter on device team0
[  127.446994][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.449494][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.462493][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.464805][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.590409][ T7314] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.651470][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'.
[  127.654751][ T7344] netlink: 134000 bytes leftover after parsing attributes in process `syz.4.360'.
[  127.746990][ T7314] veth0_vlan: entered promiscuous mode
[  127.753297][ T7314] veth1_vlan: entered promiscuous mode
[  127.772123][ T7314] veth0_macvtap: entered promiscuous mode
[  127.776445][ T7314] veth1_macvtap: entered promiscuous mode
[  127.788687][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.801059][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.811646][ T5875] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.822078][ T5875] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.829820][ T5875] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.833327][ T7137] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.921685][ T5875] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.940997][ T5875] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.950230][ T5875] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.953759][ T5875] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.960419][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.966580][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.993038][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.995568][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.261145][ T7375] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.443637][ T7387] netlink: 'syz.4.370': attribute type 6 has an invalid length.
[  128.464985][ T7387] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  128.568860][ T5239] Bluetooth: hci7: command tx timeout
[  128.635346][ T7398] syz_tun: entered allmulticast mode
[  128.652627][ T7398] dvmrp8: entered allmulticast mode
[  128.684496][ T7398] lo speed is unknown, defaulting to 1000
[  128.720920][ T7401] netlink: 'syz.4.374': attribute type 23 has an invalid length.
[  128.790893][ T7401] syz_tun: left allmulticast mode
[  128.793094][ T7401] dvmrp8: left allmulticast mode
[  129.273739][ T7404] smc: net device bond0 applied user defined pnetid SYZ2
[  129.276411][ T7137] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.281073][ T7412] smc: net device bond0 erased user defined pnetid SYZ2
[  129.284201][ T7137] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.287745][ T7137] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.298796][ T7137] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.313890][ T7415] __nla_validate_parse: 7 callbacks suppressed
[  129.313899][ T7415] netlink: 60 bytes leftover after parsing attributes in process `syz.4.378'.
[  129.321655][ T7137] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.324580][ T7137] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.349931][ T7137] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.352923][ T7137] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.546929][ T7431] netlink: 'syz.7.384': attribute type 12 has an invalid length.
[  129.552647][ T7431] netlink: 132 bytes leftover after parsing attributes in process `syz.7.384'.
[  129.623269][ T7435] netlink: 'syz.4.386': attribute type 1 has an invalid length.
[  129.651866][ T7435] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.663449][ T7435] vlan2: entered promiscuous mode
[  129.666068][ T7435] bond1: entered promiscuous mode
[  129.673270][ T7435] vlan2: entered allmulticast mode
[  129.675217][ T7435] bond1: entered allmulticast mode
[  129.695999][ T7435] bond1: (slave gretap1): making interface the new active one
[  129.700276][ T7435] gretap1: entered promiscuous mode
[  129.702370][ T7435] gretap1: entered allmulticast mode
[  129.706138][ T7435] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  129.783469][ T7447] !: renamed from dummy0 (while UP)
[  129.831048][ T7452] netlink: 'syz.4.391': attribute type 6 has an invalid length.
[  130.216706][ T7470] lo speed is unknown, defaulting to 1000
[  130.319967][ T7476] lo speed is unknown, defaulting to 1000
[  130.648514][ T5239] Bluetooth: hci7: command tx timeout
[  131.964195][ T7495] lo speed is unknown, defaulting to 1000
[  132.739726][ T5847] Bluetooth: hci7: command tx timeout
[  132.742416][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.783808][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'.
[  132.786563][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.405'.
[  132.866781][ T7509] netlink: 'syz.4.406': attribute type 1 has an invalid length.
[  132.897780][ T7509] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  132.903456][ T7509] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  132.939640][ T7511] netlink: 32 bytes leftover after parsing attributes in process `syz.4.406'.
[  133.070502][ T7514] netlink: 88 bytes leftover after parsing attributes in process `syz.4.407'.
[  133.074370][ T7514] sctp: [Deprecated]: syz.4.407 (pid 7514) Use of int in maxseg socket option.
[  133.074370][ T7514] Use struct sctp_assoc_value instead
[  134.808433][ T5239] Bluetooth: hci7: command tx timeout
[  134.992583][ T7526] netlink: 'syz.4.411': attribute type 1 has an invalid length.
[  134.995749][ T7526] netlink: 224 bytes leftover after parsing attributes in process `syz.4.411'.
[  135.002940][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'.
[  135.188377][ T7532] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[  135.419839][ T7555] lo speed is unknown, defaulting to 1000
[  135.539857][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'.
[  135.630446][ T7560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.635510][ T7561] syzkaller0: entered promiscuous mode
[  135.637727][ T7561] syzkaller0: entered allmulticast mode
[  135.643255][   T24] hid-generic 0005:04F3:1010.0001: item fetching failed at offset 0/1
[  135.656674][   T24] hid-generic 0005:04F3:1010.0001: probe with driver hid-generic failed with error -22
[  135.666074][ T7561] tipc: Resetting bearer <eth:syzkaller0>
[  135.683880][ T7561] tipc: Disabling bearer <eth:syzkaller0>
[  135.780287][ T7571] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  135.784004][ T7571] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  135.845800][ T7573] netlink: 'syz.4.420': attribute type 13 has an invalid length.
[  135.856649][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'.
[  135.964619][ T7576] netlink: 'syz.4.421': attribute type 13 has an invalid length.
[  135.967420][ T7576] netlink: 'syz.4.421': attribute type 17 has an invalid length.
[  135.997720][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.002357][ T7576] 8021q: adding VLAN 0 to HW filter on device team0
[  136.013099][ T7576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.047384][ T7576] lo speed is unknown, defaulting to 1000
[  136.145875][ T7577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.794198][ T5847] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  136.797842][ T5847] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  136.807333][ T5847] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  136.813557][ T5847] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  136.817059][ T5847] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  136.845195][ T7582] lo speed is unknown, defaulting to 1000
[  136.959921][ T7582] chnl_net:caif_netlink_parms(): no params data found
[  137.013397][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.015753][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.018597][ T7582] bridge_slave_0: entered allmulticast mode
[  137.021734][ T7582] bridge_slave_0: entered promiscuous mode
[  137.026940][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.030023][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.032435][ T7582] bridge_slave_1: entered allmulticast mode
[  137.035730][ T7582] bridge_slave_1: entered promiscuous mode
[  137.095437][ T7582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.104717][ T7582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.135648][ T7582] team0: Port device team_slave_0 added
[  137.140897][ T7582] team0: Port device team_slave_1 added
[  137.166421][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.169364][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.180254][ T7582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.185869][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.188889][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.198621][ T7582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.251842][ T7582] hsr_slave_0: entered promiscuous mode
[  137.254895][ T7582] hsr_slave_1: entered promiscuous mode
[  137.257663][ T7582] debugfs: 'hsr0' already exists in 'hsr'
[  137.262736][ T7582] Cannot create hsr debugfs directory
[  137.377861][ T7594] syz_tun: entered allmulticast mode
[  137.405985][ T7593] dvmrp1: entered allmulticast mode
[  137.439154][ T7593] syz_tun: left allmulticast mode
[  137.474795][ T7582] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  137.481113][ T7582] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  137.486810][ T7582] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  137.497170][ T7582] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  137.525716][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.528332][ T7582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.531208][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.533512][ T7582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.601785][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.605605][ T7611] sctp: [Deprecated]: syz.4.427 (pid 7611) Use of int in maxseg socket option.
[  137.605605][ T7611] Use struct sctp_assoc_value instead
[  137.615357][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.620462][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.639884][ T7582] 8021q: adding VLAN 0 to HW filter on device team0
[  137.653108][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.655555][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.664214][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.666925][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.823929][ T7582] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.013626][ T7582] veth0_vlan: entered promiscuous mode
[  138.021083][ T7582] veth1_vlan: entered promiscuous mode
[  138.056920][ T7582] veth0_macvtap: entered promiscuous mode
[  138.066033][ T7582] veth1_macvtap: entered promiscuous mode
[  138.094373][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.105754][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.116883][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.123946][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.127435][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.149514][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.184081][ T7634] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  138.187857][ T7634] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  138.245800][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.255193][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.293235][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.296961][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.443981][ T7654] netlink: 40 bytes leftover after parsing attributes in process `syz.8.422'.
[  138.465435][ T7652] lo speed is unknown, defaulting to 1000
[  138.517599][ T7656] netlink: 245 bytes leftover after parsing attributes in process `syz.4.433'.
[  138.527455][ T7653] netlink: 245 bytes leftover after parsing attributes in process `syz.4.433'.
[  138.597044][ T7664] syz_tun: entered allmulticast mode
[  138.622347][ T7664] dvmrp8: entered allmulticast mode
[  138.633278][ T7664] syz_tun: left allmulticast mode
[  138.635074][ T7664] dvmrp8: left allmulticast mode
[  138.670285][ T7666] netlink: 'syz.8.436': attribute type 9 has an invalid length.
[  138.673275][ T7666] netlink: 211988 bytes leftover after parsing attributes in process `syz.8.436'.
[  138.680968][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.8.436'.
[  138.691888][ T7666] bond0: (slave rose0): Releasing backup interface
[  138.705749][ T7667] lo speed is unknown, defaulting to 1000
[  138.752053][ T7664] netlink: 'syz.4.435': attribute type 23 has an invalid length.
[  138.796472][ T7669] tipc: Started in network mode
[  138.809342][ T7669] tipc: Node identity ca8a82567558, cluster identity 4711
[  138.812337][ T7669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.819774][ T7669] syzkaller0: entered promiscuous mode
[  138.821941][ T7669] syzkaller0: entered allmulticast mode
[  138.840663][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.437'.
[  138.866542][ T7668] tipc: Resetting bearer <eth:syzkaller0>
[  138.888354][ T5239] Bluetooth: hci8: command tx timeout
[  138.890207][ T7668] tipc: Disabling bearer <eth:syzkaller0>
[  139.083216][ T7679] syz_tun: entered allmulticast mode
[  139.092669][ T7679] dvmrp8: entered allmulticast mode
[  139.119124][ T7679] lo speed is unknown, defaulting to 1000
[  139.159621][ T7680] netlink: 'syz.4.441': attribute type 23 has an invalid length.
[  139.203937][ T7678] syz_tun: left allmulticast mode
[  139.206188][ T7678] dvmrp8: left allmulticast mode
[  139.826263][ T7699] netlink: 'syz.4.447': attribute type 6 has an invalid length.
[  139.831949][ T7699] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  139.946983][ T7705] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  140.059211][ T7707] syzkaller0: entered promiscuous mode
[  140.061117][ T7707] syzkaller0: entered allmulticast mode
[  140.676996][ T7730] __nla_validate_parse: 3 callbacks suppressed
[  140.677016][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'.
[  140.683214][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'.
[  140.968339][ T5239] Bluetooth: hci8: command tx timeout
[  140.973494][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.461'.
[  140.976561][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.461'.
[  141.577245][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'.
[  141.810471][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'.
[  141.954435][ T7784] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  141.957652][ T7784] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  141.995364][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.8.476'.
[  141.999382][ T7786] netlink: 'syz.8.476': attribute type 18 has an invalid length.
[  142.014822][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.8.476'.
[  142.017923][ T7137] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.018479][ T7137] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.018812][ T7137] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.035272][ T7786] netlink: 'syz.8.476': attribute type 18 has an invalid length.
[  142.039552][ T7137] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.124663][ T7797] netlink: 'syz.4.480': attribute type 9 has an invalid length.
[  142.152612][ T7799] netlink: 'syz.8.481': attribute type 3 has an invalid length.
[  142.157435][ T7799] netlink: 'syz.8.481': attribute type 3 has an invalid length.
[  142.320361][ T7814] macvlan1: mtu less than device minimum
[  142.480083][ T7827] netlink: 11 bytes leftover after parsing attributes in process `syz.8.490'.
[  142.654049][ T7836] lo speed is unknown, defaulting to 1000
[  142.695845][ T7837] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  142.791291][ T7847] !: renamed from dummy0 (while UP)
[  142.827328][ T7845] syzkaller0: entered promiscuous mode
[  142.829853][ T7845] syzkaller0: entered allmulticast mode
[  142.836748][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'.
[  143.058499][ T5239] Bluetooth: hci8: command tx timeout
[  144.134609][ T7847] lo speed is unknown, defaulting to 1000
[  144.283426][ T7852] bridge_slave_0: default FDB implementation only supports local addresses
[  144.392563][ T7854] Unknown options in mask b7f2
[  145.128146][ T5239] Bluetooth: hci8: command tx timeout
[  145.745676][ T5847] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  145.749302][ T5847] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  145.752373][ T5847] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  145.755546][ T5847] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  145.760398][ T5847] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  145.791771][ T7883] lo speed is unknown, defaulting to 1000
[  145.916381][ T7883] chnl_net:caif_netlink_parms(): no params data found
[  145.985453][ T7883] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.987813][ T7883] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.991102][ T7883] bridge_slave_0: entered allmulticast mode
[  145.993924][ T7883] bridge_slave_0: entered promiscuous mode
[  145.997467][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.000726][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.003107][ T7883] bridge_slave_1: entered allmulticast mode
[  146.005943][ T7896] __nla_validate_parse: 1 callbacks suppressed
[  146.005951][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'.
[  146.011771][ T7883] bridge_slave_1: entered promiscuous mode
[  146.035903][ T7896] sch_tbf: burst 8 is lower than device bridge2 mtu (1514) !
[  146.046380][ T7883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.053210][ T7883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.082788][ T7883] team0: Port device team_slave_0 added
[  146.086333][ T7883] team0: Port device team_slave_1 added
[  146.120855][ T7883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.123543][ T7883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.133272][ T7883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.143957][ T7883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.146139][ T7883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.155315][ T7883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.215600][ T7883] hsr_slave_0: entered promiscuous mode
[  146.223320][ T7883] hsr_slave_1: entered promiscuous mode
[  146.226436][ T7883] debugfs: 'hsr0' already exists in 'hsr'
[  146.232952][ T7883] Cannot create hsr debugfs directory
[  146.397049][ T7883] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  146.403489][ T7883] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  146.412427][ T7883] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  146.417215][ T7883] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  146.485973][ T7883] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.504382][ T7883] 8021q: adding VLAN 0 to HW filter on device team0
[  146.512420][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.514742][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.526584][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.529069][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.668287][ T7883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.830240][ T7883] veth0_vlan: entered promiscuous mode
[  146.836813][ T7883] veth1_vlan: entered promiscuous mode
[  146.859468][ T7883] veth0_macvtap: entered promiscuous mode
[  146.864549][ T7883] veth1_macvtap: entered promiscuous mode
[  146.876771][ T7883] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.884271][ T7883] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.896099][ T5875] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.899680][ T5875] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.903172][ T5875] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.906025][ T5875] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.974190][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.977258][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.005790][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.009008][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.359794][ T7941] netlink: 'syz.4.520': attribute type 1 has an invalid length.
[  147.362784][ T7941] netlink: 224 bytes leftover after parsing attributes in process `syz.4.520'.
[  147.379318][ T7941] netlink: 48 bytes leftover after parsing attributes in process `syz.4.520'.
[  147.409063][ T7943] lo speed is unknown, defaulting to 1000
[  147.852740][ T5847] Bluetooth: hci9: command tx timeout
[  148.266452][ T7962] lo speed is unknown, defaulting to 1000
[  148.377458][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.9.526'.
[  148.472470][ T7974] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  148.476376][ T7974] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  148.609188][ T7980] netlink: 32 bytes leftover after parsing attributes in process `syz.9.531'.
[  148.657129][ T7982] netlink: 108 bytes leftover after parsing attributes in process `syz.9.532'.
[  148.785546][ T7986] netlink: 12 bytes leftover after parsing attributes in process `syz.9.534'.
[  148.854772][ T7990] lo speed is unknown, defaulting to 1000
[  148.934911][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'.
[  149.001837][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'.
[  149.307580][ T8006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.542'.
[  149.344612][ T8008] siw: device registration error -23
[  149.347200][ T8009] netlink: 'syz.4.543': attribute type 12 has an invalid length.
[  149.928328][ T5847] Bluetooth: hci9: command tx timeout
[  152.008778][ T5847] Bluetooth: hci9: command tx timeout
[  152.683171][ T8051] siw: device registration error -23
[  152.892183][ T8065] syzkaller0: entered promiscuous mode
[  152.894506][ T8065] syzkaller0: entered allmulticast mode
[  154.088997][ T5847] Bluetooth: hci9: command tx timeout
[  154.145038][ T8088] netlink: 'syz.4.565': attribute type 11 has an invalid length.
[  154.202321][ T8094] netlink: 'syz.4.566': attribute type 11 has an invalid length.
[  154.270532][ T8096] __nla_validate_parse: 2 callbacks suppressed
[  154.270549][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.567'.
[  154.309149][ T8096] netlink: 'syz.4.567': attribute type 10 has an invalid length.
[  154.317005][ T8096] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  154.531043][ T8101] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  154.534790][ T8101] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  154.716035][ T8107] lo speed is unknown, defaulting to 1000
[  154.813379][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'.
[  154.848834][ T8107] netlink: 'syz.4.572': attribute type 13 has an invalid length.
[  154.852599][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'.
[  155.002075][ T8113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.574'.
[  155.179865][ T8122] batadv_slave_0: entered allmulticast mode
[  155.191100][ T8123] dvmrp8: entered allmulticast mode
[  155.229020][ T8122] lo speed is unknown, defaulting to 1000
[  155.264408][ T8123] lo speed is unknown, defaulting to 1000
[  158.816141][ T5239] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  158.822077][ T5239] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  158.825396][ T5239] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  158.832265][ T5239] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  158.835905][ T5239] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  158.866203][ T8128] lo speed is unknown, defaulting to 1000
[  159.012098][ T8128] chnl_net:caif_netlink_parms(): no params data found
[  159.089059][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.091506][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.093837][ T8128] bridge_slave_0: entered allmulticast mode
[  159.096770][ T8128] bridge_slave_0: entered promiscuous mode
[  159.101418][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.104144][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.106638][ T8128] bridge_slave_1: entered allmulticast mode
[  159.110949][ T8128] bridge_slave_1: entered promiscuous mode
[  159.136180][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.141970][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.170156][ T8128] team0: Port device team_slave_0 added
[  159.175116][ T8128] team0: Port device team_slave_1 added
[  159.204998][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.207788][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.224321][ T8128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.230876][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.233231][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.241705][ T8128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.278765][ T8128] hsr_slave_0: entered promiscuous mode
[  159.281826][ T8128] hsr_slave_1: entered promiscuous mode
[  159.284687][ T8128] debugfs: 'hsr0' already exists in 'hsr'
[  159.286950][ T8128] Cannot create hsr debugfs directory
[  159.431860][ T8128] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.498397][ T8128] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.535273][ T8128] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.605541][ T8128] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.774180][ T8128] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  159.780055][ T8128] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  159.785603][ T8128] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  159.793422][ T8128] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  159.819048][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.821835][ T8128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.825023][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.827642][ T8128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.889445][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.904687][   T89] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.910383][   T89] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.925158][ T8128] 8021q: adding VLAN 0 to HW filter on device team0
[  159.946500][   T89] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.949470][   T89] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.967809][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.970920][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.142464][ T8128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.184221][ T8128] veth0_vlan: entered promiscuous mode
[  160.193696][ T8128] veth1_vlan: entered promiscuous mode
[  160.218934][ T8128] veth0_macvtap: entered promiscuous mode
[  160.225018][ T8128] veth1_macvtap: entered promiscuous mode
[  160.242516][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.257735][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.270887][ T7137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.274251][ T7137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.283714][ T7137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.289826][ T7137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.348102][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.351257][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.370905][  T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.373923][  T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.893994][ T5847] Bluetooth: hci10: command tx timeout
[  162.403897][ T8155] tipc: Started in network mode
[  162.405635][ T8155] tipc: Node identity 0000000000000000005885d6a76549cc, cluster identity 4711
[  162.412226][ T8155] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  162.856080][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'.
[  162.968484][ T5847] Bluetooth: hci10: command tx timeout
[  163.769817][ T8181] lo speed is unknown, defaulting to 1000
[  163.874033][ T8183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.589'.
[  163.877451][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.589'.
[  163.881562][ T8183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.589'.
[  163.885434][ T8183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.589'.
[  164.692723][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'.
[  164.704348][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'.
[  164.829909][ T5239] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  164.835619][ T5239] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  164.839170][ T5239] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  164.842237][ T5239] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  164.845642][ T5239] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  164.862373][ T8192] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  164.866405][ T8192] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  164.892515][ T8189] lo speed is unknown, defaulting to 1000
[  164.908311][ T8194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'.
[  164.917520][ T8194] team0: No ports can be present during mode change
[  165.042037][ T8189] chnl_net:caif_netlink_parms(): no params data found
[  165.048813][ T5239] Bluetooth: hci10: command tx timeout
[  165.113220][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.116237][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.119747][ T8189] bridge_slave_0: entered allmulticast mode
[  165.123526][ T8189] bridge_slave_0: entered promiscuous mode
[  165.127739][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.130755][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.132997][ T8189] bridge_slave_1: entered allmulticast mode
[  165.136103][ T8189] bridge_slave_1: entered promiscuous mode
[  165.167009][ T8189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.172029][ T8189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.196556][ T8189] team0: Port device team_slave_0 added
[  165.201842][ T8189] team0: Port device team_slave_1 added
[  165.209007][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.223845][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.226552][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.235855][ T8189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.241517][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.244084][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.252879][ T8189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.290083][ T8189] hsr_slave_0: entered promiscuous mode
[  165.293485][ T8189] hsr_slave_1: entered promiscuous mode
[  165.305004][ T8189] debugfs: 'hsr0' already exists in 'hsr'
[  165.307339][ T8189] Cannot create hsr debugfs directory
[  165.451036][ T8189] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.548149][ T8189] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.622030][ T8189] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.690527][ T8189] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.792235][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.595'.
[  165.835091][ T8189] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  165.847517][ T8189] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  165.861195][ T8189] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  165.865158][ T8206] netlink: 256 bytes leftover after parsing attributes in process `syz.0.596'.
[  165.869196][ T8189] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  165.875360][ T8205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.026509][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.053021][ T8216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.055874][ T8216] syzkaller0: entered promiscuous mode
[  166.057577][ T8216] syzkaller0: entered allmulticast mode
[  166.088698][ T8216] tipc: Resetting bearer <eth:syzkaller0>
[  166.094656][ T8189] 8021q: adding VLAN 0 to HW filter on device team0
[  166.103177][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.106113][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.124705][ T8214] tipc: Resetting bearer <eth:syzkaller0>
[  166.146285][ T8214] tipc: Disabling bearer <eth:syzkaller0>
[  166.158686][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.161466][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.372273][ T8189] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.421903][ T8189] veth0_vlan: entered promiscuous mode
[  166.430938][ T8189] veth1_vlan: entered promiscuous mode
[  166.461807][ T8189] veth0_macvtap: entered promiscuous mode
[  166.469604][ T8189] veth1_macvtap: entered promiscuous mode
[  166.484647][ T8189] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.501153][ T8189] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.511370][ T5897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.520557][ T5897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.537901][ T5897] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.543376][ T5897] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.620721][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.623886][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.666628][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.671207][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.888497][ T5239] Bluetooth: hci11: command tx timeout
[  167.128305][ T5239] Bluetooth: hci10: command tx timeout
[  167.352075][ T8237] netlink: 'syz.0.603': attribute type 6 has an invalid length.
[  167.559732][ T8246] lo speed is unknown, defaulting to 1000
[  167.687130][   T33] audit: type=1804 audit(1757925226.008:2): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.609" name="/newroot/30/memory.events" dev="tmpfs" ino=171 res=1 errno=0
[  167.703715][   T33] audit: type=1800 audit(1757925226.008:3): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.609" name="memory.events" dev="tmpfs" ino=171 res=0 errno=0
[  167.775144][ T8257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.792879][ T8257] tipc: Resetting bearer <eth:syzkaller0>
[  167.797490][ T8256] tipc: Disabling bearer <eth:syzkaller0>
[  168.513325][ T8264] syz_tun: entered allmulticast mode
[  168.523052][ T8264] dvmrp8: entered allmulticast mode
[  168.556227][ T8264] lo speed is unknown, defaulting to 1000
[  168.589074][ T8265] netlink: 'syz.0.612': attribute type 23 has an invalid length.
[  168.626726][ T8263] syz_tun: left allmulticast mode
[  168.629304][ T8263] dvmrp8: left allmulticast mode
[  168.726728][ T8268] __nla_validate_parse: 67 callbacks suppressed
[  168.726741][ T8268] netlink: 7 bytes leftover after parsing attributes in process `syz.0.613'.
[  168.796004][ T8275] netlink: 'syz.0.615': attribute type 11 has an invalid length.
[  168.930446][ T8281] netlink: 72 bytes leftover after parsing attributes in process `syz.0.618'.
[  168.937875][ T8281] netlink: 'syz.0.618': attribute type 4 has an invalid length.
[  168.965814][ T8283] netlink: 'syz.2.619': attribute type 1 has an invalid length.
[  168.968897][ T5239] Bluetooth: hci11: command tx timeout
[  168.974733][ T8283] netlink: 'syz.2.619': attribute type 2 has an invalid length.
[  169.136460][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'.
[  169.160906][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'.
[  169.326823][ T8309] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  169.331298][ T8309] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  169.373549][ T8311] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  169.377398][ T8311] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  169.537256][ T8315] netlink: 'syz.0.632': attribute type 1 has an invalid length.
[  169.559224][ T8315] 8021q: adding VLAN 0 to HW filter on device bond1
[  169.565502][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'.
[  169.569239][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'.
[  169.623088][ T8318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.626717][ T8318] syzkaller0: entered promiscuous mode
[  169.631217][ T8318] syzkaller0: entered allmulticast mode
[  169.639879][ T8318] tipc: Resetting bearer <eth:syzkaller0>
[  169.644431][ T8317] tipc: Resetting bearer <eth:syzkaller0>
[  169.661665][ T8317] tipc: Disabling bearer <eth:syzkaller0>
[  169.831778][ T8324] netlink: 'syz.0.636': attribute type 9 has an invalid length.
[  170.548488][ T5847] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  170.552306][ T5847] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  170.555669][ T5847] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  170.564575][ T5847] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  170.579199][ T5847] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  170.690416][ T8349] lo speed is unknown, defaulting to 1000
[  170.712191][ T8354] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  170.716480][ T8357] netlink: 'syz.2.650': attribute type 2 has an invalid length.
[  170.719405][ T8355] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  170.736229][ T8357] netlink: 'syz.2.650': attribute type 1 has an invalid length.
[  170.826638][ T8362] netlink: 'syz.0.652': attribute type 1 has an invalid length.
[  170.830146][ T8362] netlink: 224 bytes leftover after parsing attributes in process `syz.0.652'.
[  170.852910][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'.
[  170.884412][ T8366] IPVS: set_ctl: invalid protocol: 41 10.1.1.2:20002
[  170.916116][ T8366] tipc: Started in network mode
[  170.919137][ T8366] tipc: Node identity ac1414aa, cluster identity 4711
[  170.925885][ T8366] tipc: Enabled bearer <udp:s>, priority 10
[  170.937282][ T8349] chnl_net:caif_netlink_parms(): no params data found
[  171.048900][ T5239] Bluetooth: hci11: command tx timeout
[  171.101612][ T8349] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.104635][ T8349] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.111198][ T8349] bridge_slave_0: entered allmulticast mode
[  171.115471][ T8349] bridge_slave_0: entered promiscuous mode
[  171.120464][ T8349] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.142972][ T8349] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.148791][ T8349] bridge_slave_1: entered allmulticast mode
[  171.154085][ T8349] bridge_slave_1: entered promiscuous mode
[  171.162490][ T8382] syz_tun: entered allmulticast mode
[  171.193789][ T8382] dvmrp8: entered allmulticast mode
[  171.244965][ T8349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.256194][ T8349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.310104][ T8379] lo speed is unknown, defaulting to 1000
[  171.357847][ T8349] team0: Port device team_slave_0 added
[  171.400935][ T8349] team0: Port device team_slave_1 added
[  171.447405][ T8349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.453057][ T8349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.461484][ T8349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.477375][ T8349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.481144][ T8349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.492561][ T8349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.576507][ T8378] syz_tun: left allmulticast mode
[  171.584019][ T8378] dvmrp8: left allmulticast mode
[  171.672733][ T8349] hsr_slave_0: entered promiscuous mode
[  171.685028][ T8349] hsr_slave_1: entered promiscuous mode
[  171.695750][ T8349] debugfs: 'hsr0' already exists in 'hsr'
[  171.699852][ T8349] Cannot create hsr debugfs directory
[  171.929725][ T5895] tipc: Node number set to 2886997162
[  172.003485][ T8391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.008227][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.016183][ T8391] syzkaller0: entered promiscuous mode
[  172.018647][ T8391] syzkaller0: entered allmulticast mode
[  172.055614][ T8349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.089963][ T8390] tipc: Resetting bearer <eth:syzkaller0>
[  172.104211][ T8390] tipc: Disabling bearer <eth:syzkaller0>
[  172.134939][ T8349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.235484][ T8349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.262043][ T8400] netlink: 224 bytes leftover after parsing attributes in process `syz.0.663'.
[  172.275126][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'.
[  172.292821][ T8349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.408440][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.462341][ T8349] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  172.472251][ T8349] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  172.490705][ T8349] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  172.498918][ T8349] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  172.587371][ T8349] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.621713][ T8349] 8021q: adding VLAN 0 to HW filter on device team0
[  172.640039][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.642947][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.648558][ T5239] Bluetooth: hci12: command tx timeout
[  172.667924][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.670858][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.690236][ T8418] IPVS: set_ctl: invalid protocol: 158 127.0.0.1:20001
[  172.853476][ T8349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.898446][ T8349] veth0_vlan: entered promiscuous mode
[  172.916401][ T8349] veth1_vlan: entered promiscuous mode
[  172.964690][ T8349] veth0_macvtap: entered promiscuous mode
[  172.973640][ T8349] veth1_macvtap: entered promiscuous mode
[  173.041353][ T8349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.061282][ T8349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.076675][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.082726][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.105974][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.125667][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.129446][ T5239] Bluetooth: hci11: command tx timeout
[  173.245762][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.256403][ T8438] validate_nla: 2 callbacks suppressed
[  173.256429][ T8438] netlink: 'syz.0.672': attribute type 6 has an invalid length.
[  173.270373][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.301895][ T8438] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  173.361082][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.370688][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.474690][ T8444] lo speed is unknown, defaulting to 1000
[  173.555648][ T8449] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[  173.671311][ T8451] lo speed is unknown, defaulting to 1000
[  173.879972][ T8466] __nla_validate_parse: 4 callbacks suppressed
[  173.879982][ T8466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.680'.
[  174.065247][ T8473] netlink: 'syz.2.683': attribute type 3 has an invalid length.
[  174.090565][ T8480] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  174.244725][ T8491] IPVS: length: 97 != 8
[  174.295365][ T8493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.302969][ T8493] syzkaller0: entered promiscuous mode
[  174.310525][ T8493] syzkaller0: entered allmulticast mode
[  174.316900][ T8495] netlink: 'syz.2.689': attribute type 1 has an invalid length.
[  174.320426][ T8495] netlink: 224 bytes leftover after parsing attributes in process `syz.2.689'.
[  174.321314][ T8493] tipc: Resetting bearer <eth:syzkaller0>
[  174.333055][ T8492] tipc: Resetting bearer <eth:syzkaller0>
[  174.333192][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'.
[  174.353647][ T8492] tipc: Disabling bearer <eth:syzkaller0>
[  174.394918][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'.
[  174.426035][ T8498] netlink: 'syz.2.690': attribute type 6 has an invalid length.
[  174.428975][ T8500] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  174.429025][ T8500] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  174.456685][ T8498] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  174.547491][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'.
[  174.553547][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'.
[  174.728656][ T5239] Bluetooth: hci12: command tx timeout
[  174.956310][ T8512] netlink: 'syz.1.695': attribute type 1 has an invalid length.
[  175.096266][ T8514] !: renamed from dummy0 (while UP)
[  175.197735][ T8515] lo speed is unknown, defaulting to 1000
[  175.398837][ T8520] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.402727][ T8520] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.515524][ T8529] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  175.528228][ T8529] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  175.704228][ T8538] netlink: 'syz.2.703': attribute type 6 has an invalid length.
[  175.860831][ T8547] netlink: 'syz.2.705': attribute type 2 has an invalid length.
[  175.863879][ T8547] netlink: 119 bytes leftover after parsing attributes in process `syz.2.705'.
[  175.867549][ T8547] netlink: 'syz.2.705': attribute type 2 has an invalid length.
[  175.872832][ T8547] netlink: 119 bytes leftover after parsing attributes in process `syz.2.705'.
[  175.876527][ T8547] netlink: 'syz.2.705': attribute type 2 has an invalid length.
[  175.880843][ T8547] netlink: 119 bytes leftover after parsing attributes in process `syz.2.705'.
[  175.884637][ T8547] netlink: 119 bytes leftover after parsing attributes in process `syz.2.705'.
[  175.984002][ T8551] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  175.987888][ T8551] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  176.052725][ T8553] bridge0: port 3(batadv1) entered blocking state
[  176.055619][ T8553] bridge0: port 3(batadv1) entered disabled state
[  176.062233][ T8553] batadv1: entered allmulticast mode
[  176.066470][ T8553] batadv1: entered promiscuous mode
[  176.530229][ T8575] lo speed is unknown, defaulting to 1000
[  176.551385][ T5875] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  176.555291][ T5875] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  176.599700][ T8580] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  176.816463][ T5239] Bluetooth: hci12: command tx timeout
[  177.512877][ T8629] syz_tun: entered allmulticast mode
[  177.525268][ T8629] syz_tun: left allmulticast mode
[  177.776509][ T8642] batman_adv: batadv0: Adding interface: virt_wifi0
[  177.787296][ T8642] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.806571][ T8642] batman_adv: batadv0: Interface activated: virt_wifi0
[  177.810656][ T8644] veth0: entered promiscuous mode
[  177.818278][ T8642] IPv4: Oversized IP packet from 127.202.26.0
[  177.843332][ T8644] veth0 (unregistering): left promiscuous mode
[  177.987399][ T8650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.045414][ T8650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.360768][ T8669] lo speed is unknown, defaulting to 1000
[  178.744575][ T8680] C: renamed from lo (while UP)
[  178.753389][ T8680] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  178.769529][ T8681] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  178.888507][ T5239] Bluetooth: hci12: command tx timeout
[  178.957638][ T8688] __nla_validate_parse: 78 callbacks suppressed
[  178.957662][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'.
[  178.984496][ T8688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.987899][ T8688] syzkaller0: entered promiscuous mode
[  178.990886][ T8688] syzkaller0: entered allmulticast mode
[  178.998374][ T8688] tipc: Resetting bearer <eth:syzkaller0>
[  179.002074][ T8687] tipc: Resetting bearer <eth:syzkaller0>
[  179.021199][ T8687] tipc: Disabling bearer <eth:syzkaller0>
[  179.108499][ T8690] netlink: zone id is out of range
[  179.111000][ T8690] netlink: zone id is out of range
[  179.141542][ T8690] netlink: set zone limit has 4 unknown bytes
[  179.322554][ T8672] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  179.487448][ T8698] validate_nla: 66 callbacks suppressed
[  179.487462][ T8698] netlink: 'syz.2.754': attribute type 13 has an invalid length.
[  179.676397][ T8698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.695823][ T8698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.899306][ T5897] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.920198][ T5897] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.928103][ T5897] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.932918][ T5897] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.319569][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.756'.
[  180.323253][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.756'.
[  180.390399][ T8705] veth1_to_bond: entered allmulticast mode
[  180.393721][ T8705] bond_slave_1: entered promiscuous mode
[  180.407769][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.756'.
[  180.411353][ T5239] Bluetooth: hci0: command 0x0401 tx timeout
[  180.414855][ T8704] bond_slave_1: left promiscuous mode
[  180.417169][ T8704] veth1_to_bond: left allmulticast mode
[  180.636546][ T8710] lo speed is unknown, defaulting to 1000
[  180.670948][ T8711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.758'.
[  180.674511][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.758'.
[  180.679581][ T8711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.758'.
[  180.683157][ T8711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.758'.
[  180.807744][ T8715] syz_tun: entered allmulticast mode
[  180.826056][ T8715] dvmrp8: entered allmulticast mode
[  180.853869][ T8715] lo speed is unknown, defaulting to 1000
[  180.924976][ T8714] netlink: 'syz.0.759': attribute type 23 has an invalid length.
[  180.973180][ T8713] syz_tun: left allmulticast mode
[  180.975220][ T8713] dvmrp8: left allmulticast mode
[  181.116428][ T8722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'.
[  181.174314][ T8728] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2
[  181.177625][ T8728] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0/file1
[  181.190851][ T8729] netlink: 'syz.2.762': attribute type 10 has an invalid length.
[  181.196919][ T8729] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  181.676577][ T8737] IPVS: persistence engine module ip_vs_pe_ not found
[  181.763177][ T8742] : renamed from veth1_to_bridge
[  181.863465][ T8746] : entered promiscuous mode
[  182.114906][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.773'.
[  182.369468][ T8768] sctp: [Deprecated]: syz.0.775 (pid 8768) Use of int in max_burst socket option.
[  182.369468][ T8768] Use struct sctp_assoc_value instead
[  182.530886][ T8777] netlink: 'syz.2.778': attribute type 11 has an invalid length.
[  182.711410][ T8795] lo speed is unknown, defaulting to 1000
[  182.837037][ T8804] sctp: [Deprecated]: syz.2.784 (pid 8804) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.837037][ T8804] Use struct sctp_sack_info instead
[  182.924255][ T8809] netlink: 'syz.0.786': attribute type 1 has an invalid length.
[  183.362197][ T8821] lo speed is unknown, defaulting to 1000
[  184.013584][ T8854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.016950][ T8854] syzkaller0: entered promiscuous mode
[  184.020055][ T8854] syzkaller0: entered allmulticast mode
[  184.047360][ T8854] tipc: Resetting bearer <eth:syzkaller0>
[  184.056423][ T8853] tipc: Resetting bearer <eth:syzkaller0>
[  184.073230][ T8853] tipc: Disabling bearer <eth:syzkaller0>
[  184.226713][ T8863] __nla_validate_parse: 41 callbacks suppressed
[  184.226726][ T8863] netlink: 9 bytes leftover after parsing attributes in process `syz.2.801'.
[  184.235551][ T8863] .70: renamed from hsr0
[  184.242177][ T8863] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  184.249750][ T8863] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  184.261409][ T8863] .70: entered allmulticast mode
[  184.263667][ T8863] hsr_slave_0: entered allmulticast mode
[  184.265899][ T8863] hsr_slave_1: entered allmulticast mode
[  184.272397][ T8863] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  184.443014][ T8885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.807'.
[  184.593855][ T8889] netlink: 48 bytes leftover after parsing attributes in process `syz.0.807'.
[  186.292601][ T8914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.814'.
[  186.304965][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.815'.
[  186.327636][ T8914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.331691][ T8914] syzkaller0: entered promiscuous mode
[  186.338302][ T8914] syzkaller0: entered allmulticast mode
[  186.392638][ T8913] tipc: Resetting bearer <eth:syzkaller0>
[  186.435183][ T8913] tipc: Disabling bearer <eth:syzkaller0>
[  186.489990][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.521022][ T8921] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  186.524728][ T8921] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  186.564032][ T8923] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[  186.586573][ T8923] bridge_slave_0: left allmulticast mode
[  186.589150][ T8923] bridge_slave_0: left promiscuous mode
[  186.591578][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.595719][ T8927] netlink: 'syz.0.819': attribute type 6 has an invalid length.
[  186.604587][ T8923] bridge_slave_1: left allmulticast mode
[  186.606371][ T8923] bridge_slave_1: left promiscuous mode
[  186.610174][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.625538][ T8923] bond0: (slave bond_slave_0): Releasing backup interface
[  186.629791][ T8923] bond0: (slave bond_slave_1): Releasing backup interface
[  186.634555][ T8923] team0: Port device team_slave_0 removed
[  186.639626][ T8923] team0: Port device team_slave_1 removed
[  186.641869][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.646354][ T8923] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.653956][ T8923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  186.706297][ T8935] netlink: 56 bytes leftover after parsing attributes in process `syz.0.820'.
[  186.711969][ T8923] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  186.715855][ T8923] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  187.572531][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'.
[  187.607287][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'.
[  187.614935][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'.
[  187.741560][ T8959] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  187.745269][ T8959] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  188.532351][ T8981] lo speed is unknown, defaulting to 1000
[  188.704657][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'.
[  188.744531][ T8987] geneve2: entered promiscuous mode
[  188.747651][ T8987] geneve2: entered allmulticast mode
[  189.061100][ T8998] lo speed is unknown, defaulting to 1000
[  189.437483][ T9027] __nla_validate_parse: 3 callbacks suppressed
[  189.437504][ T9027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.840'.
[  189.443269][ T9027] netlink: 43 bytes leftover after parsing attributes in process `syz.0.840'.
[  189.446083][ T9027] netlink: 'syz.0.840': attribute type 5 has an invalid length.
[  189.450837][ T9027] netlink: 43 bytes leftover after parsing attributes in process `syz.0.840'.
[  189.454550][ T9026] netlink: 44 bytes leftover after parsing attributes in process `syz.0.840'.
[  189.459708][ T9026] netlink: 43 bytes leftover after parsing attributes in process `syz.0.840'.
[  189.464287][ T9026] netlink: 'syz.0.840': attribute type 5 has an invalid length.
[  189.467378][ T9026] netlink: 43 bytes leftover after parsing attributes in process `syz.0.840'.
[  190.283181][ T9041] netlink: 'syz.2.846': attribute type 1 has an invalid length.
[  190.286490][ T9041] netlink: 224 bytes leftover after parsing attributes in process `syz.2.846'.
[  190.293516][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[  190.419661][ T5853] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  190.425984][ T5853] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  190.429287][ T5853] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  190.433317][ T5853] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  190.435999][ T5853] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  190.475509][ T9045] lo speed is unknown, defaulting to 1000
[  190.483047][ T9050] netlink: 'syz.2.847': attribute type 1 has an invalid length.
[  190.624752][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  190.630953][ T9054] netlink: 52 bytes leftover after parsing attributes in process `syz.0.849'.
[  190.718458][ T9045] chnl_net:caif_netlink_parms(): no params data found
[  190.875120][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.878981][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.884975][ T9045] bridge_slave_0: entered allmulticast mode
[  190.897942][ T9045] bridge_slave_0: entered promiscuous mode
[  190.906087][ T9061] lo speed is unknown, defaulting to 1000
[  190.907087][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.915889][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.920549][ T9045] bridge_slave_1: entered allmulticast mode
[  190.924074][ T9045] bridge_slave_1: entered promiscuous mode
[  190.950037][ T9065] tap0: tun_chr_ioctl cmd 1074025676
[  190.951953][ T9065] tap0: owner set to 0
[  190.986326][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.004011][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.055595][ T9065] lo speed is unknown, defaulting to 1000
[  191.057459][ T9045] team0: Port device team_slave_0 added
[  191.076895][ T9045] team0: Port device team_slave_1 added
[  191.128433][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  191.128900][ T5239] Bluetooth: hci0: command 0x0401 tx timeout
[  191.152713][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.155709][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.166927][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.201206][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.204732][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.215177][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.314367][ T9045] hsr_slave_0: entered promiscuous mode
[  191.317659][ T9045] hsr_slave_1: entered promiscuous mode
[  191.320945][ T9045] debugfs: 'hsr0' already exists in 'hsr'
[  191.323263][ T9045] Cannot create hsr debugfs directory
[  191.330907][ T9069] team0: Mode changed to "broadcast"
[  191.535517][ T9045] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.621421][ T9045] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.685828][ T9045] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.727587][ T9077] lo speed is unknown, defaulting to 1000
[  191.803090][ T9045] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.006195][ T9045] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  192.013334][ T9045] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  192.026323][ T9045] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  192.034923][ T9045] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  192.143275][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.163451][ T9045] 8021q: adding VLAN 0 to HW filter on device team0
[  192.174783][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.177883][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.193310][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.195629][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.492829][ T5847] Bluetooth: hci13: command tx timeout
[  192.555363][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.605379][ T9045] veth0_vlan: entered promiscuous mode
[  192.615319][ T9045] veth1_vlan: entered promiscuous mode
[  192.651033][ T9045] veth0_macvtap: entered promiscuous mode
[  192.662631][ T9045] veth1_macvtap: entered promiscuous mode
[  192.675924][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.690730][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.716694][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.734986][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.740749][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.743971][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.819438][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.830947][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.897915][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.903688][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.171164][ T9130] lo speed is unknown, defaulting to 1000
[  193.375177][ T9138] lo speed is unknown, defaulting to 1000
[  193.694921][ T9154] netlink: 'syz.0.870': attribute type 1 has an invalid length.
[  193.765728][ T9156] lo speed is unknown, defaulting to 1000
[  193.829370][ T9159] netlink: 'syz.0.871': attribute type 1 has an invalid length.
[  194.063971][ T9178] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  194.303611][ T9183] netlink: 'syz.0.877': attribute type 1 has an invalid length.
[  194.306856][ T9183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.474491][ T9187] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  194.477693][ T9187] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  194.569646][ T5847] Bluetooth: hci13: command tx timeout
[  195.489404][ T9199] lo: entered allmulticast mode
[  195.503486][ T9202] lo: left allmulticast mode
[  195.524018][ T9204] __nla_validate_parse: 13 callbacks suppressed
[  195.524035][ T9204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.883'.
[  195.545718][ T9204] veth4: entered allmulticast mode
[  196.609001][ T9211] netlink: 'syz.0.885': attribute type 1 has an invalid length.
[  196.612222][ T9211] netlink: 224 bytes leftover after parsing attributes in process `syz.0.885'.
[  196.666748][ T5847] Bluetooth: hci13: command tx timeout
[  196.727155][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.888'.
[  196.852974][ T9219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.889'.
[  196.856510][ T9219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.889'.
[  196.861165][ T9219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.889'.
[  196.864587][ T9219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.889'.
[  197.055792][ T9232] netlink: 'syz.3.894': attribute type 1 has an invalid length.
[  197.058716][ T9232] netlink: 224 bytes leftover after parsing attributes in process `syz.3.894'.
[  197.198402][ T9238] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  197.201276][ T9238] CPU: 1 UID: 0 PID: 9238 Comm: syz.0.897 Not tainted syzkaller #0 PREEMPT(full) 
[  197.201294][ T9238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.201303][ T9238] Call Trace:
[  197.201311][ T9238]  <TASK>
[  197.201317][ T9238]  dump_stack_lvl+0x189/0x250
[  197.201341][ T9238]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.201359][ T9238]  ? __pfx__printk+0x10/0x10
[  197.201383][ T9238]  ? kernfs_path_from_node+0x2f/0x290
[  197.201400][ T9238]  ? kernfs_path_from_node+0x250/0x290
[  197.201413][ T9238]  ? kernfs_path_from_node+0x2f/0x290
[  197.201430][ T9238]  sysfs_warn_dup+0x8e/0xa0
[  197.201443][ T9238]  sysfs_do_create_link_sd+0xc0/0x110
[  197.201459][ T9238]  device_add_class_symlinks+0x1cf/0x240
[  197.201476][ T9238]  device_add+0x475/0xb50
[  197.201493][ T9238]  wiphy_register+0x1ba6/0x28d0
[  197.201523][ T9238]  ? __pfx_wiphy_register+0x10/0x10
[  197.201537][ T9238]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  197.201559][ T9238]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  197.201579][ T9238]  ieee80211_register_hw+0x3484/0x4100
[  197.201608][ T9238]  ? ieee80211_register_hw+0x1471/0x4100
[  197.201657][ T9238]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  197.201678][ T9238]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  197.201698][ T9238]  ? __hrtimer_setup+0x187/0x210
[  197.201713][ T9238]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  197.201736][ T9238]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  197.201771][ T9238]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  197.201786][ T9238]  ? trace_kmalloc+0x1f/0xd0
[  197.201802][ T9238]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  197.201847][ T9238]  ? kstrndup+0xbf/0x160
[  197.201870][ T9238]  hwsim_new_radio_nl+0xea4/0x1b10
[  197.201891][ T9238]  ? __pfx___nla_validate_parse+0x10/0x10
[  197.201926][ T9238]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  197.201957][ T9238]  ? __nla_parse+0x40/0x60
[  197.201974][ T9238]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  197.202004][ T9238]  genl_family_rcv_msg_doit+0x215/0x300
[  197.202029][ T9238]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  197.202058][ T9238]  ? bpf_lsm_capable+0x9/0x20
[  197.202076][ T9238]  ? security_capable+0x7e/0x2e0
[  197.202102][ T9238]  genl_rcv_msg+0x60e/0x790
[  197.202125][ T9238]  ? __pfx_genl_rcv_msg+0x10/0x10
[  197.202140][ T9238]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  197.202168][ T9238]  netlink_rcv_skb+0x208/0x470
[  197.202181][ T9238]  ? __lock_acquire+0xab9/0xd20
[  197.202203][ T9238]  ? __pfx_genl_rcv_msg+0x10/0x10
[  197.202220][ T9238]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  197.202246][ T9238]  ? down_read+0x1ad/0x2e0
[  197.202268][ T9238]  genl_rcv+0x28/0x40
[  197.202284][ T9238]  netlink_unicast+0x82f/0x9e0
[  197.202312][ T9238]  ? __pfx_netlink_unicast+0x10/0x10
[  197.202332][ T9238]  ? netlink_sendmsg+0x642/0xb30
[  197.202346][ T9238]  ? skb_put+0x11b/0x210
[  197.202363][ T9238]  netlink_sendmsg+0x805/0xb30
[  197.202384][ T9238]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.202403][ T9238]  ? aa_sock_msg_perm+0xf1/0x1d0
[  197.202419][ T9238]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  197.202433][ T9238]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.202450][ T9238]  __sock_sendmsg+0x21c/0x270
[  197.202469][ T9238]  ____sys_sendmsg+0x505/0x830
[  197.202491][ T9238]  ? __pfx_____sys_sendmsg+0x10/0x10
[  197.202515][ T9238]  ? import_iovec+0x74/0xa0
[  197.202534][ T9238]  ___sys_sendmsg+0x21f/0x2a0
[  197.202554][ T9238]  ? __pfx____sys_sendmsg+0x10/0x10
[  197.202597][ T9238]  ? __fget_files+0x2a/0x420
[  197.202607][ T9238]  ? __fget_files+0x3a0/0x420
[  197.202624][ T9238]  __x64_sys_sendmsg+0x19b/0x260
[  197.202641][ T9238]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  197.202673][ T9238]  ? rcu_is_watching+0x15/0xb0
[  197.202692][ T9238]  ? do_syscall_64+0xbe/0x3b0
[  197.202713][ T9238]  do_syscall_64+0xfa/0x3b0
[  197.202726][ T9238]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.202741][ T9238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.202754][ T9238]  ? exc_page_fault+0x9f/0xf0
[  197.202769][ T9238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.202784][ T9238] RIP: 0033:0x7f973dd8eba9
[  197.202798][ T9238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.202840][ T9238] RSP: 002b:00007f973eb8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.202857][ T9238] RAX: ffffffffffffffda RBX: 00007f973dfd5fa0 RCX: 00007f973dd8eba9
[  197.202867][ T9238] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  197.202875][ T9238] RBP: 00007f973de11e19 R08: 0000000000000000 R09: 0000000000000000
[  197.202883][ T9238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.202892][ T9238] R13: 00007f973dfd6038 R14: 00007f973dfd5fa0 R15: 00007ffc018c8c78
[  197.202916][ T9238]  </TASK>
[  197.426381][ T9240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.895'.
[  197.927333][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.903'.
[  197.997112][ T9270] lo speed is unknown, defaulting to 1000
[  198.195313][ T9275] netlink: 'syz.0.905': attribute type 6 has an invalid length.
[  198.456609][ T9285] lo speed is unknown, defaulting to 1000
[  198.695864][ T9291] netlink: 'syz.3.909': attribute type 1 has an invalid length.
[  198.703094][ T9291] netlink: 'syz.3.909': attribute type 1 has an invalid length.
[  198.728520][ T5847] Bluetooth: hci13: command tx timeout
[  199.420421][ T9317] lo speed is unknown, defaulting to 1000
[  200.103772][ T9323] syzkaller1: entered promiscuous mode
[  200.105949][ T9323] syzkaller1: entered allmulticast mode
[  200.295886][ T9331] bridge_slave_0: left allmulticast mode
[  200.297785][ T9331] bridge_slave_0: left promiscuous mode
[  200.300125][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.306095][ T9331] bridge_slave_1: left allmulticast mode
[  200.311981][ T9331] bridge_slave_1: left promiscuous mode
[  200.314416][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.327441][ T9331] bond0: (slave bond_slave_0): Releasing backup interface
[  200.334861][ T9331] bond0: (slave bond_slave_1): Releasing backup interface
[  200.351382][ T9331] team0: Port device team_slave_0 removed
[  200.359157][ T9331] team0: Port device team_slave_1 removed
[  200.362166][ T9331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.365208][ T9331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.370360][ T9331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.373242][ T9331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.378794][ T9331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  201.369128][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  201.491037][ T9346] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  201.582897][ T9347] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  201.878882][ T9371] tipc: Started in network mode
[  201.885345][ T9371] tipc: Node identity a63cede03842, cluster identity 4711
[  201.887670][ T9371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.893362][ T9371] syzkaller0: entered promiscuous mode
[  201.895615][ T9371] syzkaller0: entered allmulticast mode
[  201.910302][ T9371] __nla_validate_parse: 5 callbacks suppressed
[  201.910315][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'.
[  201.934937][ T9370] tipc: Resetting bearer <eth:syzkaller0>
[  201.952089][ T9370] tipc: Disabling bearer <eth:syzkaller0>
[  202.023998][ T9373] netlink: 224 bytes leftover after parsing attributes in process `syz.3.933'.
[  202.029533][ T9373] netlink: 'syz.3.933': attribute type 1 has an invalid length.
[  202.131349][ T9375] netlink: 120 bytes leftover after parsing attributes in process `syz.3.934'.
[  202.135277][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'.
[  203.098189][ T9387] lo speed is unknown, defaulting to 1000
[  203.354067][ T9394] pim6reg99999999: entered allmulticast mode
[  203.568441][ T9413] siw: device registration error -23
[  203.613330][ T9418] netlink: 116 bytes leftover after parsing attributes in process `syz.3.944'.
[  203.706578][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.946'.
[  203.827537][ T9435] lo speed is unknown, defaulting to 1000
[  204.047057][ T9443] netlink: 'syz.3.951': attribute type 1 has an invalid length.
[  204.072410][ T9443] 8021q: adding VLAN 0 to HW filter on device bond1
[  204.093784][ T9443] bond1: (slave geneve2): making interface the new active one
[  204.099569][ T9443] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  204.353533][ T9460] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  204.357339][ T9460] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  204.520165][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'.
[  204.523031][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'.
[  204.719706][ T9475] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  204.934329][ T9486] netlink: 'syz.3.965': attribute type 4 has an invalid length.
[  204.947097][ T9486] netlink: 152 bytes leftover after parsing attributes in process `syz.3.965'.
[  204.950169][ T9486] block nbd0: not configured, cannot reconfigure
[  205.008643][ T9486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.965'.
[  205.324921][ T9500] netlink: 'syz.3.970': attribute type 4 has an invalid length.
[  205.392266][ T9504] openvswitch: netlink: Missing key (keys=40, expected=80)
[  206.936133][ T9517] __nla_validate_parse: 3 callbacks suppressed
[  206.936151][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'.
[  207.156558][ T9525] Bluetooth: MGMT ver 1.23
[  207.200078][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.977'.
[  208.268726][ T9541] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  208.464993][ T9557] ip6erspan0: entered promiscuous mode
[  208.657295][ T5847] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  208.661322][ T5847] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  208.664081][ T5847] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  208.667265][ T5847] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  208.671784][ T5847] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  208.676215][ T9559] lo speed is unknown, defaulting to 1000
[  208.716532][ T9564] lo speed is unknown, defaulting to 1000
[  208.837871][ T9564] chnl_net:caif_netlink_parms(): no params data found
[  208.937851][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.941118][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.944331][ T9564] bridge_slave_0: entered allmulticast mode
[  208.949489][ T9564] bridge_slave_0: entered promiscuous mode
[  208.954984][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.960240][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.963467][ T9564] bridge_slave_1: entered allmulticast mode
[  208.967739][ T9564] bridge_slave_1: entered promiscuous mode
[  209.034014][ T9564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.052549][ T9564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.112829][ T9564] team0: Port device team_slave_0 added
[  209.119404][ T9564] team0: Port device team_slave_1 added
[  209.183334][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.186297][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.195772][ T9564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.201562][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.204347][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.214226][ T9564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.286932][ T9564] hsr_slave_0: entered promiscuous mode
[  209.297441][ T9564] hsr_slave_1: entered promiscuous mode
[  209.304780][ T9564] debugfs: 'hsr0' already exists in 'hsr'
[  209.312035][ T9564] Cannot create hsr debugfs directory
[  209.460517][ T5847] Bluetooth: hci0: command 0x0401 tx timeout
[  209.611937][ T9564] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.703251][ T9564] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.199669][ T9584] ip6erspan0: left promiscuous mode
[  210.240067][ T9564] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.266071][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.275640][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.279623][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.282543][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.326798][ T9564] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.463310][ T9564] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  210.470288][ T9564] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  210.476551][ T9564] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  210.482409][ T9564] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  210.606156][ T9564] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.637279][ T9564] 8021q: adding VLAN 0 to HW filter on device team0
[  210.647655][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.650610][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.673950][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.676865][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.728490][ T5847] Bluetooth: hci14: command tx timeout
[  210.826701][ T9564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.024747][ T9564] veth0_vlan: entered promiscuous mode
[  211.031766][ T9564] veth1_vlan: entered promiscuous mode
[  211.051308][ T9564] veth0_macvtap: entered promiscuous mode
[  211.067450][ T9564] veth1_macvtap: entered promiscuous mode
[  211.080628][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.090157][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.099194][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.102492][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.109573][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.113613][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.177203][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.180306][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.205393][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.207848][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.015713][ T9628] netlink: 56 bytes leftover after parsing attributes in process `syz.3.989'.
[  212.367348][ T9649] netlink: 16 bytes leftover after parsing attributes in process `syz.5.994'.
[  212.571522][ T9651] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  212.809079][ T5847] Bluetooth: hci14: command tx timeout
[  213.170166][ T9666] openvswitch: netlink: Flow key attr not present in new flow.
[  213.221279][ T9668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1002'.
[  213.230475][ T9668] team0: No ports can be present during mode change
[  213.231058][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1001'.
[  213.244130][ T9669] bond0: entered promiscuous mode
[  213.250295][ T9669] bond0: left promiscuous mode
[  213.372550][ T9674] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1003'.
[  213.376121][ T9674] netlink: zone id is out of range
[  213.377774][ T9674] netlink: zone id is out of range
[  213.386063][ T9674] netlink: zone id is out of range
[  213.389164][ T9674] netlink: get zone limit has 8 unknown bytes
[  213.405430][ T9674] syzkaller1: entered allmulticast mode
[  213.613299][ T9682] netlink: 'syz.3.1005': attribute type 11 has an invalid length.
[  213.616521][ T9682] netlink: 'syz.3.1005': attribute type 4 has an invalid length.
[  213.621077][ T9682] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1005'.
[  213.633018][ T9682] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  213.636246][ T9682] CPU: 1 UID: 0 PID: 9682 Comm: syz.3.1005 Not tainted syzkaller #0 PREEMPT(full) 
[  213.636265][ T9682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.636275][ T9682] Call Trace:
[  213.636282][ T9682]  <TASK>
[  213.636289][ T9682]  dump_stack_lvl+0x189/0x250
[  213.636319][ T9682]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.636336][ T9682]  ? __pfx__printk+0x10/0x10
[  213.636359][ T9682]  ? kernfs_path_from_node+0x2f/0x290
[  213.636376][ T9682]  ? kernfs_path_from_node+0x250/0x290
[  213.636390][ T9682]  ? kernfs_path_from_node+0x2f/0x290
[  213.636408][ T9682]  sysfs_warn_dup+0x8e/0xa0
[  213.636421][ T9682]  sysfs_do_create_link_sd+0xc0/0x110
[  213.636438][ T9682]  device_add_class_symlinks+0x1cf/0x240
[  213.636459][ T9682]  device_add+0x475/0xb50
[  213.636479][ T9682]  wiphy_register+0x1ba6/0x28d0
[  213.636509][ T9682]  ? __pfx_wiphy_register+0x10/0x10
[  213.636525][ T9682]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  213.636555][ T9682]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  213.636581][ T9682]  ieee80211_register_hw+0x3484/0x4100
[  213.636612][ T9682]  ? ieee80211_register_hw+0x1471/0x4100
[  213.636634][ T9682]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  213.636652][ T9682]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.636674][ T9682]  ? __hrtimer_setup+0x187/0x210
[  213.636689][ T9682]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  213.636714][ T9682]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  213.636757][ T9682]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  213.636774][ T9682]  ? trace_kmalloc+0x1f/0xd0
[  213.636790][ T9682]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  213.636809][ T9682]  ? kstrndup+0xbf/0x160
[  213.636833][ T9682]  hwsim_new_radio_nl+0xea4/0x1b10
[  213.636855][ T9682]  ? __pfx___nla_validate_parse+0x10/0x10
[  213.636888][ T9682]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  213.636952][ T9682]  ? __nla_parse+0x40/0x60
[  213.636970][ T9682]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  213.636997][ T9682]  genl_family_rcv_msg_doit+0x215/0x300
[  213.637022][ T9682]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  213.637058][ T9682]  ? bpf_lsm_capable+0x9/0x20
[  213.637079][ T9682]  ? security_capable+0x7e/0x2e0
[  213.637101][ T9682]  genl_rcv_msg+0x60e/0x790
[  213.637123][ T9682]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.637142][ T9682]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  213.637175][ T9682]  netlink_rcv_skb+0x208/0x470
[  213.637188][ T9682]  ? __lock_acquire+0xab9/0xd20
[  213.637209][ T9682]  ? __pfx_genl_rcv_msg+0x10/0x10
[  213.637230][ T9682]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  213.637263][ T9682]  ? down_read+0x1ad/0x2e0
[  213.637284][ T9682]  genl_rcv+0x28/0x40
[  213.637300][ T9682]  netlink_unicast+0x82f/0x9e0
[  213.637330][ T9682]  ? __pfx_netlink_unicast+0x10/0x10
[  213.637353][ T9682]  ? netlink_sendmsg+0x642/0xb30
[  213.637367][ T9682]  ? skb_put+0x11b/0x210
[  213.637387][ T9682]  netlink_sendmsg+0x805/0xb30
[  213.637410][ T9682]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.637427][ T9682]  ? aa_sock_msg_perm+0xf1/0x1d0
[  213.637443][ T9682]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  213.637459][ T9682]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.637476][ T9682]  __sock_sendmsg+0x21c/0x270
[  213.637499][ T9682]  ____sys_sendmsg+0x505/0x830
[  213.637522][ T9682]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.637548][ T9682]  ? import_iovec+0x74/0xa0
[  213.637570][ T9682]  ___sys_sendmsg+0x21f/0x2a0
[  213.637589][ T9682]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.637639][ T9682]  ? __fget_files+0x2a/0x420
[  213.637652][ T9682]  ? __fget_files+0x3a0/0x420
[  213.637674][ T9682]  __x64_sys_sendmsg+0x19b/0x260
[  213.637694][ T9682]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  213.637721][ T9682]  ? rcu_is_watching+0x15/0xb0
[  213.637742][ T9682]  ? do_syscall_64+0xbe/0x3b0
[  213.637769][ T9682]  do_syscall_64+0xfa/0x3b0
[  213.637785][ T9682]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.637800][ T9682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.637815][ T9682]  ? exc_page_fault+0x9f/0xf0
[  213.637832][ T9682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.637847][ T9682] RIP: 0033:0x7f5fba38eba9
[  213.637863][ T9682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.637876][ T9682] RSP: 002b:00007f5fb85d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.637893][ T9682] RAX: ffffffffffffffda RBX: 00007f5fba5d6090 RCX: 00007f5fba38eba9
[  213.637904][ T9682] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  213.637958][ T9682] RBP: 00007f5fba411e19 R08: 0000000000000000 R09: 0000000000000000
[  213.637967][ T9682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.637976][ T9682] R13: 00007f5fba5d6128 R14: 00007f5fba5d6090 R15: 00007ffd014234f8
[  213.638003][ T9682]  </TASK>
[  214.064496][ T9685] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  214.071542][ T9685] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  214.451112][ T9693] netlink: 'syz.3.1010': attribute type 6 has an invalid length.
[  214.459767][ T9693] siw: device registration error -23
[  214.464763][ T9693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1010'.
[  214.503988][ T9693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1010'.
[  214.529709][ T9693] netlink: 'syz.3.1010': attribute type 4 has an invalid length.
[  214.711556][   T55] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  214.716735][   T55] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  214.722097][   T55] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  214.726463][   T55] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  214.732626][   T55] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  214.761307][ T9697] lo speed is unknown, defaulting to 1000
[  214.877726][ T9697] chnl_net:caif_netlink_parms(): no params data found
[  214.888665][   T55] Bluetooth: hci14: command tx timeout
[  215.023672][ T9697] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.026540][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.032056][ T9697] bridge_slave_0: entered allmulticast mode
[  215.036179][ T9697] bridge_slave_0: entered promiscuous mode
[  215.041952][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.058168][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.061322][ T9697] bridge_slave_1: entered allmulticast mode
[  215.065392][ T9697] bridge_slave_1: entered promiscuous mode
[  215.094864][ T9697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.100168][ T9697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.137568][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1013'.
[  215.174210][ T9697] team0: Port device team_slave_0 added
[  215.180183][ T9697] team0: Port device team_slave_1 added
[  215.203987][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.206193][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.216060][ T9697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.220998][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.223194][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.232293][ T9697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.289369][ T9697] hsr_slave_0: entered promiscuous mode
[  215.293947][ T9697] hsr_slave_1: entered promiscuous mode
[  215.296674][ T9697] debugfs: 'hsr0' already exists in 'hsr'
[  215.298922][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.308355][ T9697] Cannot create hsr debugfs directory
[  215.445190][ T9697] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.510324][ T9697] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.549924][ T9697] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.611183][ T9697] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.746949][ T9697] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  215.753167][ T9697] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  215.759573][ T9697] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  215.772296][ T9697] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  215.859069][ T9697] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.873722][ T9697] 8021q: adding VLAN 0 to HW filter on device team0
[  215.883075][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.885993][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.900833][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.903783][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.063377][ T9697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.265972][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1017'.
[  216.274268][ T9697] veth0_vlan: entered promiscuous mode
[  216.304353][ T9697] veth1_vlan: entered promiscuous mode
[  216.346677][ T9697] veth0_macvtap: entered promiscuous mode
[  216.353816][ T9697] veth1_macvtap: entered promiscuous mode
[  216.379397][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.391805][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.403249][ T5875] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.406289][ T5875] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.425937][ T5875] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.430970][ T5875] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.567338][ T9751] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.571497][ T9751] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.596828][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.600407][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.615642][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.619065][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.808867][   T55] Bluetooth: hci15: command tx timeout
[  216.880839][ T9757] netlink: 'syz.6.1020': attribute type 1 has an invalid length.
[  216.889943][ T9757] ip6_vti0: Master is either lo or non-ether device
[  216.970918][   T55] Bluetooth: hci14: command tx timeout
[  216.986056][ T9759] team0: No ports can be present during mode change
[  217.647330][ T9762] netlink: 'syz.5.1022': attribute type 1 has an invalid length.
[  217.723605][ T9763] gretap1: entered promiscuous mode
[  217.769869][ T9762] netlink: 'syz.5.1022': attribute type 4 has an invalid length.
[  217.806660][ T9765] netlink: 'syz.5.1023': attribute type 4 has an invalid length.
[  217.816085][ T9766] netlink: 'syz.5.1023': attribute type 4 has an invalid length.
[  217.877341][ T9769] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  217.882084][ T9769] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  217.889881][ T9770] tipc: Started in network mode
[  217.891933][ T9770] tipc: Node identity ac14142f, cluster identity 4711
[  217.901933][ T9770] tipc: New replicast peer: 0.0.0.0
[  217.906144][ T9770] tipc: Enabled bearer <udp:syz2>, priority 10
[  217.909085][ T9771] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  217.912763][ T9770] __nla_validate_parse: 2 callbacks suppressed
[  217.912775][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1025'.
[  217.976439][ T9776] netlink: 'syz.6.1027': attribute type 1 has an invalid length.
[  217.980093][ T9776] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1027'.
[  218.233563][   T10] IPVS: starting estimator thread 0...
[  218.318161][ T9797] IPVS: using max 64 ests per chain, 153600 per kthread
[  218.461241][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1033'.
[  218.485186][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.549972][ T9804] bridge_slave_1 (unregistering): left allmulticast mode
[  218.552912][ T9804] bridge_slave_1 (unregistering): left promiscuous mode
[  218.555844][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.814803][ T9825] siw: device registration error -23
[  218.890605][   T55] Bluetooth: hci15: command tx timeout
[  219.019596][ T3143] tipc: Node number set to 2886997039
[  219.166463][ T9840] netlink: 'syz.5.1044': attribute type 1 has an invalid length.
[  219.177698][ T9840] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1044'.
[  219.233018][ T9842] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1045'.
[  219.320329][ T9844] lo speed is unknown, defaulting to 1000
[  219.407355][ T9844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1046'.
[  219.724076][ T9862] lo speed is unknown, defaulting to 1000
[  220.044507][ T9867] netlink: 'syz.6.1050': attribute type 1 has an invalid length.
[  220.110700][ T9867] lo speed is unknown, defaulting to 1000
[  220.472949][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1051'.
[  220.969455][ T5853] Bluetooth: hci15: command tx timeout
[  221.040200][ T9876] netlink: 'syz.6.1052': attribute type 1 has an invalid length.
[  221.226945][ T9888] netlink: 'syz.5.1055': attribute type 1 has an invalid length.
[  221.229979][ T9888] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1055'.
[  221.658752][ T9904] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1060'.
[  221.662334][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1060'.
[  221.813244][ T9908] lo speed is unknown, defaulting to 1000
[  221.848538][ T5853] Bluetooth: hci3: command 0x0406 tx timeout
[  221.848706][ T5851] Bluetooth: hci4: command 0x0406 tx timeout
[  222.046709][ T9924] netlink: 'syz.6.1066': attribute type 1 has an invalid length.
[  222.187768][ T9931] lo speed is unknown, defaulting to 1000
[  222.655922][ T9947] netlink: 'syz.6.1072': attribute type 12 has an invalid length.
[  222.710302][ T9947] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.805668][ T9947] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.815391][ T9947] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.945344][ T5875] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.957057][ T5875] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.970283][ T5875] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.973890][ T5875] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.048720][ T9956] __nla_validate_parse: 4 callbacks suppressed
[  223.048738][ T9956] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1075'.
[  223.059569][   T55] Bluetooth: hci15: command tx timeout
[  223.145536][ T9964] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  223.280731][ T9970] netlink: 'syz.5.1080': attribute type 1 has an invalid length.
[  223.316152][ T9973] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1079'.
[  223.319302][ T9973] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1079'.
[  223.325962][ T9973] netlink: 'syz.6.1079': attribute type 6 has an invalid length.
[  223.458519][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1079'.
[  224.254632][ T9991] bridge_slave_0: left allmulticast mode
[  224.256906][ T9991] bridge_slave_0: left promiscuous mode
[  224.263074][ T9991] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.270016][ T9991] bond0: (slave bond_slave_0): Releasing backup interface
[  224.274647][ T9991] bond0: (slave bond_slave_1): Releasing backup interface
[  224.287157][ T9991] team0: Port device team_slave_0 removed
[  224.291923][ T9991] team0: Port device team_slave_1 removed
[  224.297792][ T9991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.302362][ T9991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.309470][ T9991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  224.621522][T10019] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1094'.
[  224.715165][T10021] lo speed is unknown, defaulting to 1000
[  224.873147][T10026] IPVS: set_ctl: invalid protocol: 44 172.20.20.42:20000
[  224.875994][T10026] netlink: 'syz.6.1096': attribute type 4 has an invalid length.
[  224.882246][T10026] netlink: 'syz.6.1096': attribute type 1 has an invalid length.
[  225.268403][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1098'.
[  225.633596][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1100'.
[  225.831964][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1103'.
[  225.873114][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1103'.
[  226.217072][T10062] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1107'.
[  226.222442][T10062] team0: Mode changed to "broadcast"
[  227.144719][T10078] netlink: 'syz.6.1112': attribute type 10 has an invalid length.
[  227.152381][T10078] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  227.189078][T10078] mac80211_hwsim hwsim57 wlan1: entered allmulticast mode
[  227.282900][T10080] lo speed is unknown, defaulting to 1000
[  227.376243][T10087] netlink: 'syz.6.1113': attribute type 12 has an invalid length.
[  227.538947][T10096] !: renamed from dummy0 (while UP)
[  227.589424][T10100] netlink: 'syz.6.1119': attribute type 12 has an invalid length.
[  227.742471][T10119] netlink: 'syz.6.1124': attribute type 1 has an invalid length.
[  227.744905][T10119] netlink: 'syz.6.1124': attribute type 1 has an invalid length.
[  227.803432][T10124] syzkaller1: entered promiscuous mode
[  227.805198][T10124] syzkaller1: entered allmulticast mode
[  227.983870][T10133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.002577][T10134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.062560][T10141] lo speed is unknown, defaulting to 1000
[  228.107052][T10146] __nla_validate_parse: 10 callbacks suppressed
[  228.107071][T10146] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1131'.
[  228.115322][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1131'.
[  228.119618][T10146] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1131'.
[  228.123191][T10146] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1131'.
[  228.302964][T10154] lo speed is unknown, defaulting to 1000
[  228.510813][T10167] syzkaller0: entered promiscuous mode
[  228.514162][T10167] syzkaller0: entered allmulticast mode
[  228.537167][T10167] siw: device registration error -23
[  229.894561][ T5847] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  229.911925][ T5847] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  229.920996][ T5847] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  229.936079][ T5847] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  229.949728][ T5847] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  230.132729][T10179] lo speed is unknown, defaulting to 1000
[  230.184850][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'.
[  230.187669][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1143'.
[  230.343424][T10179] chnl_net:caif_netlink_parms(): no params data found
[  230.374034][T10199] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  230.377796][T10199] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  230.486735][T10179] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.493674][T10179] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.496798][T10179] bridge_slave_0: entered allmulticast mode
[  230.507584][T10179] bridge_slave_0: entered promiscuous mode
[  230.513704][T10179] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.516785][T10179] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.521444][T10179] bridge_slave_1: entered allmulticast mode
[  230.529872][T10179] bridge_slave_1: entered promiscuous mode
[  230.584321][T10179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.594276][T10179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.644159][T10179] team0: Port device team_slave_0 added
[  230.664681][T10179] team0: Port device team_slave_1 added
[  230.739752][T10179] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.745677][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.766874][T10179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.776293][T10179] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.793641][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.815090][T10179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.836413][T10216] netlink: 'syz.5.1150': attribute type 13 has an invalid length.
[  231.282514][T10216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.306740][T10216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.637220][T10224] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1151'.
[  232.009656][   T55] Bluetooth: hci16: command tx timeout
[  232.013020][T10223] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  232.024070][   T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.027238][   T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.030620][   T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.033292][   T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.092299][T10216] syz.5.1150 (10216) used greatest stack depth: 18032 bytes left
[  232.115485][T10179] hsr_slave_0: entered promiscuous mode
[  232.128861][T10179] hsr_slave_1: entered promiscuous mode
[  232.131318][T10179] debugfs: 'hsr0' already exists in 'hsr'
[  232.138790][T10179] Cannot create hsr debugfs directory
[  232.279553][T10233] netlink: 'syz.5.1153': attribute type 1 has an invalid length.
[  232.317660][T10233] 8021q: adding VLAN 0 to HW filter on device bond1
[  232.403297][T10237] bond1: (slave veth3): Enslaving as an active interface with a down link
[  232.427304][T10233] gretap1: entered promiscuous mode
[  232.440390][T10233] bond1: (slave gretap1): making interface the new active one
[  232.444280][T10233] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  232.634473][T10179] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.677068][T10241] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) !
[  232.771157][T10179] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.872178][T10179] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.915696][T10246] lo speed is unknown, defaulting to 1000
[  232.971017][T10179] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.290449][T10179] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  233.309519][T10179] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  233.322289][T10179] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  233.336714][T10179] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  233.521872][T10179] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.547566][T10179] 8021q: adding VLAN 0 to HW filter on device team0
[  233.560230][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.562729][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.591370][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.594120][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.749250][T10278] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1162'.
[  233.824706][T10281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.837379][T10274] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1161'.
[  233.922454][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1161'.
[  233.929629][T10275] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1161'.
[  233.932707][T10275] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1161'.
[  233.935537][T10275] netlink: 540 bytes leftover after parsing attributes in process `syz.6.1161'.
[  233.953091][T10274] netlink: 'syz.6.1161': attribute type 10 has an invalid length.
[  233.969784][T10274] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  233.993472][T10179] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.098567][   T55] Bluetooth: hci16: command tx timeout
[  234.344369][T10179] veth0_vlan: entered promiscuous mode
[  234.366205][T10179] veth1_vlan: entered promiscuous mode
[  234.421551][T10179] veth0_macvtap: entered promiscuous mode
[  234.427220][T10179] veth1_macvtap: entered promiscuous mode
[  234.481022][T10179] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.500577][T10179] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.533076][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.543581][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.554548][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.559936][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.748452][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.756215][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.815589][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.820929][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.860868][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1170'.
[  234.863698][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1170'.
[  234.866916][T10304] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1170'.
[  234.870374][T10304] netlink: 540 bytes leftover after parsing attributes in process `syz.6.1170'.
[  235.190951][T10317] netlink: 'syz.7.1173': attribute type 1 has an invalid length.
[  235.424239][T10332] team0: No ports can be present during mode change
[  236.168309][ T5851] Bluetooth: hci16: command tx timeout
[  236.393476][T10345] tipc: Started in network mode
[  236.405269][T10345] tipc: Node identity ac14142f, cluster identity 4711
[  236.418436][T10345] tipc: New replicast peer: 172.20.20.187
[  236.421311][T10345] tipc: Enabled bearer <udp:syz2>, priority 10
[  236.424308][T10347] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  236.437191][T10347] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  236.442573][T10348] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  236.612973][T10362] lo speed is unknown, defaulting to 1000
[  237.210883][ T5851] Bluetooth: hci5: command 0x0406 tx timeout
[  237.255804][T10386] bond0: (slave rose0): Error: Device can not be enslaved while up
[  237.291340][T10390] netlink: 'syz.5.1195': attribute type 1 has an invalid length.
[  237.357326][T10395] syzkaller1: entered promiscuous mode
[  237.363663][T10395] syzkaller1: entered allmulticast mode
[  237.450602][T10398] lo speed is unknown, defaulting to 1000
[  237.538529][   T62] tipc: Node number set to 2886997039
[  237.623823][T10409] lo speed is unknown, defaulting to 1000
[  237.725014][T10422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.737584][T10423] netlink: 'syz.7.1202': attribute type 1 has an invalid length.
[  237.741553][T10422] netlink: 'syz.7.1202': attribute type 1 has an invalid length.
[  237.757437][T10426] netlink: 'syz.5.1203': attribute type 1 has an invalid length.
[  237.933812][T10436] netlink: 'syz.5.1206': attribute type 12 has an invalid length.
[  238.078737][T10442] lo speed is unknown, defaulting to 1000
[  238.225636][T10459] ip6erspan0: entered allmulticast mode
[  238.248462][   T55] Bluetooth: hci16: command tx timeout
[  238.438295][T10467] netlink: 'syz.6.1215': attribute type 30 has an invalid length.
[  238.454061][ T7137] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.454148][T10467] netlink: 'syz.6.1215': attribute type 30 has an invalid length.
[  238.463817][ T7137] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.467256][ T7137] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.476260][ T7137] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.581221][T10476] netlink: 'syz.7.1216': attribute type 46 has an invalid length.
[  238.584330][T10476] netlink: 'syz.7.1216': attribute type 19 has an invalid length.
[  238.588716][T10476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.844628][T10486] netlink: 'syz.7.1219': attribute type 2 has an invalid length.
[  238.847178][T10486] __nla_validate_parse: 19 callbacks suppressed
[  238.847186][T10486] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1219'.
[  238.853390][T10486] nbd: must specify a device to reconfigure
[  238.980506][T10499] lo speed is unknown, defaulting to 1000
[  238.983279][T10496] lo speed is unknown, defaulting to 1000
[  240.123411][T10504] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1223'.
[  240.889254][   T34] INFO: task syz.2.148:6471 blocked for more than 143 seconds.
[  240.892798][   T34]       Not tainted syzkaller #0
[  240.903874][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  240.907169][   T34] task:syz.2.148       state:D stack:22712 pid:6471  tgid:6469  ppid:5855   task_flags:0x400140 flags:0x00004006
[  240.914488][   T34] Call Trace:
[  240.916792][   T34]  <TASK>
[  240.917773][   T34]  __schedule+0x1798/0x4cc0
[  240.922898][   T34]  ? validate_chain+0x897/0x2140
[  240.924726][   T34]  ? __lock_acquire+0xab9/0xd20
[  240.926552][   T34]  ? __pfx___schedule+0x10/0x10
[  240.933020][   T34]  ? schedule+0x91/0x360
[  240.934490][   T34]  schedule+0x165/0x360
[  240.935943][   T34]  schedule_timeout+0x9a/0x270
[  240.937528][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  240.943194][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.945595][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.947477][   T34]  ? wait_for_completion+0x267/0x5d0
[  240.953078][   T34]  wait_for_completion+0x2bf/0x5d0
[  240.955093][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  240.957059][   T34]  ? remove_client_context+0x19c/0x1e0
[  240.963103][   T34]  disable_device+0x1c6/0x320
[  240.964799][   T34]  ? __pfx_disable_device+0x10/0x10
[  240.966590][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  240.971117][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  240.975363][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  240.977781][   T34]  nldev_dellink+0x2d1/0x320
[  240.981969][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  240.986205][   T34]  ? apparmor_capable+0x137/0x1b0
[  240.991125][   T34]  ? bpf_lsm_capable+0x9/0x20
[  240.993842][   T34]  ? security_capable+0x7e/0x2e0
[  240.995693][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  240.997375][   T34]  rdma_nl_rcv+0x6ae/0x980
[  241.010032][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  241.014408][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.015952][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  241.017687][   T34]  netlink_unicast+0x82f/0x9e0
[  241.032098][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  241.033926][   T34]  ? netlink_sendmsg+0x642/0xb30
[  241.035786][   T34]  ? skb_put+0x11b/0x210
[  241.037442][   T34]  netlink_sendmsg+0x805/0xb30
[  241.045329][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.047325][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  241.052213][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  241.054128][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  241.056183][   T34]  __sock_sendmsg+0x21c/0x270
[  241.057759][   T34]  ____sys_sendmsg+0x505/0x830
[  241.068111][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  241.069980][   T34]  ? import_iovec+0x74/0xa0
[  241.072731][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  241.074508][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  241.077559][   T34]  ? __fget_files+0x2a/0x420
[  241.086336][   T34]  ? __fget_files+0x3a0/0x420
[  241.088402][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  241.090156][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  241.094011][   T34]  ? rcu_is_watching+0x15/0xb0
[  241.095725][   T34]  ? do_syscall_64+0xbe/0x3b0
[  241.097401][   T34]  do_syscall_64+0xfa/0x3b0
[  241.112853][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.119136][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.123612][   T34]  ? exc_page_fault+0x9f/0xf0
[  241.125628][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.127736][   T34] RIP: 0033:0x7f468958eba9
[  241.133244][   T34] RSP: 002b:00007f468a3a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  241.139466][   T34] RAX: ffffffffffffffda RBX: 00007f46897d6090 RCX: 00007f468958eba9
[  241.144676][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  241.175278][   T34] RBP: 00007f4689611e19 R08: 0000000000000000 R09: 0000000000000000
[  241.178198][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.187987][   T34] R13: 00007f46897d6128 R14: 00007f46897d6090 R15: 00007ffcb3360788
[  241.190585][   T34]  </TASK>
[  241.197045][   T34] INFO: task syz.0.150:6482 blocked for more than 143 seconds.
[  241.218385][   T34]       Not tainted syzkaller #0
[  241.220126][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  241.223751][   T34] task:syz.0.150       state:D stack:25544 pid:6482  tgid:6481  ppid:5845   task_flags:0x400140 flags:0x00004006
[  241.227428][   T34] Call Trace:
[  241.238012][   T34]  <TASK>
[  241.239053][   T34]  __schedule+0x1798/0x4cc0
[  241.240653][   T34]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  241.242778][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.244365][   T34]  ? __pfx___schedule+0x10/0x10
[  241.246228][   T34]  ? schedule+0x91/0x360
[  241.247751][   T34]  schedule+0x165/0x360
[  241.258007][   T34]  schedule_preempt_disabled+0x13/0x30
[  241.259866][   T34]  __mutex_lock+0x7e6/0x1350
[  241.261341][   T34]  ? __mutex_lock+0x5bb/0x1350
[  241.262950][   T34]  ? rdma_dev_change_netns+0x39/0x300
[  241.264721][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  241.266454][   T34]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  241.278525][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  241.280816][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  241.282680][   T34]  ? _raw_spin_unlock+0x28/0x50
[  241.284455][   T34]  rdma_dev_change_netns+0x39/0x300
[  241.286457][   T34]  rdma_dev_exit_net+0x203/0x340
[  241.318029][   T34]  ? __pfx___might_resched+0x10/0x10
[  241.319751][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  241.321872][   T34]  ? net_generic+0x1e/0x240
[  241.323700][   T34]  ? mutex_is_locked+0x17/0x50
[  241.325187][   T34]  ? rtnl_is_locked+0x15/0x20
[  241.326868][   T34]  ops_undo_list+0x49a/0x990
[  241.340460][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  241.342101][   T34]  ? ops_init+0x469/0x5c0
[  241.343457][   T34]  setup_net+0x2d3/0x320
[  241.344770][   T34]  ? __pfx_setup_net+0x10/0x10
[  241.346250][   T34]  ? copy_net_ns+0x304/0x4d0
[  241.347742][   T34]  ? down_read_killable+0x1d1/0x350
[  241.358010][   T34]  copy_net_ns+0x31b/0x4d0
[  241.359486][   T34]  create_new_namespaces+0x3f3/0x720
[  241.361175][   T34]  ? security_capable+0x7e/0x2e0
[  241.362794][   T34]  unshare_nsproxy_namespaces+0x11c/0x170
[  241.364602][   T34]  ksys_unshare+0x4c8/0x8c0
[  241.366040][   T34]  ? __pfx_ksys_unshare+0x10/0x10
[  241.367648][   T34]  ? rcu_is_watching+0x15/0xb0
[  241.388170][   T34]  __x64_sys_unshare+0x38/0x50
[  241.389761][   T34]  do_syscall_64+0xfa/0x3b0
[  241.391168][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.392811][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.394764][   T34]  ? exc_page_fault+0x9f/0xf0
[  241.396246][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.408018][   T34] RIP: 0033:0x7fb05d58eba9
[  241.409840][   T34] RSP: 002b:00007fb05e335038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  241.413101][   T34] RAX: ffffffffffffffda RBX: 00007fb05d7d5fa0 RCX: 00007fb05d58eba9
[  241.416226][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  241.428047][   T34] RBP: 00007fb05d611e19 R08: 0000000000000000 R09: 0000000000000000
[  241.431145][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.434175][   T34] R13: 00007fb05d7d6038 R14: 00007fb05d7d5fa0 R15: 00007ffcbd09d508
[  241.437348][   T34]  </TASK>
[  241.440676][   T34] INFO: task syz.1.157:6506 blocked for more than 143 seconds.
[  241.443624][   T34]       Not tainted syzkaller #0
[  241.445557][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  241.449717][   T34] task:syz.1.157       state:D stack:26056 pid:6506  tgid:6505  ppid:5849   task_flags:0x400140 flags:0x00004004
[  241.454221][   T34] Call Trace:
[  241.455532][   T34]  <TASK>
[  241.456702][   T34]  __schedule+0x1798/0x4cc0
[  241.459165][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.461150][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.463025][   T34]  ? __pfx___schedule+0x10/0x10
[  241.464932][   T34]  ? schedule+0x91/0x360
[  241.466636][   T34]  schedule+0x165/0x360
[  241.468807][   T34]  schedule_preempt_disabled+0x13/0x30
[  241.470969][   T34]  __mutex_lock+0x7e6/0x1350
[  241.472810][   T34]  ? __mutex_lock+0x5bb/0x1350
[  241.474737][   T34]  ? rdma_dev_change_netns+0x39/0x300
[  241.476869][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  241.488052][   T34]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  241.490345][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  241.492784][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  241.494881][   T34]  ? _raw_spin_unlock+0x28/0x50
[  241.496765][   T34]  rdma_dev_change_netns+0x39/0x300
[  241.499528][   T34]  rdma_dev_exit_net+0x203/0x340
[  241.501554][   T34]  ? __pfx___might_resched+0x10/0x10
[  241.503637][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  241.505769][   T34]  ? net_generic+0x1e/0x240
[  241.507585][   T34]  ? mutex_is_locked+0x17/0x50
[  241.510136][   T34]  ? rtnl_is_locked+0x15/0x20
[  241.512016][   T34]  ops_undo_list+0x49a/0x990
[  241.513889][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  241.515947][   T34]  ? ops_init+0x469/0x5c0
[  241.517717][   T34]  setup_net+0x2d3/0x320
[  241.519952][   T34]  ? __pfx_setup_net+0x10/0x10
[  241.521925][   T34]  ? copy_net_ns+0x304/0x4d0
[  241.523747][   T34]  ? down_read_killable+0x1d1/0x350
[  241.525822][   T34]  copy_net_ns+0x31b/0x4d0
[  241.527584][   T34]  create_new_namespaces+0x3f3/0x720
[  241.548723][   T34]  ? security_capable+0x7e/0x2e0
[  241.550820][   T34]  unshare_nsproxy_namespaces+0x11c/0x170
[  241.553140][   T34]  ksys_unshare+0x4c8/0x8c0
[  241.554974][   T34]  ? __pfx_ksys_unshare+0x10/0x10
[  241.556981][   T34]  ? fd_install+0x30d/0x540
[  241.564783][   T34]  __x64_sys_unshare+0x38/0x50
[  241.566314][   T34]  do_syscall_64+0xfa/0x3b0
[  241.567859][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.571466][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.573409][   T34]  ? exc_page_fault+0x9f/0xf0
[  241.574867][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.576694][   T34] RIP: 0033:0x7fa29998eba9
[  241.583537][   T34] RSP: 002b:00007fa297bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  241.586769][   T34] RAX: ffffffffffffffda RBX: 00007fa299bd5fa0 RCX: 00007fa29998eba9
[  241.590937][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  241.593559][   T34] RBP: 00007fa299a11e19 R08: 0000000000000000 R09: 0000000000000000
[  241.596016][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.603934][   T34] R13: 00007fa299bd6038 R14: 00007fa299bd5fa0 R15: 00007ffdb15efef8
[  241.606603][   T34]  </TASK>
[  241.607623][   T34] INFO: task syz.1.157:6507 blocked for more than 144 seconds.
[  241.616840][   T34]       Not tainted syzkaller #0
[  241.624245][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  241.626880][   T34] task:syz.1.157       state:D stack:25672 pid:6507  tgid:6505  ppid:5849   task_flags:0x400140 flags:0x00004006
[  241.631720][   T34] Call Trace:
[  241.632749][   T34]  <TASK>
[  241.633675][   T34]  __schedule+0x1798/0x4cc0
[  241.635050][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.636539][   T34]  ? __lock_acquire+0xab9/0xd20
[  241.643652][   T34]  ? __pfx___schedule+0x10/0x10
[  241.645403][   T34]  ? schedule+0x91/0x360
[  241.646936][   T34]  schedule+0x165/0x360
[  241.650062][   T34]  schedule_preempt_disabled+0x13/0x30
[  241.651801][   T34]  __mutex_lock+0x7e6/0x1350
[  241.653234][   T34]  ? __mutex_lock+0x5bb/0x1350
[  241.654809][   T34]  ? rdma_dev_change_netns+0x39/0x300
[  241.656913][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  241.664295][   T34]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  241.666041][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  241.667861][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  241.670528][   T34]  ? _raw_spin_unlock+0x28/0x50
[  241.671988][   T34]  rdma_dev_change_netns+0x39/0x300
[  241.673579][   T34]  rdma_dev_exit_net+0x203/0x340
[  241.675109][   T34]  ? __pfx___might_resched+0x10/0x10
[  241.676730][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  241.684913][   T34]  ? net_generic+0x1e/0x240
[  241.687241][   T34]  ? mutex_is_locked+0x17/0x50
[  241.690602][   T34]  ? rtnl_is_locked+0x15/0x20
[  241.693434][   T34]  ops_undo_list+0x49a/0x990
[  241.698757][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  241.700724][   T34]  ? ops_init+0x469/0x5c0
[  241.702345][   T34]  setup_net+0x2d3/0x320
[  241.703926][   T34]  ? __pfx_setup_net+0x10/0x10
[  241.705735][   T34]  ? copy_net_ns+0x304/0x4d0
[  241.707474][   T34]  ? down_read_killable+0x1d1/0x350
[  241.710554][   T34]  copy_net_ns+0x31b/0x4d0
[  241.712314][   T34]  create_new_namespaces+0x3f3/0x720
[  241.714472][   T34]  ? security_capable+0x7e/0x2e0
[  241.716017][   T34]  unshare_nsproxy_namespaces+0x11c/0x170
[  241.717806][   T34]  ksys_unshare+0x4c8/0x8c0
[  241.724747][   T34]  ? __pfx_ksys_unshare+0x10/0x10
[  241.726480][   T34]  ? rcu_is_watching+0x15/0xb0
[  241.728494][   T34]  __x64_sys_unshare+0x38/0x50
[  241.729966][   T34]  do_syscall_64+0xfa/0x3b0
[  241.731339][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.732932][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.734772][   T34]  ? exc_page_fault+0x9f/0xf0
[  241.736215][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.738694][   T34] RIP: 0033:0x7fa29998eba9
[  241.740077][   T34] RSP: 002b:00007fa297bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  241.742592][   T34] RAX: ffffffffffffffda RBX: 00007fa299bd6090 RCX: 00007fa29998eba9
[  241.744918][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  241.747279][   T34] RBP: 00007fa299a11e19 R08: 0000000000000000 R09: 0000000000000000
[  241.749889][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.752497][   T34] R13: 00007fa299bd6128 R14: 00007fa299bd6090 R15: 00007ffdb15efef8
[  241.754897][   T34]  </TASK>
[  241.755971][   T34] 
[  241.755971][   T34] Showing all locks held in the system:
[  241.760963][   T34] 1 lock held by khungtaskd/34:
[  241.762874][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  241.766228][   T34] 2 locks held by getty/5673:
[  241.767791][   T34]  #0: ffff8880277700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  241.772153][   T34]  #1: ffffc900029132f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  241.775614][   T34] 4 locks held by kworker/u8:2/5693:
[  241.777448][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  241.784298][   T34]  #1: ffffc90002ccfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  241.787608][   T34]  #2: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  241.791853][   T34]  #3: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.796178][   T34] 3 locks held by kworker/u11:3/5851:
[  241.798243][   T34]  #0: ffff8880360c6948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  241.801912][   T34]  #1: ffffc900032b7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  241.806210][   T34]  #2: ffff888034c38dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  241.814709][   T34] 2 locks held by syz.2.148/6471:
[  241.816519][   T34]  #0: ffffffff99e6e8d8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  241.820548][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  241.824921][   T34] 2 locks held by syz.0.150/6482:
[  241.826887][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.831205][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.835403][   T34] 2 locks held by syz.1.157/6506:
[  241.837397][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.841592][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.845568][   T34] 2 locks held by syz.1.157/6507:
[  241.847192][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.851057][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.855012][   T34] 2 locks held by syz.3.175/6639:
[  241.856940][   T34]  #0: ffffffff99e6e8d8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  241.861522][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  241.865577][   T34] 2 locks held by syz.5.280/7009:
[  241.867398][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.871780][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.876055][   T34] 2 locks held by syz.6.340/7253:
[  241.877781][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.881304][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.885792][   T34] 2 locks held by syz.7.398/7476:
[  241.887605][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.892777][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.896478][   T34] 2 locks held by syz.8.495/7847:
[  241.898411][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.901674][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.905578][   T34] 2 locks held by syz.9.535/7990:
[  241.907208][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.910985][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.914700][   T34] 2 locks held by syz.4.577/8122:
[  241.916252][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.919675][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.923274][   T34] 2 locks held by syz.4.577/8123:
[  241.925008][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.933976][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.938556][   T34] 2 locks held by syz.1.696/8515:
[  241.940355][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.943861][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.947312][   T34] 2 locks held by syz.2.866/9138:
[  241.949712][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.953031][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.957198][   T34] 2 locks held by syz.0.915/9317:
[  241.959568][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  241.963101][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  241.967197][   T34] 2 locks held by syz.3.1010/9693:
[  241.969527][   T34]  #0: ffffffff99e6e8d8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  241.973158][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  241.977397][   T34] 5 locks held by syz-executor/9697:
[  241.979914][   T34]  #0: ffff888027c84dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  241.983656][   T34]  #1: ffff888027c840b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  241.987211][   T34]  #2: ffffffff8f69df48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  241.991464][   T34]  #3: ffff88806d221338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  241.995703][   T34]  #4: ffffffff8e13f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  241.999412][   T34] 2 locks held by syz.5.1208/10442:
[  242.001204][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  242.004497][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  242.008963][   T34] 2 locks held by syz.7.1221/10496:
[  242.010744][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  242.013839][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  242.017466][   T34] 2 locks held by syz.7.1221/10499:
[  242.019886][   T34]  #0: ffffffff8f52c6f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  242.023101][   T34]  #1: ffff888036974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  242.029675][   T34] 
[  242.030628][   T34] =============================================
[  242.030628][   T34] 
[  242.033460][   T34] NMI backtrace for cpu 1
[  242.033471][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  242.033480][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.033490][   T34] Call Trace:
[  242.033495][   T34]  <TASK>
[  242.033499][   T34]  dump_stack_lvl+0x189/0x250
[  242.033516][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.033526][   T34]  ? __pfx__printk+0x10/0x10
[  242.033550][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  242.033574][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  242.033595][   T34]  ? __pfx__printk+0x10/0x10
[  242.033614][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  242.033629][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  242.033642][   T34]  watchdog+0xf93/0xfe0
[  242.033659][   T34]  ? watchdog+0x1de/0xfe0
[  242.033697][   T34]  kthread+0x711/0x8a0
[  242.033720][   T34]  ? __pfx_watchdog+0x10/0x10
[  242.033737][   T34]  ? __pfx_kthread+0x10/0x10
[  242.033747][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  242.033756][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.033763][   T34]  ? __pfx_kthread+0x10/0x10
[  242.033772][   T34]  ret_from_fork+0x3fc/0x770
[  242.033782][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  242.033792][   T34]  ? __switch_to_asm+0x39/0x70
[  242.033802][   T34]  ? __switch_to_asm+0x33/0x70
[  242.033810][   T34]  ? __pfx_kthread+0x10/0x10
[  242.033820][   T34]  ret_from_fork_asm+0x1a/0x30
[  242.033836][   T34]  </TASK>
[  242.033861][   T34] Sending NMI from CPU 1 to CPUs 0:
[  242.082841][    C0] NMI backtrace for cpu 0
[  242.082856][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  242.082865][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.082872][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  242.082888][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 97 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  242.082895][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  242.082903][    C0] RAX: 54bc4c1acb1b2700 RBX: ffffffff819683f8 RCX: 54bc4c1acb1b2700
[  242.082909][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b9a32 RDI: ffffffff8be33880
[  242.082915][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  242.082920][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38f30
[  242.082925][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  242.082930][    C0] FS:  0000000000000000(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  242.082936][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  242.082940][    C0] CR2: 0000564ae82b7230 CR3: 000000000df36000 CR4: 00000000000006f0
[  242.082966][    C0] Call Trace:
[  242.082973][    C0]  <TASK>
[  242.082976][    C0]  default_idle+0x13/0x20
[  242.082987][    C0]  default_idle_call+0x74/0xb0
[  242.082998][    C0]  do_idle+0x1e8/0x510
[  242.083008][    C0]  ? __pfx_do_idle+0x10/0x10
[  242.083019][    C0]  cpu_startup_entry+0x44/0x60
[  242.083025][    C0]  rest_init+0x2de/0x300
[  242.083036][    C0]  start_kernel+0x3a9/0x410
[  242.083048][    C0]  x86_64_start_reservations+0x24/0x30
[  242.083060][    C0]  x86_64_start_kernel+0x143/0x1c0
[  242.083070][    C0]  common_startup_64+0x13e/0x147
[  242.083086][    C0]  </TASK>
[  242.083798][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  242.152091][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  242.155552][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.159379][   T34] Call Trace:
[  242.160688][   T34]  <TASK>
[  242.161774][   T34]  dump_stack_lvl+0x99/0x250
[  242.163509][   T34]  ? __asan_memcpy+0x40/0x70
[  242.165278][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.167281][   T34]  ? __pfx__printk+0x10/0x10
[  242.169055][   T34]  vpanic+0x281/0x750
[  242.170615][   T34]  ? __pfx_vpanic+0x10/0x10
[  242.172373][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  242.174446][   T34]  ? preempt_schedule+0xae/0xc0
[  242.176426][   T34]  ? preempt_schedule_common+0x83/0xd0
[  242.178549][   T34]  panic+0xb9/0xc0
[  242.180003][   T34]  ? __pfx_panic+0x10/0x10
[  242.181731][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  242.183777][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  242.186125][   T34]  watchdog+0xfd2/0xfe0
[  242.187820][   T34]  ? watchdog+0x1de/0xfe0
[  242.189513][   T34]  kthread+0x711/0x8a0
[  242.191084][   T34]  ? __pfx_watchdog+0x10/0x10
[  242.192886][   T34]  ? __pfx_kthread+0x10/0x10
[  242.194650][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  242.196632][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.198613][   T34]  ? __pfx_kthread+0x10/0x10
[  242.200408][   T34]  ret_from_fork+0x3fc/0x770
[  242.202166][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  242.204103][   T34]  ? __switch_to_asm+0x39/0x70
[  242.205939][   T34]  ? __switch_to_asm+0x33/0x70
[  242.207769][   T34]  ? __pfx_kthread+0x10/0x10
[  242.209586][   T34]  ret_from_fork_asm+0x1a/0x30
[  242.211337][   T34]  </TASK>
[  242.213143][   T34] Kernel Offset: disabled
[  242.214823][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:34:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000080000000 RDX=0000000000000000
RSI=ffffffff8dba8f63 RDI=ffffffff8be33880 RBP=ffffffff8b482232 RSP=ffffc9000426f948
R8 =0000000000000000 R9 =ffffffff8b482232 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=0000000000000002 R13=ffffffff8e139f20 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff8b7ab1ac RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000012dd60000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000316e616c77
XMM02=00007ffa279a7498 00007ffa279a7470 XMM03=00007ffa279a74a8 00007ffa279a74a0
XMM04=00007ffa2850d100 00007ffa279a7460 XMM05=00007ffa279a7478 00007ffa279a74c0
XMM06=00007ffa279a74b8 00007ffa279a74b0 XMM07=00007ffa279a74a8 00007ffa279a74a0
XMM08=0000000000000000 00007ffa27812ee7 XMM09=0000000000000000 00007ffa27812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=00007ffd226e38f0 RCX=00007f19acd98120 RDX=00007ffd226e5a60
RSI=00007f19acc11c9a RDI=00007f19acc2e3f5 RBP=0000000000000009 RSP=00007ffd226e3378
R8 =0000000000000000 R9 =0000000000000000 R10=00000000ffffffff R11=0000000000000000
R12=0000000000000073 R13=00007ffd226e5a30 R14=00007f19acc2e3f5 R15=0000000000000000
RIP=00007f19acb679e0 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555588869500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f19acd981c8 CR3=00000000285a3000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000ff0000ff00 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0300100007d00300 100007c003021000 XMM03=0000000000000000 0000000000000000
XMM04=000000ff00000000 0000000000000000 XMM05=000055558889401c 0000555588893840
XMM06=0000000000000000 0000000000000000 XMM07=616c7701ffffffff ffffffffdf080280
XMM08=0300100007800401 000006080606015c XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
