last executing test programs:

9m18.929261283s ago: executing program 2 (id=745):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f00000003c0)=[{{&(0x7f0000000140)=@ethernet={0x1, @random="ad284142598f"}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="cdaf9daf0d3ebc0b02fdc7ae81096e647ce581a9a654330be35e6929bb30710ad56f90b460596869a294533f646deb2b1283fd38ccce1545f2a4e3efeb81ed190124484338e7f71e3869b599d881", 0x4e}, {&(0x7f0000000240)}], 0x2, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xae7}}, @txtime={{0x18, 0x1, 0x3d, 0xed7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7beb}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0xd8}}], 0x1, 0x40001)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
close(0x3)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c8e5}, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$inet6(r5, &(0x7f0000000740)={&(0x7f0000000400)={0xa, 0x4e24, 0x5, @loopback, 0x3}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000440)="aed68ba00e153bbf3b74252e5e0a825832aac0bd4c0b3b085278279b784704e8b182dd5b1292441aa22404cb6a5f89a889611c5bb46a48b22ca57684d3d001ab4b6c9fda5e4c8b9a56c727a827c7d016ed83019f1d32ed0843a3b36bedadd71f1dd8230f837d8c43dba3c5405aff4cdd66d41f94c76f7a7254f55f4affaa129192d7c77150d60fcd6d57ef592692cf00ead1cd01f8249291c59c9a2202e265a9a56bcca299fb4e2e61261aebf0b69a7b8202295b0fee0f9e3f88968cfd9be0919333a489a1487967d329ad", 0xcb}, {&(0x7f0000000540)="46d54e3540f8401e7a22ff6553e46fadbed57178a21995e3d0332bd4155f333c9f3ffbe064f3b0fd51872a90a8eb76d3e3e93485daf1f7eef1647b57621fdf94fed4a22d0c70238724914dc0607d618523b0024c54177742061d63355903a29e8cb265834e0f145a5848a1058fbc950fe64f47b9", 0x74}], 0x2, &(0x7f0000000600)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x2e, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2, 0xa, 0x2, 0x3, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2f, 0x2, 0xb22eb6f7f253815c, 0x1, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hopopts={{0x88, 0x29, 0x36, {0x67, 0xd, '\x00', [@generic={0x8, 0x4b, "1b2b7047e18f261472f6cd06328dca4fd51b62c070eb13b68ab57857b23392c7faf9e8c7f314916b7057b68d6c0bb619992eac8e48fa977978e0383cb28cb4fe2b662372be64de7a000023"}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3b}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x1}, @pad1]}}}], 0x140}, 0x24048880)

9m18.86773637s ago: executing program 0 (id=746):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24008851}, 0x40810)

9m18.610166955s ago: executing program 0 (id=751):
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x24}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, 0x0, 0x42}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0x4, 0x1, 0x4, 0x7, @mcast1, @mcast2, 0x7800, 0x700, 0x0, 0xfb4}})
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000340)=r2) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

9m18.394629974s ago: executing program 0 (id=753):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @broadcast}, 0x16, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'syz_tun\x00'})
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1224)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x18, 0x101, 0x1, "a2"}, {0xa8, 0x119, 0xe, "f9dccbb4439839fb76539392a8ec8d443b1e4a5f4913ed9703009bf47c940a1b1997ad513633c31f308fbb4c598db4dc528bce8c1b0307739fa3ba18a07650488ded63dda4c8a4b6de762e136c48e356d2b1c987fd77e216f7959f8303d4f78302c232dfe30321f068714a65317a326938cfe70f6a5b443af5cb392ceb126080efdbcacf05bb94d09d8f408f7f584c997b54760da8"}, {0x10, 0x116, 0x7}, {0x80, 0x110, 0x10000, "d55dc0b66b7a8ed2cd8f9c1122c4282e583e72fc23f0c2879b1cad992e35ca83a54577db0f168be7d2fb78f98590aabe379301fecb03e754f1fb84d18d795882c9bb5d7ddc5cf68ab141012a6395a59555158f341af0a88c6c46a1a40e5dda6e23a4a3c54a6c3cd6b9d2a9a3bcca53"}], 0x150}, 0xfc40)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdcc16d17eb847d268f96dbef0cb2788f69128e5807cabf5febbea9f3af", 0x34}], 0x1}}], 0x1, 0x4044805)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
close(0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="060004000000040000400900000011000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}}, 0x4c}}, 0x20004010)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000000))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000090a010400000000000000000100000208000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a3200000000080003400000008c38000980340002800c00018008000140000000090c00018008000140000000080c00018008000140000000040c0001800800014000000002140011"], 0xc0}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448de, 0x0)

9m18.338244895s ago: executing program 4 (id=754):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x16, &(0x7f0000000000)={@multicast, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@generic={0x88ca}}}, 0x0)
socket$kcm(0xf, 0x3, 0x2) (async)
r1 = socket$kcm(0xf, 0x3, 0x2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x38}}, 0x20000091)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002b40)=ANY=[@ANYBLOB="1c00000038001901feffffff00fa2a4b3d62fef3524001801888ad47"], 0x1c}, 0x1, 0x0, 0x0, 0x48814}, 0x20000001)
getsockopt$bt_hci(r0, 0x84, 0xf, &(0x7f00000037c0)=""/4115, &(0x7f0000000000)=0x1013) (async)
getsockopt$bt_hci(r0, 0x84, 0xf, &(0x7f00000037c0)=""/4115, &(0x7f0000000000)=0x1013)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x9e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x1a})

9m18.302050642s ago: executing program 1 (id=755):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
unshare(0x28040680)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f00000002c0)='ps}', &(0x7f0000000300)}, 0x20)
r3 = socket(0x400000000010, 0x3, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x23, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35a}}, @printk={@i, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0xff8, &(0x7f0000000780)=""/4088, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000000)=0x134, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x7, 0x17, 0x1b, 0x1e, 0x0, 0x800000e, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'veth0_vlan\x00', @multicast})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r8=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f00000002c0), &(0x7f0000000240)=r11}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)

9m18.101194679s ago: executing program 4 (id=756):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000409000000030000000000000002000000007600571e002e0061"], 0x0, 0x3a, 0x0, 0x1, 0x3}, 0x28) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b2000ed00ffdbdf25030000000100000008000a"], 0x28}}, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r1, 0xc)
connect$x25(r1, &(0x7f0000000a80), 0x12) (async)
r2 = socket$inet6(0xa, 0x2, 0x3a) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x4010000) (async)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
r3 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f00000003c0)=""/103, 0x67}, 0xffffffff}], 0x1, 0x2000000022, &(0x7f00000002c0)={0x77359400})
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000004c0)={0x2, 0x8, 0x400, 0x3}, 0x10) (async)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff}) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)=<r5=>0x0)
bind$nfc_llcp(r4, &(0x7f0000000440)={0x27, r5, 0x0, 0x6, 0x1, 0x8, "f46970b7757d2860b09ee06471c52f35f68b8ad004cf972fdde15e047b6cc7c893d4a66e46e5d4848b64e51bd389d0e46b6d3391a79d6274b4e65e581d3dce", 0x14}, 0x60) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000140), 0x10) (async)
sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async)
sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="05000000010900"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000120000000000d7a8b9b521fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15e46b5b4a15ab87a8591806635ac3289198e3042541a19b2b65f06ca8645b93c1a1c1bde0ac212d4ad8bb828252bb1d523438b86ac880"], 0x80}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000406050000000000000000000c0000000500010007000000ced6bd57418a7c96657934885621c91bcbc77c9eead38c48573dbacd68e46e1d76a2c3426050ebc8febc3d883961fa37ce516232b3ff6754b4567deca5293c58ae39e0f7397cd8f93359044054478cbef6cad73ef3faf814dd69c14d1ea28991b0517659ab824325b823333553015f07c99b05c1baec933407af863ee279138da90e42277c4af0d3b6932ef142325f786c816a83ea12"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) (async)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'})
socket$packet(0x11, 0x3, 0x300) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGSKNS(r9, 0x894c, 0x0) (async)
r10 = socket(0x10, 0x3, 0x0)
write(r10, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24)

9m18.017776009s ago: executing program 3 (id=757):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2) (async)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000bd7000080000000a000000ff00fd090000000014000500ff020000000000000000000000000001000000000000"], 0x30}}, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r4, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) (async)
sendmmsg$inet6(r4, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x800, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xe, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfe000000}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e4}, 0x20000010) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xe, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfe000000}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e4}, 0x20000010)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$kcm(0x11, 0x3, 0x0) (async)
socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
socket$unix(0x1, 0x5, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x200})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000100000085000000330000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000001000085000000060000009500000000000000caadd5fc95eedf9d0005ac159142c6aeb3d84a3c4b383080e320cf065c1f63c556518b0a7b9bb26a67b45589980e5c4ebd4aa3299ab7650938e6d7b7bdee173999ffee40c3129554341acb586d9932a46ebfc4206653f123d05ccc69f17788ff7316ec883e"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000)
socket$unix(0x1, 0x1, 0x0) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newqdisc={0x1ec, 0x24, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0xffff, 0x4}, {0xe, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xff, 0x5, 0x4a4, 0x1, 0x2, 0x7, 0x5}}, {0xe, 0x2, [0x1, 0x9, 0x9, 0x3, 0xecc]}}, {{0x1c, 0x1, {0x5, 0x0, 0x0, 0x100, 0x1, 0x2, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x5, 0x5, 0x0]}}, {{0x1c, 0x1, {0x80, 0x2, 0x24, 0x4, 0x2, 0x7, 0x8, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0x7f, 0x4, 0x3, 0x0, 0x2, 0x3, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x80, 0x3, 0xce, 0x0, 0x4, 0x8, 0x4}}, {0xc, 0x2, [0x1, 0xf856, 0x0, 0xd]}}]}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x407d, 0x0, 0x0, 0x8, 0xf0, 0x5}}, {0xe, 0x2, [0x4, 0x8, 0x7, 0x1, 0x8]}}, {{0x1c, 0x1, {0x2, 0x7f, 0x21, 0x6, 0x1, 0x3, 0x5, 0x2}}, {0x8, 0x2, [0x9, 0x1]}}, {{0x1c, 0x1, {0x9, 0x9, 0x0, 0x7fff, 0x1, 0x2000317, 0x9, 0x7}}, {0x12, 0x2, [0xffff, 0x1ff, 0x100, 0x4, 0x3, 0x7, 0x7]}}, {{0x1c, 0x1, {0x6, 0x7, 0x200, 0x6, 0x1, 0x3, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x16, 0x0, 0x8, 0x400]}}, {{0x1c, 0x1, {0xfa, 0x80, 0x1000, 0x5, 0x2, 0xc, 0x1000, 0x2}}, {0x8, 0x2, [0x79, 0x18]}}, {{0x1c, 0x1, {0xff, 0x6, 0x0, 0xd, 0x2, 0x3284, 0x5, 0x3}}, {0xa, 0x2, [0xb5e, 0x3d, 0x15]}}]}]}, 0x1ec}}, 0x40004) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newqdisc={0x1ec, 0x24, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0xffff, 0x4}, {0xe, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xff, 0x5, 0x4a4, 0x1, 0x2, 0x7, 0x5}}, {0xe, 0x2, [0x1, 0x9, 0x9, 0x3, 0xecc]}}, {{0x1c, 0x1, {0x5, 0x0, 0x0, 0x100, 0x1, 0x2, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x5, 0x5, 0x0]}}, {{0x1c, 0x1, {0x80, 0x2, 0x24, 0x4, 0x2, 0x7, 0x8, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0x7f, 0x4, 0x3, 0x0, 0x2, 0x3, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x80, 0x3, 0xce, 0x0, 0x4, 0x8, 0x4}}, {0xc, 0x2, [0x1, 0xf856, 0x0, 0xd]}}]}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x407d, 0x0, 0x0, 0x8, 0xf0, 0x5}}, {0xe, 0x2, [0x4, 0x8, 0x7, 0x1, 0x8]}}, {{0x1c, 0x1, {0x2, 0x7f, 0x21, 0x6, 0x1, 0x3, 0x5, 0x2}}, {0x8, 0x2, [0x9, 0x1]}}, {{0x1c, 0x1, {0x9, 0x9, 0x0, 0x7fff, 0x1, 0x2000317, 0x9, 0x7}}, {0x12, 0x2, [0xffff, 0x1ff, 0x100, 0x4, 0x3, 0x7, 0x7]}}, {{0x1c, 0x1, {0x6, 0x7, 0x200, 0x6, 0x1, 0x3, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x16, 0x0, 0x8, 0x400]}}, {{0x1c, 0x1, {0xfa, 0x80, 0x1000, 0x5, 0x2, 0xc, 0x1000, 0x2}}, {0x8, 0x2, [0x79, 0x18]}}, {{0x1c, 0x1, {0xff, 0x6, 0x0, 0xd, 0x2, 0x3284, 0x5, 0x3}}, {0xa, 0x2, [0xb5e, 0x3d, 0x15]}}]}]}, 0x1ec}}, 0x40004)
recvmmsg(r12, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000005c0)=""/159, 0x9f}, {0x0}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/211, 0xd3}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0x9}, 0x3}], 0x1, 0x10022, 0x0) (async)
recvmmsg(r12, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000005c0)=""/159, 0x9f}, {0x0}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/211, 0xd3}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0x9}, 0x3}], 0x1, 0x10022, 0x0)

9m17.877894721s ago: executing program 2 (id=758):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) (async)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000000a0a0102000000000000000007000000e268ae2f5b695697596e6d66dea96fe1d4a55c66c68f29c2f1fe9f0f0e23574e7ca46953b5d73d2ccd090d99aa95ef3304320d9053e0d395611b9bd21b9064aab3fe7dd0aba5a9cf5b125e99824c02876af8a7"], 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x4004040) (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r5, 0x0, 0x10448) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x11, r5, 0x0) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 32)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000015c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"/4788], 0x12b4}, 0x1, 0x0, 0x0, 0x8080}, 0x800) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
r10 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
socket$kcm(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff})
sendmsg$tipc(r11, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) (async)
connect$can_bcm(r10, &(0x7f00000000c0), 0x10) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0)
sendmmsg$inet(r10, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async)
write$tun(r8, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x38}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004844)

9m17.779288542s ago: executing program 4 (id=759):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x1b, 0x5, 0x7a0, 0x0, 0x0, 0xffffffff, 0x1f8, 0x478, 0x6d0, 0x6d0, 0xffffffff, 0x6d0, 0x6d0, 0x5, &(0x7f0000000300), {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3cc, '/usr/sbin/cups-browsed\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xff, 0xffffffff], 'tunl0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x6, 0x10, 0x5, 0x2a}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@frag={{0x30}, {[0x40, 0xfffff800], 0x7, 0x22, 0x1}}, @common=@frag={{0x30}, {[0x9, 0x1], 0x4, 0x2, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x14, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@multicast2, @gre_key=0xc12c, @icmp_id=0x65}}}, {{@ipv6={@loopback, @mcast1, [0xff, 0xff000000, 0xffffffff, 0xffffffff], [], 'erspan0\x00', 'vlan1\x00', {}, {0xff}, 0x6, 0x84, 0x3}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x2, 0x3d}}, @common=@icmp6={{0x28}, {0x12, '\\R'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0xfffffffa, 0x7, 0x2}}}, {{@ipv6={@remote, @local, [0x0, 0xff, 0xff, 0xff], [0xff000000, 0xffffff00, 0xffffffff], 'ip6_vti0\x00', 'nr0\x00', {}, {}, 0x0, 0x9, 0x2, 0x6}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0x7, 0x7], 0x3, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @remote, @dev={0xfe, 0x80, '\x00', 0x41}, @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @mcast1, @remote, @private1, @empty], 0x9}}, @common=@frag={{0x30}, {[0x4, 0x9], 0x8, 0x4, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@local, @ipv4=@local, @gre_key=0x2, @gre_key=0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
listen(r5, 0x1)
shutdown(r5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000480)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {0x5}, @device_a, @device_b, @random="f77cf55ea84b", {0x5, 0x5}}, 0x3, @void}, 0x1a)
recvfrom$packet(r2, &(0x7f00000003c0)=""/22, 0x16, 0x101, &(0x7f0000000200)={0x11, 0x19, r3, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r7, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x87, @broadcast, 0x4e20, 0x4, 'wrr\x00', 0x8, 0x40, 0x43}, {@broadcast, 0x4e21, 0x3, 0xfffffff9, 0x400, 0x5}}, 0x44)

9m17.702512628s ago: executing program 1 (id=760):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4)
close(0x3)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000140)={@empty, @broadcast, @empty}, &(0x7f0000000180)=0xc)
unshare(0x6a040000)
r5 = socket(0x8, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000021401002cbd7000fddbdf2508000100000000000800", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x800)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0)
accept4$inet6(r5, 0x0, 0x0, 0x800)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x0, 0x9, 0x0, 0x3ff}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x80, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r8}, 0x38)
ioctl$XFS_IOC_FSGETXATTRA(r8, 0x801c582d, &(0x7f0000000040))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x3, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

9m17.637629666s ago: executing program 2 (id=761):
unshare(0xa020480) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r0, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100001f8e578ecb6f9c766645eadca48d23c1c5439437e573bb8d8c2bc142e3a4ca4c5e67a023975509443dda8e898e20ffc7eba7bca6d10213bbea61b25b04a572c1b242ffb58478545a3dfc03eb2170487d931f3e1f12db6e62dce7820562ea3c9aa6edab0be566a4bcfadf40483c80809f21b27206687fd0ab1c8e8b70df778b974179df35c4b6d2515f702932d43ea3a851540b5245489520e26fc57779c6696e6213823cd6421e39d222c95fc9b7229e", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af82b41c0ab2b766dddae2855780a2d1c17ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000000, @mcast1, 0xf0d}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000002000000001400000000000000290000000b000000ffffffff00000000c1fc14af0f5724b2d6c3f2d754f840168c98bddb05d4f19c3a088c1f68bc1b158a049d"], 0x30}, 0x20000000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xffffff40, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffc7e, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

9m17.637106843s ago: executing program 3 (id=762):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x4, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x28, 0x1, 0x0)
getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x1, 0xfff1}, {0xfff1, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3261e)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r12=>0x0})
sendto$packet(r0, &(0x7f0000000080)="05031c00d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$inet_udp(0x2, 0x2, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000340)=0x4dd9, 0x4)
sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r13], 0x24}}, 0x2000c010)

9m17.358047707s ago: executing program 0 (id=763):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff0307680426b1929e14f08800", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x2f) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9m17.133601755s ago: executing program 0 (id=764):
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x26c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a794d71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dd57464}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1aaf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2df76953}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x317ff29d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc16}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb94b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dd5032b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4543}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be0e737}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x666}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e8acdfb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6766915c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x90e87e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6495f77c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc52e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74c3964e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x148, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dc0d135}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79e27c7}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7549016a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ec407cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x718b3a82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73f06673}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2af4a8b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9fa7f61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbe89}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a9f0bf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e036529}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7db2ca9c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f76981c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18e703be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38b1baff}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d11d566}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75d17b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c538a33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35d623f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc20049b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14, 0x8, 0x0, 0x1, [{0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1080c306}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8000810}, 0x40)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000640)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8090}, 0x4010)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb0, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:framebuf_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:unconfined_execmem_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40a4}, 0x841)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={<r3=>0x0, 0x3c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x10005}, @in={0x2, 0x4ea1, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000180)=0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000daffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1010000, 0xe, 0x0, &(0x7f0000000380)="000000221236508ec11a984ab672", 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
unshare(0x400)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x68, 0x2, 0x6, 0x5, 0x6000000, 0x0, {0x7, 0x0, 0x32}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xb}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x4, 0x0, 0x0, 0x0, 0xce03b2}, 0x9c)

9m16.878117693s ago: executing program 3 (id=765):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000030426bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a0500000100edff000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40810)
close(r6)
ioctl$PPPIOCDISCONN(r4, 0x7439)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x39071, 0xffffffffffffffff, 0x65969000)
accept4$unix(r2, 0x0, 0x0, 0x0)
r9 = accept(r1, &(0x7f0000000280)=@xdp, &(0x7f0000000340)=0x80)
recvfrom$unix(r9, &(0x7f0000000540)=""/260, 0x104, 0x1060, 0x0, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68090}, 0x0)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r11, 0x100, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x4004000)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

9m16.876996679s ago: executing program 0 (id=766):
syz_emit_ethernet(0x85, &(0x7f0000000300)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x77, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x3, 0x0, @local, {0x15, 0x4, 0x0, 0x9, 0x3, 0x65, 0x7, 0x9, 0x4, 0x3ff, @broadcast, @empty, {[@timestamp={0x44, 0x10, 0x67, 0x0, 0x7, [0x9, 0x9c0, 0x991]}, @cipso={0x86, 0x2b, 0x1, [{0x7, 0x9, "87c90cbb9d94be"}, {0x5, 0x9, "4b66ea258c98c7"}, {0x5, 0xd, "180cac1f76bc2b24b749cd"}, {0x6, 0x6, "9e5a4e41"}]}, @end, @end]}}, "7e96e9cbb8dcf7"}}}}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @empty, 0x3d}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x10000006, 0x4)
socket(0x40000000015, 0x5, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket(0x28, 0x5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x2000c814)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000980))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x400)
socket(0x15, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
socket(0x8, 0x4, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000001c0)=[{&(0x7f00000005c0)="afc356bf9b", 0x5}], 0x1, 0x2)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))

9m16.849986585s ago: executing program 1 (id=767):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xe, 0x10}}}, 0x24}}, 0x10)
r0 = socket(0x28, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e24, 0xff, @remote}, 0x1c)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@multicast1=0xe0000002, @in6=@mcast2, 0x0, 0x0, 0x0, 0xe00, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075d, 0xcd7}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000080000000000000000000000000000000000000000000000000006000000000a"], 0xb8}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
splice(r2, 0x0, r4, 0x0, 0x2, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r6)
sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r7, 0x603, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x2, 0x6, @multicast1}]}, 0x24}}, 0x4044)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r6)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x2d}}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r9}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000)
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x64}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
r10 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r10, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r11)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r12, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x400c880)

9m16.693412578s ago: executing program 4 (id=768):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20c2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008880}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e5}, 0x20000010)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000000))
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200d1eb14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

9m16.536317248s ago: executing program 2 (id=769):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x19, 0x2}, 0x20)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000001040)="3e98021422576e1f8f1d2ac6dd60fa759900007979a399e581581834335637dd5d84389402a09f581c09118cfd9d9c3310605ef0e1a48220cccc8f2366439a2c1b7086783e30fcbb6e7ef1659a765c75048da95556bf0484f00ce396330354e7680612e8d000224f9429bef58ae26f530809fe159a354b382c38706e3d3d55b3946d88069d3f5ba0d55e9952438ceb8c8a48f538dfcd418933c05357f1190dd3fad1172497484b9ac2379c44ab5df980aaaff65746ad782358fa1e415a85a3afbde82335136e906631e2d0ad0000000000000000000000000000000000000000ae24b8751f760ce99c5166422ebef99b67dc761342fb97e454a9aeb6c6ca2483634745cbd8ad7b7b6219123469a6415ae03324078c103fff60fbdb432972ce9dbfa82bf646c97215bbd51d20ba9e06fd8240e38d33a72f95726a18abef166f31e95270b9bf5c9c933aca60cf9b330225b01efbb0c2711b1dbc19c2665b526f8a4a902ec42d0fb1e81b1c8db751c512eb442d7436a87cfe70515123d1dd89930fff3812d3e8204ec2ad1171f9eb09ca6bd448105cf1d7ddb8d710a43d0c596a8931e8130a98fab048f6c902d9b84121b8dd6b765478154c23", 0x1b8}, {&(0x7f0000000a80)="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", 0x22c}], 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x6c}, {0x0, 0x800000000000000, 0x4, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x8, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x10000000, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x1}}, 0xe8)

9m16.381869648s ago: executing program 1 (id=770):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000240))
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x2, 0x0, 0x0)
close(0x4)

9m15.889035387s ago: executing program 2 (id=771):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x600, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f)

9m15.666282217s ago: executing program 3 (id=772):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async, rerun: 32)
r2 = socket(0x2b, 0x1, 0x1) (async, rerun: 32)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @empty}, 0x1c)
listen(r2, 0x5) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept4$tipc(r2, 0x0, 0x0, 0x0)

9m15.617320346s ago: executing program 1 (id=773):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000006ffc)=0xffffffff, 0x4)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000010c0, 0x2000000010f0, 0x200000001120], 0x0, &(0x7f0000001000), &(0x7f00000010c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000aa55a72000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000000fcffffff00000000"]}, 0x138)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000000)=@ethtool_cmd={0x3c, 0x6, 0x9, 0x8, 0x8, 0x8, 0x0, 0x0, 0xf7, 0x2, 0x4, 0x10, 0x5, 0xfe, 0xf, 0x9, [0xfffffff7, 0x1]}})
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$FICLONE(r9, 0x40049409, r7)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001040)=r7, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

9m15.350826499s ago: executing program 4 (id=774):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000a28000000000ae1ffffffffffffff00000a000007080002c00000000209000000002c000015030a010100003671a9fd00000a0000070900010063797a31000000000900030073797a32000000001400000011000100000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001800010000000000fedbdf251d01070008000a00", @ANYRES32=r3, @ANYBLOB="08000e00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r4], 0x44}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440)={0x0, <r6=>0x0}, &(0x7f0000000480)=0x31)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@can_newroute={0x44, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x7}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "d3698ac660061306"}, 0x4}}, @CGW_MOD_UID={0x8, 0xe, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0xde50a9659187563d}, 0x40000c0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0) (async)
setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

9m15.346338435s ago: executing program 3 (id=775):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f00000000c0)="79691414bd3874e9799196696afba6028a56a3c1a3fc663cfbd9a67c59db5c2baaa618ff8a85efcf3d6e7af37929802002c38c94d479f93a9aeb61dc70547e4ad25ab46166d85d5b64b2aa530427ddfff2c9de0940249157d85ea5b7f1e3643a4579682f9b6b1e83b8935041831d115aff56f2e3890212aec155c6008323bf5bedb6ca25730c112e9bff117ac88d68fec1f52409ee85efecb2c2b77694c309da1ae22488bbdd8cf31ea25b9971a3de6d35abfefcf163ee945ea52a16e0b713a4b7da10e3f0c10be779f5eb91869026c532fd", &(0x7f0000000240)=""/82, &(0x7f0000000500)="619135b72c9901af770c1049b1b96221e2b3810887b7da9f7cc53787d53067b1cef787230961cf5a5887fc1a90d753a93b283e52b0e3bdc3b69d7d1d372cd509b13141d32341e81690fbdfe2ba4a9c9be0c86afddb3d80fbdf1f76649d1414c61da1c3b1f5a62111c6983b6ee5c455983c7e092ac36ecd1569ac73bcbc20e187f71bdda593ac5aeb3af249aafc05a22fb5dc6604b908049a7ab48a7777f043915f0b7f1537884d96e7c9a5c33bd255ff219792d1ce1fdfd0dc551a7ac06bd95eeaf87052318c1edf5d6100", &(0x7f0000000600)="a87ced7ae2ba1bb5a865ac25cd46086974b36d46aa5daa4c7302c94e4911688486e94f24220dd463f1dc8771f473adfe2c2c25f055e864b611aaf42e8a77046a0df9a84e08c29ce173dbad1f1a064a7dfa08582165d4961841db642a0c9a2280a416e62564dd85335de3c677a4a6847e6cf8bfc34f95b4df0d5f2e27bd743d673b699dfb9e2f447114b917963fa64cc2c1363e27a8751f1f16da39857d4f97e92b4c8d730af1d8676599d71b0874", 0x7, 0x1, 0x4}, 0x38)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x4000})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000440)={r2, r2, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0xc45, 0x1030, 0x9, 0x1, 0x5, 'syz1\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f00000000c0)="79691414bd3874e9799196696afba6028a56a3c1a3fc663cfbd9a67c59db5c2baaa618ff8a85efcf3d6e7af37929802002c38c94d479f93a9aeb61dc70547e4ad25ab46166d85d5b64b2aa530427ddfff2c9de0940249157d85ea5b7f1e3643a4579682f9b6b1e83b8935041831d115aff56f2e3890212aec155c6008323bf5bedb6ca25730c112e9bff117ac88d68fec1f52409ee85efecb2c2b77694c309da1ae22488bbdd8cf31ea25b9971a3de6d35abfefcf163ee945ea52a16e0b713a4b7da10e3f0c10be779f5eb91869026c532fd", &(0x7f0000000240)=""/82, &(0x7f0000000500)="619135b72c9901af770c1049b1b96221e2b3810887b7da9f7cc53787d53067b1cef787230961cf5a5887fc1a90d753a93b283e52b0e3bdc3b69d7d1d372cd509b13141d32341e81690fbdfe2ba4a9c9be0c86afddb3d80fbdf1f76649d1414c61da1c3b1f5a62111c6983b6ee5c455983c7e092ac36ecd1569ac73bcbc20e187f71bdda593ac5aeb3af249aafc05a22fb5dc6604b908049a7ab48a7777f043915f0b7f1537884d96e7c9a5c33bd255ff219792d1ce1fdfd0dc551a7ac06bd95eeaf87052318c1edf5d6100", &(0x7f0000000600)="a87ced7ae2ba1bb5a865ac25cd46086974b36d46aa5daa4c7302c94e4911688486e94f24220dd463f1dc8771f473adfe2c2c25f055e864b611aaf42e8a77046a0df9a84e08c29ce173dbad1f1a064a7dfa08582165d4961841db642a0c9a2280a416e62564dd85335de3c677a4a6847e6cf8bfc34f95b4df0d5f2e27bd743d673b699dfb9e2f447114b917963fa64cc2c1363e27a8751f1f16da39857d4f97e92b4c8d730af1d8676599d71b0874", 0x7, 0x1, 0x4}, 0x38) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x4000}) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000440)={r2, r2, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0xc45, 0x1030, 0x9, 0x1, 0x5, 'syz1\x00'}) (async)

9m15.161411309s ago: executing program 2 (id=776):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x3978, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x3978, 0x4)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10)
sendto$inet(r1, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x2b62}], 0x1, 0x40012021, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8)
sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000008400000000000000060001012a0006003a8a55455087a2494bae7c797e2953a60b693dc866265594bb31a106357305193af47702000000000000001bb24702ff17420b0f1a3feaaedd6c1d54fc01000000000000005ac6e301ec1ad546e1754c32a8d084b467fe5c9220888eeb2e884bfe5cd029d58be65786f81433fb5d7f6057f2ece0634728579fc704d658806120442fcf4c8746535aada422e4d7a0a60fce00025c70e869e936aff2ea170e12651a0e26384ba16d6439caafe64ba0e729eac588073d98eb7dbf7477a4be0229b160fb08e726e74631660addd1175f7c9bbe97d2ca53e599f67d69964272fc154f5fe158fa5617c2795845f3f5d509eac20b2070ea35"], 0x18, 0x200008c0}, 0x6008045)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r9=>0x0})
r10 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004500)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x11, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x9, 0xfffffffc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff7, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8880}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004500)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x11, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x9, 0xfffffffc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff7, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8880}, 0x0)
socket(0x10, 0x80002, 0x0) (async)
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
unshare(0x400) (async)
unshare(0x400)
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSMRRU(r12, 0x4004743b, 0x0) (async)
ioctl$PPPIOCSMRRU(r12, 0x4004743b, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c00000002060500000000008ec006fef7e398600c00078008000840000000c9050001000600000005000100070000000900020073797a30000000004800078040000037c40c00028008000140ac1e0001060005404e20000008001240000000c208001740000000ff050014004000000005000700000000000800094000000002befaa4a23002ddf987d122139266890500010007000000"], 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c00000002060500000000008ec006fef7e398600c00078008000840000000c9050001000600000005000100070000000900020073797a30000000004800078040000037c40c00028008000140ac1e0001060005404e20000008001240000000c208001740000000ff050014004000000005000700000000000800094000000002befaa4a23002ddf987d122139266890500010007000000"], 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)

9m15.155536088s ago: executing program 1 (id=777):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xe, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfe000000}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e4}, 0x20000010)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

9m13.564572809s ago: executing program 3 (id=778):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202005000300000028000008000300", @ANYRES32=r4, @ANYBLOB="05001b00b3af0c82f8b2f4231f7d7b2e123106000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002010104000000000000000002000000100001800c000280050001002f0000003a001980080001008c0800002ef42bd70495ed0843df89ba5e1a02667ecb0f63ce130028c0a4da3516a01961098e278b56aebf483449fcf02ac5a81f655c1cd5b2dee864a730594ac288847f61b7bd46cc75e7eb73bfad69cf34f7d2e4a91dbeecf634596f5116c7d34fbce788c294513719e020ecd7a40f380704aa90d94ddcf778eb6ec8e92300cb9cd791d98359f82f21f423bba0a010008beefbc3bff1e8e1ae2b05c815e136fa04ecf36d50388bbce09995b301d9136e6cb83bcc82069c"], 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x21, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0)
recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r10=>0x0})
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000002c0)={r10, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xd, 0xfff1}, {0x4, 0xe}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

9m11.915320747s ago: executing program 4 (id=779):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x573b, 0x4)
sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES16, @ANYBLOB="f8fcffffffffffffff0000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r4, &(0x7f0000001000)=[{&(0x7f0000000ac0)=""/223, 0xdf}, {0x0}], 0x2, 0x4, 0xfffffffe)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x60000001}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv4_newaddr={0x4c, 0x14, 0x200, 0x70bd26, 0x25dfdbfd, {0x2, 0x78, 0x40, 0x64}, [@IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x0, 0xe48, 0x4}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x15}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4008, r1}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-010d \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x23, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xdf2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6ba}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @generic={0x12, 0x1, 0x1, 0x5, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @alu={0x4, 0x0, 0x4, 0x7, 0x2, 0xfffffffffffffe9c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x5c, &(0x7f00000002c0)=""/92, 0x40f00, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xc, 0xffffffff, 0xffffff00}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r6, r7], 0x0, 0x10, 0x8}, 0x94)

8m54.83701939s ago: executing program 32 (id=766):
syz_emit_ethernet(0x85, &(0x7f0000000300)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x77, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x3, 0x0, @local, {0x15, 0x4, 0x0, 0x9, 0x3, 0x65, 0x7, 0x9, 0x4, 0x3ff, @broadcast, @empty, {[@timestamp={0x44, 0x10, 0x67, 0x0, 0x7, [0x9, 0x9c0, 0x991]}, @cipso={0x86, 0x2b, 0x1, [{0x7, 0x9, "87c90cbb9d94be"}, {0x5, 0x9, "4b66ea258c98c7"}, {0x5, 0xd, "180cac1f76bc2b24b749cd"}, {0x6, 0x6, "9e5a4e41"}]}, @end, @end]}}, "7e96e9cbb8dcf7"}}}}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @empty, 0x3d}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x10000006, 0x4)
socket(0x40000000015, 0x5, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket(0x28, 0x5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x2000c814)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000980))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x400)
socket(0x15, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
socket(0x8, 0x4, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000001c0)=[{&(0x7f00000005c0)="afc356bf9b", 0x5}], 0x1, 0x2)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))

8m38.052864918s ago: executing program 33 (id=777):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xe, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfe000000}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e4}, 0x20000010)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

8m28.052216571s ago: executing program 34 (id=776):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x3978, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x3978, 0x4)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10)
sendto$inet(r1, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x2b62}], 0x1, 0x40012021, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8)
sendmsg$inet_sctp(r4, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x18, 0x200008c0}, 0x6008045)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r9=>0x0})
r10 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004500)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x11, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x9, 0xfffffffc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff7, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8880}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004500)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x11, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x9, 0xfffffffc}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff7, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8880}, 0x0)
socket(0x10, 0x80002, 0x0) (async)
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$nl_route_sched(r11, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
unshare(0x400) (async)
unshare(0x400)
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSMRRU(r12, 0x4004743b, 0x0) (async)
ioctl$PPPIOCSMRRU(r12, 0x4004743b, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c00000002060500000000008ec006fef7e398600c00078008000840000000c9050001000600000005000100070000000900020073797a30000000004800078040000037c40c00028008000140ac1e0001060005404e20000008001240000000c208001740000000ff050014004000000005000700000000000800094000000002befaa4a23002ddf987d122139266890500010007000000"], 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c00000002060500000000008ec006fef7e398600c00078008000840000000c9050001000600000005000100070000000900020073797a30000000004800078040000037c40c00028008000140ac1e0001060005404e20000008001240000000c208001740000000ff050014004000000005000700000000000800094000000002befaa4a23002ddf987d122139266890500010007000000"], 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)

7m37.493941133s ago: executing program 35 (id=778):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202005000300000028000008000300", @ANYRES32=r4, @ANYBLOB="05001b00b3af0c82f8b2f4231f7d7b2e123106000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000002010104000000000000000002000000100001800c000280050001002f0000003a001980080001008c0800002ef42bd70495ed0843df89ba5e1a02667ecb0f63ce130028c0a4da3516a01961098e278b56aebf483449fcf02ac5a81f655c1cd5b2dee864a730594ac288847f61b7bd46cc75e7eb73bfad69cf34f7d2e4a91dbeecf634596f5116c7d34fbce788c294513719e020ecd7a40f380704aa90d94ddcf778eb6ec8e92300cb9cd791d98359f82f21f423bba0a010008beefbc3bff1e8e1ae2b05c815e136fa04ecf36d50388bbce09995b301d9136e6cb83bcc82069c"], 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x21, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r7, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0)
recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r10=>0x0})
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000002c0)={r10, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xd, 0xfff1}, {0x4, 0xe}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

7m3.087804265s ago: executing program 36 (id=779):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x573b, 0x4)
sendmmsg$unix(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES16, @ANYBLOB="f8fcffffffffffffff0000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r4, &(0x7f0000001000)=[{&(0x7f0000000ac0)=""/223, 0xdf}, {0x0}], 0x2, 0x4, 0xfffffffe)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x60000001}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv4_newaddr={0x4c, 0x14, 0x200, 0x70bd26, 0x25dfdbfd, {0x2, 0x78, 0x40, 0x64}, [@IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x0, 0xe48, 0x4}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x15}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4008, r1}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-010d \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x23, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xdf2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6ba}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @generic={0x12, 0x1, 0x1, 0x5, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @alu={0x4, 0x0, 0x4, 0x7, 0x2, 0xfffffffffffffe9c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x5c, &(0x7f00000002c0)=""/92, 0x40f00, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xc, 0xffffffff, 0xffffff00}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r6, r7], 0x0, 0x10, 0x8}, 0x94)

5m41.244701896s ago: executing program 9 (id=784):
r0 = socket(0x2, 0x80805, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001840)={{<r1=>0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x111402, &(0x7f0000000180)={@align=0x10000004, {0x9, 0xb97, 0x3, 0x6}}, 0xff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000002c0)=0x7fffffff}, 0x6, &(0x7f0000001780)=[{0x3, 0x9, &(0x7f0000000240)='\xb3!*$\x00', &(0x7f0000000300)="ab43390a9841fb5376b8c2958a8be16a287108153af0a0bb438ec01778af677b5e53e3bedbc51ca1b5a654552e86e63606762daf0109185f32688d99f0f0e62061a4c5ce7d88dfee968a47db0b5892cff043430d59b99c1b47d6cce1d0677ff89e5dc157064a62e74f343db5c2420c73088b910335f5b3e288177ec93462678cc68ccb1dab155b00e5f94a4c2b7de062f6ef2582d28d16e751382eeac1f164162ee7afe26bd543768443198ca56ef9553395c4a2602990c706a1461969cb4943dc9be9b38fe7a60be90883e997dc9b9f465f0746ef539027b541a6162c4f8b2fea62993c2c46f20802c183ca5ce80296e7375464e0", 0xf5, 0x2}, {0x3, 0x2, &(0x7f0000000400)='[C\x00', &(0x7f0000000440)="446039ec2082c5b79c13e8735337b4485e4a83a601aee68ef522ddc7fd426813fb89f25b084703c8a740d48636477e224c3b882d9bb8311c042b02b7ec8d7e200dc0aec32fce000dce14a21a98684509f0b7", 0x52, 0x18}, {0x2, 0x9, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="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", 0x1000, 0x38}, {0x2, 0x40000, &(0x7f0000001500)='\x00', &(0x7f0000001540)="a239fa8e45dc5ee0d13541892754bcea507d84c02adcb6b7a6a501fb4211098aad28dcffb53eb544e649bf10cfba5338bd8cdcce268ab0e0a661d9412992b112db1f7cddb66d25ac7eda92847b98291ce5d791fd02e49672fdaca627baafb35c431a31d12099491439654a3d4193349b723d6aaf873e22767f06b821ebaa14106bab7db9e0cc45f5ad34f7c11aff96574ba227bafc755c1721fbbdde8295", 0x9e, 0x2e}, {0x3, 0x818b, &(0x7f0000001600)='{:{\x00', &(0x7f0000001640)="2ba628e2f8a84b211502dab122e3a3288a82bf656cd6cdbccf", 0x19, 0x2a}, {0x0, 0xd6, &(0x7f0000001680)='@\x00', &(0x7f0000001a40)="307f04a84ea791cd62f9f27bf3ef1c0b07acd824c807c1b1224a3c089bcbae71da2b11218a4773499523e0a014fc1a61f3577fd83235760db8f9410601e05e671644290867c6744abc4a9c7c7d93753bf35a8bdfeac9cdb79335b36616374f08cf5fd7b1aaf411bb81386ba6b7403de8f8de6067c871deca22fb51d12933f9d2088a7cbbda164a36f4699d82622fb8cfbd8edc98871c1d29c08720cf70c6367a52a87014e8343d51592fb2", 0xab, 0x4e}]})
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.time\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r2, 0xdb97e000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000018c0), r0)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000019c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)=ANY=[@ANYBLOB="02000002", @ANYRES16=r3, @ANYBLOB="000427bd7000fcdbdf2504000000140004000600000009000000f8ffffff05000000050006005300000005000500000000000500060005000000050006000800000014000100ff020000000000000000000000000001180004000500000000000000090000000100008092000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000005}, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7901})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettfilter={0x54, 0x2e, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xa, 0xfff4}, {0x0, 0x7}, {0x9, 0xa}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x245}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
r11 = socket$kcm(0x11, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r13=>0x0})
setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
openat$cgroup_procs(r4, &(0x7f0000001a00)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)

5m4.187537191s ago: executing program 6 (id=781):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94)

3m11.248009751s ago: executing program 7 (id=782):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ffffff1f850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0)=r4, 0x4) (async)
sendmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r7, 0x29, 0x43, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0xaf4, 0x0) (async)
r9 = socket$kcm(0xa, 0x2, 0x0)
r10 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x16, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e26, 0x3, 'fo\x00', 0x8, 0x3, 0x6f}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'rr\x00', 0x15, 0x8, 0x7a}, {@remote, 0x4e20, 0x0, 0x6, 0x1, 0xfffffffc}}, 0x44) (async)
sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xe0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000e05f50300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r10)
r11 = socket(0x400000000010, 0x3, 0x0) (async)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8d, 0xd4, 0x8, 0x5, 0x101, 0x7, 0x8, 0x8001, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4050}, 0x10) (async)
socket$inet6(0xa, 0x1, 0x100) (async)
close(0x3)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x1, 0x71bd2c, 0x25dedbff, {0x0, 0x0, 0x0, r13, {0xfff3, 0x7}, {0x9, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

0s ago: executing program 7 (id=782):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ffffff1f850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0)=r4, 0x4) (async)
sendmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r7, 0x29, 0x43, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0xaf4, 0x0) (async)
r9 = socket$kcm(0xa, 0x2, 0x0)
r10 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x16, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e26, 0x3, 'fo\x00', 0x8, 0x3, 0x6f}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'rr\x00', 0x15, 0x8, 0x7a}, {@remote, 0x4e20, 0x0, 0x6, 0x1, 0xfffffffc}}, 0x44) (async)
sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xe0, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000e05f50300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r10)
r11 = socket(0x400000000010, 0x3, 0x0) (async)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8d, 0xd4, 0x8, 0x5, 0x101, 0x7, 0x8, 0x8001, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4050}, 0x10) (async)
socket$inet6(0xa, 0x1, 0x100) (async)
close(0x3)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x1, 0x71bd2c, 0x25dedbff, {0x0, 0x0, 0x0, r13, {0xfff3, 0x7}, {0x9, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts.
[   74.275735][ T5608] cgroup: Unknown subsys name 'net'
[   74.389976][ T5608] cgroup: Unknown subsys name 'cpuset'
[   74.399126][ T5608] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.744412][ T5608] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.305486][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.316142][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.325686][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.335771][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.351314][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.359739][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.368109][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.379548][   T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.390545][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.399339][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.410217][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.423926][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.434057][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   79.434524][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.449628][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.449964][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.458529][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   79.472712][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.482013][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.490004][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.491478][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.500226][ T4939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   79.512595][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.531475][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   79.543133][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.228842][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.236089][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.244050][ T5624] bridge_slave_0: entered allmulticast mode
[   81.251179][ T5624] bridge_slave_0: entered promiscuous mode
[   81.259639][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.266992][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.274151][ T5620] bridge_slave_0: entered allmulticast mode
[   81.281467][ T5620] bridge_slave_0: entered promiscuous mode
[   81.313026][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.320285][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.327536][ T5624] bridge_slave_1: entered allmulticast mode
[   81.334428][ T5624] bridge_slave_1: entered promiscuous mode
[   81.341930][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.349064][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.356192][ T5620] bridge_slave_1: entered allmulticast mode
[   81.363515][ T5620] bridge_slave_1: entered promiscuous mode
[   81.447502][ T5633] Bluetooth: hci0: command tx timeout
[   81.450713][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.460890][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.468163][ T5630] bridge_slave_0: entered allmulticast mode
[   81.475133][ T5630] bridge_slave_0: entered promiscuous mode
[   81.490696][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.502805][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.521928][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.529445][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.536616][ T5633] Bluetooth: hci1: command tx timeout
[   81.537170][ T5630] bridge_slave_1: entered allmulticast mode
[   81.549117][ T5630] bridge_slave_1: entered promiscuous mode
[   81.565490][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.585054][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.606679][ T5633] Bluetooth: hci2: command tx timeout
[   81.616980][ T5633] Bluetooth: hci4: command tx timeout
[   81.617157][ T5632] Bluetooth: hci3: command tx timeout
[   81.650300][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.657660][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.664943][ T5635] bridge_slave_0: entered allmulticast mode
[   81.672255][ T5635] bridge_slave_0: entered promiscuous mode
[   81.688859][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.696044][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.703718][ T5627] bridge_slave_0: entered allmulticast mode
[   81.711273][ T5627] bridge_slave_0: entered promiscuous mode
[   81.720701][ T5624] team0: Port device team_slave_0 added
[   81.734963][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.742193][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.749799][ T5635] bridge_slave_1: entered allmulticast mode
[   81.757082][ T5635] bridge_slave_1: entered promiscuous mode
[   81.765982][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.775711][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.783000][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.790218][ T5627] bridge_slave_1: entered allmulticast mode
[   81.797392][ T5627] bridge_slave_1: entered promiscuous mode
[   81.805653][ T5624] team0: Port device team_slave_1 added
[   81.813329][ T5620] team0: Port device team_slave_0 added
[   81.821795][ T5620] team0: Port device team_slave_1 added
[   81.849568][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.932808][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.940035][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.966151][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.980103][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.991177][ T5630] team0: Port device team_slave_0 added
[   81.999695][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.009747][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.017086][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.043271][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.056066][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.063109][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.090580][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.104535][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.111555][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.138578][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.162755][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.173734][ T5630] team0: Port device team_slave_1 added
[   82.181665][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.254089][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.261320][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.287662][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.309601][ T5627] team0: Port device team_slave_0 added
[   82.317861][ T5635] team0: Port device team_slave_0 added
[   82.333026][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.340251][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.366349][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.399223][ T5620] hsr_slave_0: entered promiscuous mode
[   82.405599][ T5620] hsr_slave_1: entered promiscuous mode
[   82.414874][ T5627] team0: Port device team_slave_1 added
[   82.422332][ T5635] team0: Port device team_slave_1 added
[   82.477060][ T5624] hsr_slave_0: entered promiscuous mode
[   82.483348][ T5624] hsr_slave_1: entered promiscuous mode
[   82.489646][ T5624] debugfs: 'hsr0' already exists in 'hsr'
[   82.495938][ T5624] Cannot create hsr debugfs directory
[   82.530885][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.538009][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.564005][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.599941][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.607093][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.633086][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.644954][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.652116][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.678295][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.699058][ T5630] hsr_slave_0: entered promiscuous mode
[   82.705320][ T5630] hsr_slave_1: entered promiscuous mode
[   82.711609][ T5630] debugfs: 'hsr0' already exists in 'hsr'
[   82.717375][ T5630] Cannot create hsr debugfs directory
[   82.732658][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.739788][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.765751][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.894134][ T5635] hsr_slave_0: entered promiscuous mode
[   82.900490][ T5635] hsr_slave_1: entered promiscuous mode
[   82.906723][ T5635] debugfs: 'hsr0' already exists in 'hsr'
[   82.912492][ T5635] Cannot create hsr debugfs directory
[   82.938117][ T5627] hsr_slave_0: entered promiscuous mode
[   82.944337][ T5627] hsr_slave_1: entered promiscuous mode
[   82.951078][ T5627] debugfs: 'hsr0' already exists in 'hsr'
[   82.956851][ T5627] Cannot create hsr debugfs directory
[   83.360316][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.378405][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.389433][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.402073][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.410059][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.419540][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.427777][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.437301][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.507514][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.520793][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.529547][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.536604][ T5632] Bluetooth: hci0: command tx timeout
[   83.544487][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.552578][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.562159][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.573835][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.585971][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.607704][ T5632] Bluetooth: hci1: command tx timeout
[   83.682784][ T5635] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.686677][ T5632] Bluetooth: hci3: command tx timeout
[   83.690615][ T4939] Bluetooth: hci2: command tx timeout
[   83.701620][ T5633] Bluetooth: hci4: command tx timeout
[   83.710417][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.718735][ T5635] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.727780][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.743216][ T5635] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.752618][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.761670][ T5635] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.771199][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   83.844632][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.883947][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.894397][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   83.902467][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.913432][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   83.933830][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.943020][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   83.951571][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.962330][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.003147][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   84.043871][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.053965][  T113] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.061597][  T113] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.104432][  T113] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.111572][  T113] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.134739][ T5627] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   84.145034][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   84.154293][ T5627] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   84.163944][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   84.185418][ T5627] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   84.194489][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   84.202754][ T5627] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   84.211925][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   84.227196][ T5624] 8021q: adding VLAN 0 to HW filter on device team0
[   84.259352][  T113] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.266940][  T113] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.308088][  T113] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.315214][  T113] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.362531][ T5620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.424537][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.467010][ T5624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.535457][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.550345][ T5635] 8021q: adding VLAN 0 to HW filter on device team0
[   84.580491][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.587683][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.621622][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.628920][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.674019][ T5630] 8021q: adding VLAN 0 to HW filter on device team0
[   84.705554][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.712767][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.741979][  T113] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.749185][  T113] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.780646][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.866822][ T5627] 8021q: adding VLAN 0 to HW filter on device team0
[   84.905719][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.912938][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.979947][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.987145][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.119523][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.400815][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.426313][ T5620] veth0_vlan: entered promiscuous mode
[   85.493647][ T5620] veth1_vlan: entered promiscuous mode
[   85.606978][ T5633] Bluetooth: hci0: command tx timeout
[   85.660305][ T5624] veth0_vlan: entered promiscuous mode
[   85.687297][ T5633] Bluetooth: hci1: command tx timeout
[   85.730295][ T5620] veth0_macvtap: entered promiscuous mode
[   85.750478][ T5624] veth1_vlan: entered promiscuous mode
[   85.767536][ T5633] Bluetooth: hci4: command tx timeout
[   85.773438][ T4939] Bluetooth: hci2: command tx timeout
[   85.779290][ T5632] Bluetooth: hci3: command tx timeout
[   85.780608][ T5620] veth1_macvtap: entered promiscuous mode
[   85.838714][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.872361][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.935820][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.957757][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.990636][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.013603][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.040918][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.051998][ T5624] veth0_macvtap: entered promiscuous mode
[   86.091727][ T5624] veth1_macvtap: entered promiscuous mode
[   86.163288][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.182419][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.209709][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.293538][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.327222][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.342161][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.364873][ T5635] veth0_vlan: entered promiscuous mode
[   86.376393][   T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.385916][   T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.411554][   T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.421515][   T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.456820][ T5635] veth1_vlan: entered promiscuous mode
[   86.473591][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.505289][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.518027][ T5630] veth0_vlan: entered promiscuous mode
[   86.601396][ T5630] veth1_vlan: entered promiscuous mode
[   86.639263][ T5620] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   86.647548][ T5635] veth0_macvtap: entered promiscuous mode
[   86.680477][ T5635] veth1_macvtap: entered promiscuous mode
[   86.691787][  T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.717605][  T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.815000][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.819649][   T54] cfg80211: failed to load regulatory.db
[   86.829556][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.859411][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.867293][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   86.871528][ T5630] veth0_macvtap: entered promiscuous mode
[   86.906383][ T5817] Zero length message leads to an empty skb
[   86.915828][ T5630] veth1_macvtap: entered promiscuous mode
[   86.942645][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.961503][ T5627] veth0_vlan: entered promiscuous mode
[   86.995441][   T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.006311][   T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.030434][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.046072][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.068335][   T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.111326][ T5627] veth1_vlan: entered promiscuous mode
[   87.122463][   T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.144706][ T1116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.155488][ T1116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.214823][ T1116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.231959][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   87.237098][ T1116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.379584][ T5627] veth0_macvtap: entered promiscuous mode
[   87.394991][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.431479][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.480247][ T5627] veth1_macvtap: entered promiscuous mode
[   87.555406][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.582922][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.630600][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.636138][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.664129][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.687122][ T4939] Bluetooth: hci0: command tx timeout
[   87.722361][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.768743][ T4939] Bluetooth: hci1: command tx timeout
[   87.771023][ T5831] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET)
[   87.794187][ T3348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.805587][ T3348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.844933][   T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.846910][ T5632] Bluetooth: hci3: command tx timeout
[   87.860669][ T5633] Bluetooth: hci4: command tx timeout
[   87.866147][ T4939] Bluetooth: hci2: command tx timeout
[   87.872196][   T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.920033][   T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.934136][   T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.465873][  T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.499713][  T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.742225][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.787581][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.646682][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.656715][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.910982][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.935646][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.198000][   T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.222633][   T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.309554][   T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.347710][   T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.413100][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'.
[   90.445982][ T5914] ksmbd: Daemon and kernel module version mismatch. ksmbd: 181, kernel module: 1. User-space ksmbd should terminate.
[   90.710811][ T5921] netlink: 156 bytes leftover after parsing attributes in process `syz.4.27'.
[   90.753435][ T5926] netlink: 'syz.3.28': attribute type 2 has an invalid length.
[   90.781583][ T5926] 
: entered promiscuous mode
[   90.858271][ T5932] netlink: 244 bytes leftover after parsing attributes in process `syz.4.27'.
[   91.055341][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'.
[   91.189663][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'.
[   91.418535][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   91.502741][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'.
[   91.518432][ T5930] dvmrp0: entered allmulticast mode
[   91.742730][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'.
[   91.969808][ T3348] dvmrp0: left allmulticast mode
[   93.652159][ T5920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   93.827199][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'.
[   94.105295][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.116416][ T5982] veth3: entered allmulticast mode
[   94.124157][ T5988] netlink: 'syz.3.40': attribute type 6 has an invalid length.
[   94.210083][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.328806][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'.
[   94.337119][ T6011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.46'.
[   94.481511][ T6013] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20002
[   94.701783][ T6026] netlink: 'syz.0.51': attribute type 26 has an invalid length.
[   94.790736][ T6034] syzkaller0: entered promiscuous mode
[   94.809333][ T6034] syzkaller0: entered allmulticast mode
[   94.955284][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'.
[   94.955336][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'.
[   95.187549][ T6040] syz.3.52 (6040) used greatest stack depth: 18312 bytes left
[   95.269795][ T6052] netlink: 'syz.3.56': attribute type 1 has an invalid length.
[   95.468984][ T6061] Illegal XDP return value 4294967294 on prog  (id 45) dev syz_tun, expect packet loss!
[   95.645620][ T6071] netlink: 'syz.2.60': attribute type 13 has an invalid length.
[   96.108740][ T6099] dvmrp0: entered allmulticast mode
[   96.512808][   T30] audit: type=1800 audit(1785103405.462:2): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.66" name="blkio.bfq.time_recursive" dev="tmpfs" ino=101 res=0 errno=0
[   96.563749][ T6106] netlink: 'syz.3.67': attribute type 10 has an invalid length.
[   96.581016][ T6095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.65'.
[   96.950255][ T6125] xt_hashlimit: size too large, truncated to 1048576
[   97.016581][ T6117] netlink: 'syz.0.68': attribute type 3 has an invalid length.
[   97.042005][ T6131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.72'.
[   97.287933][ T6129] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   97.755062][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'.
[   97.786095][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'.
[   97.847862][ T6157] bond1: Removing last arp target with arp_interval on
[   97.895171][ T6169] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[   97.974459][ T6169] bridge_slave_1: default FDB implementation only supports local addresses
[   98.053819][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'.
[   98.142785][ T6179] netlink: 'syz.4.86': attribute type 8 has an invalid length.
[   98.172099][ T6181] netlink: 'syz.2.85': attribute type 1 has an invalid length.
[   98.180601][ T6179] netlink: 'syz.4.86': attribute type 4 has an invalid length.
[   98.199234][ T6179] netlink: 'syz.4.86': attribute type 4 has an invalid length.
[   98.259406][ T6184] Bluetooth: MGMT ver 1.23
[   98.628859][ T6201] tipc: Started in network mode
[   98.639035][ T6201] tipc: Node identity 06f1b049791, cluster identity 4711
[   98.654572][ T6201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.670888][ T6201] syzkaller0: entered promiscuous mode
[   98.687829][ T6201] syzkaller0: entered allmulticast mode
[   98.766285][ T6201] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   98.823879][ T6200] tipc: Resetting bearer <eth:syzkaller0>
[   98.846301][ T6200] tipc: Disabling bearer <eth:syzkaller0>
[   98.942306][ T6219] __nla_validate_parse: 1 callbacks suppressed
[   98.942325][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'.
[   99.079224][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'.
[   99.493120][ T6241] netlink: 48 bytes leftover after parsing attributes in process `syz.4.102'.
[  100.044379][ T6285] ip6erspan0: entered allmulticast mode
[  100.060629][ T6297] sock: sock_timestamping_bind_phc: sock not bind to device
[  100.329782][ T5632] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[  100.337020][ T4939] Bluetooth: hci1: command 0x0c24 tx timeout
[  100.389918][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.118'.
[  100.702012][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'.
[  100.711527][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'.
[  100.756387][ T6329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'.
[  100.895263][ T6338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.123'.
[  100.954716][ T6338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.123'.
[  101.004334][ T6338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.123'.
[  101.162385][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.170200][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.340136][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.371668][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.731538][ T1169] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.781913][ T1169] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.837585][ T1169] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.912517][ T1169] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.124851][ T6400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.211811][ T6400] xt_cgroup: invalid path, errno=-2
[  103.251307][ T6442] netlink: 'syz.2.145': attribute type 1 has an invalid length.
[  103.271427][ T6442] netlink: get zone limit has 4 unknown bytes
[  103.474034][  T113] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.505190][  T113] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.529221][  T113] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.759510][  T113] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.250564][ T6498] __nla_validate_parse: 153 callbacks suppressed
[  104.250587][ T6498] netlink: 56 bytes leftover after parsing attributes in process `syz.3.152'.
[  104.313052][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'.
[  104.397713][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'.
[  104.564478][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'.
[  107.281232][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'.
[  107.304480][ T6601] netlink: 128 bytes leftover after parsing attributes in process `syz.4.178'.
[  107.324126][ T6598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.176'.
[  107.326042][ T6601] IPVS: set_ctl: invalid protocol: 59 100.1.1.5:20002
[  107.355248][ T6601] netlink: 84 bytes leftover after parsing attributes in process `syz.4.178'.
[  107.758469][ T6614] sctp: [Deprecated]: syz.4.183 (pid 6614) Use of int in maxseg socket option.
[  107.758469][ T6614] Use struct sctp_assoc_value instead
[  108.564474][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv1
[  108.799716][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'.
[  108.839047][ T6664] bridge0: port 3(vlan2) entered blocking state
[  108.854549][ T6664] bridge0: port 3(vlan2) entered disabled state
[  108.872906][ T6664] vlan2: entered allmulticast mode
[  108.883659][ T6664] geneve0: entered allmulticast mode
[  108.903293][ T6664] vlan2: entered promiscuous mode
[  108.915542][ T6664] geneve0: entered promiscuous mode
[  108.949858][ T6665] warning: `syz.3.194' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  109.605499][ T6698] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  109.640252][ T6698] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  110.566265][ T6740] netlink: 14 bytes leftover after parsing attributes in process `syz.2.214'.
[  110.706857][ T6745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.215'.
[  110.911644][ T6750] netlink: 'syz.1.218': attribute type 8 has an invalid length.
[  111.008352][ T6751] netlink: 'syz.2.217': attribute type 22 has an invalid length.
[  111.074547][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'.
[  111.125844][ T6751] bond0: option ad_select: unable to set because the bond device is up
[  111.274293][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'.
[  111.638491][ T6784] netlink: 320 bytes leftover after parsing attributes in process `syz.4.225'.
[  111.684664][ T6784] netlink: 320 bytes leftover after parsing attributes in process `syz.4.225'.
[  111.704171][ T6783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.224'.
[  111.705108][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.224'.
[  111.998083][ T6801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'.
[  112.048105][ T6800] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20000
[  112.070264][ T6809] netlink: 56 bytes leftover after parsing attributes in process `syz.0.227'.
[  112.297310][ T6819] smc: net device wlan0 applied user defined pnetid SYZ0
[  112.956974][ T6836] netlink: 'syz.0.235': attribute type 1 has an invalid length.
[  112.985247][ T6836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.025369][ T6836] netlink: 'syz.0.235': attribute type 21 has an invalid length.
[  113.045312][ T6836] IPv6: NLM_F_CREATE should be specified when creating new route
[  113.066012][ T6836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  113.074409][ T6836] IPv6: NLM_F_CREATE should be set when creating new route
[  113.081801][ T6836] IPv6: NLM_F_CREATE should be set when creating new route
[  113.089088][ T6836] IPv6: NLM_F_CREATE should be set when creating new route
[  113.503940][ T6861] netlink: 'syz.2.239': attribute type 10 has an invalid length.
[  113.582163][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.633554][ T6861] team0: Port device bond0 added
[  113.748928][ T6872] netlink: 'syz.0.245': attribute type 9 has an invalid length.
[  113.966129][ T6876] syzkaller0: entered promiscuous mode
[  113.985675][ T6876] syzkaller0: entered allmulticast mode
[  114.331048][ T6887] x_tables: duplicate underflow at hook 1
[  114.559968][ T6897] tipc: Can't bind to reserved service type 0
[  114.628826][ T6893] smc: removing net device wlan0 with user defined pnetid SYZ0
[  114.918921][ T6917] netlink: 'syz.0.258': attribute type 4 has an invalid length.
[  114.972198][ T6924] netlink: 'syz.0.258': attribute type 4 has an invalid length.
[  115.743675][ T6952] bridge_slave_0: left allmulticast mode
[  115.778910][ T6952] bridge_slave_0: left promiscuous mode
[  115.813260][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.912665][ T6952] bridge_slave_1: left allmulticast mode
[  115.954781][ T6952] bridge_slave_1: left promiscuous mode
[  115.985913][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.052105][ T6952] bond0: (slave bond_slave_0): Releasing backup interface
[  116.120238][ T6952] bond0: (slave bond_slave_1): Releasing backup interface
[  116.188109][ T6952] team0: Port device team_slave_0 removed
[  116.224419][ T6952] team0: Port device team_slave_1 removed
[  116.259079][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.294037][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.340557][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.366178][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.403998][ T6952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  116.480013][ T6997] netlink: 'syz.1.271': attribute type 1 has an invalid length.
[  116.497871][ T6958] team0: Mode changed to "loadbalance"
[  116.504647][ T6997] __nla_validate_parse: 7 callbacks suppressed
[  116.504664][ T6997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'.
[  116.933470][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'.
[  117.022103][ T7024] sctp: [Deprecated]: syz.3.277 (pid 7024) Use of int in max_burst socket option.
[  117.022103][ T7024] Use struct sctp_assoc_value instead
[  117.211995][ T7030] netlink: 32 bytes leftover after parsing attributes in process `syz.0.279'.
[  117.352178][ T7037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  117.413402][ T7041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.282'.
[  117.517579][ T7048] syzkaller0: entered promiscuous mode
[  117.537196][ T7048] syzkaller0: entered allmulticast mode
[  117.620355][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'.
[  117.646390][ T7046] syzkaller0: entered promiscuous mode
[  117.668272][ T7046] syzkaller0: entered allmulticast mode
[  117.914088][ T7066] netlink: 192 bytes leftover after parsing attributes in process `syz.2.287'.
[  117.934763][ T7066] netlink: 'syz.2.287': attribute type 1 has an invalid length.
[  117.948867][ T7066] netlink: 100 bytes leftover after parsing attributes in process `syz.2.287'.
[  117.966239][ T7066] netlink: 100 bytes leftover after parsing attributes in process `syz.2.287'.
[  118.462600][ T7101] netlink: 'syz.2.292': attribute type 23 has an invalid length.
[  118.518490][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'.
[  118.530190][ T7102] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  118.602852][ T7107] netlink: 'syz.2.292': attribute type 1 has an invalid length.
[  120.511254][ T7079] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  120.868813][ T7161] geneve2: entered promiscuous mode
[  120.909535][ T7157] syzkaller0: entered promiscuous mode
[  120.925175][ T7157] syzkaller0: entered allmulticast mode
[  120.941563][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'.
[  121.050584][ T7170] x_tables: duplicate entry at hook 1
[  121.569801][ T7211] __nla_validate_parse: 2 callbacks suppressed
[  121.569819][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'.
[  121.729907][ T7215] trusted_key: syz.0.308 sent an empty control message without MSG_MORE.
[  121.924716][ T7200] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.952386][ T7200] 8021q: adding VLAN 0 to HW filter on device bond2
[  122.070268][ T6374] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  122.350610][ T6374] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  122.576989][ T7232] netlink: 9 bytes leftover after parsing attributes in process `syz.1.317'.
[  122.696721][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'.
[  122.749391][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'.
[  122.791396][ T7237] netlink: 'syz.2.316': attribute type 11 has an invalid length.
[  122.807014][ T1116] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  122.858607][ T7237] netlink: 'syz.2.316': attribute type 13 has an invalid length.
[  123.041208][ T7253] sock: sock_set_timeout: `syz.0.323' (pid 7253) tries to set negative timeout
[  123.360626][ T7261] bridge1: entered promiscuous mode
[  123.390493][ T7261] bridge1: entered allmulticast mode
[  123.628357][ T7272] syzkaller0: entered promiscuous mode
[  123.642134][ T7272] syzkaller0: entered allmulticast mode
[  123.689190][ T7273] bridge2: entered promiscuous mode
[  123.704775][ T7273] bridge2: entered allmulticast mode
[  123.853632][ T1116] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  123.903261][ T1116] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  124.086860][   T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  124.155816][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.330'.
[  124.241419][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'.
[  124.257148][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'.
[  124.388840][ T7293] netlink: 'syz.4.334': attribute type 1 has an invalid length.
[  124.617171][ T7300] netlink: 96 bytes leftover after parsing attributes in process `syz.4.338'.
[  124.992403][ T7320] netlink: 64 bytes leftover after parsing attributes in process `syz.0.342'.
[  125.702947][ T7338] xt_l2tp: wrong L2TP version: 0
[  125.903961][ T7341] syz_tun: entered allmulticast mode
[  125.968942][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'.
[  125.993813][ T7343] bond1: entered allmulticast mode
[  126.039927][ T7341] netlink: 'syz.0.349': attribute type 9 has an invalid length.
[  126.074160][ T7341] netlink: 'syz.0.349': attribute type 6 has an invalid length.
[  126.240677][ T7341] syz_tun: left allmulticast mode
[  126.782782][ T7368] netlink: 'syz.0.357': attribute type 11 has an invalid length.
[  126.856614][ T7372] netlink: 'syz.0.357': attribute type 11 has an invalid length.
[  127.421083][ T7392] __nla_validate_parse: 4 callbacks suppressed
[  127.421101][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'.
[  127.588278][ T7387] netlink: 48 bytes leftover after parsing attributes in process `syz.4.361'.
[  127.845231][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'.
[  127.878190][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'.
[  127.905840][ T7405] netlink: 'syz.4.365': attribute type 6 has an invalid length.
[  127.926745][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  127.997896][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'.
[  127.998581][ T7411] bond0: invalid NS target ff00:0:6e67:2028:6465:7074:6820:3029 specified for addition
[  128.046871][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'.
[  128.105935][ T7405] netlink: 'syz.4.365': attribute type 6 has an invalid length.
[  128.113917][ T7411] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[  128.126880][  T113] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.140773][  T113] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.142829][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.364'.
[  128.151562][ T7414] bond0: Caught tx_queue_len zero misconfig
[  128.396700][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.432023][ T7425] 8021q: adding VLAN 0 to HW filter on device team0
[  128.456403][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.552706][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.570501][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.592666][ T7425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.604431][ T7425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.622900][ T7425] veth1_vlan: left promiscuous mode
[  128.629463][ T7425] veth0_vlan: left promiscuous mode
[  128.635990][ T7425] veth0_vlan: entered promiscuous mode
[  128.644463][ T7425] veth1_vlan: entered promiscuous mode
[  128.654686][ T7425] veth1_macvtap: left promiscuous mode
[  128.661480][ T7425] veth0_macvtap: left promiscuous mode
[  128.668335][ T7425] veth0_macvtap: entered promiscuous mode
[  128.675390][ T7425] veth1_macvtap: entered promiscuous mode
[  128.685838][ T7425] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  128.694293][ T7425] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  128.702672][ T7425] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  128.711166][ T7425] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  128.723612][ T7425] A link change request failed with some changes committed already. Interface netpci0 may have been left with an inconsistent configuration, please check.
[  128.739459][ T3348] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.749520][ T3348] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.774572][  T113] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.781833][  T113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.790784][  T113] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.797918][  T113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.854042][ T3348] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.886083][ T3348] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.962872][ T3348] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.022147][ T3348] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.061685][ T7450] netlink: 36 bytes leftover after parsing attributes in process `syz.0.376'.
[  129.099538][ T7452] veth0: entered promiscuous mode
[  129.110989][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'.
[  129.150939][ T7451] veth0: left promiscuous mode
[  129.165572][ T7457] syzkaller0: entered promiscuous mode
[  129.191662][ T7457] syzkaller0: entered allmulticast mode
[  129.237643][ T7457] tipc: Started in network mode
[  129.273216][ T7457] tipc: Node identity bae50b3078ea, cluster identity 4711
[  129.291945][ T7461] Bluetooth: MGMT ver 1.23
[  129.321243][ T7457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.353592][ T7453] tipc: Resetting bearer <eth:syzkaller0>
[  129.369052][  T124] IPVS: starting estimator thread 0...
[  129.379611][ T7465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.380'.
[  129.416005][ T7453] tipc: Disabling bearer <eth:syzkaller0>
[  129.431940][ T7468] netlink: 'syz.4.380': attribute type 10 has an invalid length.
[  129.464837][ T7468] dummy0: entered promiscuous mode
[  129.467665][ T7466] IPVS: using max 32 ests per chain, 76800 per kthread
[  129.634095][ T7476] tipc: Enabled bearer <eth:batadv0>, priority 10
[  129.790771][ T7487] pim6reg1: entered promiscuous mode
[  129.796150][ T7487] pim6reg1: entered allmulticast mode
[  130.003092][ T7497] syzkaller0: tun_chr_ioctl cmd 1074025677
[  130.015701][ T7497] syzkaller0: linktype set to 0
[  130.348730][ T7513] netlink: 'syz.1.395': attribute type 21 has an invalid length.
[  130.419318][ T7513] netlink: 'syz.1.395': attribute type 21 has an invalid length.
[  130.429327][ T1169] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.458510][ T1169] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.483966][ T1169] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.508288][ T1169] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.800314][ T6354] tipc: Node number set to 3255765808
[  130.955656][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.965020][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.074423][ T7533] gretap0: entered promiscuous mode
[  131.099859][ T7533] vlan2: entered promiscuous mode
[  131.273834][ T7553] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  131.285069][ T7553] bond2 (unregistering): Released all slaves
[  131.479975][ T7565] netlink: 'syz.1.407': attribute type 1 has an invalid length.
[  131.590351][ T7570] netlink: 'syz.0.408': attribute type 4 has an invalid length.
[  131.592231][ T7571] netlink: 'syz.0.408': attribute type 4 has an invalid length.
[  131.668893][ T7574] netlink: 'syz.1.410': attribute type 1 has an invalid length.
[  131.730376][ T7577] syzkaller0: entered promiscuous mode
[  131.736088][ T7577] syzkaller0: entered allmulticast mode
[  132.776274][ T7605] __nla_validate_parse: 12 callbacks suppressed
[  132.776286][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'.
[  132.848387][  T124] IPVS: starting estimator thread 0...
[  132.854125][ T7606] IPVS: sed: FWM 3 0x00000003 - no destination available
[  132.866228][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'.
[  132.888848][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  132.946671][ T7607] IPVS: using max 36 ests per chain, 86400 per kthread
[  133.737747][ T7537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  134.236213][ T4939] Bluetooth: hci4: link tx timeout
[  134.244026][ T4939] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.270749][ T5632] Bluetooth: hci4: link tx timeout
[  134.280110][ T5632] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.288047][ T5632] Bluetooth: hci4: link tx timeout
[  134.293500][ T5632] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.303582][ T5632] Bluetooth: hci4: link tx timeout
[  134.309753][ T5632] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.317904][ T5632] Bluetooth: hci4: link tx timeout
[  134.323068][ T5632] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.554018][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'.
[  135.578634][ T7669] bond2: entered allmulticast mode
[  135.832638][ T7679] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  135.846288][ T7679] bond3 (unregistering): Released all slaves
[  135.884711][ T7680] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  136.083272][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'.
[  136.092029][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  136.328315][ T5632] Bluetooth: hci4: command 0x0406 tx timeout
[  136.574473][ T7705] netlink: 'syz.2.437': attribute type 11 has an invalid length.
[  136.680793][ T7709] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  136.702527][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.438'.
[  136.842455][ T7713] netlink: 80 bytes leftover after parsing attributes in process `syz.3.439'.
[  136.865509][ T7714] netlink: 80 bytes leftover after parsing attributes in process `syz.3.439'.
[  137.094063][ T7727] syzkaller0: entered promiscuous mode
[  137.106591][ T7727] syzkaller0: entered allmulticast mode
[  137.787313][ T7752] vlan3: entered allmulticast mode
[  137.816824][ T7752] bond0: entered allmulticast mode
[  137.829630][ T7752] bond_slave_0: entered allmulticast mode
[  137.836874][ T7752] bond_slave_1: entered allmulticast mode
[  137.893854][ T7757] Cannot find del_set index 17 as target
[  138.089673][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'.
[  138.702674][ T7794] syzkaller0: entered promiscuous mode
[  138.711638][ T7794] syzkaller0: entered allmulticast mode
[  138.751646][ T7800] veth0_macvtap: Caught tx_queue_len zero misconfig
[  138.829508][ T7805] ipip0: entered promiscuous mode
[  139.484203][ T7846] x_tables: duplicate underflow at hook 1
[  141.547056][ T7872] syzkaller0: entered promiscuous mode
[  141.569168][ T7872] syzkaller0: entered allmulticast mode
[  141.661967][ T7868] tipc: Started in network mode
[  141.680500][ T7868] tipc: Node identity 720b12ad049c, cluster identity 4711
[  141.692069][ T7868] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.903103][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'.
[  142.085174][ T7867] tipc: Resetting bearer <eth:syzkaller0>
[  142.154435][ T7867] tipc: Disabling bearer <eth:syzkaller0>
[  142.667555][ T7906] ip6tnl1: entered allmulticast mode
[  142.846863][ T7920] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  143.030428][ T7923] bond2: entered allmulticast mode
[  143.040101][ T7923] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.236601][ T7933] syzkaller1: entered promiscuous mode
[  143.255239][ T7933] syzkaller1: entered allmulticast mode
[  143.637208][ T7963] netlink: 64 bytes leftover after parsing attributes in process `syz.3.504'.
[  143.690608][ T7970] netlink: 64 bytes leftover after parsing attributes in process `syz.3.504'.
[  143.717482][ T7963] ip6gre1: entered promiscuous mode
[  143.725165][ T7971] Cannot find set identified by id 0 to match
[  143.740578][ T7963] ip6gre1: entered allmulticast mode
[  143.792233][ T7974] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  143.800882][ T7971] netlink: 'syz.4.505': attribute type 1 has an invalid length.
[  143.820191][ T7971] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.505'.
[  144.218711][ T7963] syzkaller1: entered promiscuous mode
[  144.238348][ T7963] syzkaller1: entered allmulticast mode
[  144.905398][ T7991] netlink: 179624 bytes leftover after parsing attributes in process `syz.2.509'.
[  145.316196][ T8007] netlink: 'syz.4.514': attribute type 2 has an invalid length.
[  145.368202][ T8007] netlink: 156 bytes leftover after parsing attributes in process `syz.4.514'.
[  145.805339][ T8032] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  145.947140][ T8037] netlink: 'syz.2.524': attribute type 1 has an invalid length.
[  145.991875][ T8037] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  146.026199][ T8038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.523'.
[  146.063557][ T8038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.523'.
[  146.074826][ T8038] netlink: 500 bytes leftover after parsing attributes in process `syz.1.523'.
[  146.451398][ T8058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.529'.
[  146.678476][ T8075] netlink: 'syz.1.533': attribute type 1 has an invalid length.
[  146.829649][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'.
[  146.944331][ T8075] 8021q: adding VLAN 0 to HW filter on device bond4
[  147.066397][ T8078] bond4: (slave syz_tun): Enslaving as a backup interface with an up link
[  147.177131][ T8101] block nbd0: not configured, cannot reconfigure
[  147.292836][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.300499][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.325864][ T8091] tipc: Resetting bearer <eth:batadv0>
[  147.409397][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.428919][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.430360][ T8116] netlink: 'syz.2.541': attribute type 1 has an invalid length.
[  147.534524][ T8091] ip6erspan0: left allmulticast mode
[  147.564040][ T8091] ipip0: left promiscuous mode
[  147.598559][ T3308] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.617970][ T3308] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.627718][ T3308] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.638199][ T3308] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.658575][ T3308] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.674818][ T3308] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.689103][ T3308] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.701807][ T3308] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.803222][ T8125] IPVS: sed: FWM 3 0x00000003 - no destination available
[  148.313380][ T8135] geneve2: left promiscuous mode
[  148.357127][ T8135] bridge1: left promiscuous mode
[  148.368828][ T8135] bridge2: left promiscuous mode
[  148.411819][ T3308] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  148.660422][ T8150] __nla_validate_parse: 3 callbacks suppressed
[  148.660438][ T8150] netlink: 76 bytes leftover after parsing attributes in process `syz.0.551'.
[  148.709611][ T8150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.551'.
[  149.014797][ T8161] openvswitch: netlink: IP tunnel dst address not specified
[  149.055956][ T8161] netlink: 'syz.2.553': attribute type 10 has an invalid length.
[  149.072315][ T8148] veth1_to_hsr: entered promiscuous mode
[  149.086673][ T8161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.553'.
[  149.107217][ T8148] netlink: 116 bytes leftover after parsing attributes in process `syz.3.549'.
[  149.133872][ T8148] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  149.565737][ T8179] syzkaller0: entered promiscuous mode
[  149.589184][ T8179] syzkaller0: entered allmulticast mode
[  149.639163][ T8183] netlink: 'syz.3.560': attribute type 1 has an invalid length.
[  149.666087][ T8183] netlink: 'syz.3.560': attribute type 2 has an invalid length.
[  149.849389][ T8190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.563'.
[  149.880796][ T8170] netlink: 'syz.1.555': attribute type 2 has an invalid length.
[  149.907854][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'.
[  149.991540][ T8170] �: entered promiscuous mode
[  150.007848][ T8197] xt_NFQUEUE: number of total queues is 0
[  150.457615][ T8216] xt_HMARK: spi-set and port-set can't be combined
[  150.471610][ T8216] syzkaller0: entered promiscuous mode
[  150.489305][ T8216] syzkaller0: entered allmulticast mode
[  150.543582][ T8219] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  150.565759][ T8222] netlink: 'syz.4.572': attribute type 1 has an invalid length.
[  150.628710][ T8227] sctp: [Deprecated]: syz.3.573 (pid 8227) Use of int in max_burst socket option.
[  150.628710][ T8227] Use struct sctp_assoc_value instead
[  151.182971][ T8256] openvswitch: netlink: IPv4 tunnel dst address is zero
[  151.190818][ T8257] netlink: 36 bytes leftover after parsing attributes in process `syz.4.581'.
[  151.207902][ T8256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.212568][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.581'.
[  151.229810][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'.
[  151.261830][ T8257] netlink: 92 bytes leftover after parsing attributes in process `syz.4.581'.
[  151.807631][ T8298] netlink: 'syz.3.590': attribute type 4 has an invalid length.
[  151.857181][ T8299] xt_l2tp: unknown flags: 8b
[  151.942412][ T3308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.960829][ T3308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.566663][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  152.778808][ T8334] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  152.787730][ T8335] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  153.180911][ T8354] syzkaller0: entered promiscuous mode
[  153.197403][ T8354] syzkaller0: entered allmulticast mode
[  153.224422][ T8353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.317066][ T8353] tipc: Resetting bearer <eth:syzkaller0>
[  153.393817][ T8353] tipc: Disabling bearer <eth:syzkaller0>
[  153.544424][ T8367] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m�%A����AZ�Z����I����� ���%
[  153.727934][ T8372] __nla_validate_parse: 6 callbacks suppressed
[  153.727952][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'.
[  153.799054][ T8373] netlink: 51 bytes leftover after parsing attributes in process `syz.3.613'.
[  154.712991][ T8397] syzkaller0: entered promiscuous mode
[  154.719989][ T8397] syzkaller0: entered allmulticast mode
[  154.740840][ T8413] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  154.923527][ T8426] netlink: 'syz.2.623': attribute type 1 has an invalid length.
[  156.914566][ T8426] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  156.925814][ T8428] gretap1: entered allmulticast mode
[  156.965855][ T8431] netlink: 56 bytes leftover after parsing attributes in process `syz.3.624'.
[  156.988626][ T8431] netlink: 56 bytes leftover after parsing attributes in process `syz.3.624'.
[  157.136695][ T8441] ieee802154 phy1 wpan1: encryption failed: -22
[  157.184767][ T8441] netlink: 3 bytes leftover after parsing attributes in process `syz.2.627'.
[  157.202773][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'.
[  157.214547][ T8441] 0�X���: renamed from batadv0 (while UP)
[  157.227373][ T8441] 0�X���: entered allmulticast mode
[  157.242798][ T8441] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  157.259363][ T8451] netlink: 'syz.4.626': attribute type 8 has an invalid length.
[  157.590707][ T8475] syzkaller0: entered promiscuous mode
[  157.597068][ T8475] syzkaller0: entered allmulticast mode
[  158.093727][ T8486] syzkaller0: entered promiscuous mode
[  158.103314][ T8486] syzkaller0: entered allmulticast mode
[  158.372668][ T8502] netlink: 'syz.1.643': attribute type 3 has an invalid length.
[  158.393214][ T8502] netlink: 'syz.1.643': attribute type 3 has an invalid length.
[  158.454543][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'.
[  158.861986][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.869385][ T8523] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.878029][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.885333][ T8523] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.934190][ T8523] bridge0: entered promiscuous mode
[  158.942766][ T8523] bridge0: entered allmulticast mode
[  158.984120][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'.
[  159.033455][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'.
[  159.044088][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'.
[  159.068345][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'.
[  159.197822][ T8530] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.246387][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'.
[  159.258330][ T8535] bond1: (slave syz_tun): Enslaving as an active interface with an up link
[  159.331487][ T8538] bond1: entered promiscuous mode
[  159.342434][ T8538] syz_tun: entered promiscuous mode
[  159.353167][ T8538] bond1: entered allmulticast mode
[  159.358981][ T8538] syz_tun: entered allmulticast mode
[  159.361699][ T8547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.656'.
[  159.897431][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.663'.
[  160.002154][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'.
[  160.035022][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'.
[  160.141138][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'.
[  160.562762][ T8601] FAULT_INJECTION: forcing a failure.
[  160.562762][ T8601] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  160.619127][ T8601] CPU: 0 UID: 0 PID: 8601 Comm: syz.1.673 Not tainted syzkaller #0 PREEMPT(full) 
[  160.619153][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  160.619171][ T8601] Call Trace:
[  160.619178][ T8601]  <TASK>
[  160.619186][ T8601]  dump_stack_lvl+0xe8/0x150
[  160.619217][ T8601]  should_fail_ex+0x40c/0x560
[  160.619244][ T8601]  _copy_to_user+0x31/0xb0
[  160.619265][ T8601]  simple_read_from_buffer+0xe1/0x170
[  160.619295][ T8601]  proc_fail_nth_read+0x1bb/0x230
[  160.619324][ T8601]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  160.619351][ T8601]  ? rw_verify_area+0x24a/0x4c0
[  160.619390][ T8601]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  160.619414][ T8601]  vfs_read+0x213/0xa80
[  160.619436][ T8601]  ? __pfx___mutex_lock+0x10/0x10
[  160.619459][ T8601]  ? __pfx_vfs_read+0x10/0x10
[  160.619477][ T8601]  ? __fget_files+0x2a/0x420
[  160.619506][ T8601]  ? __fget_files+0x3a2/0x420
[  160.619530][ T8601]  ? __fget_files+0x2a/0x420
[  160.619561][ T8601]  ksys_read+0x150/0x270
[  160.619581][ T8601]  ? __pfx_ksys_read+0x10/0x10
[  160.619607][ T8601]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.619628][ T8601]  do_syscall_64+0x174/0x580
[  160.619652][ T8601]  ? clear_bhb_loop+0x40/0x90
[  160.619675][ T8601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.619693][ T8601] RIP: 0033:0x7f78be35e6ce
[  160.619718][ T8601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  160.619733][ T8601] RSP: 002b:00007f78bf226fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  160.619756][ T8601] RAX: ffffffffffffffda RBX: 00007f78bf2276c0 RCX: 00007f78be35e6ce
[  160.619769][ T8601] RDX: 000000000000000f RSI: 00007f78bf2270a0 RDI: 0000000000000004
[  160.619780][ T8601] RBP: 00007f78bf227090 R08: 0000000000000000 R09: 0000000000000000
[  160.619792][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.619802][ T8601] R13: 00007f78be626038 R14: 00007f78be625fa0 R15: 00007ffefd24b2a8
[  160.619833][ T8601]  </TASK>
[  161.046734][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  161.608746][ T8644] openvswitch: netlink: Key type 262 is out of range max 32
[  161.898038][ T8659] vlan2: entered allmulticast mode
[  161.903202][ T8659] bond0: entered allmulticast mode
[  161.908475][ T8659] bond_slave_0: entered allmulticast mode
[  161.914256][ T8659] bond_slave_1: entered allmulticast mode
[  162.467909][ T8687] IPv6: NLM_F_CREATE should be specified when creating new route
[  162.550289][ T8692] netlink: 'syz.0.698': attribute type 1 has an invalid length.
[  162.631301][ T8692] 8021q: adding VLAN 0 to HW filter on device bond2
[  162.698567][ T8698] syzkaller0: entered promiscuous mode
[  162.716766][ T8701] netlink: 'syz.4.703': attribute type 8 has an invalid length.
[  162.727931][ T8698] syzkaller0: entered allmulticast mode
[  162.766011][ T8701] bond0: entered promiscuous mode
[  162.775687][ T8701] bond_slave_0: entered promiscuous mode
[  162.786801][ T8701] bond_slave_1: entered promiscuous mode
[  162.799757][ T8701] gretap0: entered promiscuous mode
[  162.815051][ T8701] bond0: left promiscuous mode
[  162.826505][ T8701] bond_slave_0: left promiscuous mode
[  162.836738][ T8701] bond_slave_1: left promiscuous mode
[  162.857516][ T8701] gretap0: left promiscuous mode
[  162.877529][ T8698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.891387][ T8698] tipc: Resetting bearer <eth:syzkaller0>
[  162.988914][ T8695] tipc: Resetting bearer <eth:syzkaller0>
[  163.050693][ T8695] tipc: Disabling bearer <eth:syzkaller0>
[  163.344889][ T8721] veth1_macvtap: left promiscuous mode
[  164.042038][ T8750] __nla_validate_parse: 12 callbacks suppressed
[  164.042056][ T8750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.717'.
[  164.071593][ T8752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.718'.
[  164.161047][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'.
[  164.312721][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.721'.
[  164.326818][ T8757] bond3: option ad_user_port_key: invalid value (65535)
[  164.333883][ T8757] bond3: option ad_user_port_key: allowed values 0 - 1023
[  164.342518][ T8757] bond3 (unregistering): Released all slaves
[  164.431071][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.438751][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.548820][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.564940][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.588390][ T8768] veth1_to_hsr: left promiscuous mode
[  164.670951][ T8768] bond1: left allmulticast mode
[  164.680147][ T8768] ip6gre1: left promiscuous mode
[  164.692381][ T8768] ip6gre1: left allmulticast mode
[  164.700905][ T8768] vlan2: left allmulticast mode
[  164.706582][ T8768] bond0: left allmulticast mode
[  164.711730][ T8768] bond_slave_0: left allmulticast mode
[  164.717706][ T8768] bond_slave_1: left allmulticast mode
[  164.726115][ T8767] bond0: (slave bond_slave_1): Releasing backup interface
[  164.899958][ T3320] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.917953][ T8772] C: renamed from veth1_to_team
[  164.938888][ T8772] netlink: 'syz.1.725': attribute type 2 has an invalid length.
[  164.948735][ T8772] netlink: 116 bytes leftover after parsing attributes in process `syz.1.725'.
[  164.958999][ T8772] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  164.975204][ T3320] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.987190][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'.
[  165.011686][ T3320] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.029489][ T3320] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.097796][ T4939] block nbd1: Wrong magic (0x3e000000)
[  165.156920][ T8785] netlink: 'syz.1.727': attribute type 3 has an invalid length.
[  165.261123][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'.
[  165.632386][ T8800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.731'.
[  165.840940][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'.
[  165.863756][ T8813] bond5 (unregistering): Released all slaves
[  165.892793][   T30] audit: type=1804 audit(1785103474.852:3): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.735" name="/newroot/144/memory.events" dev="tmpfs" ino=765 res=1 errno=0
[  165.920591][   T30] audit: type=1800 audit(1785103474.862:4): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.735" name="memory.events" dev="tmpfs" ino=765 res=0 errno=0
[  165.928547][ T8824] netlink: 'syz.2.736': attribute type 10 has an invalid length.
[  165.942168][   T30] audit: type=1804 audit(1785103474.862:5): pid=8820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.735" name="/newroot/144/memory.events" dev="tmpfs" ino=765 res=1 errno=0
[  165.954751][ T8809] syzkaller0: entered promiscuous mode
[  165.977507][ T8809] syzkaller0: entered allmulticast mode
[  166.109292][ T8824] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  166.120487][ T8824] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  166.133962][ T8824] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  166.278183][ T8833] syzkaller0: entered promiscuous mode
[  166.283802][ T8833] syzkaller0: entered allmulticast mode
[  166.294487][ T8833] 0: reclassify loop, rule prio 0, protocol 800
[  167.028392][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'.
[  168.200138][ T8909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.213869][ T8911] syzkaller0: entered promiscuous mode
[  168.220894][ T8911] syzkaller0: entered allmulticast mode
[  168.247143][ T8909] tipc: Resetting bearer <eth:syzkaller0>
[  168.283980][ T8908] tipc: Resetting bearer <eth:syzkaller0>
[  168.408923][ T8908] tipc: Disabling bearer <eth:syzkaller0>
[  168.942047][ T8928] netlink: 'syz.3.765': attribute type 4 has an invalid length.
[  169.072576][ T8928] netlink: 'syz.3.765': attribute type 4 has an invalid length.
[  170.456211][ T8966] __nla_validate_parse: 5 callbacks suppressed
[  170.456227][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.774'.
[  170.962164][ T5730] hid-generic 0005:0C45:1030.0001: unknown main item tag 0x0
[  171.343402][ T5730] hid-generic 0005:0C45:1030.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  174.836466][    C0] sched: DL replenish lagged too much
[  177.688033][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  182.495250][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'.
[  189.698088][ T8980] fido_id[8980]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory
[  194.551025][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  207.911551][ T5639] Bluetooth: hci3: command 0x0406 tx timeout
[  207.926658][ T5639] Bluetooth: hci2: command 0x0406 tx timeout
[  207.932773][ T5639] Bluetooth: hci1: command 0x0c24 tx timeout
[  211.610873][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  256.328890][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  281.371135][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  302.161827][ T5632] Bluetooth: hci4: command 0x0406 tx timeout
[  317.648436][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  326.303499][ T5620] bond1: (slave syz_tun): Releasing backup interface
[  328.771903][ T5620] syz_tun (unregistering): left promiscuous mode
[  331.475147][ T5620] syz_tun (unregistering): left allmulticast mode
[  345.929736][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  346.531542][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  347.542575][ T4939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  348.155671][ T4939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  348.965064][ T4939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  351.874250][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  351.923837][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  352.004039][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  352.380698][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  352.620766][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  352.690128][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  352.935544][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  353.775849][ T5633] Bluetooth: hci0: command tx timeout
[  353.839485][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  354.038721][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  354.139376][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  355.935501][ T5633] Bluetooth: hci0: command tx timeout
[  356.865443][ T5633] Bluetooth: hci1: command tx timeout
[  357.168490][ T5633] Bluetooth: hci3: command tx timeout
[  358.047373][ T4939] Bluetooth: hci0: command tx timeout
[  358.481082][ T4939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  358.887779][ T4939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  358.912956][ T5632] Bluetooth: hci1: command tx timeout
[  359.349967][ T4939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  359.366940][ T5632] Bluetooth: hci3: command tx timeout
[  360.325372][ T5632] Bluetooth: hci0: command tx timeout
[  361.554419][ T5632] Bluetooth: hci1: command tx timeout
[  364.598770][ T5632] Bluetooth: hci3: command tx timeout
[  364.604247][ T5632] Bluetooth: hci2: command 0x1005 tx timeout
[  364.719542][ T5632] Bluetooth: hci1: command tx timeout
[  364.735329][ T5633] Bluetooth: hci2: Opcode 0x1005 failed: -110
[  364.851275][ T5633] Bluetooth: hci2: unexpected event for opcode 0x1005
[  364.929131][ T5624] bond4: (slave syz_tun): Removing an active aggregator
[  365.412698][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  366.907209][ T5633] Bluetooth: hci3: command tx timeout
[  366.983843][ T9009] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  367.127252][ T5624] bond4: (slave syz_tun): Releasing backup interface
[  380.167343][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  393.290498][ T4939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  393.363493][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  393.494160][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  393.889917][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  393.958576][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  396.571931][ T4939] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  398.675417][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  399.400345][ T9023] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  402.488031][ T4939] Bluetooth: hci2: command tx timeout
[  404.787230][ T5633] Bluetooth: hci2: command tx timeout
[  407.301227][ T5633] Bluetooth: hci2: command tx timeout
[  407.455816][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  407.831502][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  408.776767][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  409.745589][ T5632] Bluetooth: hci2: command tx timeout
[  411.918393][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  413.440152][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  415.731872][ T4939] Bluetooth: hci5: command tx timeout
[  416.076168][ T5632] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  416.883551][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  418.784665][ T5632] Bluetooth: hci5: command tx timeout
[  419.036192][ T9035] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  419.606900][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  421.004568][ T4939] Bluetooth: hci5: command tx timeout
[  423.301349][ T4939] Bluetooth: hci5: command tx timeout
[  440.219860][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  478.590000][ T4939] Bluetooth: hci0: command 0x0406 tx timeout
[  486.593582][ T5632] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  488.325755][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  490.678915][ T9044] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  502.305860][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  510.269760][ T4939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  510.436738][ T4939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  510.606160][ T4939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  510.683394][ T4939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  513.239562][ T4939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  515.864242][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  516.455850][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  516.698292][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  517.974386][ T5632] Bluetooth: hci1: command tx timeout
[  518.940820][ T4939] Bluetooth: hci3: Opcode 0x1009 failed: -110
[  518.966226][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  518.983930][ T5632] Bluetooth: hci3: command 0x1009 tx timeout
[  519.081611][   T50] Bluetooth: hci3: unexpected event for opcode 0x1009
[  519.107276][ T4939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  519.162771][ T4939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  519.349295][ T4939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  519.406947][ T4939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  519.552247][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  520.323786][ T4939] Bluetooth: hci1: command tx timeout
[  521.143272][ T9059] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  522.080939][ T5633] Bluetooth: hci0: command tx timeout
[  522.962763][ T4939] Bluetooth: hci1: command tx timeout
[  524.264338][ T4939] Bluetooth: hci0: command tx timeout
[  525.272562][ T4939] Bluetooth: hci1: command tx timeout
[  525.393522][  T113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.164650][ T4939] Bluetooth: hci0: command tx timeout
[  529.270015][ T4939] Bluetooth: hci0: command tx timeout
[  533.775205][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  533.822464][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  533.879185][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  534.291336][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  535.807208][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  546.975124][ T5633] Bluetooth: hci3: command tx timeout
[  549.892273][ T5633] Bluetooth: hci3: command tx timeout
[  552.234513][ T5633] Bluetooth: hci3: command tx timeout
[  554.374869][ T5633] Bluetooth: hci3: command tx timeout
[  556.719582][ T4939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  557.100567][ T4939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  557.151346][ T4939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  557.287982][ T4939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  557.369937][ T4939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  560.081006][ T4939] Bluetooth: hci2: command tx timeout
[  561.493625][  T113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.437621][ T5633] Bluetooth: hci2: command tx timeout
[  562.443700][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  562.609768][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  562.755939][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  563.142505][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  563.633214][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  564.306806][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  564.510086][ T4939] Bluetooth: hci2: command tx timeout
[  566.635502][ T4939] Bluetooth: hci2: command tx timeout
[  566.844671][ T4939] Bluetooth: hci4: command tx timeout
[  568.989759][ T4939] Bluetooth: hci4: command tx timeout
[  571.264502][ T4939] Bluetooth: hci4: command tx timeout
[  573.470976][ T4939] Bluetooth: hci4: command tx timeout
[  610.391542][  T113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.463969][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  648.118393][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  648.237199][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  648.282253][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  649.523063][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  649.794431][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  653.911463][ T4939] Bluetooth: hci0: command tx timeout
[  656.929635][ T4939] Bluetooth: hci0: command tx timeout
[  659.870488][ T4939] Bluetooth: hci0: command tx timeout
[  663.138752][ T4939] Bluetooth: hci0: command tx timeout
[  669.833671][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  670.869674][   T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  673.850950][   T50] Bluetooth: hci1: command 0x1001 tx timeout
[  673.875601][ T4939] Bluetooth: hci1: Opcode 0x1001 failed: -110
[  675.635104][ T4939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  675.651151][ T4939] Bluetooth: hci1: unexpected event for opcode 0x1001
[  675.667241][ T4939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  676.012052][ T9117] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  676.253606][  T113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.612680][   T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  677.819476][   T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  678.684407][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  678.808456][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  680.046021][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  680.745240][ T5633] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  680.941257][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  682.554230][ T9128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  683.084838][ T4939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  683.689794][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  684.237391][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  685.382351][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  685.684836][   T50] Bluetooth: hci3: command tx timeout
[  686.068947][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  688.306964][   T50] Bluetooth: hci3: command tx timeout
[  688.950558][   T50] Bluetooth: hci4: command tx timeout
[  690.406529][ T9128] Bluetooth: hci3: command tx timeout
[  691.172498][   T50] Bluetooth: hci4: command tx timeout
[  692.265280][ T9128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  692.502090][ T9128] Bluetooth: hci3: command tx timeout
[  692.780481][ T9128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  692.855007][ T9128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  693.215281][ T9128] Bluetooth: hci4: command tx timeout
[  694.235275][ T9128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  694.289221][ T9128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  695.640288][ T9128] Bluetooth: hci4: command tx timeout
[  697.174831][ T9128] Bluetooth: hci1: command tx timeout
[  699.530176][ T9128] Bluetooth: hci1: command tx timeout
[  701.211553][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  701.616002][ T9128] Bluetooth: hci1: command tx timeout
[  703.695840][ T9128] Bluetooth: hci1: command tx timeout
[  718.574878][ T9128] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  747.579860][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  805.817757][ T9128] Bluetooth: hci3: command 0x0406 tx timeout
[  812.938603][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  814.981367][   T50] Bluetooth: hci4: command 0x0406 tx timeout
[  821.153415][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  833.037786][ T9128] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  838.792262][ T9128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  840.782140][ T9156] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  845.563666][ T9128] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  857.372930][   T31] INFO: task dhcpcd:5285 blocked for more than 143 seconds.
[  857.388596][   T31]       Not tainted syzkaller #0
[  857.393568][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  857.494821][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  859.415616][   T31] task:dhcpcd          state:D stack:21736 pid:5285  tgid:5285  ppid:5284   task_flags:0x400140 flags:0x00080000
[  859.465768][   T31] Call Trace:
[  859.477834][   T31]  <TASK>
[  859.480915][   T31]  __schedule+0x17d9/0x56c0
[  859.485613][   T31]  ? __lock_acquire+0x683/0x2cf0
[  861.222200][ T9157] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  862.415980][   T31]  ? __lock_acquire+0x683/0x2cf0
[  862.429871][   T31]  ? __lock_acquire+0x683/0x2cf0
[  862.434883][   T31]  ? __pfx___schedule+0x10/0x10
[  862.945568][   T31]  ? schedule+0x90/0x2b0
[  862.958563][   T31]  schedule+0x164/0x2b0
[  862.962778][   T31]  schedule_preempt_disabled+0x13/0x30
[  863.425612][   T31]  __mutex_lock+0x7bf/0x1550
[  863.438944][   T31]  ? __mutex_lock+0x5d4/0x1550
[  863.443857][   T31]  ? rtnl_dump_ifinfo+0xa74/0x14a0
[  865.512313][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  865.887297][   T31]  ? __nla_parse+0x40/0x60
[  865.891915][   T31]  rtnl_dump_ifinfo+0xa74/0x14a0
[  866.346817][   T31]  ? __pfx_rtnl_dump_ifinfo+0x10/0x10
[  866.352266][   T31]  ? stack_trace_save+0xa9/0x100