last executing test programs:

1.244803619s ago: executing program 3 (id=10):
unshare(0x22020400)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = socket(0x3, 0x0, 0x6)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x268, 0x17, 0xa, 0x903, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x14c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, 0x268}, 0x1, 0x0, 0x0, 0x1c048001}, 0x20000005)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/4086, 0xff6}], 0x1}, 0x10100)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r10 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r13, {0xc, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)

865.622284ms ago: executing program 1 (id=2):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000001f80)=0x5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000075000000de0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

845.722828ms ago: executing program 3 (id=11):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x55, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

813.636611ms ago: executing program 0 (id=1):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80)
close(r1)
socket$kcm(0x23, 0x5, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
listen(r3, 0x7)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
listen(r2, 0x7)
sendfile(r1, r0, 0x0, 0xf03a0005)

738.331206ms ago: executing program 3 (id=12):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000004f0c332a49dc0a73866e2710b9a71981c9c70000000000d659e401000000fcffffff9500000000000000a3f49fac953586f0542bbf3811c6beaef8ed9c6a7e3ff96690d6bfae6ecc8cd17589"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r2 = socket$rxrpc(0x21, 0x2, 0x0)
sendto(r2, &(0x7f00000003c0)="9570d634ef3e355ccc32a17c87df3f0b8d5aa27ae38b01499e7faae6b1109270e586d9634c500c0b8e052862eced25e4dc6252e2fad12451f37c3c4f35c6f26f8c70aa4d04146cc96d0042515822f7f11548d3f7188a35f3b54238b80ff8f67ec016a6643ae20dbab335e9d9fd8b25df84570a", 0x73, 0x20000040, &(0x7f0000000440)=@pptp={0x18, 0x2, {0x3, @local}}, 0x80)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x11, 0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x1, 0x2, 0xfffffffe}})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002f00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffa7ffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

697.854736ms ago: executing program 1 (id=13):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000080)=0x5, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a004}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0x1}, {0xd}}, [@TCA_RATE={0x0, 0x5, {0x1, 0x2}}]}, 0x75}}, 0x0)

662.382205ms ago: executing program 2 (id=3):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e24, 0x4bf, @empty, 0x34bbe269}, 0x1c) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0x5, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r6=>0x0}) (async)
unshare(0xe040400)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x44, r8, 0x1, 0x70bd37, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}]}, 0x44}}, 0x0) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r7) (async)
r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r6, 0x25, 0x2, @void}, 0x10)
write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6e418228e8"], 0xfdef)

598.846481ms ago: executing program 3 (id=14):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x90, 0x0, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$kcm(0x2, 0x3, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x6, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07, 0x11}]}}}}}}, 0x46)

553.534725ms ago: executing program 0 (id=15):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000017c400"/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffffffe}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet6_sctp(0xa, 0x6, 0x84)
setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0)
sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r9 = socket$tipc(0x1e, 0x2, 0x0)
bind$bt_hci(r9, &(0x7f0000000040), 0x6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10)
listen(r6, 0x3)
sendmsg$inet6(r5, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085)
socket$netlink(0x10, 0x3, 0x4)

459.137363ms ago: executing program 4 (id=5):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x4fe)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{<r1=>r0, &(0x7f00000000c0)='\x00', 0x201, &(0x7f0000000100)={@_ha_fsid={[0x10000, 0x8]}, {0x0, 0xff25, 0x10001, 0x5}}, 0x85, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x3}, {[0xfffffff1, 0x85b, 0x1, 0x101]}, 0x800, 0xf3, &(0x7f00000001c0)=""/243})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000)
bpf$ENABLE_STATS(0x20, &(0x7f00000004c0), 0x4)
r2 = openat$cgroup_int(r1, &(0x7f0000000500)='net_cls.classid\x00', 0x2, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000580)={<r3=>0x0, @multicast2, @multicast1}, &(0x7f00000005c0)=0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000002380)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002340)={&(0x7f0000000600)=@newchain={0x1d14, 0x64, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xb}, {0xfff1, 0xfff2}, {0xffe0, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x40}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x7}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1cb8, 0x2, [@TCA_CGROUP_POLICE={0xc50, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfbee, 0x6, 0x6, 0x3, 0x2241b6f3, 0x7, 0x7, 0x4b0c, 0x6, 0x9, 0x400, 0x6, 0x4, 0x6, 0xff, 0x10, 0x2, 0xfffffffc, 0x800, 0x6, 0x3, 0x82, 0x8091, 0xff, 0x7, 0x0, 0x3, 0xffff, 0x40000000, 0x10000000, 0x1, 0x7ff, 0x9, 0xff, 0x101, 0x3, 0xe69f, 0x9, 0xd5e, 0xd, 0x0, 0x2d4e, 0x0, 0x8, 0x1, 0x8, 0xe, 0x40, 0xc9, 0xff0, 0x4, 0x7, 0x6, 0xffffffff, 0x1, 0x2ffb, 0x7, 0x81, 0x3, 0xa, 0x80, 0xd8, 0x3ff, 0x80000001, 0x8, 0x2, 0x8, 0x9, 0x2, 0x5, 0x7f, 0x8, 0x8, 0x5, 0x81, 0x9, 0x8, 0x1, 0x9, 0x3, 0x7, 0x4, 0x80000000, 0x8, 0x7f, 0xf0, 0x98b, 0x800, 0x100, 0xe, 0xffffff7e, 0x5, 0x8, 0xa, 0x1, 0xffff, 0x2, 0x5, 0x0, 0x5, 0x2, 0x7ff, 0xfffffffc, 0x7ff, 0x40, 0x5, 0x9, 0x1ff, 0x0, 0x71a2, 0x9, 0x800, 0xf, 0x7, 0x5, 0x3, 0x100, 0x2, 0x4, 0x7fffffff, 0x1, 0x80000000, 0x9, 0x0, 0x200, 0x690, 0x6177179c, 0x3, 0x8, 0x9, 0x1, 0xff, 0x32, 0x77900, 0x0, 0xffffffff, 0xd00, 0x4865cde0, 0x6, 0xf, 0x9, 0x6, 0xfff, 0xbd1, 0x10000, 0xc, 0x2, 0x9, 0x800, 0xffffffdd, 0x6e6, 0x2, 0x5, 0x2, 0x80000000, 0x3, 0x9, 0x7, 0x9, 0x4, 0x8, 0x1, 0x1000, 0x4, 0x5, 0x80000001, 0x564f, 0x5, 0x6a, 0x1, 0x7, 0x128, 0x7ff, 0x8, 0x5, 0x4, 0xfffffff8, 0x10000, 0x1, 0x5, 0x2c32bd2e, 0xffff, 0x5, 0x401, 0x10001, 0x6, 0x6f, 0x2, 0x62, 0x10001, 0x4, 0x2, 0x8, 0x8, 0x4, 0x7, 0xffff, 0x1, 0x0, 0xfffffff8, 0x0, 0x3, 0x6, 0x9, 0x4, 0x2, 0x2, 0x0, 0x2, 0x3, 0x2786, 0xab4, 0xd5, 0x19, 0x824, 0x4, 0x5, 0xd6, 0x0, 0xc6c4, 0xff, 0x3, 0xe1f1, 0x6, 0xed3, 0x3, 0x5, 0x8001, 0x9, 0x4, 0x81df, 0x6, 0x73, 0x1, 0xfffffffb, 0xe79, 0x36c, 0x6, 0x9, 0x1, 0x9, 0x1, 0x80000001, 0x3, 0x7, 0x3, 0x13, 0x7, 0x3, 0x80000001, 0xc00, 0x7, 0x1ff, 0x1, 0x7f, 0x7fff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x25a, 0x3de39531, 0x6, 0x7fff, 0x3, 0x2, 0x79, 0x0, 0x586, 0xfffffffb, 0x4b, 0x8001, 0x7, 0x8, 0x8000, 0x9, 0x53cb, 0x3, 0xd, 0x9, 0x9d, 0x8000, 0x0, 0xfffffff7, 0xffffffff, 0x9, 0x0, 0xffffffff, 0x0, 0x2b87, 0x400, 0x8, 0xd16, 0x4, 0xfff, 0xffff, 0x9, 0x7fffffff, 0x606, 0x178, 0x0, 0x8, 0x10000, 0x2, 0x1, 0x4, 0x9, 0xfff, 0xd4, 0xe3db, 0x1, 0x3, 0x1, 0x2ad22cc1, 0x3, 0x800, 0xdfc7, 0x81, 0x3, 0x8000, 0x0, 0x5000, 0x6, 0x9, 0x1, 0x3ff, 0x1, 0x4, 0x3ff, 0x9, 0x7, 0x5, 0xfff, 0x31af, 0x1, 0x2c, 0x7, 0x5, 0x803, 0x1, 0x6, 0xb, 0x9, 0x2, 0xd, 0x2, 0x9, 0x0, 0xffffffff, 0x7fff, 0x1e53, 0x9, 0x9, 0x3ff, 0xfffffff9, 0xff, 0x80, 0x7, 0x3ff, 0x3, 0x7f, 0x6, 0x0, 0x0, 0x216c, 0xffff, 0x0, 0x6, 0x7, 0x1, 0x800, 0xf, 0xffff, 0x400, 0x2, 0xc9, 0x6, 0x0, 0x5, 0x6, 0xfff, 0x5, 0x4, 0x401, 0x2da0, 0x7ff, 0x1, 0xfffff0e1, 0x4, 0x3, 0x1, 0x5, 0x7ff, 0x9, 0x3, 0x3, 0xffff, 0x4, 0x1, 0x40, 0x1ff, 0x6, 0x7, 0x4, 0x8, 0xbe4, 0xb8b3, 0x7, 0x4, 0x200, 0x0, 0x4dc, 0xc000000, 0x6, 0x0, 0x3, 0x2, 0x9, 0xfffffff9, 0x8000, 0x8, 0x8, 0xfff, 0x8, 0xe68, 0x8, 0x1, 0x3, 0x8, 0xb423, 0xb03, 0xed, 0x9, 0xfffeffff, 0x8000, 0x6, 0x3, 0x2, 0xff, 0x4, 0x0, 0x8, 0x8, 0x7ff, 0x1, 0x8, 0x0, 0xffffffff, 0x9, 0x9, 0x9, 0x5, 0x4, 0x200, 0x9, 0x5, 0x8, 0x6, 0x8, 0x3, 0x80, 0x2, 0x6, 0x3, 0x9, 0x8, 0x7fff, 0xe, 0xd, 0xe34, 0x8, 0xfffffffc, 0x1, 0x292f, 0xfffffcf0, 0xfffffff7, 0xffffffff, 0xfffffff3, 0x5, 0xf, 0x5, 0x5, 0x3ff, 0x8, 0x3, 0x5, 0x1, 0x3, 0x7f, 0x7, 0x46, 0x9, 0xfffffd68, 0x7, 0x2, 0x3, 0x5, 0x6, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x2, 0x1ffe0000, 0x1000, 0x100, 0x4, 0x9, 0x7f, 0x5, 0x6, 0x6, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x81}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0x1, 0x2, 0x4, 0x7, 0xa, 0x5, 0x7, 0x7c4, 0xb9, 0x40, 0xb972, 0x1, 0xcda2, 0x7, 0x401, 0x9, 0x4, 0x81, 0xfff, 0x2, 0x4, 0x7, 0x80000000, 0x9, 0x8, 0x101, 0x4, 0x0, 0x7f, 0x2, 0xfe, 0x3, 0x7ff, 0x3, 0x1, 0x4, 0x6, 0x0, 0x8d9, 0xffff, 0x8, 0x8, 0x101, 0x2d11, 0x9, 0x81, 0xea7, 0x0, 0x7fffffff, 0x7, 0xfffffffc, 0x2, 0x1, 0x4, 0x6, 0x2, 0x3, 0x1, 0x1, 0x7fffffff, 0x13, 0x6, 0x9, 0xe, 0x4, 0xf57, 0x4c, 0x5, 0x6bf6, 0x0, 0xa6ae, 0x120, 0x2, 0x9, 0x5219, 0x6, 0x6, 0x2, 0x72f, 0xda1, 0x9, 0x1, 0x6, 0x0, 0x7, 0x83, 0x101, 0x4, 0xfffffff8, 0x3ff, 0x3, 0xc56, 0x7, 0xd63f, 0xf89, 0x9, 0x40, 0xd, 0xffff, 0x100, 0x800, 0x8, 0x4, 0x3, 0x5, 0x8, 0x69, 0x5, 0x3ff, 0x3, 0x8, 0x9a15, 0x7, 0x1, 0x400, 0x1, 0x27, 0x8, 0x0, 0x10, 0x3ff, 0x3, 0x6, 0x1, 0x9, 0xffffffff, 0x9, 0x351, 0x1, 0xd, 0x4, 0xfffffe01, 0x3, 0x9, 0x90, 0x7fffffff, 0x9, 0x0, 0x5, 0x1, 0x1, 0xe8, 0x10000, 0x5, 0x80000001, 0xe, 0xffffffff, 0x8, 0x2, 0x7, 0x3, 0x100, 0xfffffff7, 0x1, 0x7, 0x1, 0x3ff, 0xffffffc0, 0x0, 0x4, 0x9d, 0x7fffffff, 0xfffffffe, 0x3, 0x6, 0x1000, 0x4, 0x0, 0x80000001, 0x9, 0x8, 0x6, 0x9, 0x625c0e4c, 0x12000000, 0x8, 0x7, 0x7, 0x3, 0xffffff47, 0xffffffff, 0x2f, 0x2, 0x7, 0x10001, 0x5, 0x0, 0x4, 0x8, 0x9, 0x3ff, 0x5, 0x9, 0x600000, 0xc95, 0x4, 0x5, 0x0, 0x7, 0x5, 0x4, 0x10001, 0x25, 0x100, 0x7, 0xd009, 0xe826, 0x2f9, 0x3, 0x1, 0x9, 0x7f, 0x8, 0x6, 0x56b, 0xfff, 0x8001, 0x6, 0x4, 0x2, 0xc2c, 0x2, 0x7c5, 0x0, 0x0, 0x101, 0xfff, 0xff, 0x0, 0x55, 0x1, 0x9, 0x1, 0x0, 0x200, 0x5, 0x8, 0xc02d, 0x2, 0x1, 0x8, 0x3, 0xfffffff7, 0x1c00, 0x8, 0x9, 0x9, 0x39a, 0x10000, 0xa9, 0x5, 0x10, 0x7f, 0x100]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_CGROUP_POLICE={0x1064, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xa411}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xa, 0x5, 0x1, 0x4, 0xc9bd, 0x4, 0x3ff, 0x1000, 0x3, 0x2, 0x2, 0x7f, 0xff, 0x3, 0x0, 0x7ff, 0xff, 0x7, 0x2, 0x4, 0x9, 0x4, 0x4, 0xfffffff9, 0x4, 0x2, 0x80, 0x2, 0xf1, 0xd5f6, 0x1, 0x0, 0x4, 0x101, 0x0, 0x5, 0xfa7, 0x6, 0x2, 0x8ed, 0x1, 0x8001, 0x6f1, 0xa94, 0xffffffff, 0xdf6, 0x6, 0x3, 0x5, 0x1, 0x0, 0x1, 0x9, 0xa, 0x7, 0xffff, 0xd, 0x6c, 0x5, 0x4, 0x7fff, 0x0, 0x40, 0xe, 0x9, 0x0, 0xd, 0x0, 0xe98, 0x90, 0x9, 0x9, 0x7, 0xfff, 0x4, 0x13b, 0x4, 0x2, 0x9, 0x7fff, 0x7, 0x8, 0x3, 0x40, 0xfffff508, 0xffffffff, 0x2, 0x7ff, 0xffff, 0x4e1, 0x8, 0x367, 0x6d1, 0x7fff, 0x0, 0x0, 0x2, 0x10000, 0xffff, 0x6, 0x3, 0xffff, 0xd82, 0x8, 0x7, 0xd1000000, 0x8, 0x4, 0xfb7, 0x2, 0x16d5, 0x7, 0x4, 0x9, 0xffffffff, 0x4, 0x9, 0x5, 0x4, 0x68bcada5, 0x6, 0x8, 0x4, 0x101, 0x6, 0x3, 0x9, 0xfffffffe, 0x8, 0x0, 0x7f, 0x2, 0x6, 0x3, 0x2, 0x2, 0x81, 0x4, 0x80000001, 0xffff7fff, 0x800, 0x0, 0x800, 0x3, 0x7, 0xfff, 0x10001, 0x1000, 0x0, 0x6, 0x2, 0x8, 0x9, 0x0, 0x5, 0xff, 0x6, 0x6, 0x7, 0x2, 0x3, 0x5, 0x3, 0xff, 0x8, 0xc44, 0xffff, 0x0, 0x3, 0xc2, 0xfffe0000, 0x7, 0x3, 0x5, 0x5, 0x7ff, 0x43, 0x26db, 0x70, 0x5, 0x1, 0xd600000, 0x5, 0x1, 0x3, 0x8da, 0x3, 0x9, 0x7, 0x8, 0xb, 0x5, 0x2, 0x9, 0x7, 0x7, 0x8, 0x5, 0x6, 0x3, 0xad4, 0x0, 0x1000, 0x3, 0xffff, 0x1000, 0x2, 0x6, 0x9, 0x3, 0x1, 0x7, 0xd, 0x0, 0xffffffff, 0x200000, 0x10001, 0x7, 0x89, 0x0, 0x1, 0x4, 0x4, 0x10, 0x6, 0xff, 0x3, 0xa, 0x27cb, 0x8cf, 0x7, 0x3, 0xfc03, 0x0, 0x7, 0xec16, 0x3, 0x1, 0x6, 0x3417, 0x7, 0x3, 0x401, 0x3, 0x39, 0x1, 0x3045, 0x40, 0x3, 0xb, 0x3, 0x4, 0x8, 0x5, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x400, 0x9, 0xbb, 0x5, 0x6, 0x2, 0x24, 0x16cb, 0x5, 0x7, 0xf58e, 0x9, 0x5, 0x9, 0x0, 0x1, 0x3, 0x0, 0x7f, 0xfff, 0x10, 0x1, 0x7, 0x1, 0x2, 0x9, 0xffff0000, 0xdf1, 0x8, 0x9d9, 0x6, 0x4, 0x0, 0x723, 0x1ff, 0x8000, 0x6, 0xf670, 0x9, 0x1, 0x4, 0x973, 0x3264d522, 0x1, 0x50, 0x0, 0x8, 0x9, 0x8, 0xd4c, 0x9, 0x3, 0x6, 0x4a89d09, 0x3, 0x5, 0x3, 0x4, 0x1, 0x7, 0x2, 0x9, 0xfffe0000, 0x7fff, 0xe3, 0xfffffffd, 0x7f, 0x8001, 0x2, 0x2, 0x8, 0x8, 0x81eb, 0x3, 0x8, 0x3, 0x8, 0x1, 0x3, 0xa7c, 0x3ff, 0x7, 0x1, 0x3, 0x1ff, 0x4, 0x4, 0x4, 0x4, 0x4, 0xc, 0xbcb0, 0x45, 0x8, 0x3, 0x716, 0xffffffff, 0x5f9d, 0x4, 0x2, 0x6, 0x2, 0xa1, 0x6, 0x0, 0xd6, 0x4, 0x8, 0xffffff80, 0x0, 0x325654d7, 0x2, 0xffffffff, 0x80, 0xd, 0x2, 0x3, 0x6, 0x8, 0x3, 0xd, 0x1, 0x3, 0x7ff, 0x3, 0x3, 0x2, 0x2a, 0x2, 0x9, 0x5, 0x60, 0x0, 0x5, 0xffff0000, 0x229, 0x5a9, 0xf56, 0x8001, 0x3ff, 0x6, 0x5, 0x5, 0x7f, 0x1000, 0x4, 0x80, 0x4, 0x91, 0x803, 0x5, 0x3, 0xe71, 0x100, 0x2, 0x49, 0x0, 0x2d, 0xe4fe, 0x1, 0x959, 0x0, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x0, 0x3dc, 0x2, 0xfffffb05, 0x483d5a61, 0x2, 0x9, 0xab, 0x477, 0x5, 0x1c, 0xfd7, 0xffff8001, 0x400, 0x0, 0x3, 0x6, 0x2, 0xca86, 0x8, 0x2, 0xffff, 0x3ff, 0x10001, 0x8, 0x0, 0x5, 0xfffffff7, 0xffff0000, 0xf9, 0x9, 0x200, 0x6, 0x80, 0x2, 0x8, 0x58a, 0x4, 0x7ff, 0xcb2, 0x3cdf, 0x4, 0x293c, 0x5, 0x400, 0x8b0, 0xfffffff8, 0x6, 0x6, 0x0, 0x0, 0x0, 0xffff7fff, 0x5, 0x40, 0x43, 0x4, 0x1ff, 0xa511, 0x400000, 0x1, 0x9, 0x8, 0x6, 0x3f000, 0x7, 0x6, 0xda6, 0x451, 0x8, 0x200, 0x7, 0x5, 0x4, 0x81, 0x9, 0x9, 0x5, 0x80000001, 0x0, 0x0, 0x81, 0xfffffc36, 0x3, 0x5, 0x9, 0x7, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xb, 0x6, 0x1000, 0x3, 0x6, 0xe4, 0x6, 0xffffd979, 0x5, 0x7, 0x8, 0x4, 0x3, 0x8, 0x1, 0x4, 0xfffffffd, 0x8, 0x72, 0x4, 0x7, 0x3, 0xa56b, 0x7fffffff, 0x1, 0xef96, 0x2, 0x0, 0xd, 0xfffffff8, 0x4, 0x2, 0x9, 0x2, 0x2, 0x4, 0x2, 0x9, 0xd9d, 0x42a, 0x3, 0x10001, 0x401, 0x400, 0x8, 0x7fff, 0xb, 0xfa, 0x3, 0x0, 0x0, 0x5, 0x587, 0x1, 0xf, 0x8, 0xb, 0x400, 0xa58, 0xa1, 0x7, 0x5, 0x6e1, 0x0, 0x8cd, 0xcd, 0x1, 0x7, 0x5, 0x0, 0x3, 0x5, 0x3, 0x1, 0x2, 0x0, 0x7, 0x80000001, 0x7, 0x4, 0x401, 0x0, 0x8, 0xb, 0x0, 0x7, 0x4, 0x7, 0x0, 0x10, 0x3a53, 0x4, 0x2, 0x8, 0xe, 0x366, 0xe, 0x1ff, 0x1, 0xa, 0x7fff, 0xe37, 0xffffffff, 0x80000001, 0xffff, 0x7, 0x9, 0xb1e7, 0x10, 0x5, 0xa0, 0x4, 0x7fffffff, 0x5, 0x7, 0x0, 0x9, 0x2, 0x7, 0xa, 0x7, 0xaf58, 0x5, 0x8, 0x700, 0x101, 0x4, 0x5, 0x0, 0x5, 0x7, 0x7, 0x8, 0x3, 0xffffffff, 0xee4, 0x1, 0x2, 0x0, 0x7, 0x6000, 0x5, 0x5, 0x3a, 0x6, 0xa227, 0x6, 0xffff, 0x580, 0x80, 0x97, 0xf, 0x2, 0x4, 0x100, 0xfffffff9, 0x5, 0x2, 0x8, 0xc, 0x1, 0x101, 0xa, 0xfffffeff, 0x1, 0x76e3, 0x2, 0x5, 0x7fffffff, 0xfffffffa, 0x80000001, 0x8001, 0x7f, 0x8000, 0x6, 0x9649, 0x8, 0x86d, 0x9, 0x80000001, 0xd, 0x2, 0xc, 0x6, 0x3, 0x5, 0x8, 0x80000001, 0x1, 0x7, 0x2, 0x5, 0x80, 0x4, 0x8001, 0x1000, 0x7, 0x7fff, 0x0, 0x8, 0x4, 0x8, 0x8, 0x8001, 0xa, 0x0, 0x9, 0xfffff346, 0x5, 0xfff, 0x9, 0xd1a, 0x100, 0x20, 0x6, 0x0, 0x40000000, 0x8000, 0x6, 0x3, 0x5, 0x2, 0x77a0, 0x7, 0x3, 0x1, 0x100000, 0xc3f, 0x2, 0xfff, 0x8, 0x81, 0x40, 0x1, 0xc0a, 0x2, 0xd, 0x2, 0x5, 0x1, 0x24, 0x74306594, 0x1, 0xf07, 0x3, 0x7, 0x8, 0xfffffffb, 0x9, 0xc29, 0x8, 0x4, 0xfffffffa, 0x2, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8001, 0x4, 0x2, 0x2, 0x401, 0x8, 0x80, 0x9, 0x0, 0x5, 0x8, 0x6, 0x1, 0xed0b, 0xdf, 0xffffffff, 0x7, 0xe, 0x4, 0x7, 0x10001, 0x81, 0x95cc, 0x1ff, 0x3, 0xf90d, 0x6, 0xa, 0xb, 0x9, 0x9, 0x0, 0xff, 0x3, 0x3, 0x970, 0x0, 0x401, 0xffff, 0x10001, 0x8, 0x1, 0xfffffff7, 0x4a6, 0x8, 0x7, 0x5, 0xccb2, 0x101, 0x7, 0x2, 0x200, 0xa, 0x9, 0x14c, 0x1000, 0x1400, 0x10001, 0x3, 0x8, 0x3, 0xb1c5, 0xd, 0x1358, 0x10001, 0x80000001, 0x6246, 0xe833, 0xb, 0x10001, 0x10001, 0x4, 0xb, 0xffff, 0x2, 0x101, 0xa, 0x3, 0x1, 0x3ff, 0x1640, 0x4, 0x6, 0x7, 0x2, 0x2, 0xcf58, 0x4, 0x3, 0xa2, 0x0, 0x2, 0x0, 0xfffffffb, 0x1978bb64, 0x2, 0x9, 0x90a, 0x900, 0x23, 0x70, 0x6, 0x401, 0x101, 0x2, 0x200, 0xc2, 0x1, 0x7, 0x9, 0xfffffff7, 0x3d4, 0xffffffff, 0x3, 0x5, 0xff, 0x7, 0xb8, 0x7f, 0x5, 0x0, 0x2, 0x9, 0x2, 0x1, 0xfffff800, 0xde, 0x10001, 0x2, 0xf, 0x5, 0x0, 0x3, 0x159, 0x8, 0x8, 0x401, 0x0, 0xfff, 0x0, 0xac6e, 0x0, 0xf, 0x1, 0x1, 0x5, 0x3, 0x7e, 0xfffffffe, 0x81, 0x1, 0x1000, 0x0, 0x3, 0x1, 0x1, 0x9, 0x58000000, 0x4, 0x3, 0x4, 0x5, 0x8000, 0x7, 0x7, 0x5, 0x6a, 0xe4, 0x2, 0xfffff484, 0x8, 0x2, 0x42, 0x1000, 0x4, 0x2, 0x5, 0xe, 0xf9a, 0x343, 0x1ff, 0x4d9, 0x4, 0x2, 0x2, 0x0, 0x0, 0xfff, 0x3, 0x4, 0x5, 0x3, 0xffff5c49, 0xfffffff8, 0x3, 0x6, 0x3ed, 0x2, 0x1, 0x3, 0x1, 0xff, 0x72, 0x4, 0x5, 0x656, 0x6, 0x80000001, 0xdb, 0x9, 0xd, 0x3, 0x4, 0x1ff, 0x5, 0x0, 0x1, 0x6, 0xba, 0x6, 0x4, 0x6, 0xd25, 0x560b, 0x40, 0x2fa4, 0x2, 0x6, 0x8, 0x2, 0x107f, 0x2, 0x6d, 0x26f32212, 0x0, 0x8, 0x4, 0x4, 0x57106373, 0x4f0a, 0x4, 0x5, 0x101, 0x8, 0x7f, 0x5a81, 0x7, 0x58f5, 0x1, 0xe8, 0x9a, 0x0, 0xffff0000, 0x408, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x7fffffff, 0x9, 0x4, {0x8, 0x2, 0x0, 0x0, 0xb, 0x9}, {0x40, 0x2, 0x5, 0x7, 0x3, 0xfffffffc}, 0xd5, 0x1, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}]}}]}, 0x1d14}}, 0x4811)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002480)={'syztnl1\x00', &(0x7f0000002400)={'syztnl0\x00', 0x0, 0x2b, 0x6, 0x1, 0x60, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x7, 0x40, 0x4, 0x5}})
bind$nfc_llcp(r1, &(0x7f00000024c0)={0x27, 0x0, 0x0, 0x4, 0x6, 0x8, "4d6051e867614a48c1f7b9b76c6debc14ade8dc9d3174a45196e7c29ae1069052e20b13b34a6618fc9fb7e5ae5e91dfdaa65609a7b4b840e03bbf24bc64335", 0x25}, 0x60)
r4 = accept4$phonet_pipe(r1, &(0x7f0000002540), &(0x7f0000002580)=0x10, 0x800)
ppoll(&(0x7f00000025c0)=[{r4, 0x24}, {r2, 0x110}], 0x2, &(0x7f0000002600)={0x0, 0x989680}, &(0x7f0000002640)={[0x6]}, 0x8)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000026c0)={0x1, &(0x7f0000002680)=[{0x80, 0x2, 0x4, 0x97}]})
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000002700)={0x5}, 0x4)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000002740))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002780)={'team0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002840)={'syztnl1\x00', &(0x7f00000027c0)={'erspan0\x00', r6, 0x7, 0x80, 0xf, 0xfffffff8, {{0xb, 0x4, 0x3, 0x3, 0x2c, 0x65, 0x0, 0x3, 0x29, 0x0, @empty, @multicast1, {[@generic={0x86, 0x8, "801bc49e4304"}, @timestamp_prespec={0x44, 0xc, 0xc7, 0x3, 0x4, [{@private=0xa010100, 0x116a}]}, @noop]}}}}})
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000002880))
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000028c0)=0x2, 0x4)
socket$kcm(0x29, 0x7, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002940)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x57}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004)

394.43369ms ago: executing program 1 (id=16):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2})
sendfile(r2, r1, 0x0, 0xf03a0005)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)

344.188547ms ago: executing program 3 (id=17):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000040000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400eeffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/184, 0xb8}], 0x1}, 0x0)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x0, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f00000005c0)={<r9=>0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x20100, &(0x7f0000000500)={@align=0x80, {0x4, 0x81, 0xa285}}, 0x80000001, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1f7cbe7e})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, <r10=>0x0}, 0x8)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000bd6bbccd257c3f02707e810000002ab2fdf3106894c75511114ecc4948cb1eb3fd5b8edbc79e81f21d881f1865c2c34ebefe16050b37bd3ee1fc698028", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018340000010000000000000000000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r7, r6, r6, r7, r9, r6, r6], &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x68}, 0x94)
ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r9, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x6, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000001}, @alu={0x4, 0x1, 0x9, 0x6, 0x7, 0x30, 0x1}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0xdde, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x78, '\x00', 0x0, @fallback=0x29, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r11, 0x9, &(0x7f0000000b40)=[r6, r6, r7, r7, r7], &(0x7f0000000b80)=[{0x0, 0x1, 0x1, 0x6}, {0x4, 0x4, 0x10, 0x6}, {0x1, 0x3, 0x5, 0xc}, {0x2, 0x3, 0x5, 0x8}, {0x2, 0x9, 0xb, 0x8}, {0x1, 0x1, 0x4, 0x7}, {0x5, 0x3, 0xb, 0xf}, {0x5, 0x1, 0x7, 0x3}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0xff8a}, 0x94)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}}, 0x4000050)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000000000100000000000800000010800500", @ANYRES32=r0, @ANYBLOB="080000000000f500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000500"/20, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x20}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x6, 0x7, 0x0, 0x4, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0xc2, &(0x7f0000000080)=""/194, 0x41100, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0x0, 0x0, &(0x7f0000000200)=[r0, r0, r0, r12, r0, r0, r0, r0]}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r13, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r13, 0x0)

279.692878ms ago: executing program 2 (id=18):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 32)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@deltclass={0x0, 0x29, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x6}, {0xffff, 0x10}, {0xb, 0x2}}, [@tclass_kind_options=@c_hfsc={{}, {0x0, 0x2, [@TCA_HFSC_FSC={0x0, 0x2, {0x400, 0x2, 0x94}}, @TCA_HFSC_FSC={0x0, 0x2, {0x8000, 0x8, 0xcbd5}}, @TCA_HFSC_USC={0x0, 0x3, {0x3, 0x5}}, @TCA_HFSC_USC={0x0, 0x3, {0x1, 0xa525, 0x5}}, @TCA_HFSC_RSC={0x0, 0x1, {0x8, 0x2, 0x7}}, @TCA_HFSC_FSC={0x0, 0x2, {0x1, 0x81, 0x10}}, @TCA_HFSC_USC={0x0, 0x3, {0x7, 0xa, 0x2}}]}}, @tclass_kind_options=@c_cake, @tclass_kind_options=@c_hfsc={{}, {0x0, 0x2, [@TCA_HFSC_FSC={0x0, 0x2, {0x689, 0x801c, 0x9}}, @TCA_HFSC_RSC={0x0, 0x1, {0x565, 0x4, 0x101}}, @TCA_HFSC_FSC={0x0, 0x2, {0x736, 0xd344, 0x90a}}]}}, @tclass_kind_options=@c_clsact, @TCA_RATE={0x0, 0x5, {0x8}}, @TCA_RATE={0x0, 0x5, {0x0, 0x8}}]}, 0x2c}}, 0x0) (async, rerun: 32)
r5 = socket$unix(0x1, 0x1, 0x0) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x48, &(0x7f0000000400)=ANY=[@ANYBLOB="880402000000000007180000000326b7b8d59e71313300d19604e90f276ad3000000c400000000000000050200000502"], 0x30)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r8)
socket$unix(0x1, 0x2, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (rerun: 32)
r9 = socket$kcm(0x11, 0x3, 0x0) (async)
r10 = socket$xdp(0x2c, 0x3, 0x0)
recvmsg(r10, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x102) (async)
r11 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
r12 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x1, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x0, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0xe385a2e6, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x400005ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64)
sendmsg$kcm(r9, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0xe}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0xfffffffffffffd85}], 0x1}, 0x4000880) (rerun: 64)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r14, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0xff4, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x2, 0xfffd, 0xff, 0x0, 0x40000045, [0x0, 0x4]}}) (async)
socket$packet(0x11, 0x2, 0x300) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

206.468147ms ago: executing program 4 (id=19):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xfff3, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xa, 0x8}, {0x0, 0x9}}}, 0x24}}, 0x20004015)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0xffffffff, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xe0)

91.468395ms ago: executing program 2 (id=20):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@ccm_128={{0x304}, "e78aac5deb63c00c", "ac4c0b5c840bdb1b63c2c84395f6cc81", "1a0c00", "4c351428bfd92057"}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048045)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
socket$kcm(0x23, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

36.822822ms ago: executing program 3 (id=21):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x74198788314f5d4d}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x88a3}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x3, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x108}, 0x1, 0x0, 0x0, 0x8823}, 0x4008000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = accept4(r0, &(0x7f0000000280)=@sco, &(0x7f0000000300)=0x80, 0x800)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3565070180"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fd2f3e031c"}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xc, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
close(0x4)

0s ago: executing program 4 (id=22):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x410, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x800) (async)
getsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x48085) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000014c0)={{<r4=>r3, &(0x7f00000003c0)='/,\\-\x00', 0x1, &(0x7f0000000400)={@align=0xa, {0x7b0, 0x5, 0x4, 0x800}}, 0x401, &(0x7f0000000440), &(0x7f0000000480)=0x2}, {[0xde4, 0x80000000, 0x80000000, 0x5c8541e1]}, 0x0, 0x1000, &(0x7f00000004c0)=""/4096})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r4) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r4)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) (async)
recvmsg$can_j1939(r4, &(0x7f0000002c80)={&(0x7f0000001680)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001700)=""/182, 0xb6}, {&(0x7f00000017c0)=""/117, 0x75}, {&(0x7f0000001840)=""/229, 0xe5}, {&(0x7f0000001940)=""/119, 0x77}, {&(0x7f00000019c0)=""/183, 0xb7}, {&(0x7f0000001a80)=""/231, 0xe7}, {&(0x7f0000001b80)=""/113, 0x71}], 0x7, &(0x7f0000001c80)=""/4096, 0x1000}, 0x20) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), r4)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x14, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002e00)=r4, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002e80), r4)
sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x30, r8, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008001) (async)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000002f80)={0xfffffffc, {{0xa, 0x4e23, 0x3, @loopback, 0x43}}}, 0x88)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000003080), r9)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x3c, r10, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4805)
ioctl$FIOCLEX(r0, 0x5451) (async)
unshare(0x40000080) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r9, 0x4018f514, &(0x7f0000003180)={0x3, 0x7, 0x3}) (async)
bind$can_raw(r4, &(0x7f00000031c0), 0x10) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
socket$unix(0x1, 0x1, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000003340)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6453}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts.
[   57.924008][ T5606] cgroup: Unknown subsys name 'net'
[   57.994137][ T5606] cgroup: Unknown subsys name 'cpuset'
[   58.001665][ T5606] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.297920][ T5606] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.145157][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.155132][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.174321][ T4939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.181551][ T4939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.211594][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.217535][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.219103][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   61.226065][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   61.233697][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.240692][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.247644][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.262010][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.266483][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   61.269442][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.276425][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.284474][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.290997][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.297953][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   61.304669][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.311311][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   61.325104][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   61.329783][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   61.332735][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   61.343071][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   61.346804][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   62.417369][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.424768][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.431951][ T5631] bridge_slave_0: entered allmulticast mode
[   62.439006][ T5631] bridge_slave_0: entered promiscuous mode
[   62.448812][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.455993][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.463129][ T5625] bridge_slave_0: entered allmulticast mode
[   62.469601][ T5625] bridge_slave_0: entered promiscuous mode
[   62.482460][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.489643][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.496986][ T5631] bridge_slave_1: entered allmulticast mode
[   62.503618][ T5631] bridge_slave_1: entered promiscuous mode
[   62.513382][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.520492][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.527715][ T5625] bridge_slave_1: entered allmulticast mode
[   62.534260][ T5625] bridge_slave_1: entered promiscuous mode
[   62.597865][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.614594][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.623880][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.631186][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.638438][ T5628] bridge_slave_0: entered allmulticast mode
[   62.645038][ T5628] bridge_slave_0: entered promiscuous mode
[   62.656330][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.670934][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.678192][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.685354][ T5622] bridge_slave_0: entered allmulticast mode
[   62.692003][ T5622] bridge_slave_0: entered promiscuous mode
[   62.699959][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.709334][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.716593][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.723804][ T5628] bridge_slave_1: entered allmulticast mode
[   62.730288][ T5628] bridge_slave_1: entered promiscuous mode
[   62.746058][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.753198][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.760489][ T5622] bridge_slave_1: entered allmulticast mode
[   62.767220][ T5622] bridge_slave_1: entered promiscuous mode
[   62.795351][ T5631] team0: Port device team_slave_0 added
[   62.807319][ T5625] team0: Port device team_slave_0 added
[   62.817785][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.825104][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.832415][ T5619] bridge_slave_0: entered allmulticast mode
[   62.839056][ T5619] bridge_slave_0: entered promiscuous mode
[   62.846962][ T5631] team0: Port device team_slave_1 added
[   62.859017][ T5625] team0: Port device team_slave_1 added
[   62.871009][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.880579][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.887820][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.895170][ T5619] bridge_slave_1: entered allmulticast mode
[   62.901697][ T5619] bridge_slave_1: entered promiscuous mode
[   62.914337][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.930298][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.950807][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.960542][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.967635][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.994055][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.015055][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.022089][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.048071][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.064321][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.071345][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.097682][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.115832][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.125551][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.132699][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.158654][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.180353][ T5628] team0: Port device team_slave_0 added
[   63.187395][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.208754][ T5622] team0: Port device team_slave_0 added
[   63.216975][ T5622] team0: Port device team_slave_1 added
[   63.224305][ T5628] team0: Port device team_slave_1 added
[   63.236831][ T5619] team0: Port device team_slave_0 added
[   63.264129][ T5619] team0: Port device team_slave_1 added
[   63.280317][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.287588][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.313611][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.325551][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.332606][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.358611][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.380136][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.387265][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.402291][ T5623] Bluetooth: hci3: command tx timeout
[   63.413406][ T5621] Bluetooth: hci2: command tx timeout
[   63.419083][ T5634] Bluetooth: hci4: command tx timeout
[   63.424115][ T5626] Bluetooth: hci0: command tx timeout
[   63.429509][ T5623] Bluetooth: hci1: command tx timeout
[   63.435007][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.462642][ T5625] hsr_slave_0: entered promiscuous mode
[   63.468736][ T5625] hsr_slave_1: entered promiscuous mode
[   63.480676][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.487735][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.513744][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.527858][ T5631] hsr_slave_0: entered promiscuous mode
[   63.534102][ T5631] hsr_slave_1: entered promiscuous mode
[   63.540023][ T5631] debugfs: 'hsr0' already exists in 'hsr'
[   63.546064][ T5631] Cannot create hsr debugfs directory
[   63.554827][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.561870][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.588072][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.613466][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.620449][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.646550][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.699070][ T5628] hsr_slave_0: entered promiscuous mode
[   63.705513][ T5628] hsr_slave_1: entered promiscuous mode
[   63.711378][ T5628] debugfs: 'hsr0' already exists in 'hsr'
[   63.717139][ T5628] Cannot create hsr debugfs directory
[   63.737667][ T5622] hsr_slave_0: entered promiscuous mode
[   63.744030][ T5622] hsr_slave_1: entered promiscuous mode
[   63.749920][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[   63.755720][ T5622] Cannot create hsr debugfs directory
[   63.790509][ T5619] hsr_slave_0: entered promiscuous mode
[   63.796606][ T5619] hsr_slave_1: entered promiscuous mode
[   63.802800][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   63.808539][ T5619] Cannot create hsr debugfs directory
[   64.039496][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.048489][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.056417][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.065088][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.073087][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.081516][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.092049][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.100765][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.130094][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.138863][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.146814][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.155636][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.164021][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.173680][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.187002][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.195528][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.241405][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.250175][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.258973][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.268355][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.276143][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.285171][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.293139][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.301433][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.363283][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.371779][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.381310][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.389858][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.403858][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.412407][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.420021][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.429093][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.460626][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.499001][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.508556][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.516700][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.526103][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.538766][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.547460][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.555935][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.565332][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.574533][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.588030][ T5625] 8021q: adding VLAN 0 to HW filter on device team0
[   64.613866][  T978] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.620989][  T978] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.630422][ T5631] 8021q: adding VLAN 0 to HW filter on device team0
[   64.651875][  T978] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.659012][  T978] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.667851][  T978] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.674968][  T978] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.694062][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.701154][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.737225][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.779122][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[   64.797340][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.804448][ T3296] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.816881][  T114] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.824025][  T114] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.847276][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.906161][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   64.936585][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.943751][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.957126][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.974955][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.982142][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.027062][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   65.064988][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.072189][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.101208][ T3362] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.108386][ T3362] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.480929][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.489712][ T5623] Bluetooth: hci1: command tx timeout
[   65.495539][ T5634] Bluetooth: hci4: command tx timeout
[   65.495660][ T5621] Bluetooth: hci2: command tx timeout
[   65.501001][ T5634] Bluetooth: hci0: command tx timeout
[   65.506512][ T5626] Bluetooth: hci3: command tx timeout
[   65.593546][ T5631] veth0_vlan: entered promiscuous mode
[   65.609871][ T5631] veth1_vlan: entered promiscuous mode
[   65.633427][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.678332][ T5631] veth0_macvtap: entered promiscuous mode
[   65.700736][ T5631] veth1_macvtap: entered promiscuous mode
[   65.735824][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.766052][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.807143][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.835593][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.860114][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.878946][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.898708][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.960552][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.015014][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.034977][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.063477][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.090693][  T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.098572][ T5622] veth0_vlan: entered promiscuous mode
[   66.103375][ T5622] veth1_vlan: entered promiscuous mode
[   66.106269][  T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.110934][ T5628] veth0_vlan: entered promiscuous mode
[   66.149370][ T5628] veth1_vlan: entered promiscuous mode
[   66.160838][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.177087][ T5619] veth0_vlan: entered promiscuous mode
[   66.227807][ T5625] veth0_vlan: entered promiscuous mode
[   66.239104][ T5805] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'.
[   66.250351][ T5628] veth0_macvtap: entered promiscuous mode
[   66.260720][ T5619] veth1_vlan: entered promiscuous mode
[   66.273034][ T5628] veth1_macvtap: entered promiscuous mode
[   66.299812][ T5622] veth0_macvtap: entered promiscuous mode
[   66.320016][ T5625] veth1_vlan: entered promiscuous mode
[   66.348179][ T5622] veth1_macvtap: entered promiscuous mode
[   66.371016][ T5619] veth0_macvtap: entered promiscuous mode
[   66.375081][ T5810] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.7'.
[   66.387386][ T5810] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.7'.
[   66.405742][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.418981][ T5619] veth1_macvtap: entered promiscuous mode
[   66.450048][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.468337][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'.
[   66.471652][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.478076][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'.
[   66.495939][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'.
[   66.499725][ T5625] veth0_macvtap: entered promiscuous mode
[   66.507434][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'.
[   66.512948][  T978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.519047][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'.
[   66.529736][  T978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.539151][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'.
[   66.555432][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'.
[   66.556256][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.574752][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.588571][ T5625] veth1_macvtap: entered promiscuous mode
[   66.598323][  T978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.609273][  T978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.626373][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.790569][  T978] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.819805][  T978] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.829475][  T978] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.843875][  T978] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.861897][  T978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.884523][  T978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.911406][  T978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.920665][  T978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.935395][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.996093][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.057112][ T3296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.075596][ T3296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.085093][ T3296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.094007][ T3296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.095757][  T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.106320][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.111912][  T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.126715][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.144100][ T5820] TC_ACT_REPEAT abuse ?
[   67.173305][ T3296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.181833][ T3296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.197854][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.209369][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.291279][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.299401][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.368501][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.395223][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.441762][  T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.467088][  T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.549385][  T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.562377][ T5621] Bluetooth: hci0: command tx timeout
[   67.563725][ T4939] Bluetooth: hci4: command tx timeout
[   67.567824][ T5634] Bluetooth: hci2: command tx timeout
[   67.573458][ T4939] Bluetooth: hci3: command tx timeout
[   67.584105][ T5626] Bluetooth: hci1: command tx timeout
[   67.607155][  T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.700898][ T5838] syzkaller1: entered promiscuous mode
[   67.707053][ T5838] syzkaller1: entered allmulticast mode
[   67.724591][ T5626] block nbd0: Receive control failed (result -1)
[   68.050469][ T5867] sctp: [Deprecated]: syz.4.19 (pid 5867) Use of int in max_burst socket option deprecated.
[   68.050469][ T5867] Use struct sctp_assoc_value instead
[   68.089683][ T5867] Zero length message leads to an empty skb
[   68.239489][ T5875] ------------[ cut here ]------------
[   68.245091][ T5875] !sock_allow_reclassification(sk)
[   68.245107][ T5875] WARNING: drivers/block/nbd.c:1249 at nbd_add_socket+0xf35/0x12c0, CPU#0: syz.2.20/5875
[   68.260322][ T5875] Modules linked in:
[   68.264340][ T5875] CPU: 0 UID: 0 PID: 5875 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) 
[   68.273525][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   68.283727][ T5875] RIP: 0010:nbd_add_socket+0xf35/0x12c0
[   68.289338][ T5875] Code: f7 e8 6f b5 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 02 55 8c e8 2b a8 1b fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac 60 b5 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 5e 2e 97 05 44 89 e9 80 e1 07 fe c1 38
[   68.309053][ T5875] RSP: 0018:ffffc900056af160 EFLAGS: 00010283
[   68.315313][ T5875] RAX: ffffffff86109574 RBX: 1ffff1100ad32039 RCX: 0000000000080000
[   68.323387][ T5875] RDX: ffffc9000e8f2000 RSI: 000000000000019c RDI: 000000000000019d
[   68.331413][ T5875] RBP: ffffc900056af250 R08: ffff88802b60ad9f R09: 1ffff110056c15b3
[   68.339819][ T5875] R10: dffffc0000000000 R11: ffffed10056c15b4 R12: ffff888056990000
[   68.348221][ T5875] R13: 1ffff92000ad5e38 R14: dffffc0000000000 R15: 0000000000000001
[   68.356295][ T5875] FS:  00007fb4e02ed6c0(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000
[   68.365627][ T5875] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   68.372318][ T5875] CR2: 00002000000027c0 CR3: 000000007ddbe000 CR4: 00000000003526f0
[   68.380355][ T5875] Call Trace:
[   68.383716][ T5875]  <TASK>
[   68.386677][ T5875]  ? __pfx_nbd_add_socket+0x10/0x10
[   68.391905][ T5875]  ? __nla_parse+0x40/0x60
[   68.396405][ T5875]  nbd_genl_connect+0x133d/0x1c10
[   68.401460][ T5875]  ? __pfx_nbd_genl_connect+0x10/0x10
[   68.406929][ T5875]  ? rcu_is_watching+0x15/0xb0
[   68.411732][ T5875]  ? trace_kmalloc+0x2a/0xf0
[   68.416451][ T5875]  ? __nla_parse+0x40/0x60
[   68.420901][ T5875]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[   68.427305][ T5875]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[   68.434068][ T5875]  genl_family_rcv_msg_doit+0x233/0x340
[   68.439657][ T5875]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   68.446240][ T5875]  ? __pfx_stack_trace_save+0x10/0x10
[   68.451659][ T5875]  genl_rcv_msg+0x614/0x7a0
[   68.456248][ T5875]  ? __pfx_genl_rcv_msg+0x10/0x10
[   68.461311][ T5875]  ? __pfx_nbd_genl_connect+0x10/0x10
[   68.466826][ T5875]  ? __netlink_lookup+0xc6/0x8b0
[   68.471819][ T5875]  ? rcu_is_watching+0x15/0xb0
[   68.476729][ T5875]  netlink_rcv_skb+0x226/0x4a0
[   68.481537][ T5875]  ? __pfx_genl_rcv_msg+0x10/0x10
[   68.486629][ T5875]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   68.491959][ T5875]  ? down_read+0x2be/0x330
[   68.496491][ T5875]  genl_rcv+0x28/0x40
[   68.500502][ T5875]  netlink_unicast+0x7bb/0x940
[   68.505349][ T5875]  netlink_sendmsg+0x813/0xb40
[   68.510148][ T5875]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.515592][ T5875]  ? aa_sock_msg_perm+0xf1/0x1b0
[   68.520564][ T5875]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   68.526030][ T5875]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.531353][ T5875]  ____sys_sendmsg+0x9b9/0xa20
[   68.536570][ T5875]  ? __pfx_____sys_sendmsg+0x10/0x10
[   68.541896][ T5875]  ? lock_release+0x4b/0x3c0
[   68.546868][ T5875]  ? import_iovec+0x73/0xa0
[   68.551487][ T5875]  ___sys_sendmsg+0x2a5/0x360
[   68.556336][ T5875]  ? __pfx____sys_sendmsg+0x10/0x10
[   68.556530][ T5885] netlink: 'syz.3.21': attribute type 13 has an invalid length.
[   68.561580][ T5875]  ? futex_wake+0x51b/0x5f0
[   68.561621][ T5875]  ? __fget_files+0x2a/0x420
[   68.561642][ T5875]  ? __fget_files+0x3a2/0x420
[   68.561665][ T5875]  __x64_sys_sendmsg+0x1b1/0x290
[   68.588440][ T5875]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   68.593986][ T5875]  ? rcu_is_watching+0x15/0xb0
[   68.598786][ T5875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.605440][ T5875]  do_syscall_64+0x174/0x580
[   68.610075][ T5875]  ? trace_irq_disable+0x3b/0x140
[   68.615251][ T5875]  ? clear_bhb_loop+0x40/0x90
[   68.620196][ T5875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.626179][ T5875] RIP: 0033:0x7fb4df39ce59
[   68.630650][ T5875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.650806][ T5875] RSP: 002b:00007fb4e02ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.659620][ T5875] RAX: ffffffffffffffda RBX: 00007fb4df616090 RCX: 00007fb4df39ce59
[   68.667677][ T5875] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000007
[   68.675722][ T5875] RBP: 00007fb4df432e6f R08: 0000000000000000 R09: 0000000000000000
[   68.684000][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.692009][ T5875] R13: 00007fb4df616128 R14: 00007fb4df616090 R15: 00007ffc82583168
[   68.700063][ T5875]  </TASK>
[   68.703194][ T5875] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   68.710510][ T5875] CPU: 0 UID: 0 PID: 5875 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) 
[   68.719647][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   68.729727][ T5875] Call Trace:
[   68.733027][ T5875]  <TASK>
[   68.735964][ T5875]  vpanic+0x56c/0xa60
[   68.739991][ T5875]  ? __pfx__printk+0x10/0x10
[   68.744587][ T5875]  ? __pfx_vpanic+0x10/0x10
[   68.749100][ T5875]  ? is_bpf_text_address+0x292/0x2b0
[   68.754406][ T5875]  ? is_bpf_text_address+0x26/0x2b0
[   68.759614][ T5875]  panic+0xc5/0xd0
[   68.763336][ T5875]  ? __pfx_panic+0x10/0x10
[   68.767762][ T5875]  __warn+0x315/0x4c0
[   68.771751][ T5875]  ? nbd_add_socket+0xf35/0x12c0
[   68.776693][ T5875]  ? nbd_add_socket+0xf35/0x12c0
[   68.781627][ T5875]  __report_bug+0x331/0x530
[   68.786132][ T5875]  ? rcu_is_watching+0x15/0xb0
[   68.790900][ T5875]  ? nbd_add_socket+0xf35/0x12c0
[   68.795834][ T5875]  ? __pfx___report_bug+0x10/0x10
[   68.800877][ T5875]  ? rcu_is_watching+0x15/0xb0
[   68.805644][ T5875]  ? do_trace_netlink_extack+0x80/0x1d0
[   68.811204][ T5875]  ? __nla_validate_parse+0x2534/0x2d50
[   68.816782][ T5875]  ? __fget_files+0x2a/0x420
[   68.821394][ T5875]  ? nbd_add_socket+0xf35/0x12c0
[   68.826343][ T5875]  report_bug+0x16a/0x220
[   68.830689][ T5875]  ? nbd_add_socket+0xf35/0x12c0
[   68.835625][ T5875]  ? nbd_add_socket+0xf37/0x12c0
[   68.840562][ T5875]  handle_bug+0x9c/0x200
[   68.844813][ T5875]  exc_invalid_op+0x1a/0x50
[   68.849325][ T5875]  asm_exc_invalid_op+0x1a/0x20
[   68.854179][ T5875] RIP: 0010:nbd_add_socket+0xf35/0x12c0
[   68.859726][ T5875] Code: f7 e8 6f b5 20 fc bf e0 01 00 00 49 03 3e 48 c7 c6 40 02 55 8c e8 2b a8 1b fb b8 f0 ff ff ff e9 b2 fd ff ff e8 ac 60 b5 fb 90 <0f> 0b 90 e9 16 f8 ff ff e8 5e 2e 97 05 44 89 e9 80 e1 07 fe c1 38
[   68.879338][ T5875] RSP: 0018:ffffc900056af160 EFLAGS: 00010283
[   68.885417][ T5875] RAX: ffffffff86109574 RBX: 1ffff1100ad32039 RCX: 0000000000080000
[   68.893392][ T5875] RDX: ffffc9000e8f2000 RSI: 000000000000019c RDI: 000000000000019d
[   68.901365][ T5875] RBP: ffffc900056af250 R08: ffff88802b60ad9f R09: 1ffff110056c15b3
[   68.909431][ T5875] R10: dffffc0000000000 R11: ffffed10056c15b4 R12: ffff888056990000
[   68.917406][ T5875] R13: 1ffff92000ad5e38 R14: dffffc0000000000 R15: 0000000000000001
[   68.925390][ T5875]  ? nbd_add_socket+0xf34/0x12c0
[   68.930362][ T5875]  ? __pfx_nbd_add_socket+0x10/0x10
[   68.935565][ T5875]  ? __nla_parse+0x40/0x60
[   68.939988][ T5875]  nbd_genl_connect+0x133d/0x1c10
[   68.945019][ T5875]  ? __pfx_nbd_genl_connect+0x10/0x10
[   68.950417][ T5875]  ? rcu_is_watching+0x15/0xb0
[   68.955183][ T5875]  ? trace_kmalloc+0x2a/0xf0
[   68.959781][ T5875]  ? __nla_parse+0x40/0x60
[   68.964288][ T5875]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[   68.970619][ T5875]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[   68.976960][ T5875]  genl_family_rcv_msg_doit+0x233/0x340
[   68.982536][ T5875]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   68.988608][ T5875]  ? __pfx_stack_trace_save+0x10/0x10
[   68.993986][ T5875]  genl_rcv_msg+0x614/0x7a0
[   68.998496][ T5875]  ? __pfx_genl_rcv_msg+0x10/0x10
[   69.003523][ T5875]  ? __pfx_nbd_genl_connect+0x10/0x10
[   69.008904][ T5875]  ? __netlink_lookup+0xc6/0x8b0
[   69.013838][ T5875]  ? rcu_is_watching+0x15/0xb0
[   69.018608][ T5875]  netlink_rcv_skb+0x226/0x4a0
[   69.023468][ T5875]  ? __pfx_genl_rcv_msg+0x10/0x10
[   69.028494][ T5875]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   69.033965][ T5875]  ? down_read+0x2be/0x330
[   69.038393][ T5875]  genl_rcv+0x28/0x40
[   69.042383][ T5875]  netlink_unicast+0x7bb/0x940
[   69.047242][ T5875]  netlink_sendmsg+0x813/0xb40
[   69.052019][ T5875]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.057323][ T5875]  ? aa_sock_msg_perm+0xf1/0x1b0
[   69.062277][ T5875]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   69.067568][ T5875]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.072860][ T5875]  ____sys_sendmsg+0x9b9/0xa20
[   69.077636][ T5875]  ? __pfx_____sys_sendmsg+0x10/0x10
[   69.082929][ T5875]  ? lock_release+0x4b/0x3c0
[   69.087530][ T5875]  ? import_iovec+0x73/0xa0
[   69.092038][ T5875]  ___sys_sendmsg+0x2a5/0x360
[   69.096729][ T5875]  ? __pfx____sys_sendmsg+0x10/0x10
[   69.101954][ T5875]  ? futex_wake+0x51b/0x5f0
[   69.106502][ T5875]  ? __fget_files+0x2a/0x420
[   69.111109][ T5875]  ? __fget_files+0x3a2/0x420
[   69.115812][ T5875]  __x64_sys_sendmsg+0x1b1/0x290
[   69.120766][ T5875]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   69.126238][ T5875]  ? rcu_is_watching+0x15/0xb0
[   69.131004][ T5875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.137071][ T5875]  do_syscall_64+0x174/0x580
[   69.141675][ T5875]  ? trace_irq_disable+0x3b/0x140
[   69.146705][ T5875]  ? clear_bhb_loop+0x40/0x90
[   69.151408][ T5875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.157311][ T5875] RIP: 0033:0x7fb4df39ce59
[   69.161732][ T5875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.181343][ T5875] RSP: 002b:00007fb4e02ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.189785][ T5875] RAX: ffffffffffffffda RBX: 00007fb4df616090 RCX: 00007fb4df39ce59
[   69.197765][ T5875] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000007
[   69.205744][ T5875] RBP: 00007fb4df432e6f R08: 0000000000000000 R09: 0000000000000000
[   69.213736][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.221736][ T5875] R13: 00007fb4df616128 R14: 00007fb4df616090 R15: 00007ffc82583168
[   69.229715][ T5875]  </TASK>
[   69.233054][ T5875] Kernel Offset: disabled
[   69.237425][ T5875] Rebooting in 86400 seconds..