last executing test programs:

2m30.460119327s ago: executing program 0 (id=2867):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21080000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r0, 0x8, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040))
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

2m30.398826643s ago: executing program 0 (id=2869):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) (async)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) (async)
socket$isdn_base(0x22, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0xe) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd8c, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa00"/197], 0x23c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) (async)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0xffffffffffffff63)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r5 = socket(0x10, 0x800, 0xffff4b83) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, 0x0, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r5) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000740)={<r7=>0x0, 0xe00, "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"}, &(0x7f0000000040)=0xe08) (async)
bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x11)
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r7, 0x1b3}, 0x8) (async)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa0c009078000b0300450000000000000000000000e0000001e0000002e8724e355e9f212c274cde9eff411a0565a1f7af052ea79fcf5cf4ac9639abc75692885d618356c97e0ef32c11f2c6845ea585e17c742e926158a5371fc0bc8d691551c51b6fa9d61d854b62f5d9236549946b39571a3e0b8b0347a2092538af7fa5a88de701f8199aefaf133631b6d4e8adcf06828b43c7cb5b4d51e69f66"], 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000ac8067d407a975168334be144b8371acd11069a490407c2d1099a45d7a47f522dc662fc9f4469768d6ab8ca35fe8b429ce78259e25805efacdbde7ea9aaa0530fa8c59dd1660ed7f6788d693083a243bbaf3c4cb08cf4d98cb9fe9f460fb06ecc5e976f1c6c63164d0199fe27e5d0c5fa281b77bd8dbd023c36147df54cd0bee67fe85c4708914000000822870a976bcf4ad92754fd174c550d89d26a0bd03004d7a74019b912406d1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000e7ffff07850000001700000018110000", @ANYRES32=r8, @ANYRES32=r4], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x3, 0x0, &(0x7f00000002c0)="00691f", 0x0, 0xd41, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

2m30.329679266s ago: executing program 0 (id=2870):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x5, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101}}}}, 0xfdef)
r2 = socket$inet6(0x10, 0x3, 0x0) (async)
r3 = socket(0x2a, 0x2, 0x0)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000240)=@generic={0x0, 0x2, 0x7}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) (async)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

2m30.250617496s ago: executing program 0 (id=2874):
r0 = socket(0x21, 0x3, 0xa)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$inet6(0xa, 0x4, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f0000000000)=0x40093, 0x4)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, {[@routing={0x0, 0x0, 0x1, 0x4, 0x300}]}}}}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000000)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r3)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
recvfrom$netrom(r0, &(0x7f0000000440)=""/249, 0xf9, 0x2040, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48)

2m29.799306931s ago: executing program 0 (id=2878):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r0, 0x104, 0x4, 0x0, &(0x7f0000000080))
r1 = socket$inet(0x2, 0x1, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r2, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r2)
setsockopt$inet_opts(r1, 0x0, 0x1a, &(0x7f0000000000)="89", 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c000377d88bf37000000140000140035007767320000000000f1ff0000000000005b3af01d93ac05a5a7277ff7415030cd53e4a59e86386545a55a1fb7ca621f3f53c72574209a3188273e7e644bd7f1d10350ccc39bca09de37c37a85cb0cb96ad77d2060ed51d7167808407497d44a09eaaa5656d52bfd597e992ad8b1ba63f96123861d07d2b91b1fae3436260a9ba785695d989964a9dac80c6d1c24f6574c8867a3b07d39cb23732c319a0cd0b91e7bfa8d48ffedd08da73fca7d75cf3c165bb08da74f208291834ffcddb3a8e8144b42a710b4ffa1ba4d70b00d8e8dfa433c3be7ed"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004)

2m29.79746308s ago: executing program 0 (id=2879):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000002010400000000000000000900000008000540000000050800054000000081b04818bf44ee93d05622dc45b4d759994cb13aad8c5f87bb05021b21f817347fe6136b8a1205c3040dd0a9a3e6cef9ac158295c2531b404cbaa3f51f81ba1cd9b61a1bf3df0dda4db32223eec4a95c7c14b5e6e68d7a374ea298ef8c4e12a76fa6da56cce88c5161499f34513936155eb20ce7c9c998c9ab58ce3ef93aa0dd8c0a46335dcb5c900dca0b824408fb872585961b34541499d233e4c1"], 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)

2m14.753906146s ago: executing program 32 (id=2879):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000002010400000000000000000900000008000540000000050800054000000081b04818bf44ee93d05622dc45b4d759994cb13aad8c5f87bb05021b21f817347fe6136b8a1205c3040dd0a9a3e6cef9ac158295c2531b404cbaa3f51f81ba1cd9b61a1bf3df0dda4db32223eec4a95c7c14b5e6e68d7a374ea298ef8c4e12a76fa6da56cce88c5161499f34513936155eb20ce7c9c998c9ab58ce3ef93aa0dd8c0a46335dcb5c900dca0b824408fb872585961b34541499d233e4c1"], 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)

1m47.969429557s ago: executing program 2 (id=3526):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x18)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000009c0)={<r5=>0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000b40)={r5, @in6={{0xa, 0x4e20, 0x4, @private0, 0xff}}}, 0x84)
sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a507333f8", 0x5c}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x18)
sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000dbd625174bc93b"], 0x14}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r8, <r9=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r10, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x0, &(0x7f0000000980)=[r8, r9, r8, r8, r8, 0xffffffffffffffff, r8, r8, 0x1]}, 0x94)
close(0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r1, @ANYBLOB="0df49af09208"], 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r11, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040)
r13 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f00000006c0)={'caif0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x20, 0xc, "def4f229d890069cc428622e"}})

1m47.879085031s ago: executing program 2 (id=3531):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x10, 0x0, "b20fc19dcea1a2f64cd3368960179b0a3811acf296c264b1b3fb980632bb28e0fd5bdc0e3d3c15e77d4993e70a79f1256777954e7ec11252c1f5824eccf4ee5fd8450c8ad9ce5dc6f62732c5b8b06018"}, 0xd8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = socket$unix(0x1, 0x2, 0x0)
r9 = socket$unix(0x1, 0x3, 0x0)
connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000380)=[{r8, 0x4}], 0x1, 0x0, 0x0, 0x0)
readv(r7, 0x0, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r3, 0x9c919000)
connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000780)={r10, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x85, 0x4a, 0x15c2, 0x5886, 0x802, 0x2, 0xc, 'syz1\x00'})
shutdown(r10, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0)

1m46.97058165s ago: executing program 2 (id=3537):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r2, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005", @ANYRESHEX=r1, @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x3, 0x10}}}, 0x24}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x1, 0xf, 0x4})

1m46.96871142s ago: executing program 2 (id=3538):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xf7bb00, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'macsec0\x00', 0x6bf1c2d5adba8d11})
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x5e7c00, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r2=>0x0})
r3 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r3, 0x0, 0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x14, &(0x7f0000000880)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7fff, 0x5d, &(0x7f0000000380)=""/106, 0x41000, 0x13, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x1000000000000056, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0), 0x10, 0x3fd}, 0xfffffffffffffefa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r4, 0x0, 0x3}, 0x18)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r5, 0x0)
poll(&(0x7f0000000040)=[{r5, 0x2124}, {r5, 0xb0c4}], 0x2, 0x11ff)
shutdown(0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000"], 0x174}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x12, r1, 0xbdd94000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x5})
getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
r7 = socket(0x10, 0x3, 0xfffffffe)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000440)={<r8=>0x0, 0x100, 0x800000000000005c}, &(0x7f0000000400)=0xa)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000100)={r8, 0x80, 0x5}, &(0x7f0000000140)=0x8)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

1m46.110545325s ago: executing program 2 (id=3549):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000426bd7000fddbdf2502000000060006000100000014000c0000000000000000000000ffff6401010114000c00fe8000000000000000000000000000aa08000100", @ANYRES32=0x0, @ANYBLOB="76ea20690ab30c910800a2f11adb186146dc0ca42e3a1c"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40800)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000040)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x78, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r8=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7}, 0x90)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r8, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xb9952aa97289f855, 0x69, '\x00', 0x0, @fallback=0x25, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r11, 0x1, 0x2b, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYRES16], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r13}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xf, 0x17, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9041, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ldst={0x2, 0x3, 0x1, 0x0, 0xa, 0x20, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ringbuf_query, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0xae, &(0x7f00000007c0)=""/174, 0x41000, 0x0, '\x00', r12, @fallback=0x26, r6, 0x8, &(0x7f0000000880)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x5, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff, r13], &(0x7f0000000ac0)=[{0x5, 0x1, 0x8, 0x9}, {0x1, 0x3, 0x6, 0x7}, {0x1, 0x5, 0xd, 0x2}, {0x4, 0x4, 0x0, 0x9}, {0x1, 0x2, 0x5, 0xc}], 0x10, 0x9}, 0x94)
r14 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r14, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x1}, 0x1c)
listen(r14, 0x8000)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x44}}, 0x8000)

1m45.89668726s ago: executing program 2 (id=3552):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
close(0x4) (async, rerun: 32)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r2, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb30}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x48b5, 0x4) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
close(r0) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000500)) (async)
close(0xffffffffffffffff) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100011ffdbdf25000000006a53720e48ec0aa27ad3b10f064fd88b7ab4638ed9a58418a8df5c487f3215bc9baddd115e1078219ebe8f7212055a07ab39e31b42026151f75ce58da9550e000008cecd240ee0f3180eb9fcc1defb7f2e24aad4be8b1a51f7a1c39f129ffc62a7500ee7aeef2b48d3d1", @ANYRES32=0x0, @ANYBLOB="15020000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb08001d00f1ffffff"], 0x44}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40080)

1m39.781752989s ago: executing program 1 (id=3653):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket(0x28, 0x1, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
pipe(&(0x7f0000000300))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x28da}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8}]}, 0x44}}, 0x800)

1m39.781119494s ago: executing program 1 (id=3654):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbc)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
close(r2)

1m39.510567127s ago: executing program 1 (id=3655):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc018}, 0x4000080)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140))
recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000080), 0x1)
recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

1m39.46056008s ago: executing program 1 (id=3656):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'gre0\x00', <r1=>0x0, 0x40, 0x707, 0x1, 0x40000000, {{0x6, 0x4, 0x3, 0x3f, 0x18, 0x65, 0x0, 0x8a, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, {[@noop]}}}}})
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084894)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@ipv6_deladdr={0x6c, 0x15, 0xe1c, 0x70bd28, 0x25dfdbff, {0xa, 0x40, 0x12, 0xc8, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x8001, 0xb7c, 0x1, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7f46}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x6c}}, 0x0)

1m39.400521406s ago: executing program 1 (id=3657):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='dax_insert_mapping\x00', r0}, 0x18)
socket$key(0xf, 0x3, 0x2)
r1 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
close(r2)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, &(0x7f0000000140)={0x0, 0xea60}, 0x10)
connect$vsock_stream(r9, &(0x7f0000000940)={0x28, 0x0, 0xffffd8ee}, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m39.238000012s ago: executing program 1 (id=3658):
socket$isdn_base(0x22, 0x3, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB="69638fa98b20b6b8868820c10e95a266bda577e5b4ee8694c2e7ccc33286534f0e27d0d493e682a319a14b8e2079f54b4c554f636a35efc985d694e2d6fac26f16afd4c871470bbd2e378660e959767babd19c4cdbb223fd8cc5bf1392dd4caab3553436db85bc6b7fbefe429bd0cd36ca1e6993bdc9d05c23eb8a607c32b1d2fce3d72ee39bc91c4a61d18d4289d4a72569bc0f562521f941b373a9189f27318fbea3439f43a200829e34b2145b68815fd2933e2a9d8ef14d9345fc7ee2e4290cfcbf1c59cc5693c7cee64fe9dd27349f037488395b2ff047cb67d3177c7ca1fae0022298bb99b88148525d3254e90d8a1d1130c575154c", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) (async)
unshare(0x62040200) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000c94650", @ANYRES32=r5, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0004003c9a000000d6588c2c4582085ea455ffffffffaf35001e2668"], 0x50)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) (async)
shutdown(0xffffffffffffffff, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) (async)
unshare(0x24060400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000006e0000006e0000000b000000040000000600000f020000000500000005000000070000000200000006000000000000000100000001000100010100000300000006000000070000000100000009000002000000000000000005000000050000006edd02"], 0x0, 0x93, 0x0, 0x0, 0x1}, 0x28)

1m31.034470111s ago: executing program 33 (id=3552):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
close(0x4) (async, rerun: 32)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r2, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb30}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x48b5, 0x4) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
close(r0) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000500)) (async)
close(0xffffffffffffffff) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100011ffdbdf25000000006a53720e48ec0aa27ad3b10f064fd88b7ab4638ed9a58418a8df5c487f3215bc9baddd115e1078219ebe8f7212055a07ab39e31b42026151f75ce58da9550e000008cecd240ee0f3180eb9fcc1defb7f2e24aad4be8b1a51f7a1c39f129ffc62a7500ee7aeef2b48d3d1", @ANYRES32=0x0, @ANYBLOB="15020000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb08001d00f1ffffff"], 0x44}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40080)

1m23.694762924s ago: executing program 34 (id=3658):
socket$isdn_base(0x22, 0x3, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB="69638fa98b20b6b8868820c10e95a266bda577e5b4ee8694c2e7ccc33286534f0e27d0d493e682a319a14b8e2079f54b4c554f636a35efc985d694e2d6fac26f16afd4c871470bbd2e378660e959767babd19c4cdbb223fd8cc5bf1392dd4caab3553436db85bc6b7fbefe429bd0cd36ca1e6993bdc9d05c23eb8a607c32b1d2fce3d72ee39bc91c4a61d18d4289d4a72569bc0f562521f941b373a9189f27318fbea3439f43a200829e34b2145b68815fd2933e2a9d8ef14d9345fc7ee2e4290cfcbf1c59cc5693c7cee64fe9dd27349f037488395b2ff047cb67d3177c7ca1fae0022298bb99b88148525d3254e90d8a1d1130c575154c", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) (async)
unshare(0x62040200) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000c94650", @ANYRES32=r5, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0004003c9a000000d6588c2c4582085ea455ffffffffaf35001e2668"], 0x50)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) (async)
shutdown(0xffffffffffffffff, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) (async)
unshare(0x24060400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000006e0000006e0000000b000000040000000600000f020000000500000005000000070000000200000006000000000000000100000001000100010100000300000006000000070000000100000009000002000000000000000005000000050000006edd02"], 0x0, 0x93, 0x0, 0x0, 0x1}, 0x28)

1m19.020511357s ago: executing program 4 (id=3842):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x5d, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xd}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x8}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m19.014976621s ago: executing program 4 (id=3843):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)

1m18.72084704s ago: executing program 4 (id=3844):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x40000)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x182, 0x9, {0x77359400}, {}, {0x2, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "c251541693f8cfd1"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x1c, r2, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0)

1m16.900666815s ago: executing program 4 (id=3880):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000000), 0x8)
listen(r1, 0x400101)
ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@loopback, @broadcast}, &(0x7f00000000c0)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="2400000058004f0f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@mpls_getnetconf={0x24, 0x52, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040890}, 0x0)

1m16.800447002s ago: executing program 4 (id=3881):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f0000004740)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f0000000180)=""/122, 0x7a}], 0x2, &(0x7f0000000240)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/253, 0xfd}, {&(0x7f0000001500)=""/70, 0x46}, {&(0x7f0000001580)=""/237, 0xed}, {&(0x7f0000001680)=""/161, 0xa1}], 0x6, &(0x7f00000017c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001800), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000001880)=""/184, 0xb8}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/57, 0x39}, {&(0x7f0000002980)=""/112, 0x70}, {&(0x7f0000002a00)=""/224, 0xe0}], 0x5, &(0x7f0000002b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000003e40)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/138, 0x8a}, {&(0x7f0000003d80)=""/142, 0x8e}], 0x3, &(0x7f0000003e80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000003f00)=@abs, 0x6e, &(0x7f0000004040)=[{&(0x7f0000003f80)=""/15, 0xf}, {&(0x7f0000003fc0)=""/115, 0x73}], 0x2, &(0x7f0000004080)=[@rights={{0x24, 0x1, 0x1, [<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000040c0), 0x6e, &(0x7f0000004140), 0x0, &(0x7f0000004180)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000041c0), 0x6e, &(0x7f0000004480)=[{&(0x7f0000004240)=""/14, 0xe}, {&(0x7f0000004280)=""/101, 0x65}, {&(0x7f0000004300)=""/166, 0xa6}, {&(0x7f00000043c0)=""/160, 0xa0}], 0x4, &(0x7f00000044c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000004540)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f00000045c0)=""/44, 0x2c}, {&(0x7f0000004600)=""/94, 0x5e}], 0x2, &(0x7f00000046c0)=[@rights={{0x18, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r14=>0xffffffffffffffff]}}], 0x50}}], 0x8, 0x12000, 0x0) (async, rerun: 64)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000004940), 0x8400, 0x0) (rerun: 64)
write$tun(r15, &(0x7f0000004980)={@val={0x0, 0x8906}, @val={0x0, 0x0, 0xc91, 0xd, 0x5, 0x7}, @ipv4=@dccp={{0x14, 0x4, 0x3, 0x9, 0x1060, 0x64, 0x0, 0x4, 0x21, 0x0, @empty, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0x1c, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xbd, 0x1, 0xe, [{@remote, 0x80000000}, {@rand_addr=0x64010101, 0x9}, {@multicast1, 0x81}, {@private=0xa010102}, {@multicast2, 0x2}]}]}}, {{0x4e22, 0x4e21, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, "f3ed4b", 0x5, "bc1e7b"}, "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"}}}, 0x106e) (async)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000005a40)={{}, 0x7, &(0x7f0000005a00)=[0x2, 0x16274385, 0x101, 0x5037, 0x8, 0x16, 0x81], 0x5, 0x6, 0x1}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000005ac0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r16=>0x0}], 0x6, "b30a8fe73a50ae"}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000006ac0)={0x0, ""/256, <r17=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000006cc0)={r16, r17, "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", "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"}) (async)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000007cc0)=0x40, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000007d00)={'gre0\x00', <r18=>0x0}) (async, rerun: 64)
sendmsg$SMC_PNETID_GET(r8, &(0x7f0000007e00)={&(0x7f0000007d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000007dc0)={&(0x7f0000007d80)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x400c890) (async, rerun: 64)
shutdown(r4, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007f40)={0x6, 0x7, &(0x7f0000007e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ec55df9, 0x0, 0x0, 0x0, 0x9cb}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff9933, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r7}]}, &(0x7f0000007e80)='GPL\x00', 0x9, 0x2b, &(0x7f0000007ec0)=""/43, 0x41100, 0x3, '\x00', r18, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007f00)=[r1, r14], 0x0, 0x10, 0x64}, 0x94) (async)
r19 = accept4$inet6(r12, &(0x7f0000008000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000008040)=0x1c, 0x800)
setsockopt$inet6_int(r19, 0x29, 0x3a, &(0x7f0000008080)=0x5, 0x4) (async, rerun: 32)
sendmsg$NFT_BATCH(r12, &(0x7f0000008380)={&(0x7f00000080c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000008340)={&(0x7f0000008100)={{0x14}, [@NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x23484272}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0xa0, 0x14, 0xa, 0x600, 0x0, 0x0, {}, [@NFTA_OBJ_USERDATA={0x74, 0x8, "ef8d52aebe4626107358d442a9e8d592d42c60ad729509bfe4a20686e56ea35259dc50c014ff3d51b44f6bc46516aba687c84432f255e719b23aad27a832c804f28db3823a90861fda5bbbcecb193fc0db0ad4c673e361a659602a568732fb364bf959a48c51a04fa4d83908eb7aacc0"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xf8, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xbd, 0x6, "0cafb2138de4d1a22eda5f74fb7bb87a0d39a7e3725d0771d11ffd563b5cff1241629f0d6d70d2d2dd27d2254326558924001e268667e30230c9f716a74be6d3038e415cc6ef1af3fabc49c54d90709a4f0b5ad0b8d7c3f92ee179ae875ee311945d356492c68898a4d9eee776ab8c0199df21a9f28806fa94b6b648363c0d6f5bc197440b2296ee3608f2fb99137142172de346e98ec6e3527fb20fc1a1c6e029e2c15343a0ceff1e2fb2b2fb082287c4d280ac7e28628955"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x218}, 0x1, 0x0, 0x0, 0x40008080}, 0x40080) (rerun: 32)
r20 = accept$packet(r5, &(0x7f00000083c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000008400)=0x14)
bind$packet(r20, &(0x7f0000008440)={0x11, 0x1a, r18, 0x1, 0x43, 0x6, @multicast}, 0x14) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000008480)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000008580)=0xe8)
ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f00000085c0)={0x3, @null, r21}) (async)
r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000008600), 0x8200, 0x0)
ioctl$TUNGETFEATURES(r22, 0x800454cf, &(0x7f0000008640)) (async)
sendmmsg$alg(r3, &(0x7f0000008bc0)=[{0x0, 0x0, &(0x7f0000008840)=[{&(0x7f0000008680)="027e2b804af0342e42396f9af22bb246375e2b29cdfce323b16fe91c7ffb6b2269c17620e6056d947480d58e041c039ea16bba8f09ef045d83e019ddfbc2a9db9807cd14441c10bcf9b371b226346295b68d9dc915409db8253e5d2aed3719b89f3a080137a9995e43e4dde394b146", 0x6f}, {&(0x7f0000008700)="f98ec848607cc6c72a7be66e559a61a48fe6b2e4deea7bcbcf985770d5f82964829e7a039ccfbc3a67879428e3ed3676e855afa5467ea35ae5f196cf5923b9fe26bea99cc928d0d321a29d03daf65ae9645673a409f7b835628ed12694f5a3d3ce6d1a58fc0f0a9008b7dbd9d30bd49aacdf96e42ba6705d5eaeebbef1", 0x7d}, {&(0x7f0000008780)="adfd9ee5179e096a1d0af3144828fb30ace17b52967baa780057dc5dacb45e1c72263c93b681bfb2d3bea54dfb6b1efb57590b46aa6a8295807e7ab560fde8f2591bfad5ede3400081", 0x49}, {&(0x7f0000008800)="c5f527a8654e45bf383b99914f749e9306b4fd2ef5031c3718a9d06af588e00a7a4c237c70", 0x25}], 0x4, &(0x7f0000008880)=[@iv={0x70, 0x117, 0x2, 0x5a, "ec1f870daf8b5d586d392730ea5b9466656ca1b5155dc54796074e8ded1d09a615703e667be14cf41d14694d8507ff8702915689571da4b14f723c56c48588d20ad7de8d4c8acb42e842cd88f73c84d4beaa6445601bbd6a0e19"}, @assoc={0x18, 0x117, 0x4, 0xfa}, @assoc={0x18, 0x117, 0x4, 0x401}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x28, 0x117, 0x2, 0xe, "786ffa4f51114a3a99dbc5e4ca3d"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x158}, {0x0, 0x0, &(0x7f0000008b40)=[{&(0x7f0000008a00)="6d77521c8e32d45f07a398fbf29690ba0c4a2c9a74d8441caee09e5d6bae50228e0f695405ae3ec48ea62c713e2f765b09b6ef1e9f638c9dd7d8096a6b0d", 0x3e}, {&(0x7f0000008a40)='w&', 0x2}, {&(0x7f0000008a80)="10b912a0d75ac0cf191fca67eddf6bc48d02083329af3ff451665ae23f04e8b39250b2aa4ea63eed2beb02cd44099f8278d1f51ecf8e1f2c9d7fd0143cf370bdb9b4ff300125103e924aa1e9bff26b000f577953c13258865d4100b2f9b4b78aebecd3324e18877cf37dabc73034c416a6042a054bea7a7621558068b1a13f158c804f3a639ce291d76f60548b39ed7d13", 0x91}], 0x3, &(0x7f0000008b80)=[@assoc={0x18, 0x117, 0x4, 0x10000}], 0x18, 0x4786a6bae92ce0fe}], 0x2, 0x40) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r23 = accept4$vsock_stream(r4, &(0x7f0000008c40)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80800)
ioctl$sock_SIOCGIFINDEX(r23, 0x8933, &(0x7f0000008c80)={'gre0\x00'}) (async)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000008cc0)={<r24=>0x0, 0x8001}, &(0x7f0000008d00)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000008d40)={r24, @in={{0x2, 0x4e24, @loopback}}, 0x2, 0xb, 0x10001, 0xa, 0xeb, 0x9, 0x2}, &(0x7f0000008e00)=0x9c)
setsockopt$packet_int(r13, 0x107, 0xe, &(0x7f0000008e40)=0x1, 0x4) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000008e80), 0x80, 0x0) (rerun: 32)

1m16.799948443s ago: executing program 4 (id=3882):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = epoll_create1(0x80000)
nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180))
unshare(0x6a040000) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r5}, &(0x7f0000000040), &(0x7f0000000940)=r4}, 0x20) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="09000000043bbdbc360da2daf042fceef392f3f0b12f295133bb100000000020000000000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
r9 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x1d, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000380001070000ef067c6c580e08"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000000}) (async)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) (async)
r12 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) (async)
getsockopt$XDP_STATISTICS(r12, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000008860103000000000000000002000000"], 0x14}}, 0x0)

1m1.208211348s ago: executing program 35 (id=3882):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = epoll_create1(0x80000)
nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180))
unshare(0x6a040000) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r5}, &(0x7f0000000040), &(0x7f0000000940)=r4}, 0x20) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="09000000043bbdbc360da2daf042fceef392f3f0b12f295133bb100000000020000000000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
r9 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x1d, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000380001070000ef067c6c580e08"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000000}) (async)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) (async)
r12 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) (async)
getsockopt$XDP_STATISTICS(r12, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000008860103000000000000000002000000"], 0x14}}, 0x0)

29.110666838s ago: executing program 3 (id=4285):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4014}, 0x48)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x7ef80}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x12)

29.053407158s ago: executing program 3 (id=4287):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=<r0=>0xffffffffffffffff], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1840160000000018605b51000000000000000000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a0020002abd7000fe5ccec498664526"], 0x14}, 0x1, 0x0, 0x0, 0x20008844}, 0x80) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) (async)
getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000a80)) (async)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0}) (async)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) (async)
r6 = epoll_create1(0x0)
writev(r6, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19060000000000000000199ffc0000f10f0000", @ANYRES32, @ANYBLOB='/\b\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x500, 0xd0, 0xd0, 0x1a0, 0xd0, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x6, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@remote, 0x34, 0x3a}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) (async)
pipe(&(0x7f0000000000)) (async)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async)
connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="543a11002000000227bd7000fcdbdf250a1000400100000041000000080018004e214e2008000e000800000014000200fc01000000000000000000000000000114000200fe8800000000000000000000000000012cc9e5b76a32f036fb002302e09b98609949196a6e8830ae59fce22031eada66e4a1"], 0x54}, 0x1, 0x0, 0x0, 0x44080}, 0x4000091) (async)
sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0)

29.052644593s ago: executing program 3 (id=4288):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r2, @ANYBLOB="83000700000000003800128008000100677265002c00028008000600ac1414bb0500160001000009000010004e21000005000a000000000006000e0001000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, &(0x7f00000006c0))
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000004088eb0200000008000300", @ANYRES32=r5, @ANYBLOB="0800a0002fae26f50165874ae3276d817e9e090000080027000200000008002600a809459b108f9a57c2618d52474345a285a78ceb614a60595b66841d02909b8086b71120477c31744bded315883a598ef21be7c843598ef35049d95b8841db75cb44d6b502799fd1d3fe0e65ff3631252f5052122bd2d980c8730999d9635edec54c806a70062850399dc550a2977cfe37f0718ac3aae6b6ad0000c3005e85620b12189a87817d56128d9c444be9671afeea978c46ff7498102a06"], 0x3c}}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_buf(r7, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000540))
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0)
socketpair(0x1d, 0x2, 0x7, &(0x7f0000000040))
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

29.000059803s ago: executing program 3 (id=4289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010101, 0xa, 0x34, 0x14}]}, 0x38}}, 0x40400c0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0xb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0)
socket$inet6(0xa, 0x3, 0x5)
socket$netlink(0x10, 0x3, 0xb)
socket$isdn_base(0x22, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

28.869507069s ago: executing program 3 (id=4295):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x7, {0x0, 0x0, 0x0, r1, 0x44198, 0x188f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x1}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @loopback}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0)
unshare(0x6a040000)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4080001)
getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)

28.719893762s ago: executing program 3 (id=4297):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbc)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000000541affd5020000000950644cdc3c7a300000000008000240000000032c000000030a01030000e6e6e2cd4bca5bfd292cff0000000002eeffff0800010073797a300000000009000300730400000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x58}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x8, &(0x7f0000000300)=[{}, {}, {@fixed}, {@none}, {}, {}, {@fixed}, {@fixed}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r4, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{/.-\x00'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000000d14040029bd0100fcefdf56a9533429841e5897fe0fd389941225"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40084}, 0x80d0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
shutdown(r5, 0x1)
getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000850000013100400095000000000000000eb6cc4115e87031930c6de67a707aac3b63d3e1ddafd0c2f824ed5828758375af15808cf600584b599962d1091a6283ff7ef8a51d73a6af3ea1e6bb70fc4a095b2cc53daa56d5af58acc7b5442ca70ab67e0a0d284e95bbaf46bbc481c622267d219a4cfe8fa940192ab77e3bd98860470f9002002a0a312881798fda147066449230df813c377804a1019e8139dd185424e8367c666f6970c4a8b14805ce54155b8a6750e1dd01b386a7a4c12d6af8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @cgroup_sock_addr=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x10)
ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000001680)={{0x2, 0x4e21, @local}, {0x1, @random="a47014a8d025"}, 0x8, {0x2, 0x4e24, @multicast2}, 'veth0_to_bridge\x00'})
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='xen_cpu_write_gdt_entry\x00', r6, 0x0, 0x4a1}, 0x18)

13.857367733s ago: executing program 6 (id=4488):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e27, 0x3, @remote, 0x7}, 0x1c)
listen(r0, 0x39c)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="05b001"], 0x9) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000001b00), &(0x7f0000000000)=0x4) (async, rerun: 32)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async, rerun: 64)
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400feff", @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf253000000008000300", @ANYRES32=r6, @ANYBLOB="0600360034000000060036003e000000060036000c000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async, rerun: 64)
write$tcp_congestion(r2, &(0x7f0000000100)='reno\x00', 0x5)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001000370400000000ffffffff00000000aa83d7bd9990e7966798f8a30e103ea5b4adb432743cf41b96d9b2d7ad5374688339f765539f366331c5305c6aa5b7f3896de24dd2b93231dcaa2c079017a88a70133c47207414", @ANYRES32=r8, @ANYBLOB="0b12050000000000180012800b00010069703667726500000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) (async)
sendmmsg$inet6(r9, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000140000002f00000005000000000000000100000d000000000200000001000000002e612000"], 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28) (async)
recvfrom$inet(r7, &(0x7f0000000000)=""/30, 0x1e, 0x2, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10)
write$tcp_congestion(r2, &(0x7f0000000300)='reno\x00', 0x5)

13.810795155s ago: executing program 6 (id=4489):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x1)
shutdown(r0, 0x1)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, 0x0, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a3200000000b70007"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014)
r4 = socket$pppoe(0x18, 0x1, 0x0)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\xd4u\xe5\x84D\xff\x86\x11\x1d\xf4\x84\xea\x0e\x9f\xc4\"\xa6\r\x7f`\xcb\xb7\x8f\xaa\xdb\x0f\x89\xf48\xee\x99\xfd\xb4\xfb\xd9=\xf2\xf7\xc4\xa9~\xcf\xdc\x1d\x05\x148\a?#8H\xfd\x84\xa1c\xeex\xcd\xef\x18\xa6]?\xd7\xc4)/D\x90(\x8etSO\n:F\x95s\xf7\x031\x9b3\xeb\x97\x0e\xb4\x19\x1d\xa0<a\xe7M #(\xdf~ta\x84\xa0\x84i,\xd1\\\x00x\x978\x11\x18\xfa\xa4G\x96\x93\x1bRTq\x80;3\xe6x\x9b\xae\x06\x02V\x06t\n\xc4\x12}\\o\x17-\xeb\xa7\x06l\xbfB8F\xea\xfd\xc6s\xb1|#\x17\xdd\xa6\xe8\x82\xcc@\x1e\x7f\xd4\xe7\x9c\xb7\xe8\\\xa4\x8a]V\xea\a\x00\x83\xbb\xfaw\x11\xdc\x8e\nH\xc1j\x88c\xeb\xe0W~\xdaAU>U:\xc1\x94\x83P\x8b\xbe\xd0\xaa\xa4v\xdc\r\bZ\xe5\xc9!\xe7\xc8\xb2\x17\xca\x93\xa7\xff\xf3\x88\x96<\xc4~5\xbd\x13\x932dg\x8d>g\xb8\xe8\xbbz)\x9fC,\xd7y\xbc\x02U67\xde\xb6\b\x96E>\"\xbedB\x14\xbe1\xca\xdd\fR\xc6=\xbc-6{\xc6};\a\x14\xa6\x8fR\x80E(\xa7n\x93\xd7\\\xf1Z\x8fP\x98\x1bg\xd5\x12\xc7\x82\xef\xdf#\x8d\x19,\xb0\\\xf3\x85Z\xe4\xa4!\xe4O\xfe\x12Hz3\x10$\x8a\xe4\xab\xd6\xcc8|#]6\xde%\xdfR\xafA\xc4]ft\x95\x8b\xd7\xc6\xb63bO\x1f\x95\x17\x8f^\x83\x01\x1c\xa2W*\xe8L\xfe\xb6[\xfe\xbd', 0x17c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, 0x33, 0x107, 0xfffffffc, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="dd5f"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050)
connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="5677dee5a538", 'ip_vti0\x00'}}, 0x1e)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

13.750419363s ago: executing program 6 (id=4490):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bd", 0x41}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="74a4e85cc89d33547afbda9d629f9f9f20b9b051442633488e9e33357c312479a404b3704c8d07860bf96d27dfa418938011b5863b28d31d6185a51a0ad41082802e5ca3be41e7ceac5799eac6bb0ff07c730031c7dca06f1e3f85a9c396610ab3bce2e140e31e878fe2bb2c4c8fbdf6cf9fc309342407cb59bd5086e9dd41ade97c48662086653e4c390266c307182581eb72c91b5ab9efdd54b319bb8d1b4b977e050b1194f01177fdd42215aa0a444854aae3729ffa795dd6e19d7fd7bdc6208778db60e756", 0xc7}, {&(0x7f00000004c0)="d82d33a6d81edc4b66cc88bf8c1a89a62b9f80694439ec866cab778d9631e23dc3b23087ca46c503e8b9bbf555fff7ba14bbd9", 0x33}, {&(0x7f0000000580)="4cc291a1339f36fedfa937c3d768baa73ddc72c419695988fc8177e38f1379e15e6745bbb565b5a19e98a179b04a46aeeb2ae125123d2bb33ca7f7a32c4b04399893a25cdc4147", 0x47}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)="6442740e247b17bd4d19bd1c3479aa6b61e51e45a4ad19e06610cf34114ffff5fb2f594acecc29734a7acec71e4d5b3ce05bae0b340b4d2876079233eff3cc471c9d307222d237ec184324d0a6abfdbb9d3e8e408ec4bcd5deb573f5999c49f7281bdc243b62ef5f33c487dba59f52304381e9dd7f3084094bfdf1bbc2b592d73ff16b44fb3aa0", 0x87}, {&(0x7f0000000940)="431892f7b6e52b6659416138702f0fd658122d85468d4d814c549c8651bbf881dcbe242abd08a5d2499bd3e24add3598d455ddec7c5ecc6bd9d67ddf174512aa1182a7381928d9e7fb20003894ed", 0x4e}], 0x2}}], 0x3, 0x8810) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x10})
sendmsg$alg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00'}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$kcm(0x29, 0x7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800000900000000000000000000800000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) (async)
sendto$inet6(r5, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) (async)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) (async)
write(r7, &(0x7f0000000240)="94", 0x1) (async)
vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async)
tee(r6, r10, 0x8f5, 0x0) (async)
write(r8, 0x0, 0x0)

13.748869308s ago: executing program 6 (id=4491):
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)

13.740272316s ago: executing program 36 (id=4297):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbc)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000000541affd5020000000950644cdc3c7a300000000008000240000000032c000000030a01030000e6e6e2cd4bca5bfd292cff0000000002eeffff0800010073797a300000000009000300730400000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x58}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x8, &(0x7f0000000300)=[{}, {}, {@fixed}, {@none}, {}, {}, {@fixed}, {@fixed}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r4, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{/.-\x00'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000000d14040029bd0100fcefdf56a9533429841e5897fe0fd389941225"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xa}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40084}, 0x80d0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
shutdown(r5, 0x1)
getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000850000013100400095000000000000000eb6cc4115e87031930c6de67a707aac3b63d3e1ddafd0c2f824ed5828758375af15808cf600584b599962d1091a6283ff7ef8a51d73a6af3ea1e6bb70fc4a095b2cc53daa56d5af58acc7b5442ca70ab67e0a0d284e95bbaf46bbc481c622267d219a4cfe8fa940192ab77e3bd98860470f9002002a0a312881798fda147066449230df813c377804a1019e8139dd185424e8367c666f6970c4a8b14805ce54155b8a6750e1dd01b386a7a4c12d6af8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @cgroup_sock_addr=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x10)
ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000001680)={{0x2, 0x4e21, @local}, {0x1, @random="a47014a8d025"}, 0x8, {0x2, 0x4e24, @multicast2}, 'veth0_to_bridge\x00'})
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='xen_cpu_write_gdt_entry\x00', r6, 0x0, 0x4a1}, 0x18)

13.64050798s ago: executing program 6 (id=4494):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
unshare(0x400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
pread64(r3, &(0x7f00000000c0)=""/244, 0xf4, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xc, 0x1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x140480a4}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

13.540301312s ago: executing program 6 (id=4496):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
close(0x4)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000000000000a8aaaafffeaaaa3d01ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000000000000a8aaaafffeaaaa3d01ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
poll(&(0x7f0000000280)=[{r0, 0x402}], 0x1, 0x2)
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket$tipc(0x1e, 0x5, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
listen(r1, 0x0) (async)
listen(r1, 0x0)
socket$tipc(0x1e, 0x5, 0x0) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r1, 0x0, 0x0, 0x400000000000000)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) (async)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000700)={'erspan0\x00', <r5=>0x0, 0x18, 0x7800, 0x3, 0x4, {{0x31, 0x4, 0x3, 0x3, 0xc4, 0x67, 0x0, 0xe9, 0x2f, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x3, 0x59}, @cipso={0x86, 0x61, 0x1, [{0x0, 0xb, "03169a5cadccb231d2"}, {0x0, 0x6, "767d0f2a"}, {0x2, 0x3, "cd"}, {0x0, 0x9, "366536a7fa84a5"}, {0x5, 0x3, 'T'}, {0x5, 0x12, "eac2eaab5960b03ac49ef27645a70228"}, {0x7, 0xb, "02d967583d524d3c17"}, {0x5, 0xd, "f11c3672c36a0e5af7bd36"}, {0x5, 0xa, "549bcbbc36f6c076"}, {0x2, 0x7, "7210881b30"}]}, @timestamp={0x44, 0x20, 0xfa, 0x0, 0x9, [0x10000, 0x0, 0x10001, 0x800, 0x2, 0x6, 0xfffff619]}, @generic={0x88, 0x2}, @rr={0x7, 0x1b, 0xd0, [@empty, @private=0xa010100, @remote, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1]}, @cipso={0x86, 0xf, 0x2, [{0x2, 0x9, "a8aab8a0a05544"}]}]}}}}})
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xb, 0x7d6221f881e3bb77}, {0x10, 0xb}, {0x8, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x44)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) (async)
ioctl$NS_GET_PARENT(r8, 0xb702, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000000)="b9ff03076844268c", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000000)="b9ff03076844268c", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.177771781s ago: executing program 5 (id=4631):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'pimreg\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000940)={'veth1_to_batadv\x00', 0x1000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x800, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x90c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFALIASn={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44804}, 0xc0b0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000033c0))
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40090)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796129bd7000000000007e0000000c0099006d910000150000006a941b5e1089278c0d1c9ab378b1"], 0x20}}, 0x4000054)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYRES64=r6], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008000)
sendmsg$IPSET_CMD_RENAME(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r7], 0x2c}}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='freezer.state\x00', 0x275a, 0x0)
bind$inet6(r10, 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf250000000008000400e00000020800090001000000080008000300000008000700", @ANYRES32=r10, @ANYBLOB="080004000100000008000700", @ANYRES32, @ANYBLOB="08000200000000000800020000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x4000044)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x85)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000840)={r10, 0x0, 0xaa, 0x0, &(0x7f0000000640)="ffb2466e1c7ed1477de6cb38329177a5acdd8ef07bffe3356fdc7de56c328523e36f87a4ba55032e70da4bd68f5aa0ae7c90e2251391fb909a38b547c38c0a94e7a0899c023072333d0bb44166d4def52aee1aca5b864a8915ad8554f19e0cf370baa13c3e0ca3c8f2c2132e048cb0510bf39a9154618e4b4a0c577d44b88c6fb3c92c1ed214e06223ac37272e279421e9439ada30db6cdc69dd9c294e4d14f07cbd280abc2df9b85f51", 0x0, 0x0, 0x0, 0xd5, 0x0, &(0x7f0000000740)="264811b850371d5e3f80bea90fe508d0af60c99535cfab336f49931da3e67259464e257f1676a211a076c1e0eb4d73384a9ee4622e9f0d5c079fdda35ba4e4242718ed22265e48435c0d7d9ba0c773e66cf17317fb7231230dbed5a51047eb8f96a2c400b6e8b863cb6d2f12c624fab99dc2be7c6976762bd3cbf5ca2cd2ff07b304917f292486a94231280498aca7ca9eb79510d705a82ffb9f0b9068f0fbff967be726edf10a8dbaa273b5c83d31d6bba243121883e24149c1c604daa5b37ea7ae7e72a04e307f971666967eef081c14c418be5a", 0x0, 0x2, 0x0, 0x8}, 0x50)

320.899562ms ago: executing program 5 (id=4634):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1600000076000d0b"], 0x20}}, 0x4000040)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES8=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0)

320.250741ms ago: executing program 5 (id=4635):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
pipe(&(0x7f00000000c0)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8=r1], 0xc4}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010031000000000004002400000024000001000006040000000a000000080000000700000000000011050000000300000000615f5f30615f61306100000000ffffffff0000a06c4ad7c0e4009bb15c6d3bb73fc713f5986aa1205d3a2e8358e0d63d82c3cb81ea7780f0e3fc5b2e6c7defcbb80ce0f5fabbfbf622bed63fb0fc24692a270e8425b5db8ce9bc24f2060c8438c6f05101e5f8c570e88d057ff671dcf0bb4062e2945e9cbaf9b65c730c348946d509ddb927a0631e91b46d4ccb36b8ad546fdf299e3a96"], &(0x7f0000000380)=""/112, 0x47, 0x70, 0x0, 0x200, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000340)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000480), 0x8, 0x4c, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000880)='syzkaller\x00', 0xff, 0x35, &(0x7f00000008c0)=""/53, 0x0, 0x0, '\x00', r3, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xc, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x4000010, 0x2, 0x8d}, 0x10, 0x20df1, 0xffffffffffffffff, 0xa, &(0x7f0000000980)=[0x1], &(0x7f0000000c00)=[{0x4, 0x3, 0xa, 0x8}, {0x5, 0x5, 0xa, 0x7}, {0x0, 0x42, 0x1, 0xc}, {0x0, 0x1, 0x6, 0x1}, {0x1, 0x5, 0x8006}, {0x1, 0x4, 0x1, 0xf}, {0x3, 0x4, 0x0, 0xb}, {0x4, 0x5, 0x1}, {0x4, 0x5, 0xc, 0xa}, {0x5, 0x1, 0xf, 0x3}], 0x10, 0x10}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) (async)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async)
listen(r4, 0x3) (async)
accept4(r4, 0x0, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r5, 0x8b27, &(0x7f0000000040)) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r7, 0x0, 0xb9b}, 0x18) (async)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)

319.159426ms ago: executing program 5 (id=4636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000640), &(0x7f0000000200)=@udp, 0x2}, 0x20)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xe11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x28}, 0x18)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
getsockopt(r9, 0x28, 0x2, 0xfffffffffffffffc, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003640)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)

215.535164ms ago: executing program 7 (id=4637):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000004740)=""/4103, 0x1007}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000003740)=""/4085, 0xff5}], 0x3}, 0x8}], 0x3, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRESDEC=0x0], 0x6c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x80000000, 0x422, 0xb, {0x8, 0x0, 0xff00, 0x3, 0x101, 0xa0}, {0x8, 0x1, 0x100, 0x3, 0xa}, 0x8, 0x2, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0xd, 0x5, 0x7, 0xd, 0xf, 0x8, 0xf, 0x8, 0x9, 0x10001, 0x7ff, 0x5, 0x3ffc000, 0x1, 0x80000000, 0x75, 0x7d, 0x5, 0xffff, 0x80000000, 0x3, 0x49, 0x5, 0x4, 0xffff, 0xfada, 0x70000000, 0x80000000, 0x8, 0x4, 0x9, 0x7, 0x2, 0x401, 0xe0, 0x200, 0x4, 0x7, 0x3b1, 0x5, 0x9, 0x7, 0x4, 0x4, 0x7, 0x1, 0xfffffffd, 0xff, 0xcc, 0x8, 0xb, 0x8000, 0x9, 0x0, 0x1, 0xfffffffe, 0x8, 0x1, 0x8d3, 0x1, 0x0, 0x2, 0x0, 0x1, 0x5, 0x0, 0x81, 0x5000, 0xffff, 0x3, 0xf, 0x4, 0x40, 0x1ff, 0xd8, 0xfffffffd, 0x6, 0x5, 0x3, 0xffff, 0x4, 0x1f073468, 0x1, 0x80000000, 0x8, 0x1000, 0x7, 0x1, 0x7fff, 0x1ff, 0x4, 0x4, 0x4, 0x80000001, 0x3, 0x200, 0xffff, 0x0, 0x9, 0x9a5, 0x0, 0x9, 0x10000, 0x8001, 0x5, 0x5ea, 0x5, 0x1ff, 0x8e2, 0x101, 0x9, 0x9, 0x14000, 0xffffe6d2, 0x1, 0xe61, 0x11, 0xff, 0x3857, 0x3, 0x69a, 0x11, 0x8, 0x48000000, 0x7, 0x8, 0xfffffff8, 0x7, 0x400, 0x3, 0xc37, 0x2, 0x0, 0x1, 0xfffffff8, 0xb6, 0x9, 0xfffffffd, 0x6, 0x8, 0x6, 0x2, 0x1, 0x55d0, 0x4, 0x3, 0x2, 0x6, 0x401, 0xffff, 0x5, 0x4, 0x10, 0x4, 0x7, 0x1000, 0x7a, 0x1, 0xa0, 0x4, 0x10000000, 0x7, 0x0, 0x200, 0x5, 0x7, 0x87fa, 0x0, 0x3, 0x9, 0x4, 0x4, 0x3, 0x4, 0xb4a, 0xffff17f2, 0x7, 0x71a, 0xfff, 0x4, 0xa, 0x0, 0x9, 0x8, 0x9, 0xf8bb, 0x55, 0x100, 0x9, 0x9, 0x9, 0x9, 0x5, 0x7ff, 0x775, 0x8, 0xff, 0xfffffffd, 0x6, 0x8, 0x0, 0x9, 0x2, 0x100, 0x2, 0x0, 0x5, 0x8, 0x4, 0x1, 0x8, 0x8, 0x7f, 0x3, 0x3, 0x1, 0x4000000, 0x2, 0x0, 0x6, 0x6, 0x1854, 0xaed, 0x5, 0x9, 0x0, 0x4, 0xff, 0x1, 0x4, 0x748, 0xd7a, 0x0, 0x9, 0x5, 0xa, 0x9, 0x6, 0xffff8500, 0x1000, 0x1, 0x100, 0x6, 0x5, 0x5, 0x5, 0x10001, 0x231, 0x3, 0x100004, 0x1ff, 0x194, 0x5, 0x5]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x45}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r5, 0x2b, 0x5, 0x7f, 0xfffffff7, 0x0, @private0, @empty, 0x700, 0x10, 0x2, 0x3}})

150.93566ms ago: executing program 7 (id=4638):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xda68c000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000100)=0xffffff03, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x58}}, 0x4020000) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x58}}, 0x4020000)

150.038336ms ago: executing program 7 (id=4639):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'macvlan1\x00', 0x1000}) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x10, 0x0, 0x0, 0x336c}, 0x48) (rerun: 32)
close(r4) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xd769, 0x2, 0x49b, 0x7, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

149.678097ms ago: executing program 5 (id=4640):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000e0fffffdffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0)
sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xfdf6}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', @local})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10)
close(r0)
r5 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800)
bind$llc(r5, &(0x7f00000002c0)={0x1a, 0x334, 0x9, 0x6, 0x7d, 0x7, @random="422726e19bdf"}, 0x10)

69.858574ms ago: executing program 7 (id=4641):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x80, 0x100800)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async, rerun: 32)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'macsec0\x00', 0x4}, 0x18) (async, rerun: 32)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xb) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000200)={@local, @local, <r3=>0x0}, &(0x7f0000000240)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8)
sendmsg$nl_xfrm(r2, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=@allocspi={0x248, 0x16, 0x200, 0x70bd2c, 0x25dfdbfc, {{{@in6=@local, @in=@empty, 0x4e21, 0x4000, 0x4e21, 0x4, 0xa, 0xa0, 0x20, 0x88, r3, r5}, {@in=@private=0xa010102, 0x4d4}, @in=@multicast1, {0x7fffffff, 0x0, 0xc, 0x0, 0x1, 0x2, 0x10001, 0x10000}, {0x0, 0x8bee, 0x3}, {0x7, 0x500000, 0x7ff}, 0x70bd2c, 0x0, 0x2, 0x2, 0x1, 0x4}, 0x49f2, 0x3}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3504, 0x4, 0x2, 0x4, 0x7ff, 0x0, 0x5}, {{@in6=@local, 0x4d3, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x3506, 0x3, 0x3, 0x5, 0x3, 0x10000, 0x10000}]}, @algo_crypt={0xcc, 0x2, {{'ctr-blowfish-asm\x00'}, 0x420, "971d07b98dc745933a218127348397a1f49816f4c2b7b5d9315434ecb3b874002a83885d7e5aee88f20bb3af001c78e09764343720c94f700daae5239f7c406705b069e7f7888de98959e6017c7ba21d61ced6e0a0299042be2454dfda7f11feda35c0cb63496803bb4eb409ad55f4e0f0a86d2d624cdb2843defdb7aa0be5120a3a665d"}}]}, 0x248}, 0x1, 0x0, 0x0, 0x2400c010}, 0x80) (async, rerun: 32)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000006c0)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x42, 0x0, "66ecbd81a4e6b7d8e6d6718831f21e1a48a6c40fc3aa4561543e50b0fae42ae317f1d5c9ac5221b10864faa87b985fb318ac700991df0a66727cfb91ec1363b54c2128e32e0af791a168a1867f873bf1"}, 0xd8) (rerun: 32)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x29c}]}, 0x1c}}, 0x4000) (async)
ioctl$SIOCNRDECOBS(r0, 0x89e2) (async, rerun: 32)
r8 = syz_init_net_socket$ax25(0x3, 0x7, 0xc4) (async, rerun: 32)
setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000900)=0x7f, 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000940)={0x0, 0x8, 0x6, 0x9ef, @vifc_lcl_ifindex=r4, @multicast2}, 0x10) (async, rerun: 32)
sendto$inet6(r0, &(0x7f0000000980)="5a4afa5ad27c891f4fb79e78587980206a570e4b86b9e66a106c1e0c81cafd50d02bf44524f813ae532f66067afdd7eb7ddf5b02bcf8f6e1665ee357e00053bd5bf09925c1bbb68a9c0f4bd69ecce8a0bd160147f784ca47807efafe6d3a97c6f24c71cce92c4dc975f966b09046861224da55f78eb79026d0bfeb1a1b65338133fe9c4d31ef", 0x86, 0x4000000, &(0x7f0000000a40)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x8}, 0x1c) (rerun: 32)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x40, r9, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "34b498369627bf3af7397b4e1f"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async)
setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000c00), 0x8)
socket(0xa, 0x4, 0x5) (async)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r11, 0x20, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000800}, 0x4000008) (async)
r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000f00)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @var={0x2, 0x0, 0x0, 0xe, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x52c2}}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x7, 0x4}, {0xf, 0x3}, {0xd}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0x4}, {0xe, 0x2}, {0xa, 0x3}]}]}, {0x0, [0x0]}}, &(0x7f0000000e40)=""/106, 0x9b, 0x6a, 0x1, 0xe, 0x10000, @value=r12}, 0x28) (async)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r6)
sendmsg$IEEE802154_SET_MACPARAMS(r13, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r14, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

69.468734ms ago: executing program 7 (id=4642):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))

68.914974ms ago: executing program 7 (id=4643):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x4}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

0s ago: executing program 5 (id=4644):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$inet(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x2b, &(0x7f0000000040)}, 0x1)
r3 = socket$inet(0x10, 0x5, 0x8)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)}], 0x1}, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x80000000)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0xfffc, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}]})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x18)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r9], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
socket$rds(0x15, 0x5, 0x0)

kernel console output (not intermixed with test programs):

977]  ? rcu_is_watching+0x15/0xb0
[  287.584048][T20977]  netlink_rcv_skb+0x208/0x470
[  287.584058][T20977]  ? __pfx_genl_rcv_msg+0x10/0x10
[  287.584065][T20977]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  287.584076][T20977]  ? lock_release+0x4b/0x3e0
[  287.584087][T20977]  ? down_read+0x1ad/0x2e0
[  287.584094][T20977]  genl_rcv+0x28/0x40
[  287.584100][T20977]  netlink_unicast+0x82f/0x9e0
[  287.584110][T20977]  ? __pfx_netlink_unicast+0x10/0x10
[  287.584120][T20977]  ? netlink_sendmsg+0x642/0xb30
[  287.584129][T20977]  ? skb_put+0x11b/0x210
[  287.584136][T20977]  netlink_sendmsg+0x805/0xb30
[  287.584147][T20977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.584158][T20977]  ? futex_unqueue+0x22/0x240
[  287.584165][T20977]  ? aa_sock_msg_perm+0xf1/0x1d0
[  287.584172][T20977]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  287.584180][T20977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  287.584190][T20977]  __sock_sendmsg+0x21c/0x270
[  287.584200][T20977]  ____sys_sendmsg+0x505/0x830
[  287.584207][T20977]  ? __pfx_____sys_sendmsg+0x10/0x10
[  287.584216][T20977]  ? import_iovec+0x74/0xa0
[  287.584224][T20977]  ___sys_sendmsg+0x21f/0x2a0
[  287.584231][T20977]  ? __pfx____sys_sendmsg+0x10/0x10
[  287.584239][T20977]  ? futex_wait+0x285/0x360
[  287.584253][T20977]  ? __fget_files+0x2a/0x420
[  287.584262][T20977]  ? __fget_files+0x3a0/0x420
[  287.584274][T20977]  __x64_sys_sendmsg+0x19b/0x260
[  287.584282][T20977]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  287.584291][T20977]  ? rcu_is_watching+0x15/0xb0
[  287.584298][T20977]  do_syscall_64+0xfa/0x3b0
[  287.584309][T20977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.584316][T20977]  ? exc_page_fault+0x9f/0xf0
[  287.584325][T20977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.584332][T20977] RIP: 0033:0x7f0797d8ebe9
[  287.584339][T20977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.584346][T20977] RSP: 002b:00007f0795ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.584356][T20977] RAX: ffffffffffffffda RBX: 00007f0797fb5fa0 RCX: 00007f0797d8ebe9
[  287.584361][T20977] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  287.584366][T20977] RBP: 00007f0797e11e19 R08: 0000000000000000 R09: 0000000000000000
[  287.584371][T20977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  287.584375][T20977] R13: 00007f0797fb6038 R14: 00007f0797fb5fa0 R15: 00007ffd9624f908
[  287.584383][T20977]  </TASK>
[  287.587778][T20976] tipc: Resetting bearer <eth:syzkaller0>
[  287.786088][T20976] tipc: Disabling bearer <eth:syzkaller0>
[  288.083643][T20986] __nla_validate_parse: 21 callbacks suppressed
[  288.083657][T20986] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3920'.
[  288.130215][T20990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.133017][T20990] syzkaller0: entered promiscuous mode
[  288.135602][T20990] syzkaller0: entered allmulticast mode
[  288.145531][T20993] tipc: Resetting bearer <eth:syzkaller0>
[  288.149113][T20993] tipc: Disabling bearer <eth:syzkaller0>
[  288.244991][T20996] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3922'.
[  288.251753][T20996] validate_nla: 14 callbacks suppressed
[  288.251763][T20996] netlink: 'syz.5.3922': attribute type 10 has an invalid length.
[  288.258039][T20996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.262264][T20996] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  288.387764][T21005] netlink: 'syz.5.3924': attribute type 9 has an invalid length.
[  288.393489][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3924'.
[  288.402467][T21005] macvlan2: entered promiscuous mode
[  288.404823][T21005] hsr0: entered promiscuous mode
[  288.407087][T21005] macvlan2: entered allmulticast mode
[  288.409754][T21005] hsr0: entered allmulticast mode
[  288.411912][T21005] hsr_slave_0: entered allmulticast mode
[  288.414143][T21005] hsr_slave_1: entered allmulticast mode
[  288.421872][  T791] IPVS: starting estimator thread 0...
[  288.425216][T21005] netlink: 'syz.5.3924': attribute type 1 has an invalid length.
[  288.428475][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3924'.
[  288.432204][T21005] netlink: 'syz.5.3924': attribute type 1 has an invalid length.
[  288.435442][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3924'.
[  288.439006][T21005] netlink: 'syz.5.3924': attribute type 1 has an invalid length.
[  288.442081][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3924'.
[  288.445016][T21005] netlink: 'syz.5.3924': attribute type 1 has an invalid length.
[  288.447715][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3924'.
[  288.451186][T21005] netlink: 'syz.5.3924': attribute type 1 has an invalid length.
[  288.454055][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3924'.
[  288.457048][T21005] netlink: 'syz.5.3924': attribute type 1 has an invalid length.
[  288.460156][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3924'.
[  288.463827][T21005] netlink: 'syz.5.3924': attribute type 1 has an invalid length.
[  288.467012][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3924'.
[  288.471012][T21005] netlink: 'syz.5.3924': attribute type 1 has an invalid length.
[  288.508563][T21006] IPVS: using max 135 ests per chain, 324000 per kthread
[  288.690285][T21028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.693382][T21029] syzkaller0: entered promiscuous mode
[  288.695493][T21029] syzkaller0: entered allmulticast mode
[  288.704615][T21029] tipc: Resetting bearer <eth:syzkaller0>
[  288.708024][T21029] tipc: Disabling bearer <eth:syzkaller0>
[  288.915765][T21048] veth0: entered promiscuous mode
[  292.613815][T21077] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  292.617046][T21077] CPU: 0 UID: 0 PID: 21077 Comm: syz.3.3942 Not tainted syzkaller #0 PREEMPT(full) 
[  292.617066][T21077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.617074][T21077] Call Trace:
[  292.617080][T21077]  <TASK>
[  292.617086][T21077]  dump_stack_lvl+0x189/0x250
[  292.617106][T21077]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.617121][T21077]  ? __pfx__printk+0x10/0x10
[  292.617136][T21077]  ? kernfs_root+0x1c/0x230
[  292.617150][T21077]  ? kernfs_path_from_node+0x2f/0x290
[  292.617163][T21077]  ? kernfs_path_from_node+0x250/0x290
[  292.617175][T21077]  ? kernfs_path_from_node+0x2f/0x290
[  292.617189][T21077]  sysfs_warn_dup+0x8e/0xa0
[  292.617202][T21077]  sysfs_do_create_link_sd+0xc0/0x110
[  292.617215][T21077]  device_add_class_symlinks+0x1cf/0x240
[  292.617230][T21077]  device_add+0x475/0xb50
[  292.617244][T21077]  wiphy_register+0x1ba6/0x28d0
[  292.617267][T21077]  ? __pfx_wiphy_register+0x10/0x10
[  292.617282][T21077]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  292.617297][T21077]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  292.617318][T21077]  ieee80211_register_hw+0x3484/0x4100
[  292.617336][T21077]  ? ieee80211_register_hw+0x14a1/0x4100
[  292.617351][T21077]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  292.617366][T21077]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.617384][T21077]  ? __hrtimer_setup+0x187/0x210
[  292.617396][T21077]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  292.617414][T21077]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  292.617439][T21077]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  292.617455][T21077]  ? trace_kmalloc+0x1f/0xd0
[  292.617469][T21077]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  292.617485][T21077]  ? kstrndup+0xbf/0x160
[  292.617500][T21077]  hwsim_new_radio_nl+0xea4/0x1b10
[  292.617516][T21077]  ? __pfx___nla_validate_parse+0x10/0x10
[  292.617538][T21077]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  292.617557][T21077]  ? __nla_parse+0x40/0x60
[  292.617577][T21077]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  292.617597][T21077]  genl_family_rcv_msg_doit+0x215/0x300
[  292.617613][T21077]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  292.617632][T21077]  ? bpf_lsm_capable+0x9/0x20
[  292.617647][T21077]  ? security_capable+0x7e/0x2e0
[  292.617666][T21077]  genl_rcv_msg+0x60e/0x790
[  292.617680][T21077]  ? __pfx_genl_rcv_msg+0x10/0x10
[  292.617692][T21077]  ? __kasan_slab_alloc+0x6c/0x80
[  292.617706][T21077]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  292.617720][T21077]  ? __netlink_lookup+0xbd/0x810
[  292.617730][T21077]  ? rcu_is_watching+0x15/0xb0
[  292.617745][T21077]  netlink_rcv_skb+0x208/0x470
[  292.617762][T21077]  ? __pfx_genl_rcv_msg+0x10/0x10
[  292.617775][T21077]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.617794][T21077]  ? lock_release+0x4b/0x3e0
[  292.617812][T21077]  ? down_read+0x1ad/0x2e0
[  292.617825][T21077]  genl_rcv+0x28/0x40
[  292.617836][T21077]  netlink_unicast+0x82f/0x9e0
[  292.617855][T21077]  ? __pfx_netlink_unicast+0x10/0x10
[  292.617905][T21077]  ? netlink_sendmsg+0x642/0xb30
[  292.617923][T21077]  ? skb_put+0x11b/0x210
[  292.617937][T21077]  netlink_sendmsg+0x805/0xb30
[  292.617958][T21077]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.617977][T21077]  ? futex_unqueue+0x22/0x240
[  292.617991][T21077]  ? aa_sock_msg_perm+0xf1/0x1d0
[  292.618005][T21077]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  292.618018][T21077]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.618036][T21077]  __sock_sendmsg+0x21c/0x270
[  292.618052][T21077]  ____sys_sendmsg+0x505/0x830
[  292.618065][T21077]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.618080][T21077]  ? import_iovec+0x74/0xa0
[  292.618094][T21077]  ___sys_sendmsg+0x21f/0x2a0
[  292.618107][T21077]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.618121][T21077]  ? futex_wait+0x285/0x360
[  292.618144][T21077]  ? __fget_files+0x2a/0x420
[  292.618162][T21077]  ? __fget_files+0x3a0/0x420
[  292.618182][T21077]  __x64_sys_sendmsg+0x19b/0x260
[  292.618195][T21077]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  292.618211][T21077]  ? rcu_is_watching+0x15/0xb0
[  292.618225][T21077]  ? rcu_is_watching+0x15/0xb0
[  292.618237][T21077]  do_syscall_64+0xfa/0x3b0
[  292.618255][T21077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.618268][T21077]  ? exc_page_fault+0x9f/0xf0
[  292.618306][T21077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.618321][T21077] RIP: 0033:0x7f0797d8ebe9
[  292.618333][T21077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.618344][T21077] RSP: 002b:00007f0795ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.618360][T21077] RAX: ffffffffffffffda RBX: 00007f0797fb5fa0 RCX: 00007f0797d8ebe9
[  292.618371][T21077] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  292.618380][T21077] RBP: 00007f0797e11e19 R08: 0000000000000000 R09: 0000000000000000
[  292.618389][T21077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.618417][T21077] R13: 00007f0797fb6038 R14: 00007f0797fb5fa0 R15: 00007ffd9624f908
[  292.618432][T21077]  </TASK>
[  292.905609][T21091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.964425][T21085] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  293.007730][T21101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.011594][T21101] syzkaller0: entered promiscuous mode
[  293.013802][T21101] syzkaller0: entered allmulticast mode
[  293.020485][T21101] tipc: Resetting bearer <eth:syzkaller0>
[  293.023416][T21100] tipc: Resetting bearer <eth:syzkaller0>
[  293.026826][T21100] tipc: Disabling bearer <eth:syzkaller0>
[  293.120187][T21105] __nla_validate_parse: 89 callbacks suppressed
[  293.120202][T21105] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3949'.
[  293.126516][T21104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3949'.
[  293.131948][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3949'.
[  293.171522][T21108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3950'.
[  293.198220][T21112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.202032][T21113] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.205042][T21113] syzkaller0: entered promiscuous mode
[  293.207161][T21113] syzkaller0: entered allmulticast mode
[  293.213799][T21112] tipc: Resetting bearer <eth:syzkaller0>
[  293.216817][T21111] tipc: Resetting bearer <eth:syzkaller0>
[  293.220317][T21111] tipc: Disabling bearer <eth:syzkaller0>
[  293.305480][T21118] dvmrp8: entered allmulticast mode
[  293.359123][T21115] dvmrp8: left allmulticast mode
[  293.431839][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3953'.
[  293.434909][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3953'.
[  293.441769][T21120] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3953'.
[  293.445632][T21120] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3953'.
[  293.449984][T21122] vti0: entered promiscuous mode
[  293.451921][T21122] vti0: entered allmulticast mode
[  293.500996][T21126] validate_nla: 72 callbacks suppressed
[  293.501010][T21126] netlink: 'syz.3.3956': attribute type 12 has an invalid length.
[  293.527270][T21138] netlink: 'syz.5.3959': attribute type 2 has an invalid length.
[  293.531889][T21138] k*]: entered promiscuous mode
[  293.537419][T21138] gretap0: left promiscuous mode
[  293.545322][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3958'.
[  293.546618][T21138] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.552440][T21138] 8021q: adding VLAN 0 to HW filter on device team0
[  293.557593][T21138] 0X: left allmulticast mode
[  293.559934][T21138] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  293.570944][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3958'.
[  293.571975][T21138] veth0_to_team: entered promiscuous mode
[  293.575770][T21138] veth0_to_team: entered allmulticast mode
[  293.594780][T21141] netlink: 'syz.5.3961': attribute type 1 has an invalid length.
[  293.644139][T21141] bond3: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  293.656727][T21141] veth3: entered promiscuous mode
[  293.659623][T21141] bond3: (slave veth3): Enslaving as a backup interface with a down link
[  293.732994][T21141] bond0: (slave batadv0): Releasing backup interface
[  293.741404][T21141] bond3: (slave ip6gretap0): Releasing backup interface
[  293.744322][T21141] bond3: (slave ip6gretap0): the permanent HWaddr of slave - f6:a4:11:f0:5a:bd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  293.753916][T21141] bond3: (slave veth3): Releasing backup interface
[  293.792468][T21149] netlink: 'syz.5.3962': attribute type 21 has an invalid length.
[  293.795844][T21149] gretap0: Device is already in use.
[  294.833802][ T5868] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  294.837576][ T5868] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  294.840859][ T5868] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  294.844524][ T5868] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  295.132823][T21206] ieee802154 phy0 wpan0: encryption failed: -22
[  295.140709][T21206] team0: Mode changed to "loadbalance"
[  295.603987][T21220] lo speed is unknown, defaulting to 1000
[  295.646658][ T5868] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.650429][ T5868] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.653949][ T5868] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.657487][ T5868] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.739903][T21229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.742809][T21229] syzkaller0: entered promiscuous mode
[  295.744771][T21229] syzkaller0: entered allmulticast mode
[  296.145706][T21249] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  296.151795][T21249] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  296.639800][T21228] tipc: Resetting bearer <eth:syzkaller0>
[  296.643994][T21228] tipc: Disabling bearer <eth:syzkaller0>
[  296.820163][T21257] netlink: 'syz.5.3988': attribute type 4 has an invalid length.
[  297.147117][T21274] netlink: 'syz.3.3993': attribute type 1 has an invalid length.
[  297.153901][T21274] netlink: 'syz.3.3993': attribute type 1 has an invalid length.
[  297.242954][T21274] netlink: 'syz.3.3993': attribute type 1 has an invalid length.
[  297.255128][T21274] 8021q: adding VLAN 0 to HW filter on device bond12
[  297.379518][T21286] batadv_slave_1: entered promiscuous mode
[  297.402269][T21289] pim6reg1: entered promiscuous mode
[  297.404152][T21289] pim6reg1: entered allmulticast mode
[  297.468843][T21291] hsr0: left allmulticast mode
[  297.470759][T21291] hsr_slave_0: left allmulticast mode
[  297.473090][T21291] hsr_slave_1: left allmulticast mode
[  297.475311][T21291] hsr0: left promiscuous mode
[  297.482732][ T5863] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.488369][ T5863] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.495711][ T5863] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.504984][ T5863] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  298.300237][T21307] __nla_validate_parse: 16 callbacks suppressed
[  298.300248][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4001'.
[  298.378244][T21312] netlink: 'syz.3.4002': attribute type 13 has an invalid length.
[  298.382264][T21312] gretap0: refused to change device tx_queue_len
[  298.385029][T21312] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  298.459677][T21319] netlink: 'syz.3.4004': attribute type 1 has an invalid length.
[  298.494842][T21319] 8021q: adding VLAN 0 to HW filter on device bond14
[  298.499990][T21319] bond13: (slave bond14): making interface the new active one
[  298.502775][T21319] bond13: (slave bond14): Enslaving as an active interface with an up link
[  298.522007][T21319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4004'.
[  298.526662][T21319] 8021q: adding VLAN 0 to HW filter on device bond13
[  298.543505][T21323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4006'.
[  298.546970][T21323] netlink: 'syz.3.4006': attribute type 10 has an invalid length.
[  298.581349][T21326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.584961][T21326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4005'.
[  298.590209][T21326] netlink: 'syz.5.4005': attribute type 5 has an invalid length.
[  298.593713][T21326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4005'.
[  298.601476][T21326] geneve3: entered promiscuous mode
[  298.603731][T21326] geneve3: entered allmulticast mode
[  298.607990][   T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  298.617473][   T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  298.621094][   T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  298.623703][   T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  298.722043][T21346] netlink: 'syz.3.4011': attribute type 4 has an invalid length.
[  298.750880][T21348] netlink: 'syz.3.4012': attribute type 39 has an invalid length.
[  298.760635][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4009'.
[  298.893605][T21359] bond13: (slave bond14): Releasing backup interface
[  298.970423][T21362] netlink: 'syz.3.4014': attribute type 10 has an invalid length.
[  299.522832][T21365] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  299.569903][T21365] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  299.610278][T21365] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  299.625478][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.628061][T21369] netlink: 'syz.5.4015': attribute type 1 has an invalid length.
[  299.631574][T21369] netlink: 'syz.5.4015': attribute type 1 has an invalid length.
[  299.631578][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.637458][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.641042][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.644160][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.660776][T21365] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  299.670310][T21367] lo speed is unknown, defaulting to 1000
[  299.720145][ T5863] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  299.724640][T21374] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4017'.
[  299.741588][ T5863] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  299.750189][T21374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.753805][T21374] team0: Failed to send options change via netlink (err -105)
[  299.756972][T21374] team0: Port device batadv0 added
[  299.766826][ T5863] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  299.776277][   T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  299.791594][T21367] chnl_net:caif_netlink_parms(): no params data found
[  299.820757][T21367] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.823149][T21367] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.825422][T21367] bridge_slave_0: entered allmulticast mode
[  299.827970][T21367] bridge_slave_0: entered promiscuous mode
[  299.831925][T21367] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.834448][T21367] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.837021][T21367] bridge_slave_1: entered allmulticast mode
[  299.840024][T21367] bridge_slave_1: entered promiscuous mode
[  299.854118][T21367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.860431][T21367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.874539][T21367] team0: Port device team_slave_0 added
[  299.877954][T21367] team0: Port device team_slave_1 added
[  299.891945][T21367] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.894404][T21367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.904013][T21367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.909641][T21367] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.912190][T21367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.922644][T21367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.953900][T21367] hsr_slave_0: entered promiscuous mode
[  299.957770][T21367] hsr_slave_1: entered promiscuous mode
[  299.960667][T21367] debugfs: 'hsr0' already exists in 'hsr'
[  299.963131][T21367] Cannot create hsr debugfs directory
[  300.050030][T21367] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  300.054967][T21367] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  300.059943][T21367] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  300.065184][T21367] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  300.082930][T21401] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4023'.
[  300.090424][T21367] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.093429][T21367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.096520][T21367] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.099566][T21367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.112682][T21405] gretap2: entered promiscuous mode
[  300.114502][T21405] gretap2: entered allmulticast mode
[  300.144624][T21367] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.153475][T21405] IPv6: sit4: Disabled Multicast RS
[  300.155780][T21405] sit4: entered allmulticast mode
[  300.168020][  T897] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.172380][  T897] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.181456][T21367] 8021q: adding VLAN 0 to HW filter on device team0
[  300.189073][  T897] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.192121][  T897] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.199000][  T897] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.201945][  T897] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.244912][T21410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4025'.
[  300.278402][T21418] dvmrp0: entered allmulticast mode
[  300.302501][T21367] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.390210][T21367] veth0_vlan: entered promiscuous mode
[  300.394708][T21367] veth1_vlan: entered promiscuous mode
[  300.399727][T21430] netlink: 'syz.5.4028': attribute type 10 has an invalid length.
[  300.410057][T21367] veth0_macvtap: entered promiscuous mode
[  300.413979][T21430] team0: Device hsr_slave_0 failed to register rx_handler
[  300.423302][T21367] veth1_macvtap: entered promiscuous mode
[  300.446486][T21367] batman_adv: batadv0: Interface activated: batadv_slave_0
[  300.451926][T21434] netlink: 'syz.5.4030': attribute type 1 has an invalid length.
[  300.454617][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4029'.
[  300.457110][T21367] batman_adv: batadv0: Interface activated: batadv_slave_1
[  300.471430][T14955] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.474932][ T5863] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.481873][ T5863] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.491065][ T5863] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.565878][T13233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.570775][T13233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.611165][T13233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.614301][T13233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.649219][T21458] vlan2: entered promiscuous mode
[  300.651042][T21458] vlan2: entered allmulticast mode
[  300.652672][T21458] hsr_slave_1: entered allmulticast mode
[  300.658128][T21458] vlan3: entered allmulticast mode
[  300.889391][T21477] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.893710][T21477] syzkaller0: entered promiscuous mode
[  300.895502][T21477] syzkaller0: entered allmulticast mode
[  300.900287][T21477] tipc: Resetting bearer <eth:syzkaller0>
[  300.903448][T21476] tipc: Resetting bearer <eth:syzkaller0>
[  300.906259][T21476] tipc: Disabling bearer <eth:syzkaller0>
[  301.065515][T21492] vlan0: entered promiscuous mode
[  301.072710][T21492] vlan0: entered allmulticast mode
[  301.078063][T21492] hsr_slave_1: entered allmulticast mode
[  301.100351][T21492] vlan1: entered allmulticast mode
[  301.171981][T21505] vti1: entered promiscuous mode
[  301.243814][T21511] netlink: 'syz.6.4047': attribute type 4 has an invalid length.
[  301.251695][T21509] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  301.466459][T21536] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.501471][T21537] syzkaller0: entered promiscuous mode
[  301.503454][T21537] syzkaller0: entered allmulticast mode
[  301.667520][T21545] bond15 (unregistering): Released all slaves
[  301.681210][ T5851] Bluetooth: hci6: command tx timeout
[  301.714624][T21548] macsec0: entered promiscuous mode
[  301.716958][T21548] batadv0: entered promiscuous mode
[  301.719983][T21548] macsec0: entered allmulticast mode
[  301.722233][T21548] batadv0: entered allmulticast mode
[  301.725723][T21548] batadv0: left allmulticast mode
[  301.727898][T21548] batadv0: left promiscuous mode
[  301.804289][T21550] IPv6: sit4: Disabled Multicast RS
[  301.806543][T21550] sit4: entered allmulticast mode
[  301.919539][T14955] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  301.923136][T14955] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  301.936078][T14955] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  301.944555][T14955] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  301.949381][T21570] IPv6: sit2: Disabled Multicast RS
[  301.951565][T21570] sit2: entered allmulticast mode
[  301.978895][T21574] vti0: entered promiscuous mode
[  302.003985][T21577] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  302.117585][T21591] erspan0: entered allmulticast mode
[  302.133479][T14955] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.137154][T14955] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.141287][T14955] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.143994][T14955] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  302.162470][T21593] Bluetooth: MGMT ver 1.23
[  302.177426][T21595] syzkaller0: entered promiscuous mode
[  302.179879][T21595] syzkaller0: entered allmulticast mode
[  302.532826][T21536] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.758501][ T5851] Bluetooth: hci6: command tx timeout
[  303.902614][T21536] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.943201][T21536] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.997899][   T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.005003][ T5863] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.011285][ T5863] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.016556][ T5863] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.838538][ T5851] Bluetooth: hci6: command tx timeout
[  307.918504][ T5851] Bluetooth: hci6: command tx timeout
[  316.641825][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  317.910057][T21598] __nla_validate_parse: 20 callbacks suppressed
[  317.910067][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4075'.
[  317.961752][T21603] syzkaller0: entered promiscuous mode
[  317.964162][T21603] syzkaller0: entered allmulticast mode
[  317.967687][T21602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.975058][T21601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4073'.
[  317.978945][T21601] openvswitch: netlink: Flow actions attr not present in new flow.
[  317.984963][T21603] tipc: Resetting bearer <eth:syzkaller0>
[  317.989557][T21599] tipc: Resetting bearer <eth:syzkaller0>
[  317.994188][T21599] tipc: Disabling bearer <eth:syzkaller0>
[  318.020319][T21609] lo speed is unknown, defaulting to 1000
[  318.130994][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4077'.
[  318.134857][T21609] validate_nla: 4 callbacks suppressed
[  318.134868][T21609] netlink: 'syz.3.4077': attribute type 13 has an invalid length.
[  318.140458][T21609] netlink: 'syz.3.4077': attribute type 17 has an invalid length.
[  318.147470][T21609] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  318.175771][T21619] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  318.202168][T21621] netlink: 'syz.3.4080': attribute type 2 has an invalid length.
[  318.204645][T21621] netlink: 'syz.3.4080': attribute type 2 has an invalid length.
[  318.229982][T21626] 8021q: adding VLAN 0 to HW filter on device batadv1
[  318.233076][T21626] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  318.236609][T21626] team0: Failed to send options change via netlink (err -105)
[  318.241119][T21626] team0: Port device batadv1 added
[  318.244680][T21619] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  318.281202][T21619] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  318.294432][T21633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.297512][T21633] syzkaller0: entered promiscuous mode
[  318.299951][T21633] syzkaller0: entered allmulticast mode
[  318.305350][T21633] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  318.311493][T21633] tipc: Resetting bearer <eth:syzkaller0>
[  318.314587][T21632] tipc: Resetting bearer <eth:syzkaller0>
[  318.317946][T21632] tipc: Disabling bearer <eth:syzkaller0>
[  318.324066][T21619] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  318.418506][T14955] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  318.425892][T14955] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  318.434675][   T12] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  318.439892][T21635] netlink: 'syz.3.4084': attribute type 4 has an invalid length.
[  318.444719][   T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  318.451491][T21635] netlink: 'syz.3.4084': attribute type 4 has an invalid length.
[  318.463701][T21635] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4084'.
[  318.498182][T21639] netlink: 'syz.5.4086': attribute type 39 has an invalid length.
[  318.714381][T21645] team0: Port device batadv0 removed
[  318.760637][T21645] ieee802154 phy0 wpan0: encryption failed: -22
[  318.765772][T21645] team0: Unable to change to the same mode the team is in
[  318.768256][T21646] team0: Unable to change to the same mode the team is in
[  318.784930][T21649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4089'.
[  318.788265][T21649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4089'.
[  318.792323][T21649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4089'.
[  318.803870][T21649] macsec0: entered promiscuous mode
[  318.806390][T21649] mac80211_hwsim hwsim202 wlan0: entered promiscuous mode
[  318.811287][T21649] macsec0: entered allmulticast mode
[  318.813476][T21649] mac80211_hwsim hwsim202 wlan0: entered allmulticast mode
[  318.817940][T21653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4090'.
[  318.838169][T21656] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4092'.
[  318.841775][T21656] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4092'.
[  318.847472][T21658] sit0: entered promiscuous mode
[  318.852985][T21658] netlink: 'syz.3.4091': attribute type 1 has an invalid length.
[  318.856544][T21656] bridge_slave_1: left allmulticast mode
[  318.859093][T21656] bridge_slave_1: left promiscuous mode
[  318.861246][T21656] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.865466][T21656] bridge_slave_0: left allmulticast mode
[  318.867420][T21656] bridge_slave_0: left promiscuous mode
[  318.869784][T21656] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.935217][T21660] team0: Unable to change to the same mode the team is in
[  318.966335][T21663] netlink: 'syz.3.4094': attribute type 4 has an invalid length.
[  319.990232][T21699] netlink: 'syz.6.4105': attribute type 1 has an invalid length.
[  320.003547][T21696] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.101016][T21696] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.125828][T21696] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.164311][T21714] vxcan2: entered promiscuous mode
[  320.171232][T21696] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.284380][T14955] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  320.293246][T14955] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  320.299113][T21720] k*]: entered promiscuous mode
[  320.303603][T14955] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  320.316678][T21720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  320.328672][T14955] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  320.334590][T21720] veth0_to_team: entered promiscuous mode
[  320.336585][T21720] veth0_to_team: entered allmulticast mode
[  320.356870][T21722] IPv6: sit2: Disabled Multicast RS
[  320.377036][T21726] syzkaller0: entered promiscuous mode
[  320.381558][T21726] syzkaller0: entered allmulticast mode
[  320.422249][T21728] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  320.432454][T21726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.435677][T21726] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  320.439436][T21726] tipc: Resetting bearer <eth:syzkaller0>
[  320.441964][T21725] tipc: Resetting bearer <eth:syzkaller0>
[  320.444736][T21725] tipc: Disabling bearer <eth:syzkaller0>
[  320.529864][T21732] lo speed is unknown, defaulting to 1000
[  320.553008][T21732] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  320.606639][   T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  320.613107][   T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  320.616239][   T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  320.620630][   T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  320.713591][T21748] syzkaller0: entered promiscuous mode
[  320.715845][T21748] syzkaller0: entered allmulticast mode
[  321.590601][T21754] tipc: Started in network mode
[  321.592349][T21754] tipc: Node identity 3e9eb9ff1ca2, cluster identity 4711
[  321.594728][T21754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.597355][T21755] syzkaller0: entered promiscuous mode
[  321.599849][T21755] syzkaller0: entered allmulticast mode
[  321.605802][T21756] tipc: Resetting bearer <eth:syzkaller0>
[  321.609210][T21753] tipc: Resetting bearer <eth:syzkaller0>
[  321.613178][T21753] tipc: Disabling bearer <eth:syzkaller0>
[  321.743675][T21764] gtp0: entered promiscuous mode
[  321.818692][T21766] veth1_macvtap: left promiscuous mode
[  322.362128][T21792] sit0: left promiscuous mode
[  322.365924][T21792] 8021q: adding VLAN 0 to HW filter on device team0
[  322.370327][T21792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  322.477934][T21796] IPVS: length: 147 != 24
[  322.577681][T21806] gretap0: entered promiscuous mode
[  322.581710][T21805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.585037][T21805] syzkaller0: entered promiscuous mode
[  322.587430][T21805] syzkaller0: entered allmulticast mode
[  322.617798][T21805] erspan0: left allmulticast mode
[  322.632605][T21805] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  322.647757][T21803] tipc: Resetting bearer <eth:syzkaller0>
[  322.655598][T21803] tipc: Disabling bearer <eth:syzkaller0>
[  322.720150][T21827] bond0: (slave dummy0): Releasing backup interface
[  322.727566][T21827] bond0: (slave bond_slave_0): Releasing backup interface
[  322.734739][T21827] bond0: (slave bond_slave_1): Releasing backup interface
[  322.743046][T21827] team0: Port device team_slave_0 removed
[  322.747520][T21827] team0: Port device team_slave_1 removed
[  322.750473][ T5311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.754093][T21827] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.757284][T21827] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.760738][T21827] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.763396][T21827] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.920177][T21846] __nla_validate_parse: 40 callbacks suppressed
[  322.920191][T21846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4149'.
[  322.969313][T21846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4149'.
[  323.108570][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.145750][T21851] bond0: (slave dummy0): Releasing backup interface
[  323.151942][T21851] team0: Port device batadv1 removed
[  323.188915][T21856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4152'.
[  323.697920][T21862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.710713][T21862] syzkaller0: entered promiscuous mode
[  323.713060][T21862] syzkaller0: entered allmulticast mode
[  323.718689][T21862] tipc: Resetting bearer <eth:syzkaller0>
[  323.720502][T21864] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4154'.
[  323.724715][T21864] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  323.724742][T21861] tipc: Resetting bearer <eth:syzkaller0>
[  323.728220][T21864] openvswitch: netlink: Message has 1 unknown bytes.
[  323.736120][T21861] tipc: Disabling bearer <eth:syzkaller0>
[  323.739833][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4154'.
[  323.746512][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4154'.
[  323.786902][T21869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.790385][T21869] syzkaller0: entered promiscuous mode
[  323.792449][T21869] syzkaller0: entered allmulticast mode
[  323.796760][T21869] tipc: Resetting bearer <eth:syzkaller0>
[  323.800257][T21868] tipc: Resetting bearer <eth:syzkaller0>
[  323.803794][T21868] tipc: Disabling bearer <eth:syzkaller0>
[  323.844121][T21872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.846882][T21872] syzkaller0: entered promiscuous mode
[  323.848920][T21872] syzkaller0: entered allmulticast mode
[  323.855182][T21872] tipc: Resetting bearer <eth:syzkaller0>
[  323.859604][T21871] tipc: Resetting bearer <eth:syzkaller0>
[  323.863470][T21871] tipc: Disabling bearer <eth:syzkaller0>
[  323.966087][T21879] validate_nla: 10 callbacks suppressed
[  323.966097][T21879] netlink: 'syz.6.4155': attribute type 16 has an invalid length.
[  323.984024][T21879] netlink: 'syz.6.4155': attribute type 17 has an invalid length.
[  323.993091][T21879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  324.091617][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'.
[  324.094693][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'.
[  324.182359][T21890] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4159'.
[  324.185888][T21890] netlink: 'syz.5.4159': attribute type 10 has an invalid length.
[  324.189755][T21890] bond0: (slave wlan1): Opening slave failed
[  324.354870][T21895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4162'.
[  324.466723][T21905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  324.591498][T21912] geneve6: entered promiscuous mode
[  324.593577][T21912] geneve6: entered allmulticast mode
[  324.596132][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 60848 - 0
[  324.599812][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 50628 - 0
[  324.603919][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 60848 - 0
[  324.623628][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 50628 - 0
[  324.626449][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 60848 - 0
[  324.634419][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 50628 - 0
[  324.637432][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 60848 - 0
[  324.641088][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 50628 - 0
[  324.711722][T21924] syzkaller0: entered promiscuous mode
[  324.714107][T21924] syzkaller0: entered allmulticast mode
[  324.752519][T21925] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 60848 - 0
[  324.756389][T21925] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 50628 - 0
[  324.842758][T21925] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 60848 - 0
[  324.846839][T21925] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 50628 - 0
[  324.893379][T21925] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60848 - 0
[  324.896798][T21925] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 50628 - 0
[  324.930437][T21925] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60848 - 0
[  324.933669][T21925] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 50628 - 0
[  324.988175][T21933] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  324.998800][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 50628 - 0
[  325.002372][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 60848 - 0
[  325.012994][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 50628 - 0
[  325.016036][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 60848 - 0
[  325.034735][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 50628 - 0
[  325.037456][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 60848 - 0
[  325.040392][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 50628 - 0
[  325.043145][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 60848 - 0
[  325.286674][T21955] netlink: 'syz.5.4178': attribute type 10 has an invalid length.
[  325.292342][T21955] team0: Port device dummy0 added
[  325.295081][T21955] netlink: 'syz.5.4178': attribute type 10 has an invalid length.
[  325.301200][T21955] team0: Port device dummy0 removed
[  325.306310][T21955] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  325.525637][T21957] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  325.530705][T21957] CPU: 0 UID: 0 PID: 21957 Comm: syz.3.4179 Not tainted syzkaller #0 PREEMPT(full) 
[  325.530721][T21957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  325.530729][T21957] Call Trace:
[  325.530735][T21957]  <TASK>
[  325.530739][T21957]  dump_stack_lvl+0x189/0x250
[  325.530758][T21957]  ? __pfx_dump_stack_lvl+0x10/0x10
[  325.530802][T21957]  ? __pfx__printk+0x10/0x10
[  325.530816][T21957]  ? kernfs_root+0x1c/0x230
[  325.530829][T21957]  ? kernfs_path_from_node+0x2f/0x290
[  325.530841][T21957]  ? kernfs_path_from_node+0x250/0x290
[  325.530852][T21957]  ? kernfs_path_from_node+0x2f/0x290
[  325.530864][T21957]  sysfs_warn_dup+0x8e/0xa0
[  325.530875][T21957]  sysfs_do_create_link_sd+0xc0/0x110
[  325.530887][T21957]  device_add_class_symlinks+0x1cf/0x240
[  325.530901][T21957]  device_add+0x475/0xb50
[  325.530912][T21957]  wiphy_register+0x1ba6/0x28d0
[  325.530931][T21957]  ? __pfx_wiphy_register+0x10/0x10
[  325.530945][T21957]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  325.530957][T21957]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  325.530975][T21957]  ieee80211_register_hw+0x3484/0x4100
[  325.530989][T21957]  ? ieee80211_register_hw+0x14a1/0x4100
[  325.531002][T21957]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  325.531015][T21957]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  325.531030][T21957]  ? __hrtimer_setup+0x187/0x210
[  325.531040][T21957]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  325.531056][T21957]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  325.531075][T21957]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  325.531087][T21957]  ? trace_kmalloc+0x1f/0xd0
[  325.531100][T21957]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  325.531114][T21957]  ? kstrndup+0xbf/0x160
[  325.531127][T21957]  hwsim_new_radio_nl+0xea4/0x1b10
[  325.531140][T21957]  ? __pfx___nla_validate_parse+0x10/0x10
[  325.531158][T21957]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  325.531173][T21957]  ? __nla_parse+0x40/0x60
[  325.531189][T21957]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  325.531204][T21957]  genl_family_rcv_msg_doit+0x215/0x300
[  325.531217][T21957]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  325.531232][T21957]  ? bpf_lsm_capable+0x9/0x20
[  325.531246][T21957]  ? security_capable+0x7e/0x2e0
[  325.531262][T21957]  genl_rcv_msg+0x60e/0x790
[  325.531275][T21957]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.531284][T21957]  ? __kasan_slab_alloc+0x6c/0x80
[  325.531299][T21957]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  325.531311][T21957]  ? __netlink_lookup+0xbd/0x810
[  325.531319][T21957]  ? rcu_is_watching+0x15/0xb0
[  325.531332][T21957]  netlink_rcv_skb+0x208/0x470
[  325.531347][T21957]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.531358][T21957]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.531374][T21957]  ? lock_release+0x4b/0x3e0
[  325.531391][T21957]  ? down_read+0x1ad/0x2e0
[  325.531400][T21957]  genl_rcv+0x28/0x40
[  325.531410][T21957]  netlink_unicast+0x82f/0x9e0
[  325.531425][T21957]  ? __pfx_netlink_unicast+0x10/0x10
[  325.531438][T21957]  ? netlink_sendmsg+0x642/0xb30
[  325.531451][T21957]  ? skb_put+0x11b/0x210
[  325.531462][T21957]  netlink_sendmsg+0x805/0xb30
[  325.531478][T21957]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.531493][T21957]  ? futex_unqueue+0x22/0x240
[  325.531503][T21957]  ? aa_sock_msg_perm+0xf1/0x1d0
[  325.531514][T21957]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  325.531526][T21957]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.531540][T21957]  __sock_sendmsg+0x21c/0x270
[  325.531555][T21957]  ____sys_sendmsg+0x505/0x830
[  325.531567][T21957]  ? __pfx_____sys_sendmsg+0x10/0x10
[  325.531579][T21957]  ? import_iovec+0x74/0xa0
[  325.531592][T21957]  ___sys_sendmsg+0x21f/0x2a0
[  325.531603][T21957]  ? __pfx____sys_sendmsg+0x10/0x10
[  325.531615][T21957]  ? futex_wait+0x285/0x360
[  325.531637][T21957]  ? __fget_files+0x2a/0x420
[  325.531652][T21957]  ? __fget_files+0x3a0/0x420
[  325.531669][T21957]  __x64_sys_sendmsg+0x19b/0x260
[  325.531679][T21957]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  325.531693][T21957]  ? rcu_is_watching+0x15/0xb0
[  325.531704][T21957]  ? rcu_is_watching+0x15/0xb0
[  325.531742][T21957]  do_syscall_64+0xfa/0x3b0
[  325.531759][T21957]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.531800][T21957]  ? exc_page_fault+0x9f/0xf0
[  325.531815][T21957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.531826][T21957] RIP: 0033:0x7f0797d8ebe9
[  325.531836][T21957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.531846][T21957] RSP: 002b:00007f0795ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.531858][T21957] RAX: ffffffffffffffda RBX: 00007f0797fb5fa0 RCX: 00007f0797d8ebe9
[  325.531867][T21957] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  325.531873][T21957] RBP: 00007f0797e11e19 R08: 0000000000000000 R09: 0000000000000000
[  325.531880][T21957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.531887][T21957] R13: 00007f0797fb6038 R14: 00007f0797fb5fa0 R15: 00007ffd9624f908
[  325.531899][T21957]  </TASK>
[  325.755632][T21966] syzkaller0: entered promiscuous mode
[  325.757566][T21966] syzkaller0: entered allmulticast mode
[  325.761163][T21966] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.764858][T21965] tipc: Resetting bearer <eth:syzkaller0>
[  325.770662][T21965] tipc: Disabling bearer <eth:syzkaller0>
[  325.785400][T21969] syzkaller0: entered promiscuous mode
[  325.793611][T21969] syzkaller0: entered allmulticast mode
[  325.837206][T21973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.843103][T21973] syzkaller0: entered promiscuous mode
[  325.846054][T21973] syzkaller0: entered allmulticast mode
[  325.862301][T21973] netlink: 'syz.6.4184': attribute type 1 has an invalid length.
[  325.875118][T21973] gtp0: entered promiscuous mode
[  325.925798][T21973] tipc: Resetting bearer <eth:syzkaller0>
[  325.928051][T21975] netlink: 'syz.3.4185': attribute type 13 has an invalid length.
[  325.980128][T21975] mac80211_hwsim hwsim202 wlan0: left allmulticast mode
[  325.982511][T21975] mac80211_hwsim hwsim202 wlan0: left promiscuous mode
[  326.008211][T21972] tipc: Resetting bearer <eth:syzkaller0>
[  326.012592][T21972] tipc: Disabling bearer <eth:syzkaller0>
[  326.015822][   T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 50628 - 0
[  326.021624][   T12] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 60848 - 0
[  326.028423][   T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 50628 - 0
[  326.034967][   T12] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 60848 - 0
[  326.043700][   T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 50628 - 0
[  326.047051][   T12] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 60848 - 0
[  326.050476][   T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 50628 - 0
[  326.053816][   T12] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 60848 - 0
[  326.094873][T21983] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  326.106589][T21986] netlink: 'syz.5.4188': attribute type 1 has an invalid length.
[  326.113695][T21986] netlink: 'syz.5.4188': attribute type 1 has an invalid length.
[  326.122201][T21990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  326.150212][T21983] batadv_slave_0: entered promiscuous mode
[  326.155573][T21996] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.232793][T21996] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.269448][T22005] syzkaller0: entered promiscuous mode
[  326.271842][T22005] syzkaller0: entered allmulticast mode
[  326.290495][T21996] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.291863][T22009] netlink: 'syz.3.4195': attribute type 10 has an invalid length.
[  326.339492][T22016] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  326.342944][T22016] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  326.374231][T21996] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.395264][T22020] syzkaller0: entered promiscuous mode
[  326.397326][T22020] syzkaller0: entered allmulticast mode
[  326.431502][T22021] team0: Port device dummy0 added
[  326.435411][T22021] team0: Port device dummy0 removed
[  326.441158][T14955] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  326.451985][T14955] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  326.461298][T14955] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  326.466859][T14955] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  326.485287][T22023] sit1: entered promiscuous mode
[  326.504990][T22026] team0: Device ipvlan1 failed to register rx_handler
[  326.527028][T22028] pim6reg1: entered promiscuous mode
[  326.533360][T22028] pim6reg1: entered allmulticast mode
[  326.600984][T22040] syzkaller0: entered promiscuous mode
[  326.602868][T22040] syzkaller0: entered allmulticast mode
[  326.656553][T22028] 8021q: adding VLAN 0 to HW filter on device bond1
[  326.660973][T22028] team0: Port device bond1 added
[  326.663951][ T5863] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  327.221162][T22052] ip6gre4: entered allmulticast mode
[  327.670256][T22083] team0: Port device bond1 removed
[  327.690293][  T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.723916][T22087] gretap2: left promiscuous mode
[  327.726015][T22087] gretap2: left allmulticast mode
[  327.727889][T22087] vti0: left promiscuous mode
[  327.729997][T22087] macsec0: left promiscuous mode
[  327.731656][T22087] macsec0: left allmulticast mode
[  327.733568][T22087] geneve6: left promiscuous mode
[  327.735389][T22087] geneve6: left allmulticast mode
[  327.738209][T22087] ip6gre4: left allmulticast mode
[  328.445163][T22092] __nla_validate_parse: 12 callbacks suppressed
[  328.445172][T22092] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4218'.
[  328.530680][T22095] lo speed is unknown, defaulting to 1000
[  328.564970][T22095] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4219'.
[  328.595447][T22099] netlink: 308 bytes leftover after parsing attributes in process `syz.3.4220'.
[  328.600956][T22099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4220'.
[  328.683599][T22109] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 2, id = 0
[  328.709262][T22111] lo speed is unknown, defaulting to 1000
[  328.776486][T22111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4222'.
[  328.798643][    C0] net_ratelimit: 1 callbacks suppressed
[  328.798658][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.822379][T22114] sctp: [Deprecated]: syz.5.4223 (pid 22114) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.822379][T22114] Use struct sctp_sack_info instead
[  328.829425][T22114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.879955][T22125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4226'.
[  328.901293][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4225'.
[  328.922171][T22125] lo speed is unknown, defaulting to 1000
[  328.973553][T22133] validate_nla: 58 callbacks suppressed
[  328.973564][T22133] netlink: 'syz.3.4227': attribute type 4 has an invalid length.
[  328.982298][T22133] netlink: 'syz.3.4227': attribute type 4 has an invalid length.
[  329.039013][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  329.043671][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  329.047298][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  329.052619][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  329.087985][T22144] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  329.159326][T22157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4233'.
[  329.162488][T22157] netlink: 'syz.3.4233': attribute type 1 has an invalid length.
[  329.190315][T22164] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4234'.
[  329.241171][T22170] syzkaller0: entered promiscuous mode
[  329.243067][T22170] syzkaller0: entered allmulticast mode
[  329.339383][T22179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4238'.
[  329.977918][T22229] openvswitch: netlink: Tunnel attr 1 has unexpected len 16 expected 4
[  330.133500][ T5868] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  330.137704][ T5868] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  330.141093][ T5868] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  330.143801][ T5868] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  330.273075][T22265] sch_tbf: burst 127 is lower than device wlan0 mtu (1514) !
[  330.317822][T22271] netlink: 'syz.3.4262': attribute type 10 has an invalid length.
[  330.346980][T22278] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  330.359429][T22278] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  330.362086][T22278] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  330.676627][T22290] netlink: 'syz.6.4268': attribute type 10 has an invalid length.
[  330.955905][T22296] syzkaller0: entered promiscuous mode
[  330.957831][T22296] syzkaller0: entered allmulticast mode
[  330.962844][T22296] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.044864][T22298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  331.196943][T22309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.201420][T22309] syzkaller0: entered promiscuous mode
[  331.203340][T22309] syzkaller0: entered allmulticast mode
[  331.209026][T22309] tipc: Resetting bearer <eth:syzkaller0>
[  331.212617][T22308] tipc: Resetting bearer <eth:syzkaller0>
[  331.217538][T22308] tipc: Disabling bearer <eth:syzkaller0>
[  331.582709][T22339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.589061][T22340] syzkaller0: entered promiscuous mode
[  331.596887][T22340] syzkaller0: entered allmulticast mode
[  331.601639][T22339] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  331.612988][T22339] tipc: Resetting bearer <eth:syzkaller0>
[  331.625731][T22338] tipc: Resetting bearer <eth:syzkaller0>
[  331.639367][T22338] tipc: Disabling bearer <eth:syzkaller0>
[  331.746346][T22375] gretap0: entered promiscuous mode
[  331.810709][T22385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.827564][T22385] tipc: Disabling bearer <eth:syzkaller0>
[  331.856056][T22391] bond0: (slave dummy0): Releasing backup interface
[  331.867460][T22392] lo speed is unknown, defaulting to 1000
[  331.899189][T22392] netlink: 'syz.3.4295': attribute type 13 has an invalid length.
[  331.901976][T22392] netlink: 'syz.3.4295': attribute type 17 has an invalid length.
[  331.907193][T22392] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  331.950486][T22398] netlink: 'syz.6.4296': attribute type 10 has an invalid length.
[  331.955695][T22398] team0: Port device dummy0 added
[  331.958498][T22399] netlink: 'syz.5.4293': attribute type 10 has an invalid length.
[  331.962233][T22398] netlink: 'syz.6.4296': attribute type 10 has an invalid length.
[  331.967370][T22399] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.971205][T22399] bond0: (slave wlan1): Opening slave failed
[  331.976927][T22398] team0: Port device dummy0 removed
[  331.987996][T22398] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  332.003129][T22401] siw: device registration error -23
[  332.733905][T22418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.736442][T22418] syzkaller0: entered promiscuous mode
[  332.738215][T22418] syzkaller0: entered allmulticast mode
[  332.743083][T22418] tipc: Resetting bearer <eth:syzkaller0>
[  332.746290][T22417] tipc: Resetting bearer <eth:syzkaller0>
[  332.750951][T22417] tipc: Disabling bearer <eth:syzkaller0>
[  333.005271][T22447] veth7: entered promiscuous mode
[  333.050851][T22446] erspan0: entered allmulticast mode
[  333.080476][T22449] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  333.102205][T22452] syzkaller1: entered promiscuous mode
[  333.104301][T22452] syzkaller1: entered allmulticast mode
[  333.106112][T22451] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  333.173997][T22460] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  333.317450][T22466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.329031][T22466] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  333.906559][T22475] __nla_validate_parse: 43 callbacks suppressed
[  333.906570][T22475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4317'.
[  333.915619][T22475] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8
[  333.996010][T22482] syzkaller0: entered promiscuous mode
[  333.998541][T22482] syzkaller0: entered allmulticast mode
[  334.001259][T22481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.011381][T22485] tipc: Resetting bearer <eth:syzkaller0>
[  334.015310][T22485] tipc: Disabling bearer <eth:syzkaller0>
[  334.109860][T22512] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4323'.
[  334.115068][T22507] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4322'.
[  334.124173][T22507] bond0: (slave dummy0): Releasing backup interface
[  334.130553][T22507] batman_adv: batadv0: Adding interface: dummy0
[  334.133117][T22507] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  334.141528][T22507] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  334.149260][T22507] batman_adv: batadv0: Adding interface: ip6gretap1
[  334.151406][T22507] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  334.159809][T22507] batman_adv: batadv0: Interface activated: ip6gretap1
[  334.162213][T22512] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4323'.
[  334.182605][T22535] macsec0: entered promiscuous mode
[  334.184382][T22535] mac80211_hwsim hwsim210 wlan0: entered promiscuous mode
[  334.186762][T22535] macsec0: entered allmulticast mode
[  334.188824][T22535] mac80211_hwsim hwsim210 wlan0: entered allmulticast mode
[  334.234503][T22537] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.4326'.
[  334.257110][T22541] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4325'.
[  334.354349][T22551] validate_nla: 1 callbacks suppressed
[  334.354359][T22551] netlink: 'syz.5.4328': attribute type 10 has an invalid length.
[  334.597756][T22573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4335'.
[  334.697717][T22580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4336'.
[  335.037496][T22583] team0: Port device gtp1 added
[  335.064109][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4338'.
[  335.093051][T22589] ip6gre1: entered allmulticast mode
[  335.096088][T22587] netlink: set zone limit has 4 unknown bytes
[  335.099245][T22588] netlink: set zone limit has 4 unknown bytes
[  335.119782][T22591] batadv_slave_1: entered promiscuous mode
[  335.190395][T22590] batadv_slave_1: left promiscuous mode
[  335.292713][T22601] ip6erspan0: entered allmulticast mode
[  335.354733][T22607] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.4345'.
[  335.492023][T22610] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.522002][T22610] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.561861][T22610] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.565202][T22619] netlink: 'syz.6.4348': attribute type 10 has an invalid length.
[  335.568128][T22618] netlink: 'syz.6.4348': attribute type 10 has an invalid length.
[  335.571495][T22619] batman_adv: batadv0: Removing interface: dummy0
[  335.576032][T22619] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  335.580996][T22618] netlink: 'syz.6.4348': attribute type 10 has an invalid length.
[  335.583708][T22619] netlink: 'syz.6.4348': attribute type 10 has an invalid length.
[  335.584583][T22610] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  335.591995][T22618] netlink: 'syz.6.4348': attribute type 10 has an invalid length.
[  335.595193][T22618] netlink: 'syz.6.4348': attribute type 10 has an invalid length.
[  335.600049][T22619] netlink: 'syz.6.4348': attribute type 10 has an invalid length.
[  335.602921][T22619] netlink: 'syz.6.4348': attribute type 10 has an invalid length.
[  335.605652][T22619] netlink: 'syz.6.4348': attribute type 10 has an invalid length.
[  335.636768][ T5863] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  335.654643][ T5863] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  335.660960][ T5863] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  335.666998][ T5863] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  335.755487][T22632] veth0_to_team: left promiscuous mode
[  335.757413][T22632] veth0_to_team: left allmulticast mode
[  335.769364][T22632] batadv_slave_0: left promiscuous mode
[  335.795543][T22632] vlan2: left promiscuous mode
[  335.797187][T22632] vlan2: left allmulticast mode
[  335.800921][T22632] vlan3: left allmulticast mode
[  335.802642][T22632] hsr_slave_1: left allmulticast mode
[  335.804593][T22632] vxcan2: left promiscuous mode
[  335.807590][T22632] gtp0: left promiscuous mode
[  335.810411][T22632] sit1: left promiscuous mode
[  335.820227][T22632] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  335.827501][T22632] ip6erspan0: left allmulticast mode
[  335.830180][T22632] ip6gre1: left allmulticast mode
[  335.832647][T22635] @: renamed from veth0_vlan
[  335.836220][ T5863] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  335.840962][ T5863] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.844097][ T5863] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  335.846893][ T5863] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.850118][ T5863] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  335.853321][ T5863] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.856228][ T5863] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  335.859425][ T5863] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.917005][T22647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.921615][T22647] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  336.936151][T22680] gretap0: Device is already in use.
[  336.980156][T22689] bond0: (slave dummy0): Releasing backup interface
[  336.982844][T22689] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  336.991143][T22689] bond0: (slave batadv0): Releasing backup interface
[  336.996196][T22689] batman_adv: batadv0: Removing interface: ip6gretap1
[  337.000041][T22689] team0: Port device gtp1 removed
[  337.055824][T22699] veth0_to_team: entered promiscuous mode
[  337.058261][T22699] veth0_to_team: entered allmulticast mode
[  337.816029][T22707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.820613][T22707] syzkaller0: entered promiscuous mode
[  337.823046][T22707] syzkaller0: entered allmulticast mode
[  337.830831][T22707] tipc: Resetting bearer <eth:syzkaller0>
[  337.835467][T22706] tipc: Resetting bearer <eth:syzkaller0>
[  337.839456][T22706] tipc: Disabling bearer <eth:syzkaller0>
[  338.178214][T22737] veth0_to_team: left promiscuous mode
[  338.181381][T22737] veth0_to_team: left allmulticast mode
[  338.252998][T22743] sctp: [Deprecated]: syz.6.4381 (pid 22743) Use of int in maxseg socket option.
[  338.252998][T22743] Use struct sctp_assoc_value instead
[  338.258243][T22743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.262237][T22743] syzkaller0: entered promiscuous mode
[  338.264363][T22743] syzkaller0: entered allmulticast mode
[  338.315298][T22745] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.317587][T22746] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.322588][T22746] syzkaller0: entered promiscuous mode
[  338.324923][T22746] syzkaller0: entered allmulticast mode
[  338.328579][T22742] tipc: Resetting bearer <eth:syzkaller0>
[  338.332685][T22742] tipc: Disabling bearer <eth:syzkaller0>
[  338.338217][T22745] tipc: Resetting bearer <eth:syzkaller0>
[  338.341758][T22744] tipc: Resetting bearer <eth:syzkaller0>
[  338.344982][T22744] tipc: Disabling bearer <eth:syzkaller0>
[  338.433262][T22752] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  338.540198][T22766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.542820][T22766] syzkaller0: entered promiscuous mode
[  338.544716][T22766] syzkaller0: entered allmulticast mode
[  338.548463][T22766] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  338.552109][T22766] tipc: Resetting bearer <eth:syzkaller0>
[  338.557101][T22765] tipc: Resetting bearer <eth:syzkaller0>
[  338.560870][T22765] tipc: Disabling bearer <eth:syzkaller0>
[  338.733052][T22776] syzkaller0: entered promiscuous mode
[  338.735390][T22776] syzkaller0: entered allmulticast mode
[  338.772955][T22773] syz_tun: entered allmulticast mode
[  338.778959][T22773] syz_tun: entered promiscuous mode
[  338.781636][T22773] batadv_slave_0: entered promiscuous mode
[  338.785650][T22772] syz_tun: left allmulticast mode
[  338.859038][T22782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.862451][T22782] syzkaller0: entered promiscuous mode
[  338.864488][T22782] syzkaller0: entered allmulticast mode
[  338.896980][T22782] tipc: Resetting bearer <eth:syzkaller0>
[  338.902051][T22782] tipc: Disabling bearer <eth:syzkaller0>
[  338.977709][T22791] __nla_validate_parse: 18 callbacks suppressed
[  338.977719][T22791] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4393'.
[  339.076616][T22800] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4395'.
[  339.125553][T22803] lo speed is unknown, defaulting to 1000
[  339.141705][T22805] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  339.156592][T22803] geneve0: entered allmulticast mode
[  339.180864][T22805] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  339.190020][T22808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4398'.
[  339.201153][T22808] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9
[  339.223479][T22805] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  339.264827][T22805] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  339.288823][T22813] bond0: (slave wlan1): Opening slave failed
[  339.291793][T22812] bond0: (slave wlan1): Opening slave failed
[  339.305114][ T5863] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  339.311813][ T5863] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  339.317804][ T5863] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  339.323763][ T5863] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  339.351877][T22819] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4400'.
[  339.381767][T22823] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4401'.
[  339.385653][T22823] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  339.413998][T22828] validate_nla: 136 callbacks suppressed
[  339.414013][T22828] netlink: 'syz.6.4402': attribute type 4 has an invalid length.
[  339.416661][T22829] netlink: 'syz.6.4402': attribute type 4 has an invalid length.
[  339.439768][T22831] netlink: 'syz.6.4403': attribute type 1 has an invalid length.
[  339.443089][T22831] netlink: 'syz.6.4403': attribute type 1 has an invalid length.
[  339.483754][T22831] netlink: 'syz.6.4403': attribute type 1 has an invalid length.
[  339.492791][T22831] 8021q: adding VLAN 0 to HW filter on device bond4
[  339.496937][T22831] bond4: (slave wlan0): Opening slave failed
[  339.504212][T22831] vlan4: entered allmulticast mode
[  339.505984][T22831] veth1: entered allmulticast mode
[  339.510541][T22831] bond4: (slave vlan4): Opening slave failed
[  339.583914][T22834] netlink: 'syz.6.4404': attribute type 1 has an invalid length.
[  339.733465][T22834] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4404'.
[  339.987047][T22842] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.990461][T22842] 8021q: adding VLAN 0 to HW filter on device team0
[  339.994322][T22842] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  340.021106][T22846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4407'.
[  340.070331][T22852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.072956][T22852] syzkaller0: entered promiscuous mode
[  340.074839][T22852] syzkaller0: entered allmulticast mode
[  340.081348][T22852] tipc: Resetting bearer <eth:syzkaller0>
[  340.084098][T22851] tipc: Resetting bearer <eth:syzkaller0>
[  340.087539][T22851] tipc: Disabling bearer <eth:syzkaller0>
[  340.453223][T22860] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4413'.
[  340.573465][T22869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4416'.
[  340.576895][T22869] netlink: 'syz.6.4416': attribute type 30 has an invalid length.
[  340.583110][   T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  340.587334][   T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  340.591969][   T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  340.594614][   T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  340.659218][T22875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.679508][T22875] tipc: Disabling bearer <eth:syzkaller0>
[  340.879069][T22883] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  341.229289][T22889] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4421'.
[  341.381906][T22893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  341.624273][T22913] syzkaller0: entered promiscuous mode
[  341.626281][T22913] syzkaller0: entered allmulticast mode
[  342.241520][T22909] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  342.309509][T22923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.312585][T22923] syzkaller0: entered promiscuous mode
[  342.314795][T22923] syzkaller0: entered allmulticast mode
[  342.324089][T22922] tipc: Resetting bearer <eth:syzkaller0>
[  342.327355][T22922] tipc: Disabling bearer <eth:syzkaller0>
[  342.334465][T22925] IPv6: Can't replace route, no match found
[  342.392049][T22934] netlink: 'syz.5.4429': attribute type 1 has an invalid length.
[  342.402769][T22934] 8021q: adding VLAN 0 to HW filter on device bond4
[  342.415932][T22934] 8021q: adding VLAN 0 to HW filter on device bond4
[  342.418494][T22934] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  342.422554][T22934] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  342.429342][T22937] lo speed is unknown, defaulting to 1000
[  342.432794][T22939] lo speed is unknown, defaulting to 1000
[  342.466671][T22936] veth9: entered promiscuous mode
[  342.470836][T22936] bond4: (slave veth9): Enslaving as an active interface with a down link
[  342.482202][T22936] bond4: (slave erspan0): making interface the new active one
[  342.484900][T22936] bond4: (slave erspan0): Enslaving as an active interface with an up link
[  342.506568][T22945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.510173][T22945] syzkaller0: entered promiscuous mode
[  342.512198][T22945] syzkaller0: entered allmulticast mode
[  342.517297][T22945] tipc: Resetting bearer <eth:syzkaller0>
[  342.520358][T22944] tipc: Resetting bearer <eth:syzkaller0>
[  342.523842][T22944] tipc: Disabling bearer <eth:syzkaller0>
[  342.631770][T22952] team0: Port device gtp2 added
[  342.685098][T22959] netlink: 'syz.5.4434': attribute type 6 has an invalid length.
[  342.691389][T22958] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  342.739981][T22964] netlink: 'syz.5.4436': attribute type 11 has an invalid length.
[  342.853532][T22970] gtp1: entered promiscuous mode
[  342.855441][T22970] gtp1: entered allmulticast mode
[  343.405143][T22990] netlink: 'syz.6.4443': attribute type 1 has an invalid length.
[  343.420924][T22990] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link
[  343.536218][ T5863] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.539777][ T5863] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.543107][ T5863] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.546431][ T5863] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  343.889147][T23002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.892461][T23002] syzkaller0: entered promiscuous mode
[  343.894752][T23002] syzkaller0: entered allmulticast mode
[  343.904819][T23002] tipc: Resetting bearer <eth:syzkaller0>
[  343.909194][T23001] tipc: Resetting bearer <eth:syzkaller0>
[  343.913928][T23001] tipc: Disabling bearer <eth:syzkaller0>
[  344.099312][T23009] __nla_validate_parse: 9 callbacks suppressed
[  344.099327][T23009] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4448'.
[  344.223815][T23015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4451'.
[  344.310738][T23020] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4452'.
[  344.314517][T23020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4452'.
[  344.442278][T23030] pimreg: entered allmulticast mode
[  344.462378][T23032] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4456'.
[  344.495542][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4457'.
[  344.501893][T23037] gtp3: entered promiscuous mode
[  344.503568][T23037] gtp3: entered allmulticast mode
[  344.523456][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4458'.
[  344.598108][T23042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4459'.
[  344.603661][T23042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4459'.
[  344.946350][T23050] validate_nla: 1 callbacks suppressed
[  344.946365][T23050] netlink: 'syz.6.4461': attribute type 1 has an invalid length.
[  344.951973][T23050] netlink: 'syz.6.4461': attribute type 1 has an invalid length.
[  345.012225][T23050] netlink: 'syz.6.4461': attribute type 1 has an invalid length.
[  345.020534][T23050] 8021q: adding VLAN 0 to HW filter on device bond7
[  345.025527][T23050] bond7: (slave wlan0): Opening slave failed
[  345.031844][T23050] vlan4: entered allmulticast mode
[  345.034448][T23050] bond7: (slave vlan4): Opening slave failed
[  345.155078][T23058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4463'.
[  345.231604][T23060] syzkaller0: entered promiscuous mode
[  345.233457][T23060] syzkaller0: entered allmulticast mode
[  345.302557][T23063] netlink: 'syz.6.4466': attribute type 4 has an invalid length.
[  345.327184][T23065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.330540][T23065] syzkaller0: entered promiscuous mode
[  345.332777][T23065] syzkaller0: entered allmulticast mode
[  345.342649][T23064] tipc: Resetting bearer <eth:syzkaller0>
[  345.346798][T23064] tipc: Disabling bearer <eth:syzkaller0>
[  345.543398][T23079] pim6reg1: entered promiscuous mode
[  345.545562][T23079] pim6reg1: entered allmulticast mode
[  345.665446][T23079] 8021q: adding VLAN 0 to HW filter on device bond5
[  345.668940][T23079] team0: Port device bond5 added
[  345.744541][T23083] syzkaller0: entered promiscuous mode
[  345.746766][T23083] syzkaller0: entered allmulticast mode
[  346.414932][T23090] netlink: 'syz.6.4476': attribute type 4 has an invalid length.
[  346.435594][T23092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.437963][T23093] syzkaller0: entered promiscuous mode
[  346.441281][T23093] syzkaller0: entered allmulticast mode
[  346.453018][T23092] tipc: Resetting bearer <eth:syzkaller0>
[  346.456179][T23092] tipc: Disabling bearer <eth:syzkaller0>
[  346.791863][T23117] pimreg: left allmulticast mode
[  346.822452][T23117] rdma_rxe: rxe_newlink: failed to add lo
[  346.842408][T23117] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.846198][T23117] 8021q: adding VLAN 0 to HW filter on device team0
[  346.853679][T23117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  346.916114][T23133] xt_socket: unknown flags 0xd0
[  346.923511][T23133] netlink: 'syz.6.4489': attribute type 4 has an invalid length.
[  346.933886][T23124] mac80211_hwsim hwsim210 wlan0: left allmulticast mode
[  346.936114][T23124] mac80211_hwsim hwsim210 wlan0: left promiscuous mode
[  346.954779][ T5863] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.957542][ T5863] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.960418][ T5863] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.963748][ T5863] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  346.991510][T23141] IPv6: sit3: Disabled Multicast RS
[  346.993802][T23141] sit3: entered allmulticast mode
[  347.091775][T23147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.095146][T23147] tipc: Resetting bearer <eth:syzkaller0>
[  347.107446][T23147] tipc: Disabling bearer <eth:syzkaller0>
[  347.151297][T23152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  347.154313][T23152] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  347.157338][T23152] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  347.160943][T23152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  347.164420][T23152] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  347.194024][T23149] lo speed is unknown, defaulting to 1000
[  347.207152][T23158] lo speed is unknown, defaulting to 1000
[  347.220515][T23159] lo speed is unknown, defaulting to 1000
[  347.295967][T23149] chnl_net:caif_netlink_parms(): no params data found
[  347.320463][T23149] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.323030][T23149] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.325280][T23149] bridge_slave_0: entered allmulticast mode
[  347.327816][T23149] bridge_slave_0: entered promiscuous mode
[  347.331767][T23149] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.334523][T23149] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.336907][T23149] bridge_slave_1: entered allmulticast mode
[  347.341047][T23149] bridge_slave_1: entered promiscuous mode
[  347.353673][T23149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.357694][T23149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.372175][T23149] team0: Port device team_slave_0 added
[  347.376163][T23149] team0: Port device team_slave_1 added
[  347.391535][T23149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  347.393761][T23149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.402080][T23149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  347.406151][T23149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  347.409100][T23149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  347.418615][T23149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.437575][T23149] hsr_slave_0: entered promiscuous mode
[  347.440455][T23149] hsr_slave_1: entered promiscuous mode
[  347.442934][T23149] debugfs: 'hsr0' already exists in 'hsr'
[  347.445259][T23149] Cannot create hsr debugfs directory
[  347.495629][T23149] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  347.499688][T23149] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  347.503106][T23149] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  347.506416][T23149] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  347.536985][T23149] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.543785][T23149] 8021q: adding VLAN 0 to HW filter on device team0
[  347.548056][T22521] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.550738][T22521] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.560200][T22521] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.562808][T22521] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.636676][T23149] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.710442][T23149] veth0_vlan: entered promiscuous mode
[  347.714380][T23149] veth1_vlan: entered promiscuous mode
[  347.723987][T23149] veth0_macvtap: entered promiscuous mode
[  347.727064][T23149] veth1_macvtap: entered promiscuous mode
[  347.733730][T23149] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.738259][T23149] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.743542][ T5863] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.747031][ T5863] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.750954][ T5863] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.754206][ T5863] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.795271][T22520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.799892][T22520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.821074][T22520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.824231][T22520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.851790][T23195] nbd: must specify at least one socket
[  347.913823][T23202] netlink: 'syz.7.4500': attribute type 10 has an invalid length.
[  347.917941][T23202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.921732][T23202] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  347.926157][T23202] netlink: 'syz.7.4500': attribute type 10 has an invalid length.
[  347.930149][T23202] batadv0: entered promiscuous mode
[  347.931872][T23202] batadv0: entered allmulticast mode
[  347.934256][T23202] bond0: (slave batadv0): Releasing backup interface
[  347.937497][T23202] bridge0: port 3(batadv0) entered blocking state
[  347.940030][T23202] bridge0: port 3(batadv0) entered disabled state
[  348.330531][ T5868] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  348.334502][ T5868] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  348.457233][T23210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.461065][T23210] syzkaller0: entered promiscuous mode
[  348.463428][T23210] syzkaller0: entered allmulticast mode
[  348.473969][T23210] tipc: Resetting bearer <eth:syzkaller0>
[  348.477317][T23209] tipc: Resetting bearer <eth:syzkaller0>
[  348.482622][T23209] tipc: Disabling bearer <eth:syzkaller0>
[  348.581425][T23212] netlink: 'syz.5.4503': attribute type 10 has an invalid length.
[  348.587275][T23212] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  348.687612][T23214] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  348.721516][T23214] netlink: 'syz.5.4504': attribute type 6 has an invalid length.
[  348.830539][T23224] netlink: 'syz.5.4506': attribute type 11 has an invalid length.
[  348.861330][T23227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.864746][T23227] syzkaller0: entered promiscuous mode
[  348.867165][T23227] syzkaller0: entered allmulticast mode
[  348.871823][T23227] IPVS: set_ctl: invalid protocol: 44 172.20.20.31:20001
[  348.877040][T23226] tipc: Resetting bearer <eth:syzkaller0>
[  348.882130][T23226] tipc: Disabling bearer <eth:syzkaller0>
[  348.988796][T23229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.995046][T23229] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  349.001502][T23231] tipc: Resetting bearer <eth:syzkaller0>
[  349.056530][T23228] tipc: Disabling bearer <eth:syzkaller0>
[  349.134449][T23233] __nla_validate_parse: 24 callbacks suppressed
[  349.134463][T23233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4509'.
[  349.142199][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4509'.
[  349.170896][T23235] bond4: (slave erspan0): Releasing active interface
[  349.176545][T23235] bond0: (slave dummy0): Releasing backup interface
[  349.183489][T23235] bond4: (slave veth9): Releasing active interface
[  349.187746][T23235] team0: Port device bond5 removed
[  349.208874][T23152] Bluetooth: hci7: command tx timeout
[  349.252253][T23235] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4510'.
[  349.285621][T23238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.480740][T23246] sctp: [Deprecated]: syz.5.4514 (pid 23246) Use of int in max_burst socket option.
[  349.480740][T23246] Use struct sctp_assoc_value instead
[  349.992465][T23249] validate_nla: 1 callbacks suppressed
[  349.992480][T23249] netlink: 'syz.7.4515': attribute type 21 has an invalid length.
[  350.381955][T23254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4517'.
[  350.383688][T23255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4517'.
[  350.384901][T23254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4517'.
[  350.386534][T23254] ip6tnl3: entered promiscuous mode
[  350.395723][T23255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4517'.
[  350.428964][T23254] ip6tnl3: entered allmulticast mode
[  350.455159][T23257] team0: Device gtp2 is up. Set it down before adding it as a team port
[  350.545201][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4519'.
[  350.550413][T23261] netlink: 'syz.5.4519': attribute type 4 has an invalid length.
[  350.554617][T23261] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4519'.
[  350.557678][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4519'.
[  350.562920][T23261] netlink: 'syz.5.4519': attribute type 5 has an invalid length.
[  350.607365][T23270] tipc: Started in network mode
[  350.611586][T23270] tipc: Node identity 4a9c54506579, cluster identity 4711
[  350.614024][T23270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.617000][T23270] syzkaller0: entered promiscuous mode
[  350.619177][T23270] syzkaller0: entered allmulticast mode
[  350.622866][T23270] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  350.629311][T23270] tipc: Resetting bearer <eth:syzkaller0>
[  350.633271][T23269] tipc: Resetting bearer <eth:syzkaller0>
[  350.637153][T23269] tipc: Disabling bearer <eth:syzkaller0>
[  350.645116][T23273] netlink: 'syz.5.4523': attribute type 10 has an invalid length.
[  350.687031][T23281] netlink: 'syz.5.4524': attribute type 26 has an invalid length.
[  350.795462][T23303] netlink: 'syz.5.4527': attribute type 10 has an invalid length.
[  350.802179][T23303] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  351.153371][T23323] geneve4: entered promiscuous mode
[  351.155314][T23323] geneve4: entered allmulticast mode
[  351.157685][ T5868] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 47066 - 0
[  351.162742][ T5868] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 45861 - 0
[  351.165726][ T5868] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 47066 - 0
[  351.169504][ T5868] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 45861 - 0
[  351.173015][ T5868] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 47066 - 0
[  351.176102][ T5868] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 45861 - 0
[  351.181330][ T5868] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 47066 - 0
[  351.184892][ T5868] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 45861 - 0
[  351.288480][T23152] Bluetooth: hci7: command tx timeout
[  351.293531][T23330] syzkaller1: entered promiscuous mode
[  351.295659][T23330] syzkaller1: entered allmulticast mode
[  351.808041][T23332] lo speed is unknown, defaulting to 1000
[  351.849822][T23336] netlink: 'syz.7.4535': attribute type 5 has an invalid length.
[  351.856362][T23336] netlink: 'syz.7.4535': attribute type 4 has an invalid length.
[  351.876926][T23338] syzkaller0: entered promiscuous mode
[  351.879242][T23338] syzkaller0: entered allmulticast mode
[  352.086521][T23357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.091399][T23357] syzkaller0: entered promiscuous mode
[  352.094084][T23357] syzkaller0: entered allmulticast mode
[  352.097126][T23357] tipc: Resetting bearer <eth:syzkaller0>
[  352.102095][T23357] tipc: Disabling bearer <eth:syzkaller0>
[  352.150021][T23360] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  352.152986][T23360] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  352.218845][T23364] netlink: 'syz.7.4542': attribute type 10 has an invalid length.
[  352.223508][T23364] team0: Cannot enslave team device to itself
[  352.300024][T23370] ip6tnl1: entered promiscuous mode
[  352.302325][T23370] ip6tnl1: entered allmulticast mode
[  352.547097][T23383] netlink: 'syz.7.4546': attribute type 10 has an invalid length.
[  352.555498][T23383] team0: Port device dummy0 added
[  353.008050][T23389] geneve5: entered promiscuous mode
[  353.011235][   T12] netdevsim netdevsim5 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  353.018195][   T12] netdevsim netdevsim5 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  353.029533][   T12] netdevsim netdevsim5 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  353.041870][   T12] netdevsim netdevsim5 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  353.362098][T23152] Bluetooth: hci7: command tx timeout
[  353.435151][T23408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.437822][T23408] syzkaller0: entered promiscuous mode
[  353.440045][T23408] syzkaller0: entered allmulticast mode
[  353.448270][T23408] tipc: Resetting bearer <eth:syzkaller0>
[  353.452049][T23407] tipc: Resetting bearer <eth:syzkaller0>
[  353.455532][T23407] tipc: Disabling bearer <eth:syzkaller0>
[  353.566817][T23410] syzkaller0: entered promiscuous mode
[  353.571172][T23410] syzkaller0: entered allmulticast mode
[  353.690660][T23414] veth1_macvtap: left promiscuous mode
[  353.796130][ T5868] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  353.800188][ T5868] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  353.802992][ T5868] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  353.806075][ T5868] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  353.932542][T23432] vlan0: entered allmulticast mode
[  353.934259][T23432] bridge0: entered allmulticast mode
[  353.966492][T23436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  353.996866][T23444] openvswitch: netlink: Flow actions attr not present in new flow.
[  354.050186][T23449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  354.153083][T23455] veth3: entered promiscuous mode
[  354.156171][T23455] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  354.166644][T23455] __nla_validate_parse: 22 callbacks suppressed
[  354.166657][T23455] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4567'.
[  354.174373][T23455] 8021q: adding VLAN 0 to HW filter on device bond1
[  354.214803][T23469] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  354.219183][ T5863] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  354.223505][T23468] 8021q: adding VLAN 0 to HW filter on device bond2
[  354.328460][ T5863] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  354.355192][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4573'.
[  354.436578][T23493] team0: Port device dummy0 removed
[  354.451895][T23493] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  354.549178][T23495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4575'.
[  354.569226][ T5863] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  354.572715][T23495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4575'.
[  354.576339][ T5863] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  354.582222][ T5863] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  354.587838][ T5863] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.220578][T23500] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  355.223065][T23500] CPU: 0 UID: 0 PID: 23500 Comm: syz.7.4576 Not tainted syzkaller #0 PREEMPT(full) 
[  355.223076][T23500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  355.223083][T23500] Call Trace:
[  355.223088][T23500]  <TASK>
[  355.223093][T23500]  dump_stack_lvl+0x189/0x250
[  355.223109][T23500]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.223122][T23500]  ? __pfx__printk+0x10/0x10
[  355.223134][T23500]  ? kernfs_root+0x1c/0x230
[  355.223147][T23500]  ? kernfs_path_from_node+0x2f/0x290
[  355.223157][T23500]  ? kernfs_path_from_node+0x250/0x290
[  355.223167][T23500]  ? kernfs_path_from_node+0x2f/0x290
[  355.223182][T23500]  sysfs_warn_dup+0x8e/0xa0
[  355.223194][T23500]  sysfs_do_create_link_sd+0xc0/0x110
[  355.223207][T23500]  device_add_class_symlinks+0x1cf/0x240
[  355.223220][T23500]  device_add+0x475/0xb50
[  355.223253][T23500]  wiphy_register+0x1ba6/0x28d0
[  355.223269][T23500]  ? __pfx_wiphy_register+0x10/0x10
[  355.223278][T23500]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  355.223287][T23500]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  355.223300][T23500]  ieee80211_register_hw+0x3484/0x4100
[  355.223310][T23500]  ? ieee80211_register_hw+0x14a1/0x4100
[  355.223319][T23500]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  355.223327][T23500]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  355.223338][T23500]  ? __hrtimer_setup+0x187/0x210
[  355.223345][T23500]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  355.223357][T23500]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  355.223378][T23500]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  355.223390][T23500]  ? trace_kmalloc+0x1f/0xd0
[  355.223403][T23500]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  355.223420][T23500]  ? kstrndup+0xbf/0x160
[  355.223434][T23500]  hwsim_new_radio_nl+0xea4/0x1b10
[  355.223451][T23500]  ? __pfx___nla_validate_parse+0x10/0x10
[  355.223472][T23500]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  355.223490][T23500]  ? __nla_parse+0x40/0x60
[  355.223507][T23500]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  355.223525][T23500]  genl_family_rcv_msg_doit+0x215/0x300
[  355.223540][T23500]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  355.223554][T23500]  ? bpf_lsm_capable+0x9/0x20
[  355.223564][T23500]  ? security_capable+0x7e/0x2e0
[  355.223575][T23500]  genl_rcv_msg+0x60e/0x790
[  355.223583][T23500]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.223590][T23500]  ? __kasan_slab_alloc+0x6c/0x80
[  355.223599][T23500]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  355.223608][T23500]  ? __netlink_lookup+0xbd/0x810
[  355.223614][T23500]  ? rcu_is_watching+0x15/0xb0
[  355.223622][T23500]  netlink_rcv_skb+0x208/0x470
[  355.223632][T23500]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.223640][T23500]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.223651][T23500]  ? lock_release+0x4b/0x3e0
[  355.223661][T23500]  ? down_read+0x1ad/0x2e0
[  355.223668][T23500]  genl_rcv+0x28/0x40
[  355.223696][T23500]  netlink_unicast+0x82f/0x9e0
[  355.223708][T23500]  ? __pfx_netlink_unicast+0x10/0x10
[  355.223717][T23500]  ? netlink_sendmsg+0x642/0xb30
[  355.223727][T23500]  ? skb_put+0x11b/0x210
[  355.223734][T23500]  netlink_sendmsg+0x805/0xb30
[  355.223745][T23500]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.223757][T23500]  ? futex_unqueue+0x22/0x240
[  355.223764][T23500]  ? aa_sock_msg_perm+0xf1/0x1d0
[  355.223771][T23500]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  355.223779][T23500]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.223789][T23500]  __sock_sendmsg+0x21c/0x270
[  355.223798][T23500]  ____sys_sendmsg+0x505/0x830
[  355.223806][T23500]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.223814][T23500]  ? import_iovec+0x74/0xa0
[  355.223823][T23500]  ___sys_sendmsg+0x21f/0x2a0
[  355.223830][T23500]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.223838][T23500]  ? futex_wait+0x285/0x360
[  355.223852][T23500]  ? __fget_files+0x2a/0x420
[  355.223862][T23500]  ? __fget_files+0x3a0/0x420
[  355.223873][T23500]  __x64_sys_sendmsg+0x19b/0x260
[  355.223881][T23500]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  355.223889][T23500]  ? rcu_is_watching+0x15/0xb0
[  355.223897][T23500]  ? rcu_is_watching+0x15/0xb0
[  355.223904][T23500]  do_syscall_64+0xfa/0x3b0
[  355.223915][T23500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.223922][T23500]  ? exc_page_fault+0x9f/0xf0
[  355.223931][T23500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.223938][T23500] RIP: 0033:0x7f2e6538ebe9
[  355.223945][T23500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.223952][T23500] RSP: 002b:00007f2e635f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.223961][T23500] RAX: ffffffffffffffda RBX: 00007f2e655b5fa0 RCX: 00007f2e6538ebe9
[  355.223966][T23500] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  355.223971][T23500] RBP: 00007f2e65411e19 R08: 0000000000000000 R09: 0000000000000000
[  355.223976][T23500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.223980][T23500] R13: 00007f2e655b6038 R14: 00007f2e655b5fa0 R15: 00007fff003611a8
[  355.223988][T23500]  </TASK>
[  355.409283][T23504] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4577'.
[  355.412836][T23501] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  355.415864][T23501] CPU: 0 UID: 0 PID: 23501 Comm: syz.7.4576 Not tainted syzkaller #0 PREEMPT(full) 
[  355.415880][T23501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  355.415887][T23501] Call Trace:
[  355.415893][T23501]  <TASK>
[  355.415904][T23501]  dump_stack_lvl+0x189/0x250
[  355.415923][T23501]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.415936][T23501]  ? __pfx__printk+0x10/0x10
[  355.415951][T23501]  ? kernfs_root+0x1c/0x230
[  355.415964][T23501]  ? kernfs_path_from_node+0x2f/0x290
[  355.415976][T23501]  ? kernfs_path_from_node+0x250/0x290
[  355.415986][T23501]  ? kernfs_path_from_node+0x2f/0x290
[  355.415999][T23501]  sysfs_warn_dup+0x8e/0xa0
[  355.416011][T23501]  sysfs_do_create_link_sd+0xc0/0x110
[  355.416024][T23501]  device_add_class_symlinks+0x1cf/0x240
[  355.416037][T23501]  device_add+0x475/0xb50
[  355.416049][T23501]  wiphy_register+0x1ba6/0x28d0
[  355.416070][T23501]  ? __pfx_wiphy_register+0x10/0x10
[  355.416084][T23501]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  355.416098][T23501]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  355.416118][T23501]  ieee80211_register_hw+0x3484/0x4100
[  355.416135][T23501]  ? ieee80211_register_hw+0x14a1/0x4100
[  355.416150][T23501]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  355.416162][T23501]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  355.416179][T23501]  ? __hrtimer_setup+0x187/0x210
[  355.416191][T23501]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  355.416208][T23501]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  355.416230][T23501]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  355.416243][T23501]  ? trace_kmalloc+0x1f/0xd0
[  355.416257][T23501]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  355.416272][T23501]  ? kstrndup+0xbf/0x160
[  355.416286][T23501]  hwsim_new_radio_nl+0xea4/0x1b10
[  355.416300][T23501]  ? __pfx___nla_validate_parse+0x10/0x10
[  355.416321][T23501]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  355.416338][T23501]  ? __nla_parse+0x40/0x60
[  355.416355][T23501]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  355.416371][T23501]  genl_family_rcv_msg_doit+0x215/0x300
[  355.416387][T23501]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  355.416403][T23501]  ? bpf_lsm_capable+0x9/0x20
[  355.416418][T23501]  ? security_capable+0x7e/0x2e0
[  355.416436][T23501]  genl_rcv_msg+0x60e/0x790
[  355.416449][T23501]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.416461][T23501]  ? __kasan_slab_alloc+0x6c/0x80
[  355.416475][T23501]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  355.416489][T23501]  ? __netlink_lookup+0xbd/0x810
[  355.416498][T23501]  ? rcu_is_watching+0x15/0xb0
[  355.416512][T23501]  netlink_rcv_skb+0x208/0x470
[  355.416528][T23501]  ? __pfx_genl_rcv_msg+0x10/0x10
[  355.416541][T23501]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.416559][T23501]  ? lock_release+0x4b/0x3e0
[  355.416576][T23501]  ? down_read+0x1ad/0x2e0
[  355.416587][T23501]  genl_rcv+0x28/0x40
[  355.416597][T23501]  netlink_unicast+0x82f/0x9e0
[  355.416614][T23501]  ? __pfx_netlink_unicast+0x10/0x10
[  355.416628][T23501]  ? netlink_sendmsg+0x642/0xb30
[  355.416643][T23501]  ? skb_put+0x11b/0x210
[  355.416655][T23501]  netlink_sendmsg+0x805/0xb30
[  355.416673][T23501]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.416716][T23501]  ? aa_sock_msg_perm+0xf1/0x1d0
[  355.416727][T23501]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  355.416739][T23501]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.416755][T23501]  __sock_sendmsg+0x21c/0x270
[  355.416770][T23501]  ____sys_sendmsg+0x505/0x830
[  355.416783][T23501]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.416797][T23501]  ? import_iovec+0x74/0xa0
[  355.416811][T23501]  ___sys_sendmsg+0x21f/0x2a0
[  355.416823][T23501]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.416844][T23501]  ? __fget_files+0x2a/0x420
[  355.416860][T23501]  ? __fget_files+0x3a0/0x420
[  355.416878][T23501]  __x64_sys_sendmsg+0x19b/0x260
[  355.416890][T23501]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  355.416907][T23501]  ? rcu_is_watching+0x15/0xb0
[  355.416920][T23501]  ? do_user_addr_fault+0xc8a/0x1390
[  355.416939][T23501]  ? rcu_is_watching+0x15/0xb0
[  355.416951][T23501]  do_syscall_64+0xfa/0x3b0
[  355.416968][T23501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.416980][T23501]  ? exc_page_fault+0x9f/0xf0
[  355.416994][T23501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.417006][T23501] RIP: 0033:0x7f2e6538ebe9
[  355.417017][T23501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.417027][T23501] RSP: 002b:00007f2e635d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.417041][T23501] RAX: ffffffffffffffda RBX: 00007f2e655b6090 RCX: 00007f2e6538ebe9
[  355.417049][T23501] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  355.417057][T23501] RBP: 00007f2e65411e19 R08: 0000000000000000 R09: 0000000000000000
[  355.417065][T23501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.417072][T23501] R13: 00007f2e655b6128 R14: 00007f2e655b6090 R15: 00007fff003611a8
[  355.417084][T23501]  </TASK>
[  355.587723][T23152] Bluetooth: hci7: command tx timeout
[  355.615649][T23508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.618967][T23508] syzkaller0: entered promiscuous mode
[  355.621212][T23508] syzkaller0: entered allmulticast mode
[  355.626770][T23508] tipc: Resetting bearer <eth:syzkaller0>
[  355.639291][T23507] tipc: Resetting bearer <eth:syzkaller0>
[  355.642809][T23507] tipc: Disabling bearer <eth:syzkaller0>
[  355.647738][T23512] validate_nla: 11 callbacks suppressed
[  355.647749][T23512] netlink: 'syz.5.4579': attribute type 1 has an invalid length.
[  355.781393][T23526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.784145][T23525] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  355.787780][T23525] syzkaller0: entered promiscuous mode
[  355.792040][T23525] syzkaller0: entered allmulticast mode
[  355.798146][T23526] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4582'.
[  355.805828][T23525] tipc: Resetting bearer <eth:syzkaller0>
[  355.808898][   T13] bond2: (slave ip6gretap1): link status up again after 0 ms
[  355.812023][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  355.815556][T23524] tipc: Resetting bearer <eth:syzkaller0>
[  355.820426][T23524] tipc: Disabling bearer <eth:syzkaller0>
[  355.889545][T23530] syz.7.4583 uses old SIOCAX25GETINFO
[  355.938728][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  356.004020][T23536] netlink: 248 bytes leftover after parsing attributes in process `syz.5.4585'.
[  356.048592][ T5863] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  356.158444][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  356.164452][T23541] gretap0: left promiscuous mode
[  356.166542][T23541] erspan0: left allmulticast mode
[  356.170221][T23541] veth0_to_team: left promiscuous mode
[  356.172541][T23541] veth0_to_team: left allmulticast mode
[  356.175186][T23541] batadv_slave_1: left promiscuous mode
[  356.178738][T23541] macvlan2: left promiscuous mode
[  356.180776][T23541] macvlan2: left allmulticast mode
[  356.183017][T23541] vti0: left promiscuous mode
[  356.184934][T23541] vti0: left allmulticast mode
[  356.187208][T23541] veth3: left promiscuous mode
[  356.190174][T23541] geneve3: left promiscuous mode
[  356.192154][T23541] geneve3: left allmulticast mode
[  356.194368][T23541] vlan0: left promiscuous mode
[  356.196365][T23541] vlan0: left allmulticast mode
[  356.198411][T23541] vti1: left promiscuous mode
[  356.200937][T23541] macsec0: left promiscuous mode
[  356.202930][T23541] macsec0: left allmulticast mode
[  356.205564][T23541] veth9: left promiscuous mode
[  356.207591][T23541] gtp1: left promiscuous mode
[  356.209807][T23541] gtp1: left allmulticast mode
[  356.212060][T23541] ip6tnl3: left promiscuous mode
[  356.214041][T23541] ip6tnl3: left allmulticast mode
[  356.216901][T23541] geneve4: left promiscuous mode
[  356.219169][T23541] geneve4: left allmulticast mode
[  356.225092][T23541] geneve5: left promiscuous mode
[  356.238105][   T13] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.242437][   T13] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 47066 - 0
[  356.246846][   T13] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 45861 - 0
[  356.251176][   T13] netdevsim netdevsim5 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  356.255384][   T13] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.258788][   T13] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 47066 - 0
[  356.262038][   T13] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 45861 - 0
[  356.265503][   T13] netdevsim netdevsim5 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  356.269556][   T13] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.272829][   T13] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 47066 - 0
[  356.275997][   T13] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 45861 - 0
[  356.279408][   T13] netdevsim netdevsim5 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  356.282452][   T13] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.285431][   T13] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 47066 - 0
[  356.290042][   T13] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 45861 - 0
[  356.293155][   T13] netdevsim netdevsim5 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  356.660151][T23545] netlink: 'syz.7.4587': attribute type 1 has an invalid length.
[  356.663424][T23546] netlink: 'syz.7.4587': attribute type 1 has an invalid length.
[  356.693366][T23549] netlink: 248 bytes leftover after parsing attributes in process `syz.7.4588'.
[  356.765974][T23551] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4589'.
[  356.771526][T23551] netlink: 'syz.7.4589': attribute type 1 has an invalid length.
[  356.774863][T23551] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4589'.
[  356.782320][T23551] veth1_macvtap: entered promiscuous mode
[  356.785614][T23551] veth1_macvtap: left promiscuous mode
[  356.873017][T23556] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.893817][T23556] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.921245][T23556] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.926030][T23556] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.950604][T23556] ip6tnl1: left promiscuous mode
[  356.952864][T23556] ip6tnl1: left allmulticast mode
[  356.962595][T23556] veth3: left promiscuous mode
[  356.972067][T23558] _Z`Ԁ@: entered promiscuous mode
[  356.974626][ T5863] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.979586][ T5863] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  356.982464][ T5863] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.985340][ T5863] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  356.989272][ T5863] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  356.993506][ T5863] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  356.997202][ T5863] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  357.002792][ T5863] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.125460][T23567] netlink: 'syz.7.4593': attribute type 12 has an invalid length.
[  357.990553][T23588] netlink: 'syz.5.4598': attribute type 9 has an invalid length.
[  358.001922][T23588] macvlan0: entered promiscuous mode
[  358.003771][T23588] hsr0: entered promiscuous mode
[  358.005715][T23588] macvlan0: entered allmulticast mode
[  358.007881][T23588] hsr0: entered allmulticast mode
[  358.009888][T23588] hsr_slave_0: entered allmulticast mode
[  358.236340][T23617] hsr0: left allmulticast mode
[  358.237904][T23617] hsr_slave_0: left allmulticast mode
[  358.240935][T23617] hsr0: left promiscuous mode
[  358.260822][T23619] netlink: 'syz.5.4605': attribute type 10 has an invalid length.
[  358.264316][T23619] bond0: (slave dummy0): Releasing backup interface
[  358.321058][T23620] netlink: 'syz.5.4605': attribute type 10 has an invalid length.
[  358.325385][T23620] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  358.402112][T23626] netlink: 'syz.5.4606': attribute type 2 has an invalid length.
[  358.471925][   T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.475453][   T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.479253][   T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.482013][   T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.547848][T23643] vlan1: entered allmulticast mode
[  358.643760][T23650] Bluetooth: hci2: Opcode 0x0401 failed: -22
[  358.716703][T23653] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  358.721881][T23653] syzkaller0: entered promiscuous mode
[  358.723810][T23653] syzkaller0: entered allmulticast mode
[  358.805766][T23662] syzkaller0: entered promiscuous mode
[  358.808010][T23662] syzkaller0: entered allmulticast mode
[  358.860995][T23664] syzkaller0: entered promiscuous mode
[  358.863236][T23664] syzkaller0: entered allmulticast mode
[  358.948018][T23667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.951723][T23667] syzkaller0: entered promiscuous mode
[  358.953773][T23667] syzkaller0: entered allmulticast mode
[  358.961553][T23667] tipc: Resetting bearer <eth:syzkaller0>
[  358.965131][T23666] tipc: Resetting bearer <eth:syzkaller0>
[  358.971639][T23666] tipc: Disabling bearer <eth:syzkaller0>
[  359.004644][T23674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.020158][T23674] syzkaller0: entered promiscuous mode
[  359.022378][T23674] syzkaller0: entered allmulticast mode
[  359.074619][T23676] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  359.078989][T23676] net_ratelimit: 6 callbacks suppressed
[  359.078996][T23676] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  359.086865][T23674] tipc: Resetting bearer <eth:syzkaller0>
[  359.098195][T23673] tipc: Resetting bearer <eth:syzkaller0>
[  359.104249][T23673] tipc: Disabling bearer <eth:syzkaller0>
[  359.119768][T23678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.122282][T23678] syzkaller0: entered promiscuous mode
[  359.123991][T23678] syzkaller0: entered allmulticast mode
[  359.129801][T23678] tipc: Resetting bearer <eth:syzkaller0>
[  359.132984][T23677] tipc: Resetting bearer <eth:syzkaller0>
[  359.135590][T23677] tipc: Disabling bearer <eth:syzkaller0>
[  359.252269][T23685] netlink: 'syz.5.4624': attribute type 1 has an invalid length.
[  359.260438][T23685] 8021q: adding VLAN 0 to HW filter on device bond6
[  359.278115][T23685] 8021q: adding VLAN 0 to HW filter on device bond6
[  359.281949][T23685] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  359.286876][T23685] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  359.294318][T23688] netdevsim netdevsim7 netdevsim0: left allmulticast mode
[  359.345237][T23688] __nla_validate_parse: 11 callbacks suppressed
[  359.345248][T23688] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4625'.
[  359.365225][T23691] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4626'.
[  359.372256][T23691] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4626'.
[  359.388024][T23685] veth11: entered promiscuous mode
[  359.410600][T23693] k*]: entered promiscuous mode
[  359.426784][T23693] 8021q: adding VLAN 0 to HW filter on device bond0
[  359.432408][T23693] 8021q: adding VLAN 0 to HW filter on device team0
[  359.437635][T23693] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  359.446547][T23685] erspan0: entered allmulticast mode
[  359.461018][T23693] veth0_to_team: entered promiscuous mode
[  359.463339][T23693] veth0_to_team: entered allmulticast mode
[  359.480939][T23695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.487846][T23697] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4629'.
[  359.496161][T23695] tipc: Disabling bearer <eth:syzkaller0>
[  359.576486][T23702] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  359.581612][T23702] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  360.341985][T23707] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  360.362896][T23709] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4633'.
[  360.404186][T23715] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4634'.
[  360.427235][T23717] bridge3: port 1(veth5) entered blocking state
[  360.430244][T23717] bridge3: port 1(veth5) entered disabled state
[  360.437299][T23717] veth5: entered allmulticast mode
[  360.441176][T23717] veth5: entered promiscuous mode
[  360.447244][T23709] bridge3: port 2(veth0_to_bond) entered blocking state
[  360.450517][T23709] bridge3: port 2(veth0_to_bond) entered disabled state
[  360.452983][T23709] veth0_to_bond: entered allmulticast mode
[  360.455751][T23709] veth0_to_bond: entered promiscuous mode
[  360.459235][T23725] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4636'.
[  360.463015][T23725] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4636'.
[  360.466904][T23725] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4636'.
[  360.472097][T23725] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4636'.
[  360.478219][T23709] vlan0: entered allmulticast mode
[  360.480161][T23709] veth1: entered allmulticast mode
[  360.482043][T23709] bridge3: port 3(vlan0) entered blocking state
[  360.484160][T23709] bridge3: port 3(vlan0) entered disabled state
[  360.486783][T23709] vlan0: entered promiscuous mode
[  360.488699][T23709] veth1: entered promiscuous mode
[  360.499421][T23725] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  360.510548][T23725] bond0 (unregistering): Released all slaves
[  360.518568][T23727] bond0: Error: Cannot enslave bond to itself.
[  360.577072][T23735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.585006][T23736] syzkaller0: entered promiscuous mode
[  360.587330][T23736] syzkaller0: entered allmulticast mode
[  360.597568][T23734] tipc: Resetting bearer <eth:syzkaller0>
[  360.600929][T23734] tipc: Disabling bearer <eth:syzkaller0>
[  360.695620][T23749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.701616][T23749] syzkaller0: entered promiscuous mode
[  360.703437][T23749] syzkaller0: entered allmulticast mode
[  360.710891][T23749] tipc: Resetting bearer <eth:syzkaller0>
[  360.718010][T23748] tipc: Resetting bearer <eth:syzkaller0>
[  360.720424][T23152] Bluetooth: hci2: command tx timeout
[  360.725880][T23748] tipc: Disabling bearer <eth:syzkaller0>
[  360.733554][T23751] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.799248][   T34] INFO: task kworker/u8:2:5841 blocked for more than 143 seconds.
[  360.803392][   T34]       Not tainted syzkaller #0
[  360.806637][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  360.811802][   T34] task:kworker/u8:2    state:D stack:23944 pid:5841  tgid:5841  ppid:2      task_flags:0x4208060 flags:0x00004000
[  360.816487][   T34] Workqueue: netns cleanup_net
[  360.818536][   T34] Call Trace:
[  360.819747][   T34]  <TASK>
[  360.821130][   T34]  __schedule+0x1798/0x4cc0
[  360.822959][   T34]  ? bpf_trace_run2+0x322/0x4b0
[  360.824759][   T34]  ? rcu_is_watching+0x15/0xb0
[  360.826319][   T34]  ? __pfx___schedule+0x10/0x10
[  360.827849][T23754] validate_nla: 1 callbacks suppressed
[  360.827858][T23754] netlink: 'syz.5.4644': attribute type 12 has an invalid length.
[  360.828019][   T34]  ? schedule+0x91/0x360
[  360.834425][   T34]  ? rcu_is_watching+0x15/0xb0
[  360.836367][   T34]  ? lock_release+0x4b/0x3e0
[  360.838066][   T34]  ? wq_worker_sleeping+0x63/0x250
[  360.839830][   T34]  schedule+0x165/0x360
[  360.841231][   T34]  schedule_preempt_disabled+0x13/0x30
[  360.843079][   T34]  __mutex_lock+0x7e6/0x1350
[  360.844746][   T34]  ? xas_start+0x3b3/0x770
[  360.846320][   T34]  ? __mutex_lock+0x5bb/0x1350
[  360.848009][   T34]  ? rdma_dev_change_netns+0x39/0x300
[  360.850091][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  360.851777][   T34]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  360.854024][   T34]  ? rcu_is_watching+0x15/0xb0
[  360.855819][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  360.857850][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  360.859841][   T34]  ? _raw_spin_unlock+0x28/0x50
[  360.861407][   T34]  rdma_dev_change_netns+0x39/0x300
[  360.863192][   T34]  rdma_dev_exit_net+0x203/0x340
[  360.865223][   T34]  ? __pfx___might_resched+0x10/0x10
[  360.867472][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  360.869813][   T34]  ? net_generic+0x1e/0x240
[  360.871628][   T34]  ? mutex_is_locked+0x17/0x50
[  360.873572][   T34]  ? rtnl_is_locked+0x15/0x20
[  360.875509][   T34]  ops_undo_list+0x49a/0x990
[  360.877360][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  360.879792][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  360.881952][   T34]  cleanup_net+0x4c5/0x800
[  360.883776][   T34]  ? __pfx_cleanup_net+0x10/0x10
[  360.885689][   T34]  ? rcu_is_watching+0x15/0xb0
[  360.887531][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  360.889782][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  360.892134][   T34]  process_scheduled_works+0xae1/0x17b0
[  360.894512][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  360.897065][   T34]  worker_thread+0x8a0/0xda0
[  360.899090][   T34]  kthread+0x711/0x8a0
[  360.900589][   T34]  ? __pfx_worker_thread+0x10/0x10
[  360.902519][   T34]  ? __pfx_kthread+0x10/0x10
[  360.904331][   T34]  ? rcu_is_watching+0x15/0xb0
[  360.906273][   T34]  ? __pfx_kthread+0x10/0x10
[  360.908144][   T34]  ret_from_fork+0x3fc/0x770
[  360.910011][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  360.912088][   T34]  ? __switch_to_asm+0x39/0x70
[  360.913972][   T34]  ? __switch_to_asm+0x33/0x70
[  360.915799][   T34]  ? __pfx_kthread+0x10/0x10
[  360.917604][   T34]  ret_from_fork_asm+0x1a/0x30
[  360.919713][   T34]  </TASK>
[  360.920991][   T34] INFO: task syz.0.2879:16913 blocked for more than 143 seconds.
[  360.925010][T23751] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.929173][   T34]       Not tainted syzkaller #0
[  360.931121][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  360.934111][   T34] task:syz.0.2879      state:D stack:23024 pid:16913 tgid:16912 ppid:5833   task_flags:0x400140 flags:0x00004004
[  360.939488][   T34] Call Trace:
[  360.940979][   T34]  <TASK>
[  360.942284][   T34]  __schedule+0x1798/0x4cc0
[  360.943978][   T34]  ? stack_trace_save+0x9c/0xe0
[  360.945751][   T34]  ? stack_depot_save_flags+0x40/0x860
[  360.948036][   T34]  ? kasan_save_track+0x4f/0x80
[  360.950212][   T34]  ? kasan_save_free_info+0x46/0x50
[  360.952350][   T34]  ? __kasan_slab_free+0x5b/0x80
[  360.954456][   T34]  ? __pfx___schedule+0x10/0x10
[  360.956527][   T34]  ? disable_device+0x137/0x320
[  360.958827][   T34]  ? ib_unregister_device_and_put+0xb8/0xf0
[  360.961353][   T34]  ? schedule+0x91/0x360
[  360.963151][   T34]  ? rcu_is_watching+0x15/0xb0
[  360.965170][   T34]  ? lock_release+0x4b/0x3e0
[  360.967098][   T34]  schedule+0x165/0x360
[  360.968938][   T34]  schedule_timeout+0x9a/0x270
[  360.970921][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  360.973122][   T34]  ? rcu_is_watching+0x15/0xb0
[  360.975107][   T34]  ? rcu_is_watching+0x15/0xb0
[  360.977172][   T34]  ? wait_for_completion+0x267/0x5d0
[  360.979489][   T34]  wait_for_completion+0x2bf/0x5d0
[  360.981652][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  360.983989][   T34]  ? remove_client_context+0x19c/0x1e0
[  360.986150][   T34]  disable_device+0x1c6/0x320
[  360.988105][   T34]  ? __pfx_disable_device+0x10/0x10
[  360.990087][   T34]  ? xa_load+0x1ea/0x210
[  360.991574][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  360.993451][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  360.995418][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  360.997541][   T34]  nldev_dellink+0x2d1/0x320
[  360.999579][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  361.001795][   T34]  ? apparmor_capable+0x137/0x1b0
[  361.003894][   T34]  ? bpf_lsm_capable+0x9/0x20
[  361.005858][   T34]  ? security_capable+0x7e/0x2e0
[  361.007921][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  361.010095][   T34]  rdma_nl_rcv+0x6ae/0x980
[  361.012001][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  361.014068][   T34]  ? net_generic+0x1e/0x240
[  361.015947][   T34]  ? rcu_is_watching+0x15/0xb0
[  361.017946][   T34]  netlink_unicast+0x82f/0x9e0
[  361.020077][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  361.022300][   T34]  ? netlink_sendmsg+0x642/0xb30
[  361.024351][   T34]  ? skb_put+0x11b/0x210
[  361.026133][   T34]  netlink_sendmsg+0x805/0xb30
[  361.028097][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.030596][   T34]  ? futex_unqueue+0x22/0x240
[  361.032541][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  361.034597][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  361.036772][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.039157][   T34]  __sock_sendmsg+0x21c/0x270
[  361.041086][   T34]  ____sys_sendmsg+0x505/0x830
[  361.043072][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  361.045250][   T34]  ? import_iovec+0x74/0xa0
[  361.047145][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  361.049314][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  361.051438][   T34]  ? futex_wait+0x285/0x360
[  361.053350][   T34]  ? __fget_files+0x2a/0x420
[  361.055233][   T34]  ? __fget_files+0x3a0/0x420
[  361.057155][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  361.059297][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  361.061563][   T34]  ? rcu_is_watching+0x15/0xb0
[  361.063550][   T34]  ? rcu_is_watching+0x15/0xb0
[  361.065462][   T34]  do_syscall_64+0xfa/0x3b0
[  361.067298][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.069963][   T34]  ? exc_page_fault+0x9f/0xf0
[  361.071966][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.074387][   T34] RIP: 0033:0x7f18a958ebe9
[  361.076207][   T34] RSP: 002b:00007f18aa4a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.079813][   T34] RAX: ffffffffffffffda RBX: 00007f18a97b5fa0 RCX: 00007f18a958ebe9
[  361.083019][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  361.085965][   T34] RBP: 00007f18a9611e19 R08: 0000000000000000 R09: 0000000000000000
[  361.090451][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.093417][   T34] R13: 00007f18a97b6038 R14: 00007f18a97b5fa0 R15: 00007ffc070fd958
[  361.096456][   T34]  </TASK>
[  361.097761][   T34] INFO: lockdep is turned off.
[  361.099729][   T34] NMI backtrace for cpu 0
[  361.099741][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  361.099752][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  361.099759][   T34] Call Trace:
[  361.099764][   T34]  <TASK>
[  361.099769][   T34]  dump_stack_lvl+0x189/0x250
[  361.099788][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  361.099801][   T34]  ? __pfx__printk+0x10/0x10
[  361.099819][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  361.099834][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  361.099846][   T34]  ? __pfx__printk+0x10/0x10
[  361.099862][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  361.099879][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  361.099893][   T34]  watchdog+0xf93/0xfe0
[  361.099916][   T34]  ? watchdog+0x1de/0xfe0
[  361.099931][   T34]  kthread+0x711/0x8a0
[  361.099940][   T34]  ? __pfx_watchdog+0x10/0x10
[  361.099952][   T34]  ? __pfx_kthread+0x10/0x10
[  361.099966][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  361.099979][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.099993][   T34]  ? __pfx_kthread+0x10/0x10
[  361.100006][   T34]  ret_from_fork+0x3fc/0x770
[  361.100019][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  361.100031][   T34]  ? __switch_to_asm+0x39/0x70
[  361.100046][   T34]  ? __switch_to_asm+0x33/0x70
[  361.100059][   T34]  ? __pfx_kthread+0x10/0x10
[  361.100072][   T34]  ret_from_fork_asm+0x1a/0x30
[  361.100090][   T34]  </TASK>
[  361.100095][   T34] Sending NMI from CPU 0 to CPUs 1:
[  361.153559][    C1] NMI backtrace for cpu 1
[  361.153572][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  361.153583][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  361.153590][    C1] RIP: 0010:probe_sched_wakeup+0x69/0x90
[  361.153607][    C1] Code: f6 41 0f 95 c7 89 ee 44 09 fe 31 ff e8 90 6e f8 ff 44 09 fd 74 1e e8 46 6a f8 ff 65 48 8b 3c 25 08 50 a0 92 48 89 de 89 ea 5b <41> 5e 41 5f 5d e9 3d f2 ff ff e8 28 6a f8 ff 5b 41 5e 41 5f 5d e9
[  361.153616][    C1] RSP: 0018:ffffc900001e0bf8 EFLAGS: 00000006
[  361.153626][    C1] RAX: ffffffff81c740ea RBX: ffff888027c38000 RCX: ffff8881000b8000
[  361.153634][    C1] RDX: 0000000000000001 RSI: ffff888027c38000 RDI: ffff8881000b8000
[  361.153641][    C1] RBP: 0000000000000001 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  361.153648][    C1] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: dffffc0000000000
[  361.153680][    C1] R13: ffff888136639f80 R14: 0000000000000001 R15: 0000000000000001
[  361.153688][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  361.153696][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  361.153703][    C1] CR2: 00007f2e635d5d58 CR3: 0000000120a64000 CR4: 00000000000006f0
[  361.153733][    C1] Call Trace:
[  361.153739][    C1]  <IRQ>
[  361.153746][    C1]  ttwu_do_wakeup+0x12d/0x150
[  361.153759][    C1]  ttwu_do_activate+0x21e/0x870
[  361.153772][    C1]  try_to_wake_up+0x721/0x12b0
[  361.153786][    C1]  hrtimer_wakeup+0x4e/0x60
[  361.153797][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  361.153806][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  361.153820][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  361.153832][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  361.153848][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  361.153862][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  361.153874][    C1]  </IRQ>
[  361.153878][    C1]  <TASK>
[  361.153882][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  361.153893][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  361.153905][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 b6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  361.153918][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  361.153927][    C1] RAX: 2c236d9f5663b900 RBX: ffffffff819683b8 RCX: 2c236d9f5663b900
[  361.153934][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  361.153941][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  361.153948][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38330
[  361.153955][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11020017000
[  361.153963][    C1]  ? do_idle+0x1e8/0x510
[  361.153973][    C1]  ? do_idle+0x1e8/0x510
[  361.153982][    C1]  default_idle+0x13/0x20
[  361.153991][    C1]  default_idle_call+0x74/0xb0
[  361.154000][    C1]  do_idle+0x1e8/0x510
[  361.154010][    C1]  ? __pfx_do_idle+0x10/0x10
[  361.154021][    C1]  ? do_idle+0x4ef/0x510
[  361.154031][    C1]  cpu_startup_entry+0x44/0x60
[  361.154040][    C1]  start_secondary+0x101/0x110
[  361.154053][    C1]  common_startup_64+0x13e/0x147
[  361.154069][    C1]  </TASK>
[  361.154778][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  361.266027][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  361.269152][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  361.272693][   T34] Call Trace:
[  361.273929][   T34]  <TASK>
[  361.275006][   T34]  dump_stack_lvl+0x99/0x250
[  361.276738][   T34]  ? __asan_memcpy+0x40/0x70
[  361.278421][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  361.280308][   T34]  ? __pfx__printk+0x10/0x10
[  361.281982][   T34]  vpanic+0x281/0x750
[  361.283427][   T34]  ? __pfx_vpanic+0x10/0x10
[  361.285091][   T34]  ? preempt_schedule+0xae/0xc0
[  361.286859][   T34]  ? preempt_schedule_common+0x83/0xd0
[  361.288839][   T34]  panic+0xb9/0xc0
[  361.290193][   T34]  ? __pfx_panic+0x10/0x10
[  361.291788][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  361.293709][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  361.295901][   T34]  watchdog+0xfd2/0xfe0
[  361.297426][   T34]  ? watchdog+0x1de/0xfe0
[  361.299075][   T34]  kthread+0x711/0x8a0
[  361.300550][   T34]  ? __pfx_watchdog+0x10/0x10
[  361.302204][   T34]  ? __pfx_kthread+0x10/0x10
[  361.303858][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  361.305706][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.307589][   T34]  ? __pfx_kthread+0x10/0x10
[  361.309218][   T34]  ret_from_fork+0x3fc/0x770
[  361.310868][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  361.312708][   T34]  ? __switch_to_asm+0x39/0x70
[  361.314403][   T34]  ? __switch_to_asm+0x33/0x70
[  361.316106][   T34]  ? __pfx_kthread+0x10/0x10
[  361.317839][   T34]  ret_from_fork_asm+0x1a/0x30
[  361.319607][   T34]  </TASK>
[  361.321421][   T34] Kernel Offset: disabled
[  361.322805][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:51:38  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bde60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99def670 RSP=ffffc9000068f650
R8 =ffff888108d40237 R9 =1ffff110211a8046 R10=dffffc0000000000 R11=ffffffff854f1bb0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1c27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055cd66d87000 CR3=00000001110f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=100009c003001000 09b00300100009a0
XMM02=0300100009900312 1000098003001000 XMM03=04f00301100004e0 0300100004d00300
XMM04=100004c003001000 04b00300100004a0 XMM05=0205068004000800 0610000210000801
XMM06=0300100004900300 1000048003080680 XMM07=100004c003001000 04b00300100004a0
XMM08=0100100000040100 00000806060168e0 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=2c236d9f5663b900 RBX=ffffffff819683b8 RCX=2c236d9f5663b900 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38330 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020017000
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f20eab7b440 CR3=000000006671c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2e65412e53
XMM06=0000000000000000 00007f2e65412e4d XMM07=0000000000000000 00007f2e65412e61
XMM08=0000000000000000 00007f2e65412ee7 XMM09=0000000000000000 00007f2e65412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
