last executing test programs:

1m35.893646624s ago: executing program 2 (id=88):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x42040000)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000)
r4 = socket(0x15, 0x3, 0xa052)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xfffffffffffffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
unshare(0x22020600)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$int_in(r1, 0x5421, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa6280"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

1m35.737951952s ago: executing program 2 (id=92):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket(0x840000000002, 0x3, 0xfa)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x20000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x6ef5, 0x400003a, 0x7, 0x2240, r0, 0xe4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0xe}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r2}, 0x38)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x1c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}]}, &(0x7f0000000080)=0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r5)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010326bd7000030000000000000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x59)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r8, 0x0, 0x178}, 0x18)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r14, @ANYBLOB="24005a802000018014000300000006000600020001000700010005000500040036"], 0x40}}, 0x0)
r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r11)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r16=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, r15, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r16}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r17 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r17, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10)
sendmmsg$inet(r17, &(0x7f0000005240), 0x4000095, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r16, 0x29, 0x2, 0xed, 0xd0, 0x4e, @mcast1, @dev={0xfe, 0x80, '\x00', 0x11}, 0x80, 0x7, 0x2, 0xffffffff}})

1m34.862254499s ago: executing program 2 (id=102):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0xa1, 0xfffffffe}})
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0x9, 0x4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8)

1m33.843944s ago: executing program 2 (id=111):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000200000000000000001080000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x2b, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="1bc387f31bf6681b5b", 0x9}], 0x1}, 0x48005)
readv(r5, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r9, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/103, 0x67}], 0x1, 0x4, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
mmap(&(0x7f0000440000/0x3000)=nil, 0x3000, 0x2, 0x110010, r1, 0xf5cc9000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1m33.734208s ago: executing program 0 (id=112):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x9, 0x6, 0x3, 0x1}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20044055}, 0x0)
r3 = accept4$tipc(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x180000)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000200)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8)
getsockopt$sock_buf(r4, 0x1, 0x34, &(0x7f0000000340)=""/243, &(0x7f0000000440)=0xf3)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "05bedaabb374a8478d258b3897"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x48}}, 0x24040800)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000011c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000000680)={0xaf0, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x4}, @broadcast}}, @NL80211_ATTR_FRAME={0x61d, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_b, @from_mac=@device_b, {0x3, 0x1}, @value=@ver_80211n={0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x1}}, 0x2500, 0x8, @device_b, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x6, 0x1}, {0x60}, {0x1, 0x1}, {0x6, 0x1}]}, @val={0x2d, 0x1a, {0xc, 0x0, 0x6, 0x0, {0x4b, 0x3, 0x0, 0x81, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x5}}, [{0xdd, 0xca, "6dab791690456dcb943d2b60214c9feef73298aad568728adc7e11eea7c86050bf71f6f04e818d0248a2c2ef63ea21c9fc2bd37fef775ffd21bb85d6fa34e54087a4741af1b77c5adb444a2881f72ad9eea0b9d8d9a580500ce8b86563070b926ba15b1bd7c1ec3a98b7480d6a00fe2844baac71ad7bc661a119b21a864697dddb872ecdd444032be4e317845664f5840fa171dc59ee66ea5d3d0f87c5d538957d0e883c03f4e329d3153e060d1f8288eaec035d7ba705155551f422fb4dcbf14f29bba43a96ae6be1b5"}, {0xdd, 0xf6, "7f85d172871725e3e3b9c04c5a95924386e621b08e747a128a6d4e7ce570e5a8562bc60f74684ed3ed2b5cdc03cdffa5b7d03051a56a731321ff050d81e6fbecb6784c2d052606f790d755fc6a7ffbbecf683bfaec2ffb4cb6bdae2d1ed3aaeb4afb356ff0b68f85ae56fac1c58132161084128d1140d57d59aaaf9cac5d71cdb10ad69e32ddf0f1bc86215dc8a7950df85a415f9abd766a8d36eca7d0da33b23deb32f4f96a2abd6b36af2a1347621f355ac5631bc381343f15d2c90082a55304b3c7d7b6d1dd7ac781222ac837edd3828cb33edd58a1d61e9ac8df3f8d827c090b6c9507e6741368489e553d6e343119c3540c57d6"}, {0xdd, 0x2c, "d53ebef2bb504753331658d645eeb7a510a02c26f02e0b90d44ad915ea61a03d80a81d5f321b380257b6cc84"}, {0xdd, 0x27, "62c40dedd4749c679d588c4147104c17c2c6bc65b6b7262d939fe2e76dbef13ae1a039ac82524f"}, {0xdd, 0xa4, "a91ba16d0e5eb2f4bfaaa98edcf20436e0a8f266188d9e5076328717d99216ff21c0b8d4e012c087207218d06f01dc158f7a33105c17a9bb7820ee5286c58ea6788117496e365f881b5f8929c9e1ace75273f74593dfdc18136ab8be82fc128daba4ebeab9ac4a6d7f51ed03ab4d41fe57f1369ab2f9933d368d4fd77cd938453b6b4cd0c394f7215c6674f1b9e5fe5c7a53f8b63147566fa6b098a5f089879b760ef123"}, {0xdd, 0xd7, "a2e0559d4bd9353042080fb9c98473a9937758700c4196de300f9e86a31932bbd1f58343aa47930114e4eb4af1444f0627dde62de7f8f17197d5c555c153a6428c97232cda81bcea26427844a58cf41cd71c0d5ad9b273f984ee0ba211f888e84c81efeee6f7ce8c52053032c651f1187340193f3cd262d826e66f1c6d79a3faedcc5ca26cbf2fbddd0e962907a8cd3d1c642440187627d10d6735e4a7247d16aec8f906ea3f3c3edad37da81e40fe0db48486de84e79949e8e13ea3f2914a9c8b46313e63aacdf848fd9b5b7a6f6702452f44d31f1abb"}, {0xdd, 0xe7, "68310c180ca443d9e3eac1a52ee40fe36d483dc17f1b187f240e09ffb2403fbb15116e20bf7d4216778bcc572e75ba9070781be0286caecdf49d006a0e8ff5a524d23afdc3887c5d78da155f464aa507c56f631ee0b3ddfbbebb317ec920b453c143ecc862e9ce071d73af6401fcde2cdcabcad4bbefe1e1d592600c9b803e33994e3c87beca5b950ec8aa2006a710ddc55191c99e998978a8df1df287a2d62c1a1b94668e72c190a04c5b75d4ba8ff36bbfceccdc6808dba1d03fd45c874a1e56a7761e6a94fa821adc664609c6b4f4d4f4d6e2051e505b4b4c55f1c0cfe7f675eab67cf3f3cd"}, {0xdd, 0x57, "ba76eccf2a90d4a5bc80309a13bdcd4817f5c1cc1a09b6703b8d2fee23b748154321f7d161cebf788d23c2c71c63c835708634d45d91fbb6b77320073677084ed7ebac9992b3b25aa54efdd791adce350dc96abc205f7c"}, {0xdd, 0xeb, "2b96eb00baf8484dab0de6e7dcbf85349101bf09ac4f57ef988b8511549632f81501104470af75177c259b084b7775331ed1907f9fc26439eb9d73ec1dff6800d45ecf367f206b963cde884dec62d2b0315141b3061b0a41ff36b7ae64686ac4846f8f0dbc5227b0f39c86c2760c5fe36db650a7be88454ce66c9054492c12740f68002b077c52fbbf83cac263fb336a3b42b007dcf38eda3f8eb5bf97e6ed5ecb52a03f493143247e13d418293b3ba8956634e69e6ae71d4f12b69aac411e5f7b1e676f5f3a0746b29edbb132bd1809ca4c5247f7608b6af3043897b3669d0a397190156ab275adc40ea8"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x466, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xb}, @device_a, @device_a, @from_mac=@broadcast, {0x6, 0x5}}, 0x87, 0xe, @default, @val, @val={0x2d, 0x1a, {0x405, 0x3, 0x7, 0x0, {0xffffffffffffffff, 0xc8, 0x0, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x4, 0xfc}}, [{0xdd, 0xd8, "6411a083f13496d7bed087149482506b7a1128af8bf854ca481f6723cbc7543fef33bda2ca1a56f7d532f9dfbcd7de0621597b0dfac883f9083f9f0f64cefcbd3159a8dc839ec4ce6d235ea69531a7f80d8b8949a3298accdb61c0a4357cac041dc5ef96eaa94e33b9d21003213f5f244f7512251d8afe45eb0b0227a1a7dcbc702cf684fa87ed280d4617fb0ad581ce58c7a50b9a59f438a4d865f4295931396aa9110578ba4aa6898329655ac1ea70940bbe08950d420eb63d1934844ecf05aa3e96010c275884e6bd1dcd37870c19606ca65bf298f8b7"}, {0xdd, 0x33, "0b13dc11b6921351c09c4c88a6dbfc3d054d166caf3cc07b96f3935ebb5c307fa6d7e4bcb0b66c6813d52c3327c8f629fec4cc"}, {0xdd, 0x28, "c7e450b443764addd9dbc914cb39fecfe37bec34fb8761869a461817684d16b6fb93a10f806afeb5"}, {0xdd, 0xfb, "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"}, {0xdd, 0x8, "6b37e9bf58961c19"}, {0xdd, 0xbd, "4c3ed8192249bf8e8ac2d432624f3a540dad9e6d6a0c8016cb9dfdd0c1af7e48ae9d0d9c327547bb368f6178b8a304e068bf11e97d3170ab778840f8ebfbccb38248b368ca037704323a17534c9d8f3a2436faad44347818d6fdb3e7980ac89d131547597e1467b396071ca40b0808d9d0d7c56c63fb848f653d1fd1631b8b70d58100da0c19dbdaf9138a30d95f1638f2631610fb10bf9bd3f578b7b62502b7b8a5fbd070bcdaf76d057922d755de9128fe177310be28c412f6b6ae21"}, {0xdd, 0x2c, "1d70574122ba0526477a8b2888ffedbd8b6231a4dffdd0602484bddeacf15a21d9dd3eb51815b92b3110b21d"}, {0xdd, 0xf7, "1381194f3abe06680867709bca6d570713ec3c42d06879b84e556f945697b0c3e8ce089b0999c920a34a3b79419a752566883475949669d14d1a1740c4b51164c2bff87be778fc8913f4345f45f3a5d70067ca46ab309549d8f98e3e3c8b8d0b4c1e81fd10e010caa06c658965bf3cbaf202d4387e40df025fb0961ee074ac218eecdfc1a80cb7fb8b9afd970f1df41cfda29aedd311471ecde12a6b78d3fb47dc4e0a532494396c0fd0f3e41bc54b00522a60083c2445eaff1e62e5a6fdb6734992eec66aa2f2abe90586873988889aea7a32a16ec2237761c61e693a4fe8af3204256c6dfabc54f3620140c52137f30be8905b1ac2d3"}]}}, @NL80211_ATTR_MAC={0xa}]}, 0xaf0}, 0x1, 0x0, 0x0, 0x4dccadd7804aecc5}, 0x20000094)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000001200)=0x5, 0x2)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001240)=""/67, &(0x7f00000012c0)=0x43)
setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000001300)=0x1ff, 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000001340)={0x3, 0x4, 0x1d, 0x170e124c, @vifc_lcl_addr=@empty, @remote}, 0x10)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x7c, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008040}, 0xc000)
ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0)
recvmmsg(r8, &(0x7f00000029c0)=[{{&(0x7f00000014c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001540)=""/217, 0xd9}, {&(0x7f0000001640)=""/37, 0x25}, {&(0x7f0000001680)=""/35, 0x23}], 0x3, &(0x7f0000001700)=""/90, 0x5a}}, {{&(0x7f0000001780)=@ax25={{}, [@bcast, @null, @null, @null, @null, @null, @netrom, @rose]}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001800)=""/172, 0xac}, {&(0x7f00000018c0)=""/183, 0xb7}, {&(0x7f0000001980)=""/78, 0x4e}], 0x3, &(0x7f0000001a40)=""/170, 0xaa}, 0x80000001}, {{&(0x7f0000001b00)=@pppol2tpin6={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b80)}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/144, 0x90}, {&(0x7f0000001d00)=""/49, 0x31}], 0x4, &(0x7f0000001d80)=""/24, 0x18}, 0x9}, {{&(0x7f0000001dc0)=@x25, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e40)=""/244, 0xf4}, {&(0x7f0000001f40)=""/200, 0xc8}], 0x2}, 0xfffffff7}, {{&(0x7f0000002080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002100)=""/179, 0xb3}, {&(0x7f00000021c0)=""/91, 0x5b}], 0x2, &(0x7f0000002280)=""/95, 0x5f}, 0x8}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002300)=""/172, 0xac}, {&(0x7f00000023c0)=""/212, 0xd4}, {&(0x7f00000024c0)=""/109, 0x6d}, {&(0x7f0000002540)=""/137, 0x89}, {&(0x7f0000002600)=""/162, 0xa2}, {&(0x7f00000026c0)=""/115, 0x73}, {&(0x7f0000002740)=""/87, 0x57}], 0x7}, 0x4}, {{&(0x7f0000002840)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002980)=[{&(0x7f00000028c0)=""/64, 0x40}, {&(0x7f0000002900)=""/72, 0x48}], 0x2}, 0xa}], 0x7, 0x40, &(0x7f0000002b80))
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000002bc0)={<r10=>0x0, 0x8}, &(0x7f0000002c00)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000002c40)={r10, @in6={{0xa, 0x4e23, 0x49, @mcast1, 0xc}}, 0x9, 0xa}, 0x90)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000002e40)={'erspan0\x00', &(0x7f0000002d40)={'sit0\x00', <r12=>r5, 0x700, 0x1, 0x166, 0x5, {{0x37, 0x4, 0x3, 0x3a, 0xdc, 0x66, 0x0, 0x1, 0x2f, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x14, 0xef, 0x0, 0x1, [0xb0, 0x200, 0x200, 0xfff]}, @cipso={0x86, 0x51, 0x1, [{0x0, 0x11, "a0f0932f4e881bc14dec4b12be54c4"}, {0x1, 0x10, "88f3e03ea93a58201141c80456ed"}, {0x2, 0x9, "629b07529a44e4"}, {0x1, 0x10, "abf57a435298bcf3686416eeb62e"}, {0x5, 0x11, "63559a6c8c3dcf6639b81db444b777"}]}, @cipso={0x86, 0x2c, 0x3, [{0x2, 0x4, "5ae6"}, {0x3, 0xf, "e171dd32918664c3d9ddeb7beb"}, {0x5, 0x4, '{\''}, {0x5, 0xf, "5701fec5027b6491a89c70ce2b"}]}, @timestamp={0x44, 0x18, 0xa6, 0x0, 0x5, [0x677015af, 0x7, 0x1, 0x3, 0x802]}, @lsrr={0x83, 0x1f, 0xb8, [@local, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000003000)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002e80)={0x11c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x44}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4008004}, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(r9, &(0x7f0000003040)={0x2, 0x4e21, @local}, 0x10)
connect$l2tp6(r9, &(0x7f0000003080)={0xa, 0x0, 0x200, @mcast2, 0x8, 0x1}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000030c0)={'vxcan1\x00'})
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000033c0)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x74, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x2}, 0x10008000)

1m33.664707774s ago: executing program 0 (id=113):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
writev(r0, 0x0, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="000000000000000800000085000000a500000095000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x40001023, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) (rerun: 32)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x50}}, 0x0) (async, rerun: 32)
r5 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32)
sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0)
sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xfdf6}}, 0x0) (async, rerun: 64)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r7)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) (async)
r9 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000)
setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000240)=0x37e, 0x4) (async)
r10 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r11)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r11)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1m33.613840088s ago: executing program 1 (id=114):
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@remote, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '@\x004', 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x60, 0x2, 0x21, 0x0, [@empty]}]}}}}}, 0x0) (async)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000003100000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
vmsplice(r1, 0x0, 0x0, 0xa)
r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32)
unshare(0x24060400) (async, rerun: 32)
r3 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) (async)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000180)={0x1, 0xd27}) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async)
r5 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001780)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) (async, rerun: 32)
sendmsg$nl_route(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x4, 0x70bd29, 0x25dfdbff, {0xa, 0x20, 0x10, 0xff, 0x7, 0x0, 0x0, 0x3, 0x10}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8008000}, 0x0)
syz_emit_ethernet(0xaa, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050e86dd6eee976220740601fc02000000000000000000000000b413000000000000000000000000000000000c000998670000000606040307400900fe8000000000000000000000000000bbff020000000000000000000000000001fe8000000000000000000000000000bb84000501680000000000000000000000000000000000000300004e2100004e220000000200000003000000030000000100000000"], 0x0)

1m33.613112484s ago: executing program 1 (id=115):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x21, 0xa, 0x10000)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
recvfrom$netrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000102f00002c001237e0ec197da46796800b0001006772657461705e691c00028006000e000200000008000700e0000001060010001faf185522c9034f5d28095a7b5ef6f4a1239a01a063500126e5cba38fc510f303ef5e709223bb6ff126c7c84f05a9855b1fea22500206bc1d163a788ddfd28d9d17c076a9b843e859138f96b6201a0ab257de22e4e4e629b11fede1b6ab08e528f897389f61", @ANYRES32=r5, @ANYBLOB], 0x54}}, 0x4000)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000032628b1ea673dfd5f4becea560ee63a2e61b4bdbacee02ffde26c9864846e50913bf485dfc618d121c6d1177c68ca47629f2d3e5969a042b47a7e5bcab0cd01348f8fa291b7b4d721888beb81aa718a1b1be2e7b13a5a6393db3da159ce0b46d5c7fbf841a9085d18ad005cde3cbdbcea7c8d4cf21f618c44b6964e20c49b0b5dc23a0a60b996b24ee68af3d1802a8873655d9b3a7a338621635b1989fb7f5bf38503f71fe2b0cca6989f34affbf5c3dacff6bb15d04a7c9364a6261a0388fa22263f5d6a0017cd437550000", @ANYRES16=r6, @ANYBLOB="020029bd7000fddbdf250800000008003900070000000a000900000000000000000008000300", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000080}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x48000280)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)

1m33.554701207s ago: executing program 0 (id=116):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') (async, rerun: 64)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
r2 = socket(0x8, 0x3, 0x0) (async)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async)
r4 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000400)=0xfffffffffffffff7)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0xc9}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES64=r7, @ANYBLOB="00000000280012800b000100677265"], 0x48}}, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) (async, rerun: 64)
r9 = openat$cgroup_ro(r6, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f0000000180), &(0x7f0000000340)=r9}, 0x20) (async)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f00000000c0)=0x41004, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000080)=0x2, 0xfffffffffffffe96) (async)
getsockname$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f00000003c0)=0x1c)

1m33.44437394s ago: executing program 0 (id=117):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}]}, 0x28}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="083aba64309b99b5a41b8d3ee3c48a9661b59d6b2ce4979962b6651cff3fdc19af2780a0614403742a24bf759f8cf87846fe81ae68cb4c8ee65b703deedb51b0b82d036e1c0d1bd6deef620fa7cd305709fec4f9b63bc1393a9c0af53c92f66f4dcd43d9592a8f2d763cee0896828109eb6480e654bd072a1b077137273d363871837c2a5f8246221bf08134db8fb54d0cb34d6a128d60a2"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2ec}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="58f76b8f1d400000975b4916f9edfadf84e76c35", @ANYRES32=r3, @ANYBLOB="00000000000000002000128008000100736974001400028006001000018000000800140008000000"], 0x40}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
getpeername$packet(r0, &(0x7f0000000700)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'vxcan1\x00', <r8=>0x0})
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000840)=<r9=>0x0, &(0x7f00000008c0)=0x4)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000900)={@empty, @remote, <r10=>0x0}, &(0x7f0000000940)=0xc)
r11 = socket(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xc}, {0xfff2}, {0xfff1, 0x3d}}}, 0x24}}, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000ac0)={0x1d8, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x947d8347897abcb7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40}, 0x20051)
pipe(0x0)
r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r16, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r15, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0)

1m33.241496662s ago: executing program 0 (id=118):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000004000000010000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000007dd15410146fe544e81ff48d706e34e59bc600120000000000000000000000000000009f2c60dd0dd9fc6a2ff82e21d9ccd0c9971b9fbe89"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x10000000}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$can_bcm(r5, 0x0, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x2)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)

1m33.134577174s ago: executing program 1 (id=119):
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

1m33.064619434s ago: executing program 1 (id=120):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x69, r3})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0x0, 0xb}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)

1m32.704827943s ago: executing program 0 (id=121):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000001580)='syzkaller\x00', 0x9}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8001, 0x0, 0x1}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_OFFSET={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c80)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xc, 0xf, 0x3, 0x40, 0x8, 0x3, 0x7, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x300, 0x0, 0x30141}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x58}, 0x1, 0xba01}, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x200}]}, 0x10)

1m32.6327375s ago: executing program 2 (id=122):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRES32], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="7a7ab03581fbdc79d2c2dd7e67d6abda439f274bb07ecdcd11851f9edc16049884bc730352a5cc59366895ddef869af836db2b699b4765a0c3073993f113c8c047c9e63df7a99f5c893beac495de2d60c9b90faa26fcc799e8faf9899dfa88e1b41c", 0x62, 0x24040040, &(0x7f0000000340)={0x2, 0x4e20, @rand_addr=0x4}, 0x10) (async)
sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="7a7ab03581fbdc79d2c2dd7e67d6abda439f274bb07ecdcd11851f9edc16049884bc730352a5cc59366895ddef869af836db2b699b4765a0c3073993f113c8c047c9e63df7a99f5c893beac495de2d60c9b90faa26fcc799e8faf9899dfa88e1b41c", 0x62, 0x24040040, &(0x7f0000000340)={0x2, 0x4e20, @rand_addr=0x4}, 0x10)
socket$igmp(0x2, 0x3, 0x2) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x2, 0x9, 0x1, 0x0, @vifc_lcl_addr=@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x37, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
pipe(&(0x7f0000000040)) (async)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0x10500, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c000000008002907800000000e000030000009078006400d2157fff8a66db1854756b81b7e8b38f540c9e2f81a411ff791acec316f4703004b6b895a2b189dc61c81dab8c1f28c400b9ecd149c1"], 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c000000008002907800000000e000030000009078006400d2157fff8a66db1854756b81b7e8b38f540c9e2f81a411ff791acec316f4703004b6b895a2b189dc61c81dab8c1f28c400b9ecd149c1"], 0x0)
socket(0x2, 0x80805, 0x0) (async)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000240)={r8}, &(0x7f0000000280)=0x8)
r9 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080)=0x12, &(0x7f00000002c0)=0x1) (async)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080)=0x12, &(0x7f00000002c0)=0x1)
unshare(0x62040200)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000840)={{r2}, "8874221cfea8439c08a5b05eaf4bb57264598548ef623f8c59036b872938273be4a143ae2a4651169943eb472027a5e855829fdf35bcb45201d61c2ee7b762b09864e5fa3c811e90b24722b2068f47d3ccb853e379bd791c4fab67f4f9f97942638f8acc0a2ad69318ad208d8a39691f3ab74af82425b42b27441b66dfa15be2d45fabd54571ee9e550897223864d79e7a6dbb0be525a44d8e44c31edfaa6f2c3afd7724b602763d9676dc11542ca00354a865636e9128ae0d314d870c103acdac445a8c4ad5a5f8300bbaf49a1e300caeb69b4f504d56aa4b237cc0ae9a3ac9ae650265d108901d49c1266a69662731f129f3864fc15ef4dc75594a40150acff24d159461596c35a45cc2d2d2389ae94f24ebaf3d828023e550801d7c01c492bff9bd6d30324a30e5d72d5b884656a44a2553e257b1e792e1ff043a9702cad9a2399cdbbd3efa1c348d57c7aa91c634b8004fc868f670c8df158bd961bc25580661001741f3b3323f58653292e54dd717bfc8aa070204a3ceb950ebb910b5b6c6d5bc613b5d5fef557624e3175e2a1b97410241d1677d1b84646bc8e495f567a4ee0a7edf04b5ffa3561f9664dcc85e6aacaf1207264dcc0a97d268c80aad6ed0c67245060be5a2b512df040d33e61d1937ab3e3bee27be2956bcabd37b9485d96412ed25c47b5359858488943553af54be762f0575f217b177002e35589cc0ad1822c0463326abc8b22bc70ce7ab24b5733d60442d5e5efd1cac860a1e11de43861a0c2fefb2a72f5fafd470dea3577ea774ed3dc08fc64d4ddade043936108b7ad78a07fcc61c4900ba015d01b36671a6e5cfd4f76a21648fed2cd751334fa9db1d4d70ac93796d90743b24172f8ab18baaef7980800d36abdf8e6bba2132785b6df3f058189de7ba0071125ef90b3965b4f21df0b060c671a50b9a7a0fc37f7c3b3fc3eff73063a61771582b69c21ff7d2833c582005aa0a4a1990de1e2bedf478ba3ddeb9667a2b255ca1322ae8261bbf966bbb370de6d079bea66815ba7cc40cf0af298d7dc6c178f40faa1a0ef2946ff813ca120a971ca3633204618eaccbe22c327bb3898d8e88555ad55bf169137c90526fe233dc153a38d746b458690f008835e9258f69b71046a43a2ac094dfd66b5a869afecbab1f5d6eaaa752bc810c46f5cdded98873b844442b6b28397e00264c65f0a292a34afa1767d1a6b3873b4629412c0e7d2762c065713a8273958b5ad0f1cf79caedaef03ce8aaee846ef9da22c3b166e5630768d4c25e6b57cc3dc5a4d8ebfa9debf59873dd379b44d6407230180ce4ed1d394f9d61aec8c4cf45a43534b7d746ef80782e7e847024200f1477ef8b605d103dddffddb536ebb69f7fbc4181881fca16de6c56e9f0bde27dfaf4cbab8c840ab3911dd183adfc7f06dd582d4511e232895d8a0511befdfc134efcc9cab560b7b3083ffb62cc3a5cdeea537f48be215ff6516007442cb8dc59839c37119746bc1a476bbe63ce8f144e3b775da84fe52563e4c238c00425a6cdfb30d5d9f3834f34b493c259fb1033b012bbe8e4905088a1ee9ce1ec18415b3f465a7210b954be6b57e1c28c8619f1e77f74879f292b29ae6dde774f7e098ea1ba4a8298ffd879c21ecfe0402895f85c369bb18afeb3bf410ba20bd2e9e62f5645c26af434fa57ed52992644a94229a615699a397173db4a10a1d0b058a3e11cb550c9ad2467ba2aa4905d0835fcce108995f7fdc10c3d9fa897200f2e9158a98fd7d5df68431f3b293c6562235671d49aeba42c71fe29164e0b2c94032937bec9cd4f5ea8b8f9a4e289f4c731b6d07f4fa71dce75bfabd043e65e2750c1b3171bc80de6c3e946bc97838bef6b487773c53ed345f868c07bc1af8078e0939c05fe6404db6f105e1a738edc47b298949ee0c642df700f26b367b9f45106c7f35fe28e6f72721ed9defbc4f8d3552bbdec92b63da5edce8ff6439d961af5961a791d68991608e13c7052a80937e35ddff9fb41e48163aaf8d731c97632fda9a23e52047a8b12716c0386370e340b68e656a2aab30d86d8455104ba6accf8307d70cf5695a9b799d69cb081db5324ed2f3beda72042771216ab668d3b4c8da4f5a9324d465de32513a6746af58b67facf1e4e67c3cf7c5439b7ae067401a6f997e404b3f788198e3779b4afbaf458d26edcf4fd8427a4983872d3600d64ec52c6e4f63f327e2c86fd88cf219b9412066032d35c4996058dff2428ee6c7cad4dc5726790e960c9031c519992332d745f9a7a5e2ca916bda19abba578a09b44aeace39ba990f73f27c32ff3621cc18c62a6ddb362d72d93d2142a3f0308248b31854189c9c7d5ecaae9d661010165aa0ae455f17b10e8fc2e4420328b680d5d892bdb29d01ad704b3dfad6af4227243305ab5fa3be90adb9b135aa06823277567a82db015bb6c6244439c33c646f1e6e918fce457f5bfd5e147447a27d05a5cb28eea856f3f1f1af0d5347a47ce63e285002b44e4d74411a3661e48803cdf71975114e1b95cf7c9d3418c51d54a1d43d09fad4d9fed69fcf5d9481a855f129839ef242cbdaba88e5fc2dd0331694260ba624f79ee3df48a6925a51fef31c9256bb0f00aa93bb2d925c928618e5090d21e22605d0bbc5b5ff2196a5dc5273657ac1e6347ad8a52ceb6467c449940d252142efb8bb87805b7eaf80615518a6c823f7ac1a5c0489a16d98eacaecaf3746d02a44a7f5d0fbf3dac25aa86e279e1f94610e3baf5567ff95b48b7af0fd21aa6f1280ba16cb08ae72b6646665f46283a36903d4369ad5b28b57a0e1e983b785233543ae3eebba83bf13a8639c9e13c87016336657e6efea112529aec845fb3b73bac8a2b69f1a3ca13c806fdf179cb0d85c4532fbe6fe9b67da6ed5557b5484858edf4bf94c6e2d00f254546bca2424ec0416f03e349a403d3918ac9f6d984ffc775dccb4dff23bba50b296b3e7ef6e65563959cc04c20199d0f9a10157b98c4f48afe58cd78b70713dd782fd590f7896a0327135594d6e9966cce1917ba8009c6881261cbd42fea072919dd51fe2c2418f8253bbe37a48cb573c727b1e59c73e3724d1eef564e2716feb79b1a46a0c132740cda69bdd8c259febe3db910ee4193c06e0f640b14219316ed304faa17c853d5c4b53263efb2ab5a5aa98220d28be013439f1b97402e3de0b91227bdc6aad874dd04abc3a75324c79c873b2f8b476c5754b175676b2ce53385265492bc3de217d65b4541f557a9c032fb2063bdfb683abf8e18c84b85c9d84755787e2ab0f0869e097a00282713ab580c8dad892c66bc26c6f9a31f854a170cb19a5135368eb1fa4c0b6c1a1490d9857039a1607ce781a87973045ec380bc581b4df5ed3015086bb7b4c5428b489f2e4d7af3d3c8281751c600be90cbc3df8754792a53baf8ebb5d00c74638eace42c4b47945ee68767721378b2c10db15a92b7587a0b0823d47df759a23073f13f5f46ecaa19bfe392d11796c41ccbdcc35b8464f0679b60f6071c9ab6dacb68105b877022fc2bf64f607c2d381bdaaab170ab33efa31205a1b904e8b5ad1abdea8e83059b2ac84e22f43a136a005478cf4d7e011d28d2574f114a08f560c6759de294f86f39ae66eeb8420bd02921bdef269141499df38ca57e293b74f100ffd8f6df90f1d15d042b6a8cc4233b19619ae521eec9348a909d22a435f84431d7e50391114e0871e318dd643daf372ddc97d776ea04afe5413bb166e85dbbdc6a6e11b0d0953d451d09c8007e979552b08ee5eaefbc419409981b3410a5c2645d4da87d2dfd2a1b2fd4b702d02f2f0999d64f6ac93d7ab44a1c04326099cc5f1d4c6ba832f13e0092222c4a6f11a94451696e35d6e33483c20aa627ac6daeb337abdd723fe4fa2e247358d2f1c9a1e1f482edac859c4615241c8a1eb4d1c4d14d72d92191cf62878553bfa85a36ddc4187585a9c9a55d5c3d5afc5df8eb2d5952370c078ef05ebb93c65e76551c17f3dc62cd323f0f388c842aa4eba6fa82d47b1798a9b213d47d07cf4499c07ca32fe0b8ea1e9c569ba9d2e12f154f6c7660e1fe2120507a11a0e1e54e980ba0242a645d0b5823ce8ceb88b97322a63206e0ed0e92f8daa700172000c9ca2f33e385b4b1c38a2efa452eccbb134200a6bea9fe089a729778e9a851305e15d82f2b0d7b69ff43ce6334b8cc2921c26feb43bfe21f46890c2aba6235f2957837be5d4c1b7667b89d20215408fedae110b29df2e37fb6e829aaac5d9a13d1a6e53d387292beff579d929ef219d943654755584ec620cd3441e383cd7d962f03d175df762be029319c9cd8855b024a194a8baace0378bb7254e36440ef0f72932215b6091dadbc70f8f68bbfb29ae2f92d2fe87f0438e93e543b3b2fdbe5a7d123c2d52d86ecc3cc985526da1fc0d32d4e6e9660196e3cefb9c61fe9cbc61c43804fc0ef302f7c233d784c69eff32f578d6c669ac747f104c75c7df2da41fb7ff2cf53c4d014a0d341789b8cbc9f2a053f2134e25dab91547cff584a593648d8653cc02044e32a883ccc03794573d4930d1c6103f27efa1191d7d418d1aa8d5e72a6182056ba96318dbb10fb9de7597dd6f39ac8ba2d26384edb663f5ed1fe5878a6044d80c96aa6a56a3eb6f5b548e24ba8a195bf3b3c2c54c7adcdc7d0dc1494765ef124168b9772bb98cde981c98f9d9dd4fcc297885c23db9c6aa8874dba2bf4cffb3771ae92568866274b95361f00d1c9eeb5fa20fb55f224b0320a6dd3c2ce11dc02f1e56edb9b50604b66035ba3e893239f5f0e549cfadcab2ede692e632b32afd59f17069516235d44c724142eada912263c360b139c34df2f4e698573a56043fc95793014ffe9011d7e2ca27974a4cfdb69bd52e616f6a25c0138eb81e250149b48c92dab17a82a2c894c9745dc9da11e65047b024d6ce45f940be0333247c660fed71edf1dc35dd145cc34917887062ee8b270d88ed330fc67b189b1b9784e7a7eb85433930932fa7113ffff365002561a3b021f8f1290e653cb201177b51cffbf7e0b8f89807af7e8934bffd83641116a9f97c12c1ecec07ff9014dfaeaf0732a4f257d452fa56882695d6dc8e6b37bed5ad73d02e5003a1d3b1c5c39435bacb451bd8ef3e53e8a766fb4291a1cd7fdcf2626525e68cdf67a69d5d1825ebf03c991aaf1748037ad79f8b3ba0ef9352791116ce9fa57126cb75b4729e5b7c7bfe3ad2f019f5be67a124797b45b25647be6d3ce6c4f2ec4e6c45050644fa22bbc9f3655a80df115622f2e875918426a83d73883f4cb0174f148cccce705cbced09a8842f44fb65cd88eeb994c99cc0f0d51029e7b5c109e9fcdc4bf03e53c571acfbcf4e8731b90cf276cf0aae59cd5f90bd334548bde6369424a793cbf5794e680a378ce22095803bae7d83d737aa89bfad010e364a15124854605f117f88dfba79b2d53d128bbb519fdd0f4e8c3a51d9a629d00e3848d7667dbe1047215667ce59400417cb8dbb683ff87c4fdce0397e8e0a6843bc1ad0e668a042b870c40ed886698e2eb2c524fc00a0772a67f21568b25b4868edf28bffa3423a8890931a7d52468f44f21a3a7a2d65b18f2d36cc2e0df0322264f8ef0e7e50a65c53827556055ae69bdaf7a2aea20f438f772418acaf4d24f84b81ff4cb5e92b28cc7180a9bddcd9a1828463c155dfb7a9118f20b07a69cdf282ee6ab42135e3eadddc9a48782169e645d2e1dcc6f3e33a8b518c1d722a30adf1677910812eed2fbfa37"})
write$tun(0xffffffffffffffff, 0x0, 0x3e)

1m32.544460949s ago: executing program 1 (id=123):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x800042, 0x1}, 0x10)
close(0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00Wz', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}}, 0x0)

1m32.508097968s ago: executing program 1 (id=124):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x3, 0x0, 0x1, 0x2, 0xffff, 0x9}, 0x20)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r3, 0x8b32, &(0x7f0000000040))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10)
pselect6(0x40, &(0x7f0000000000)={0x0, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r7, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x20}}], 0x1, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf251b00000008009a000210"], 0x20}}, 0x40090)

1m32.507414132s ago: executing program 2 (id=125):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xa}, {0xffff, 0xffff}, {0x1, 0xffef}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x5, 0xf, 0xffff, 0x17f32da6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async, rerun: 64)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64)
shutdown(r5, 0x0)
recvmmsg(r5, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async, rerun: 32)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30308c7696f1829ee53fbb4b", &(0x7f0000000180)=""/9, 0x2}, 0x20) (rerun: 32)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a310000000005000100070000fa0f00000000002c73a3f20140e0004001"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (async)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async, rerun: 32)
socket(0x2, 0x80805, 0x0) (async, rerun: 32)
sendmsg(r5, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000006240)) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x39, 0x2, '\xe2\x00\x00\x00D\x00t\x95\xf7OL\xd1C\v\x0f\x03\xde\xc9\xb8\xfc\x1e\xdbPMs\xaf\xa9\xc4\xb9\x97E\xa1>\x97\x8d\x88\xb5\xbe6y\x84\x1b\'\xb7A\xa8Kn\x00Pn\xd3\xd0'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000)
socket$packet(0x11, 0x2, 0x300)
socket$kcm(0x10, 0x400000002, 0x0)

47.75422384s ago: executing program 32 (id=121):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000001580)='syzkaller\x00', 0x9}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8001, 0x0, 0x1}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_OFFSET={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c80)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xc, 0xf, 0x3, 0x40, 0x8, 0x3, 0x7, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x300, 0x0, 0x30141}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x58}, 0x1, 0xba01}, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x200}]}, 0x10)

47.726580978s ago: executing program 33 (id=124):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x3, 0x0, 0x1, 0x2, 0xffff, 0x9}, 0x20)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r3, 0x8b32, &(0x7f0000000040))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10)
pselect6(0x40, &(0x7f0000000000)={0x0, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r7, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x20}}], 0x1, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf251b00000008009a000210"], 0x20}}, 0x40090)

47.677243911s ago: executing program 34 (id=125):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xa}, {0xffff, 0xffff}, {0x1, 0xffef}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x5, 0xf, 0xffff, 0x17f32da6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async, rerun: 64)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 64)
shutdown(r5, 0x0)
recvmmsg(r5, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async, rerun: 32)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30308c7696f1829ee53fbb4b", &(0x7f0000000180)=""/9, 0x2}, 0x20) (rerun: 32)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a310000000005000100070000fa0f00000000002c73a3f20140e0004001"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (async)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async, rerun: 32)
socket(0x2, 0x80805, 0x0) (async, rerun: 32)
sendmsg(r5, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000006240)) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x39, 0x2, '\xe2\x00\x00\x00D\x00t\x95\xf7OL\xd1C\v\x0f\x03\xde\xc9\xb8\xfc\x1e\xdbPMs\xaf\xa9\xc4\xb9\x97E\xa1>\x97\x8d\x88\xb5\xbe6y\x84\x1b\'\xb7A\xa8Kn\x00Pn\xd3\xd0'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000)
socket$packet(0x11, 0x2, 0x300)
socket$kcm(0x10, 0x400000002, 0x0)

4.709669722s ago: executing program 5 (id=548):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r2, 0x6a98047402e98331, 0x70bd2a, 0xffffffff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x38, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'tunl0\x00', <r11=>0x0, 0x8, 0x7, 0x4, 0x3, {{0x12, 0x4, 0x1, 0xd, 0x48, 0x68, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @loopback, {[@end, @generic={0x89, 0x6, "b415bbe7"}, @timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x5, [{@loopback, 0x101}]}, @noop, @lsrr={0x83, 0xb, 0x5d, [@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast]}, @generic={0x83, 0x9, "511d65fddde0f1"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xe6, 0x0, 0x8, [0x5af5]}]}}}}})
getpeername$packet(r8, &(0x7f0000000580)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000640)={'ip_vti0\x00', <r13=>0x0, 0x7897, 0x1, 0x10, 0x4, {{0x40, 0x4, 0x1, 0x30, 0x100, 0x68, 0x0, 0x10, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@cipso={0x86, 0x17, 0x3, [{0x5, 0x11, "e40be9b5c1406640da5fca2ea56d26"}]}, @lsrr={0x83, 0xf, 0x89, [@multicast2, @multicast2, @broadcast]}, @timestamp_addr={0x44, 0x24, 0xef, 0x1, 0x7, [{@private=0xa010100, 0xffffff7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80200}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xfe000000}]}, @cipso={0x86, 0x45, 0x1, [{0x6, 0x7, "a2b0a6d4f4"}, {0x6, 0xf, "89139e68bb02c6cb6089c2bc7d"}, {0x1, 0x12, "113da6b844365bc11be59be624182b06"}, {0x7, 0xf, "3806036a7534640ccb1cee86c6"}, {0x2, 0x8, "cd37b288d271"}]}, @timestamp={0x44, 0x8, 0x9a, 0x0, 0xb, [0x6]}, @lsrr={0x83, 0x27, 0x82, [@empty, @broadcast, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @rand_addr=0x64010100, @multicast2, @empty]}, @timestamp_addr={0x44, 0x2c, 0x24, 0x1, 0x6, [{@loopback, 0x8}, {@multicast1, 0x5}, {@broadcast}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl0\x00', <r14=>0x0, 0x4, 0x84, 0x0, 0xd1, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000, 0x700, 0x3, 0x4040}})
sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x140, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000080}, 0x20005044)
r15 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000007540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x7ffd, {0x0, 0x0, 0x0, r16, {0x0, 0x7}, {}, {0xd, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r16}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc041}, 0x804)
r17 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r17, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020f08000a00000000000000fedbdf2505000500000000000a004e2300000100000000000000000000000000000a0101010000000000000000000000000000000000147794409f93f15c6e5bd918ca5692b5fdbf05114d80a178babefa548453951c9996dfd5d21ca7a2cdd3d500"/123], 0x50}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

3.97027486s ago: executing program 5 (id=551):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xa1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'vlan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4)

3.834292041s ago: executing program 5 (id=552):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
read(r0, &(0x7f0000000280)=""/199, 0xc7)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200130002"], 0x70}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

2.905660526s ago: executing program 5 (id=563):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f90"], 0x3e)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r2, 0x1, 0x1d, &(0x7f0000000040)=""/99, &(0x7f00000000c0)=0x63)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x0, 0x100, 0x2000040, 0x85040040})
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r5, 0x0, r8, 0x0, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0)
write(r4, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x188}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x24000080)
r10 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)

1.869541777s ago: executing program 5 (id=581):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071104e00000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)

1.798512023s ago: executing program 5 (id=582):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x309241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14, 0xfffc}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xb9, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xd, {0x27, 0x4, 0x2, 0x8, 0x4, 0x68, 0x7, 0x3, 0x11, 0x7, @loopback, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x44, 0x68, 0x3, 0x0, [{@empty, 0xa}, {@empty, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x1000}, {@multicast2}, {@broadcast}, {@rand_addr=0x64010102, 0x7827bb7b}, {@multicast1, 0x3}]}, @generic={0x7, 0xc, "36a862ac1d0813e9a989"}, @generic={0x83, 0x2}, @generic={0x8d, 0xf, "b43a2d246ca586615e8567ef97"}, @generic={0x86, 0xd, "de80f4630d4c7da1a8db19"}, @rr={0x7, 0x17, 0xe4, [@rand_addr=0x64010102, @local, @broadcast, @empty, @local]}]}}, "c0"}}}, 0xc7)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
writev(r7, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000380)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r8, 0x0, r10, 0x0, 0xf3a, 0x0)
splice(r6, 0x0, r10, 0x0, 0x80, 0x6)
write$bt_hci(r10, &(0x7f0000000e80)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"8d2c6f"}}}, 0x7)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write(r9, 0x0, 0xffffff9a)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000080000"], 0x14}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000000400)={'bond_slave_1\x00'})
sendmsg$nl_route(r12, &(0x7f0000000580)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)
r13 = socket(0x28, 0x5, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r13, 0x900}, 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'})
vmsplice(r11, &(0x7f00000003c0)=[{&(0x7f0000000240)="d9794942cdef1ab1ceb0086a9c8e305cba14b8e6112bffe3e91a332c4e7f6abd33ecf23cfcf97269c77c39328abfca0499809be92d", 0x35}, {&(0x7f0000000280)="92", 0x1}, {&(0x7f00000002c0)="f9a5f7c871ed97eec1a5aa9d0342127d0da865aebb951063b49c12822b1e68f696e77b71284f5b93cf5270174da355769c08bcd260b4e039c9ac100b6bc5bbe7b2c79ded97309020c9e19617fa4fed7364ddf619efad3972ad87c38fb43bb373646a8122bd25a2a83d84a91183f73529d4800b586e45984121a18bdc6be9dce7e52b538958ce025f9d8e146e8fc2275b1cabcd9be1787e2c6b00007ebd7815f0ca30b58e2dec249217952e882fd846596f91b7875a7e77be4b8e6135cbb25de1dcab3370e1d100a61bc767a3c63b75f364787d613cfc40b085a45b863d8223d4dd23530e0e0824d006fb97268e70ad436921ac3b720aee12", 0xf8}], 0x3, 0xe)

689.436002ms ago: executing program 3 (id=591):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x2fffffffe}, 0xfffffffffffffceb)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)={0x536, {{0xa, 0x4e20, 0x1, @mcast1, 0x4}}, 0x1}, 0x90)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
listen(r3, 0xfffffffc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r6, 0x1, 0xfffffffe, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000001c0)=0x3)
ioctl$PPPIOCGIDLE(r9, 0x4004743c, &(0x7f0000000100))
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

537.533657ms ago: executing program 3 (id=592):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x5e2e80c9, 0x0, 0x0, 0x2d3e}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x25898}]}, {0x4, 0x4}, {0xc, 0x7, {0x4000}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

534.999885ms ago: executing program 3 (id=593):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000391311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b)

378.913573ms ago: executing program 3 (id=594):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x3ff}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x40}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f00000000c0)=0x7a42, 0x4)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000014c0), r5)
sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000020}, 0x0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00dbd7", @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf25130000000500030005000000"], 0x1c}}, 0x20008000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000d8fff6845a930ab462f414caa7c3bea535f4cbdd8386811c16546efa3490d845f697172d661791b003280f3ac0771f3bba6f00dfbb4073b346653158bc746cc83fccc708e671cecbca12934eb934cfee8c6f231537b717ba60b56f1b92e14f2f4334594901e9fafc5c3857b7985bdc7940dd80689fcf90fb3a029c58cd475767b2251d6f2b503e42a480732297fbda6ec1c40bd51cbad3c70af4c4ab2c1dcffb900bdb5ffa9d4a6a6f5328df88148d4795042831b9d103ea", @ANYRES16=r7, @ANYBLOB="010000000000fddbdf253f00000008000300", @ANYRES32=r8, @ANYBLOB="18005e8008000500fdffffff04000100080006000b000000"], 0x34}}, 0x4000000)

319.034309ms ago: executing program 3 (id=596):
r0 = socket(0x2, 0x2, 0x101)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000106000072280ff7271cf9e9000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a32000000005e3efcf40817eb"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc020000000000000000000000000001050016003200000014000100"], 0x4c}}, 0x40000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x81, 0x4, 0x2}, 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r3, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r4}, 0x20)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r5, 0x1}, 0x20)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100), 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r7, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@delsa={0x54, 0x11, 0x200, 0x70bd2c, 0x25dfdbfc, {@in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x4d5, 0x2, 0x6c}, [@user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xa}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48d4}, 0x20008051)
socket(0x2, 0x2, 0x101) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000106000072280ff7271cf9e9000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a32000000005e3efcf40817eb"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc020000000000000000000000000001050016003200000014000100"], 0x4c}}, 0x40000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0) (async)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x81, 0x4, 0x2}, 0x50) (async)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r3, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r4}, 0x20) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r5, 0x1}, 0x20) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100), 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
listen(r7, 0x0) (async)
sendmsg$nl_xfrm(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@delsa={0x54, 0x11, 0x200, 0x70bd2c, 0x25dfdbfc, {@in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x4d5, 0x2, 0x6c}, [@user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xa}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48d4}, 0x20008051) (async)

318.099415ms ago: executing program 4 (id=597):
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x12) (async, rerun: 64)
r0 = socket$inet6(0xa, 0x400000000001, 0x0) (rerun: 64)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x5c, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) (async)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24)
bind$rxrpc(r3, &(0x7f00000007c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe90, 0x30, 0x25, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80"], 0xfdef) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) (async)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000000), 0x10) (async)
sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)

254.573474ms ago: executing program 4 (id=598):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b41e195d632fe8c46aa53544703663e", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="1dda6a5dbd35e3304d6553bd217d639ec061331db415e275418038b825fd12f682529926f9fe92118985299fb0fb9fc519f855f5abeef150ef293e7106eb5762c57e767bacad4f0fd1be26ad748744474a7e"], 0x48) (async)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000007c0), 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r4=>r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x3, 0xfffffffd, {0xa}}, 0x14}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r5, 0x47b59000) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r9=>0x0})
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r10, 0x800448d2, &(0x7f0000000580)={0x6, &(0x7f0000001ac0)=[{}, {}, {@none}, {}, {@none}, {@none}]}) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', r9, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x23, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r11}, 0x18)
r12 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r13=>0x0})
r14 = socket(0x1e, 0x4, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x3, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async)
sendto$packet(r12, &(0x7f00000000c0)="05000806", 0x4, 0x10000b01, &(0x7f0000000080)={0x11, 0x8100, r13, 0x1, 0x0, 0x6, @random="971c5f00"}, 0x14) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r7)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async)
sendmsg$key(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x2, 0x18, 0x5, 0x6, 0x213, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_ident={0x2, 0x5, 0xfff7, 0x0, 0x8001}, @sadb_key={0x201, 0x8, 0x8000, 0x0, "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"}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_lifetime={0x4, 0x3, 0x8, 0x9, 0x9, 0x46}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@multicast1, 0x1a, 0x0, 0x20}, @sadb_lifetime={0x4, 0x3, 0x1, 0x3ff, 0x2b, 0x80000000}]}, 0x1098}}, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x1, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)

241.604846ms ago: executing program 4 (id=599):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="0000faffffff0000340012801100010062"], 0x54}}, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1)
setsockopt$ax25_int(r2, 0x101, 0xb, &(0x7f0000002200)=0x3, 0x4) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20041)

239.958125ms ago: executing program 3 (id=600):
socket$inet6(0xa, 0x6, 0x8)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_procfs$namespace(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f00000005c0)={@null, 0x4})
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x200}, 0x1c)
getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000100))
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, 0x0, 0x0)
r5 = socket$inet(0x2, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x3a, @empty, 0x4e24, 0x4, 'dh\x00', 0xd, 0x80, 0x2b}, {@empty, 0x4e22, 0x0, 0x9, 0x7, 0x6ec1}}, 0x44)
connect$inet(r5, &(0x7f0000000140)={0x2, 0xc000, @remote}, 0x10)

129.875088ms ago: executing program 4 (id=601):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0xc2, @local, 0x4e23, 0x2, 'dh\x00', 0x2c, 0x10001}, 0x2c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async)
sendmmsg$inet(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="bccd84", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="b3df", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000009c0)="51703a9b7c4ac4486a707a5f99fbc1d3f035ff9357b394058f0e5931b5c282a5544daaeab5d80cddf2195131c4b0fa4f40a6d90d9a9fcc61d1dab66f820d66b6c3b0a8bf807905afdaa4b25255686baac3ce009a246f8a1ff1e4bba1e5980074506aa1c93ba4de651961cf3a1957aac9997b9886aecbc339b3c622c378f615c87960ad4a2ba210a1c689c6be4462f051b5c380ff6527e8bccd3f070ca1848df31e1620a262e9ec95ce504551284bc0cf82c32e3cd3337c290571a1d04a34a880620cfd9dd4f0e0c04fc9f95d46b13a7cedf4012bd931b2ca596c699aa88d3d8a9e3f1d2c676d71e2ebe3625dc2fa051a48a5343733f9dda831dcb185b25fe302ad0fb2477142112471c1c341cd9cdfc3558a4174d07184ed47ad785c", 0x11c}], 0x1}}], 0x3, 0x8011)
shutdown(r1, 0x1)

60.062229ms ago: executing program 4 (id=602):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x8040)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async, rerun: 32)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 64)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r3=>0x0}, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r4, 0x4) (async)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3)
shutdown(r0, 0x1)

0s ago: executing program 4 (id=603):
r0 = socket$isdn(0x22, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x5}, 0x18)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x10}, 0xc)
r2 = socket(0x1, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000600), &(0x7f0000001380)=@udp=r2}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0})
recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0)
sendmmsg$unix(r2, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@mcast2, 0x5d, r4})
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r5, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
socket$isdn(0x22, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x5}, 0x18) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x10}, 0xc) (async)
socket(0x1, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000600), &(0x7f0000001380)=@udp=r2}, 0x20) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) (async)
recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) (async)
sendmmsg$unix(r2, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg1\x00'}) (async)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@mcast2, 0x5d, r4}) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) (async)
write$rfkill(r5, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55912' (ED25519) to the list of known hosts.
syzkaller login: [   56.563094][ T5829] cgroup: Unknown subsys name 'net'
[   56.698117][ T5829] cgroup: Unknown subsys name 'cpuset'
[   56.705189][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.579690][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.905847][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.911250][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.922997][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.926128][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.928487][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.931421][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.935261][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.937945][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.957946][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.960676][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.011805][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.016233][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.019702][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.024053][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.027588][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.198027][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   63.291623][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.294390][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.296656][ T5843] bridge_slave_0: entered allmulticast mode
[   63.299352][ T5843] bridge_slave_0: entered promiscuous mode
[   63.311039][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   63.317808][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.320129][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.322843][ T5843] bridge_slave_1: entered allmulticast mode
[   63.326763][ T5843] bridge_slave_1: entered promiscuous mode
[   63.381195][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.391817][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.443521][ T5843] team0: Port device team_slave_0 added
[   63.447796][ T5843] team0: Port device team_slave_1 added
[   63.482647][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   63.488578][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.490739][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.499186][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.516198][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.518310][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.526541][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.530457][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.532920][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.537207][ T5847] bridge_slave_0: entered allmulticast mode
[   63.540026][ T5847] bridge_slave_0: entered promiscuous mode
[   63.564562][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.566719][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.568833][ T5847] bridge_slave_1: entered allmulticast mode
[   63.571468][ T5847] bridge_slave_1: entered promiscuous mode
[   63.624031][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.630417][ T5843] hsr_slave_0: entered promiscuous mode
[   63.633295][ T5843] hsr_slave_1: entered promiscuous mode
[   63.644169][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.680906][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.683740][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.686406][ T5852] bridge_slave_0: entered allmulticast mode
[   63.689277][ T5852] bridge_slave_0: entered promiscuous mode
[   63.702563][ T5847] team0: Port device team_slave_0 added
[   63.705340][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.707688][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.710047][ T5852] bridge_slave_1: entered allmulticast mode
[   63.712952][ T5852] bridge_slave_1: entered promiscuous mode
[   63.721649][ T5847] team0: Port device team_slave_1 added
[   63.785487][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.788900][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.791022][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.800002][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.809138][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.811605][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.820609][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.826070][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.863292][ T5852] team0: Port device team_slave_0 added
[   63.890853][ T5852] team0: Port device team_slave_1 added
[   63.935185][ T5847] hsr_slave_0: entered promiscuous mode
[   63.938353][ T5847] hsr_slave_1: entered promiscuous mode
[   63.941183][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   63.943545][ T5847] Cannot create hsr debugfs directory
[   63.955542][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.957916][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.967211][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.989839][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.992366][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.000708][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.062203][ T5852] hsr_slave_0: entered promiscuous mode
[   64.065145][ T5852] hsr_slave_1: entered promiscuous mode
[   64.067938][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   64.069797][ T5852] Cannot create hsr debugfs directory
[   64.150390][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.166841][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.188292][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.215412][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.330375][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.336157][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.345626][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.356805][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.410400][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.425247][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.435722][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.446156][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.448739][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.486258][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   64.501861][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.504267][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.522844][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.525133][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.550689][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.609462][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   64.620193][ T2264] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.622622][ T2264] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.636753][ T2264] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.638971][ T2264] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.690997][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.736396][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   64.743959][ T2264] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.746242][ T2264] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.759808][ T2264] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.762060][ T2264] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.806709][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.852680][ T5843] veth0_vlan: entered promiscuous mode
[   64.859482][ T5843] veth1_vlan: entered promiscuous mode
[   64.878072][ T5843] veth0_macvtap: entered promiscuous mode
[   64.882656][ T5843] veth1_macvtap: entered promiscuous mode
[   64.896364][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.909274][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.922955][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.956386][ T5737] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.976140][ T5737] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.982195][ T5737] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.986239][ T5737] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.999512][ T5848] Bluetooth: hci1: command tx timeout
[   65.001515][ T5234] Bluetooth: hci0: command tx timeout
[   65.005825][ T5847] veth0_vlan: entered promiscuous mode
[   65.012466][ T5847] veth1_vlan: entered promiscuous mode
[   65.021048][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.047761][ T2264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.053241][ T2264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.073752][ T5848] Bluetooth: hci2: command tx timeout
[   65.085010][ T5847] veth0_macvtap: entered promiscuous mode
[   65.088452][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.089328][ T5847] veth1_macvtap: entered promiscuous mode
[   65.091300][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.117085][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.128173][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.133712][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.138132][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.141281][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.147583][ T5852] veth0_vlan: entered promiscuous mode
[   65.152770][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.152987][ T5852] veth1_vlan: entered promiscuous mode
[   65.166443][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.219975][ T5852] veth0_macvtap: entered promiscuous mode
[   65.240405][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.243048][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.244623][ T5852] veth1_macvtap: entered promiscuous mode
[   65.275961][ T5910] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   65.278340][ T5910] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2'.
[   65.291183][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.294519][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.364736][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.384752][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.397574][ T5737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.400322][ T5737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.403035][ T5737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.406231][ T5737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.548176][ T5924] Zero length message leads to an empty skb
[   65.558420][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'.
[   65.592172][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.595676][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.641612][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.650499][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.742657][ T5936] ip6gre0: entered allmulticast mode
[   65.763714][ T5933] tipc: Started in network mode
[   65.765301][ T5933] tipc: Node identity 82085a9037ca, cluster identity 4711
[   65.767504][ T5933] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.779740][ T5933] syzkaller0: entered promiscuous mode
[   65.781422][ T5933] syzkaller0: entered allmulticast mode
[   65.818836][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'.
[   65.951464][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'.
[   66.422757][ T5979] dvmrp8: entered allmulticast mode
[   66.512389][ T5979] netlink: 'syz.1.15': attribute type 23 has an invalid length.
[   66.551430][ T5977] dvmrp8: left allmulticast mode
[   66.577226][ T5933] tipc: Resetting bearer <eth:syzkaller0>
[   66.614843][ T5933] tipc: Disabling bearer <eth:syzkaller0>
[   66.787123][ T5993] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17'.
[   66.884764][ T6007] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.18'.
[   67.084009][ T5234] Bluetooth: hci0: command tx timeout
[   67.086514][ T5848] Bluetooth: hci1: command tx timeout
[   67.123329][ T6019] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.154032][ T5848] Bluetooth: hci2: command tx timeout
[   67.423974][ T6033] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   67.644633][ T6046] netlink: 'syz.0.27': attribute type 1 has an invalid length.
[   68.240406][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'.
[   68.269895][ T6094] openvswitch: netlink: Flow actions attr not present in new flow.
[   68.348138][ T6102] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'.
[   68.379807][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'.
[   68.495016][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'.
[   68.565589][ T6110] netlink: 'syz.2.40': attribute type 12 has an invalid length.
[   68.726441][ T6110] dvmrp1: tun_chr_ioctl cmd 1074025677
[   68.728536][ T6110] dvmrp1: linktype set to 773
[   68.795250][ T6132] syz.0.45 uses obsolete (PF_INET,SOCK_PACKET)
[   69.006959][ T6153] netlink: 'syz.2.46': attribute type 10 has an invalid length.
[   69.150953][ T6162] netlink: 'syz.0.48': attribute type 1 has an invalid length.
[   69.153745][ T5848] Bluetooth: hci0: command tx timeout
[   69.156477][ T5848] Bluetooth: hci1: command tx timeout
[   69.219656][ T6162] gretap1: entered allmulticast mode
[   69.234062][ T5848] Bluetooth: hci2: command tx timeout
[   69.841143][ T6218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.849315][ T6218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.968605][ T6221] wg1 speed is unknown, defaulting to 1000
[   69.970614][ T6221] wg1 speed is unknown, defaulting to 1000
[   69.974610][ T6221] wg1 speed is unknown, defaulting to 1000
[   69.980356][ T6221] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   69.989526][ T6221] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   70.007170][ T6221] wg1 speed is unknown, defaulting to 1000
[   70.010786][ T6221] wg1 speed is unknown, defaulting to 1000
[   70.014467][ T6221] wg1 speed is unknown, defaulting to 1000
[   70.102545][ T6224] wg1 speed is unknown, defaulting to 1000
[   70.195462][ T6226] netlink: 'syz.1.60': attribute type 2 has an invalid length.
[   70.300220][ T6229] siw: device registration error -23
[   70.305312][ T6229] __nla_validate_parse: 12 callbacks suppressed
[   70.305323][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.61'.
[   70.575673][ T6248] netlink: 248 bytes leftover after parsing attributes in process `syz.2.65'.
[   70.762713][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'.
[   70.827513][ T6260] ip6tnl1: entered promiscuous mode
[   70.829726][ T6260] ip6tnl1: entered allmulticast mode
[   70.836626][ T6260] team0: Device ip6tnl1 is of different type
[   71.078408][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.191521][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'.
[   71.196472][ T6270] netlink: 'syz.1.70': attribute type 20 has an invalid length.
[   71.205531][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'.
[   71.205957][ T5737] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.208416][ T6270] netlink: 'syz.1.70': attribute type 20 has an invalid length.
[   71.211545][ T5737] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.219015][ T5737] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.222048][ T5737] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.233737][ T5848] Bluetooth: hci1: command tx timeout
[   71.235536][ T5234] Bluetooth: hci0: command tx timeout
[   71.315469][ T5234] Bluetooth: hci2: command tx timeout
[   71.348048][ T6279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.73'.
[   71.432969][ T6283] netlink: 52 bytes leftover after parsing attributes in process `syz.0.75'.
[   71.442128][ T5894] IPVS: starting estimator thread 0...
[   71.444849][ T6283] IPVS: rr: FWM 3 0x00000003 - no destination available
[   71.522864][ T6289] vlan0: entered promiscuous mode
[   71.533878][ T6284] IPVS: using max 64 ests per chain, 153600 per kthread
[   71.537747][ T6289] team0: Port device vlan0 added
[   71.614572][ T6292] wg1 speed is unknown, defaulting to 1000
[   71.657499][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'.
[   71.669945][ T6293] netlink: 120 bytes leftover after parsing attributes in process `syz.0.78'.
[   71.681750][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'.
[   72.074569][ T6310] wg1 speed is unknown, defaulting to 1000
[   72.429840][ T6319] wg1 speed is unknown, defaulting to 1000
[   72.566057][ T6322] netlink: 'syz.1.83': attribute type 1 has an invalid length.
[   72.601460][ T6322] wg1 speed is unknown, defaulting to 1000
[   72.928378][ T6331] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   73.023868][ T6338] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   73.069444][ T6343] wg1 speed is unknown, defaulting to 1000
[   73.085592][ T6345] IPVS: length: 131 != 8
[   73.137663][ T6348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.286087][ T6352] raw_sendmsg: syz.0.91 forgot to set AF_INET. Fix it!
[   73.417592][ T6367] !: renamed from dummy0 (while UP)
[   73.483356][ T6371] wg1 speed is unknown, defaulting to 1000
[   73.842399][ T6387] geneve2: entered promiscuous mode
[   73.845463][ T6387] geneve2: entered allmulticast mode
[   74.077390][  T971] cfg80211: failed to load regulatory.db
[   74.132403][ T6403] bridge0: port 3(erspan0) entered blocking state
[   74.151273][ T6403] bridge0: port 3(erspan0) entered disabled state
[   74.158688][ T6403] erspan0: entered allmulticast mode
[   74.165016][ T6403] erspan0: entered promiscuous mode
[   74.168469][ T6403] bridge0: port 3(erspan0) entered blocking state
[   74.171312][ T6403] bridge0: port 3(erspan0) entered forwarding state
[   74.177505][ T6411] tipc: Enabling of bearer <eth:sy> rejected, failed to enable media
[   74.181781][ T6403] erspan0: left allmulticast mode
[   74.185082][ T6403] erspan0: left promiscuous mode
[   74.187601][ T6403] bridge0: port 3(erspan0) entered disabled state
[   74.298041][ T6414] wg1 speed is unknown, defaulting to 1000
[   75.479039][ T6467] wg1 speed is unknown, defaulting to 1000
[   75.506923][ T6477] netlink: 'syz.1.115': attribute type 1 has an invalid length.
[   75.538698][ T6479] __nla_validate_parse: 14 callbacks suppressed
[   75.538710][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'.
[   75.562365][ T6481] netlink: 'syz.1.115': attribute type 16 has an invalid length.
[   75.656498][ T6477] wg1 speed is unknown, defaulting to 1000
[   75.889667][ T6485] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.894448][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.038660][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.055164][ T6485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.122981][ T6485] vlan0: left promiscuous mode
[   76.199058][ T6487] warning: `syz.0.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.220128][ T5872] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.223696][ T5872] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.226976][ T5872] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.280632][ T5872] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.302658][ T6500] geneve3: entered promiscuous mode
[   76.374947][ T6502] dvmrp8: entered allmulticast mode
[   76.391158][ T6503] wg1 speed is unknown, defaulting to 1000
[  121.564370][ T5234] Bluetooth: hci2: link tx timeout
[  121.567017][ T5234] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  121.571643][ T5234] Bluetooth: hci2: link tx timeout
[  121.573944][ T5234] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.682393][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  121.686011][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  121.688751][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  121.691894][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  121.697246][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  121.731383][ T6529] wg1 speed is unknown, defaulting to 1000
[  121.895918][ T6529] chnl_net:caif_netlink_parms(): no params data found
[  121.934939][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.944017][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.961203][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.966646][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.970271][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  121.992948][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  121.998470][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  122.002369][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  122.012257][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  122.023124][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  122.205844][ T6538] wg1 speed is unknown, defaulting to 1000
[  122.212816][ T6536] wg1 speed is unknown, defaulting to 1000
[  122.221960][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.225298][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.228292][ T6529] bridge_slave_0: entered allmulticast mode
[  122.232003][ T6529] bridge_slave_0: entered promiscuous mode
[  122.258478][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.261502][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.264875][ T6529] bridge_slave_1: entered allmulticast mode
[  122.268584][ T6529] bridge_slave_1: entered promiscuous mode
[  122.359883][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.364632][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.387898][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.403060][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.471008][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.475339][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.488193][ T6529] team0: Port device team_slave_0 added
[  122.501369][ T6529] team0: Port device team_slave_1 added
[  122.561228][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.567057][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.580741][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.586049][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.597841][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.607797][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.610465][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.627978][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.673291][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.678561][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.831052][ T6529] hsr_slave_0: entered promiscuous mode
[  122.834644][ T6529] hsr_slave_1: entered promiscuous mode
[  122.837489][ T6529] debugfs: 'hsr0' already exists in 'hsr'
[  122.839685][ T6529] Cannot create hsr debugfs directory
[  122.842225][ T6536] chnl_net:caif_netlink_parms(): no params data found
[  122.871153][ T6538] chnl_net:caif_netlink_parms(): no params data found
[  123.017380][   T52] wg1 speed is unknown, defaulting to 1000
[  123.019880][   T52] syz1: Port: 1 Link DOWN
[  123.021967][   T12] bridge_slave_1: left allmulticast mode
[  123.024960][   T12] bridge_slave_1: left promiscuous mode
[  123.028303][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.036206][   T12] bridge_slave_0: left allmulticast mode
[  123.037959][   T12] bridge_slave_0: left promiscuous mode
[  123.040058][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.096516][   T12] ip6gre0 (unregistering): left allmulticast mode
[  123.322179][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.328595][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.334056][   T12] bond0 (unregistering): Released all slaves
[  123.345333][   T12] bond1 (unregistering): Released all slaves
[  123.356992][   T12] bond2 (unregistering): Released all slaves
[  123.502523][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.507003][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.510039][ T6536] bridge_slave_0: entered allmulticast mode
[  123.517824][ T6536] bridge_slave_0: entered promiscuous mode
[  123.560075][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.562795][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.570644][ T6536] bridge_slave_1: entered allmulticast mode
[  123.573852][ T6536] bridge_slave_1: entered promiscuous mode
[  123.576881][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.580078][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.583182][ T6538] bridge_slave_0: entered allmulticast mode
[  123.591148][ T6538] bridge_slave_0: entered promiscuous mode
[  123.596641][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.599547][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.602019][ T6538] bridge_slave_1: entered allmulticast mode
[  123.607469][ T6538] bridge_slave_1: entered promiscuous mode
[  123.635615][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  123.713853][ T5850] Bluetooth: hci3: command tx timeout
[  123.777193][ T6536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.782505][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.801673][ T6536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.825135][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.875099][ T6536] team0: Port device team_slave_0 added
[  123.919744][ T6536] team0: Port device team_slave_1 added
[  123.924085][ T6538] team0: Port device team_slave_0 added
[  123.933214][   T12] hsr_slave_0: left promiscuous mode
[  123.936488][   T12] hsr_slave_1: left promiscuous mode
[  123.939095][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.941610][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.945869][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.948203][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.961650][   T12] veth1_macvtap: left promiscuous mode
[  123.964374][   T12] veth0_macvtap: left promiscuous mode
[  123.966172][   T12] veth1_vlan: left promiscuous mode
[  123.967968][   T12] veth0_vlan: left promiscuous mode
[  124.033611][ T5850] Bluetooth: hci4: command tx timeout
[  124.124125][ T5850] Bluetooth: hci5: command tx timeout
[  124.253179][   T12] team0 (unregistering): Port device team_slave_1 removed
[  124.277222][   T12] team0 (unregistering): Port device team_slave_0 removed
[  124.609295][ T6538] team0: Port device team_slave_1 added
[  124.611830][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.616622][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.633589][ T6536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.687704][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.690312][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.700038][ T6536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.736707][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.739318][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.749329][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.756664][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.759303][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.770019][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.835765][ T6536] hsr_slave_0: entered promiscuous mode
[  124.838408][ T6536] hsr_slave_1: entered promiscuous mode
[  124.894123][ T6529] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  124.899792][ T6529] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  124.929139][ T6538] hsr_slave_0: entered promiscuous mode
[  124.932418][ T6538] hsr_slave_1: entered promiscuous mode
[  124.936016][ T6538] debugfs: 'hsr0' already exists in 'hsr'
[  124.938351][ T6538] Cannot create hsr debugfs directory
[  124.940904][ T6529] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  124.969966][ T6529] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  125.223077][ T6536] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  125.235393][ T6536] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  125.241594][ T6536] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  125.249808][ T6536] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  125.373373][ T6538] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  125.381087][ T6538] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  125.397979][ T6538] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  125.408770][ T6538] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  125.436686][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.479523][ T6529] 8021q: adding VLAN 0 to HW filter on device team0
[  125.507090][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.509929][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.538711][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.541039][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.585307][ T6529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.589011][ T6529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.610385][ T6536] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.681323][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.690340][ T6536] 8021q: adding VLAN 0 to HW filter on device team0
[  125.738231][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.741056][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.748862][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.751710][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.793916][ T5234] Bluetooth: hci3: command tx timeout
[  125.798382][ T6538] 8021q: adding VLAN 0 to HW filter on device team0
[  125.846828][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.849754][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.861167][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.863830][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.877639][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.908355][ T6538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  126.104384][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.111086][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.114165][ T5234] Bluetooth: hci4: command tx timeout
[  126.191299][ T6538] veth0_vlan: entered promiscuous mode
[  126.205643][ T5234] Bluetooth: hci5: command tx timeout
[  126.215758][ T6538] veth1_vlan: entered promiscuous mode
[  126.275644][ T6538] veth0_macvtap: entered promiscuous mode
[  126.279995][ T6538] veth1_macvtap: entered promiscuous mode
[  126.285994][ T6529] veth0_vlan: entered promiscuous mode
[  126.316607][ T6529] veth1_vlan: entered promiscuous mode
[  126.327577][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.349741][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.375384][ T5737] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.388118][ T5737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.410639][ T5737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.414882][ T5737] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.456665][ T6529] veth0_macvtap: entered promiscuous mode
[  126.502030][ T6529] veth1_macvtap: entered promiscuous mode
[  126.523007][ T6536] veth0_vlan: entered promiscuous mode
[  126.560906][ T6536] veth1_vlan: entered promiscuous mode
[  126.572001][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.577670][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.578248][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.609882][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.668447][ T5872] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.672418][ T5872] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.684965][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.693376][ T5872] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.699301][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.709700][ T5737] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.743802][ T6536] veth0_macvtap: entered promiscuous mode
[  126.759121][ T6536] veth1_macvtap: entered promiscuous mode
[  126.812168][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.831262][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.847050][ T5872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.861384][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.872156][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.879120][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.883950][ T6646] netlink: 'syz.3.126': attribute type 1 has an invalid length.
[  126.907351][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.911603][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.029423][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.032283][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.179081][ T2264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.182087][ T2264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.220362][ T6663] netlink: 20824 bytes leftover after parsing attributes in process `syz.3.129'.
[  127.229224][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.233281][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.508426][ T6686] vlan2: entered promiscuous mode
[  127.510899][ T6686] bond0: entered promiscuous mode
[  127.513196][ T6686] bond_slave_0: entered promiscuous mode
[  127.544139][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.133'.
[  127.555841][ T6686] bond_slave_1: entered promiscuous mode
[  127.564117][ T6686] vlan2: entered allmulticast mode
[  127.566839][ T6686] bond0: entered allmulticast mode
[  127.570327][ T6686] bond_slave_0: entered allmulticast mode
[  127.582505][ T6686] bond_slave_1: entered allmulticast mode
[  127.599142][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.132'.
[  127.765797][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'.
[  127.874684][ T5234] Bluetooth: hci3: command tx timeout
[  127.896770][ T6715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.907864][    C1] Illegal XDP return value 16128 on prog  (id 38) dev lo, expect packet loss!
[  128.013081][ T6730] netlink: 20 bytes leftover after parsing attributes in process `syz.5.142'.
[  128.066977][ T6737] !: renamed from dummy0 (while UP)
[  128.135920][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'.
[  128.147332][ T6740] netlink: 'syz.4.144': attribute type 1 has an invalid length.
[  128.150902][ T6740] netlink: 'syz.4.144': attribute type 2 has an invalid length.
[  128.156369][ T6740] netlink: 80 bytes leftover after parsing attributes in process `syz.4.144'.
[  128.195267][ T5850] Bluetooth: hci4: command tx timeout
[  128.274211][ T5850] Bluetooth: hci5: command tx timeout
[  129.077025][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.153'.
[  129.197940][ T6803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.155'.
[  129.218866][ T6798] netlink: 36 bytes leftover after parsing attributes in process `syz.5.154'.
[  129.289770][ T6808] tipc: Started in network mode
[  129.291583][ T6808] tipc: Node identity fe59846518cb, cluster identity 4711
[  129.297751][ T6808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.301316][ T6808] syzkaller0: entered promiscuous mode
[  129.306224][ T6808] syzkaller0: entered allmulticast mode
[  129.314303][ T6808] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  129.329328][ T6808] tipc: Resetting bearer <eth:syzkaller0>
[  129.359619][ T6807] tipc: Resetting bearer <eth:syzkaller0>
[  129.372222][ T6807] tipc: Disabling bearer <eth:syzkaller0>
[  129.527404][ T6816] Unsupported ieee802154 address type: 0
[  129.540963][ T6819] netlink: 'syz.4.157': attribute type 4 has an invalid length.
[  129.954424][ T5850] Bluetooth: hci3: command tx timeout
[  130.274531][ T5848] Bluetooth: hci4: command tx timeout
[  130.353789][ T5850] Bluetooth: hci5: command 0x0419 tx timeout
[  130.443529][ T6865] netlink: 'syz.4.164': attribute type 1 has an invalid length.
[  130.446056][ T6865] netlink: 'syz.4.164': attribute type 1 has an invalid length.
[  130.449107][ T6865] netlink: 'syz.4.164': attribute type 1 has an invalid length.
[  130.551072][ T6871] netlink: 'syz.5.165': attribute type 39 has an invalid length.
[  132.208823][ T6946] tipc: Started in network mode
[  132.210755][ T6946] tipc: Node identity ee7d8b51d11d, cluster identity 4711
[  132.216894][ T6946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.219953][ T6947] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.226926][ T6945] syzkaller0: entered promiscuous mode
[  132.229373][ T6945] syzkaller0: entered allmulticast mode
[  132.244967][ T6945] tipc: Resetting bearer <eth:syzkaller0>
[  132.250019][ T6944] tipc: Resetting bearer <eth:syzkaller0>
[  132.263043][ T6944] tipc: Disabling bearer <eth:syzkaller0>
[  132.401477][ T6952] __nla_validate_parse: 11 callbacks suppressed
[  132.401490][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'.
[  132.435965][ T5234] Bluetooth: hci5: command 0x0419 tx timeout
[  132.483207][ T6960] netlink: 256 bytes leftover after parsing attributes in process `syz.3.190'.
[  132.526662][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.535235][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.191'.
[  132.538193][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.191'.
[  132.783308][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.192'.
[  132.856359][ T6968] IPv6: addrconf: prefix option has invalid lifetime
[  132.926056][ T6973] netlink: 'syz.4.194': attribute type 2 has an invalid length.
[  132.928648][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.194'.
[  133.418017][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'.
[  133.584349][ T6993] netlink: 'syz.3.198': attribute type 5 has an invalid length.
[  133.658742][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'.
[  133.748059][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'.
[  133.751036][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'.
[  133.761206][ T6998] netlink: 'syz.3.200': attribute type 12 has an invalid length.
[  133.775324][ T6998] netlink: 'syz.3.200': attribute type 11 has an invalid length.
[  133.799381][ T7000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.827250][ T6998] netlink: 'syz.3.200': attribute type 5 has an invalid length.
[  133.943241][ T7003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.948210][ T7003] syzkaller0: entered promiscuous mode
[  133.950071][ T7003] syzkaller0: entered allmulticast mode
[  133.963478][ T7003] tipc: Resetting bearer <eth:syzkaller0>
[  133.967043][ T7002] tipc: Resetting bearer <eth:syzkaller0>
[  133.979671][ T7002] tipc: Disabling bearer <eth:syzkaller0>
[  134.042334][ T7015] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  134.067167][ T7015] bridge_slave_0: left allmulticast mode
[  134.069479][ T7015] bridge_slave_0: left promiscuous mode
[  134.073236][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.080752][ T7015] bridge_slave_1: left allmulticast mode
[  134.082690][ T7015] bridge_slave_1: left promiscuous mode
[  134.086156][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.093091][ T7015] bond0: (slave bond_slave_0): Releasing backup interface
[  134.105632][ T7015] bond0: (slave bond_slave_1): Releasing backup interface
[  134.120418][ T7015] team0: Port device team_slave_0 removed
[  134.131255][ T7015] team0: Port device team_slave_1 removed
[  134.138827][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.141488][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.155234][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.158264][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.168874][ T7020] netlink: 'syz.5.204': attribute type 10 has an invalid length.
[  134.169720][ T7015] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  134.178502][ T7020] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[  134.196291][ T7020] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  134.235909][ T7015] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.239780][ T7015] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.884209][ T7051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.892703][ T7051] syzkaller0: entered promiscuous mode
[  134.896910][ T7051] syzkaller0: entered allmulticast mode
[  134.909045][ T7055] !: renamed from dummy0 (while UP)
[  134.926534][ T7050] tipc: Resetting bearer <eth:syzkaller0>
[  134.956758][ T7050] tipc: Disabling bearer <eth:syzkaller0>
[  135.298999][ T7070] lo speed is unknown, defaulting to 1000
[  135.300284][ T7068] tap0: tun_chr_ioctl cmd 1074025676
[  135.310403][ T7068] tap0: owner set to 0
[  135.312678][ T7070] lo speed is unknown, defaulting to 1000
[  135.333081][ T7070] lo speed is unknown, defaulting to 1000
[  135.333256][ T7071] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  135.347430][ T7070] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  135.385324][ T7070] lo speed is unknown, defaulting to 1000
[  135.395818][ T7070] lo speed is unknown, defaulting to 1000
[  135.399411][ T7070] lo speed is unknown, defaulting to 1000
[  135.402651][ T7070] lo speed is unknown, defaulting to 1000
[  135.415322][ T7070] lo speed is unknown, defaulting to 1000
[  135.689253][ T7090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.803559][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.806923][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.919237][ T7097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.929695][ T7097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.033676][ T5907] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.036907][ T5907] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.042120][ T5907] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.045910][ T5907] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.152819][ T7107] bridge0: port 3(batadv1) entered blocking state
[  136.156192][ T7107] bridge0: port 3(batadv1) entered disabled state
[  136.158962][ T7107] batadv1: entered allmulticast mode
[  136.162892][ T7107] batadv1: entered promiscuous mode
[  136.353354][ T7121] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  136.462631][ T7130] netlink: 'syz.3.241': attribute type 10 has an invalid length.
[  136.477522][ T7130] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  136.481486][ T7130] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  136.488170][ T7130] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  136.645164][ T5737] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  136.648786][ T5737] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  137.532920][ T7149] netlink: 'syz.3.245': attribute type 1 has an invalid length.
[  137.538559][ T7149] __nla_validate_parse: 15 callbacks suppressed
[  137.538574][ T7149] netlink: 236 bytes leftover after parsing attributes in process `syz.3.245'.
[  137.548222][ T7149] NCSI netlink: No device for ifindex 813332851
[  137.552112][ T7149] tls_set_device_offload_rx: netdev not found
[  137.639274][ T7155] lo speed is unknown, defaulting to 1000
[  137.944303][ T7172] netlink: 'syz.3.251': attribute type 13 has an invalid length.
[  137.947152][ T7172] netlink: 'syz.3.251': attribute type 17 has an invalid length.
[  138.000073][ T7172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.006905][   T95] lo speed is unknown, defaulting to 1000
[  138.682490][ T7177] lo speed is unknown, defaulting to 1000
[  138.780632][ T7188] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  138.932590][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'.
[  138.962501][ T7201] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.260'.
[  139.086726][    T9] IPVS: starting estimator thread 0...
[  139.148648][ T7214] sctp: [Deprecated]: syz.4.264 (pid 7214) Use of int in max_burst socket option.
[  139.148648][ T7214] Use struct sctp_assoc_value instead
[  139.173635][ T7211] IPVS: using max 64 ests per chain, 153600 per kthread
[  139.563114][ T7229] lo speed is unknown, defaulting to 1000
[  139.671025][ T7233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.269'.
[  139.674489][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.269'.
[  139.677455][ T7233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.269'.
[  139.680484][ T7233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.269'.
[  139.706493][ T7232] lo speed is unknown, defaulting to 1000
[  140.295836][ T7256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.273'.
[  140.299403][ T7256] netlink: 'syz.3.273': attribute type 7 has an invalid length.
[  140.302429][ T7256] netlink: 'syz.3.273': attribute type 8 has an invalid length.
[  140.309333][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'.
[  140.436476][ T7268] netlink: 'syz.3.276': attribute type 3 has an invalid length.
[  140.441039][ T7268] netlink: 'syz.3.276': attribute type 3 has an invalid length.
[  140.568457][ T7278] netlink: 'syz.4.280': attribute type 1 has an invalid length.
[  140.571646][ T7278] netlink: 'syz.4.280': attribute type 2 has an invalid length.
[  140.603962][ T7280] netlink: 'syz.5.279': attribute type 13 has an invalid length.
[  140.607913][ T7280] netlink: 'syz.5.279': attribute type 17 has an invalid length.
[  140.746881][ T7280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.785732][ T7280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.813137][ T7287] lo speed is unknown, defaulting to 1000
[  140.823154][ T7291] lo speed is unknown, defaulting to 1000
[  141.717003][ T7309] lo speed is unknown, defaulting to 1000
[  141.950917][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.290'.
[  142.022206][ T7320] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.056799][ T7320] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.672999][ T7339] lo speed is unknown, defaulting to 1000
[  142.677569][ T7350] __nla_validate_parse: 2 callbacks suppressed
[  142.677581][ T7350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.295'.
[  142.833863][ T7355] syz_tun: entered allmulticast mode
[  142.858301][ T7355] dvmrp8: entered allmulticast mode
[  142.899592][ T7355] lo speed is unknown, defaulting to 1000
[  143.079337][ T7358] lo speed is unknown, defaulting to 1000
[  143.119143][ T7354] syz_tun: left allmulticast mode
[  143.121409][ T7354] dvmrp8: left allmulticast mode
[  143.658509][ T7384] syzkaller1: entered promiscuous mode
[  143.660504][ T7384] syzkaller1: entered allmulticast mode
[  143.943056][   T95] IPVS: starting estimator thread 0...
[  144.045223][ T7394] IPVS: using max 64 ests per chain, 153600 per kthread
[  144.108464][   T52] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  144.111484][   T52] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  144.145844][   T52] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  144.370553][ T7417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.380254][ T7417] team0: No ports can be present during mode change
[  144.627273][ T7427] validate_nla: 1 callbacks suppressed
[  144.627317][ T7427] netlink: 'syz.3.313': attribute type 1 has an invalid length.
[  144.688685][ T7431] netlink: 'syz.4.314': attribute type 58 has an invalid length.
[  144.690309][ T7427] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.691489][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.314'.
[  144.717747][ T7432] bond1: (slave gretap1): making interface the new active one
[  144.722048][ T7432] TC_ACT_REPEAT abuse ?
[  144.725214][ T7432] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  144.734346][ T7432] syz.3.313 (7432) used greatest stack depth: 18536 bytes left
[  144.767097][   T95] TC_ACT_REPEAT abuse ?
[  144.781577][ T5907] TC_ACT_REPEAT abuse ?
[  144.795313][ T7439] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  144.812357][ T5907] TC_ACT_REPEAT abuse ?
[  144.815155][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'.
[  144.818584][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'.
[  144.832382][ T7439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.838611][ T7439] TC_ACT_REPEAT abuse ?
[  144.840817][    C0] TC_ACT_REPEAT abuse ?
[  144.852063][ T7442] bond0: (slave vlan2): Opening slave failed
[  144.945398][ T7451] netlink: 56 bytes leftover after parsing attributes in process `syz.5.318'.
[  144.948423][ T7451] netlink: 19 bytes leftover after parsing attributes in process `syz.5.318'.
[  144.951051][ T7451] netlink: 19 bytes leftover after parsing attributes in process `syz.5.318'.
[  144.967355][ T7456] netlink: 'syz.3.320': attribute type 4 has an invalid length.
[  144.985692][ T7459] netlink: 152 bytes leftover after parsing attributes in process `syz.3.320'.
[  144.989375][ T7459] block nbd0: not configured, cannot reconfigure
[  145.016368][    T9] lo speed is unknown, defaulting to 1000
[  145.018866][    T9] syz1: Port: 1 Link DOWN
[  145.025061][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'.
[  145.153337][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.325'.
[  145.935747][ T7507] netlink: 'syz.4.335': attribute type 3 has an invalid length.
[  145.938354][ T7507] netlink: 'syz.4.335': attribute type 3 has an invalid length.
[  145.999062][ T7510] lo speed is unknown, defaulting to 1000
[  146.145130][ T7522] netlink: 'syz.4.339': attribute type 3 has an invalid length.
[  146.148047][ T7522] netlink: 'syz.4.339': attribute type 3 has an invalid length.
[  146.175637][ T7522] lo speed is unknown, defaulting to 1000
[  146.189568][ T7524] lo speed is unknown, defaulting to 1000
[  146.531899][ T7536] netlink: 'syz.4.343': attribute type 1 has an invalid length.
[  146.566622][ T7536] bond1: entered promiscuous mode
[  146.569134][ T7536] 8021q: adding VLAN 0 to HW filter on device bond1
[  146.580988][ T7537] 8021q: adding VLAN 0 to HW filter on device bond1
[  146.583892][ T7537] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  146.584673][ T7535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  146.587503][ T7537] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  146.593577][ T7535] IPv6: NLM_F_CREATE should be set when creating new route
[  146.596468][ T7535] IPv6: NLM_F_CREATE should be set when creating new route
[  146.608462][ T7535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  146.608791][ T7537] bond1: (slave wireguard0): making interface the new active one
[  146.615758][ T7537] wireguard0: entered promiscuous mode
[  146.620686][ T7537] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  146.635328][ T7535] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[  146.642810][ T7535] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[  146.654885][ T7540] lo speed is unknown, defaulting to 1000
[  146.869913][ T7559] netlink: 'syz.3.349': attribute type 1 has an invalid length.
[  146.952659][ T7565] lo speed is unknown, defaulting to 1000
[  147.088558][ T7566] lo speed is unknown, defaulting to 1000
[  148.273979][ T7612] netlink: 'syz.4.361': attribute type 1 has an invalid length.
[  148.399378][ T7618] __nla_validate_parse: 9 callbacks suppressed
[  148.399396][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'.
[  148.480384][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'.
[  148.511947][ T7628] netlink: 172 bytes leftover after parsing attributes in process `syz.3.366'.
[  148.655318][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.370'.
[  148.686648][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'.
[  148.726005][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.372'.
[  148.830640][ T7643] lo speed is unknown, defaulting to 1000
[  148.934928][ T7657] ieee802154 phy1 wpan1: encryption failed: -22
[  148.975855][ T7661] lo speed is unknown, defaulting to 1000
[  148.988506][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'.
[  149.196931][ T7670] bridge_slave_0: left allmulticast mode
[  149.198697][ T7670] bridge_slave_0: left promiscuous mode
[  149.202989][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.211181][ T7670] bridge_slave_1: left allmulticast mode
[  149.214881][ T7670] bridge_slave_1: left promiscuous mode
[  149.217197][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.228824][ T7670] bond0: (slave bond_slave_0): Releasing backup interface
[  149.237553][ T7670] bond0: (slave bond_slave_1): Releasing backup interface
[  149.242011][ T7670] team0: Port device team_slave_0 removed
[  149.247407][ T7670] team0: Port device team_slave_1 removed
[  149.249945][ T7670] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.254582][ T7670] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.258350][ T7670] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  149.461878][ T7695] netlink: 68 bytes leftover after parsing attributes in process `syz.5.381'.
[  149.564172][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.383'.
[  149.567693][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.383'.
[  150.116467][ T7712] validate_nla: 2 callbacks suppressed
[  150.116486][ T7712] netlink: 'syz.4.385': attribute type 32 has an invalid length.
[  150.438385][ T7727] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  150.830722][ T7751] xt_l2tp: v2 sid > 0xffff: 1114112
[  151.260103][ T7789] lo speed is unknown, defaulting to 1000
[  151.261992][ T7789] lo speed is unknown, defaulting to 1000
[  151.265762][ T7789] lo speed is unknown, defaulting to 1000
[  151.273328][ T7789] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  151.292512][ T7779] TC_ACT_REPEAT abuse ?
[  151.336783][ T7789] lo speed is unknown, defaulting to 1000
[  151.339781][ T7789] lo speed is unknown, defaulting to 1000
[  151.351755][ T7789] lo speed is unknown, defaulting to 1000
[  151.371380][ T7789] lo speed is unknown, defaulting to 1000
[  151.378257][ T7798] netlink: 'syz.4.405': attribute type 4 has an invalid length.
[  151.387053][ T7789] lo speed is unknown, defaulting to 1000
[  151.714842][ T2264] TC_ACT_REPEAT abuse ?
[  151.809053][ T7825] netlink: 'syz.3.413': attribute type 3 has an invalid length.
[  152.662310][ T7832] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  152.684385][ T7837] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  152.690064][ T7836] tipc: Enabled bearer <udp:syz1>, priority 10
[  152.840225][ T7855] netlink: 'syz.3.422': attribute type 1 has an invalid length.
[  152.866930][ T7855] bond2: entered promiscuous mode
[  152.868786][ T7855] 8021q: adding VLAN 0 to HW filter on device bond2
[  152.882802][ T7855] 8021q: adding VLAN 0 to HW filter on device bond2
[  152.886772][ T7855] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  152.891067][ T7855] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  152.904212][ T7855] bond2: (slave wireguard0): making interface the new active one
[  152.907069][ T7855] wireguard0: entered promiscuous mode
[  152.911011][ T7855] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[  152.922876][ T7855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  152.925887][ T7855] IPv6: NLM_F_CREATE should be set when creating new route
[  152.928767][ T7855] IPv6: NLM_F_CREATE should be set when creating new route
[  152.931948][ T7855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  152.945559][ T7855] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[  152.954003][ T7855] bond2: (slave wireguard1): Enslaving as a backup interface with an up link
[  152.994776][   T95] TC_ACT_REPEAT abuse ?
[  153.634300][    C1] TC_ACT_REPEAT abuse ?
[  153.815146][    T9] tipc: Node number set to 1063291729
[  154.058652][ T7895] TC_ACT_REPEAT abuse ?
[  154.110929][ T7903] __nla_validate_parse: 9 callbacks suppressed
[  154.110948][ T7903] netlink: 256 bytes leftover after parsing attributes in process `syz.5.435'.
[  154.316458][ T7918] netlink: 40 bytes leftover after parsing attributes in process `syz.4.438'.
[  154.409353][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'.
[  154.661186][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'.
[  154.664622][ T7932] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  154.667091][ T7932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.707097][ T7934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.717024][ T7933] tipc: Disabling bearer <eth:syzkaller0>
[  154.803115][ T7937] netlink: 'syz.4.445': attribute type 2 has an invalid length.
[  154.806690][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'.
[  155.445151][ T7961] lo speed is unknown, defaulting to 1000
[  155.481786][ T7963] sctp: [Deprecated]: syz.5.451 (pid 7963) Use of int in max_burst socket option deprecated.
[  155.481786][ T7963] Use struct sctp_assoc_value instead
[  155.731724][ T7978] netlink: 'syz.5.455': attribute type 3 has an invalid length.
[  155.786426][ T7980] netlink: 52 bytes leftover after parsing attributes in process `syz.5.456'.
[  155.899206][ T7984] tipc: Started in network mode
[  155.900878][ T7984] tipc: Node identity eacf8543b39c, cluster identity 4711
[  155.903364][ T7984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.906904][ T7984] syzkaller0: entered promiscuous mode
[  155.908611][ T7984] syzkaller0: entered allmulticast mode
[  155.959098][ T7985] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  155.961900][ T7985] CPU: 0 UID: 0 PID: 7985 Comm: syz.3.457 Not tainted syzkaller #0 PREEMPT(full) 
[  155.961914][ T7985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.961920][ T7985] Call Trace:
[  155.961951][ T7985]  <TASK>
[  155.961958][ T7985]  dump_stack_lvl+0x189/0x250
[  155.961976][ T7985]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.961987][ T7985]  ? __pfx__printk+0x10/0x10
[  155.962003][ T7985]  ? kernfs_path_from_node+0x2f/0x290
[  155.962017][ T7985]  ? kernfs_path_from_node+0x250/0x290
[  155.962025][ T7985]  ? kernfs_path_from_node+0x2f/0x290
[  155.962037][ T7985]  sysfs_warn_dup+0x8e/0xa0
[  155.962048][ T7985]  sysfs_do_create_link_sd+0xc0/0x110
[  155.962060][ T7985]  device_add_class_symlinks+0x1cf/0x240
[  155.962071][ T7985]  device_add+0x475/0xb50
[  155.962081][ T7985]  wiphy_register+0x1ba6/0x28d0
[  155.962100][ T7985]  ? __pfx_wiphy_register+0x10/0x10
[  155.962109][ T7985]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  155.962126][ T7985]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  155.962141][ T7985]  ieee80211_register_hw+0x3484/0x4100
[  155.962162][ T7985]  ? ieee80211_register_hw+0x1471/0x4100
[  155.962178][ T7985]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  155.962190][ T7985]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.962202][ T7985]  ? __hrtimer_setup+0x187/0x210
[  155.962210][ T7985]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  155.962228][ T7985]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  155.962263][ T7985]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  155.962277][ T7985]  ? trace_kmalloc+0x1f/0xd0
[  155.962293][ T7985]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  155.962306][ T7985]  ? kstrndup+0xbf/0x160
[  155.962321][ T7985]  hwsim_new_radio_nl+0xea4/0x1b10
[  155.962335][ T7985]  ? __pfx___nla_validate_parse+0x10/0x10
[  155.962362][ T7985]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  155.962392][ T7985]  ? __nla_parse+0x40/0x60
[  155.962403][ T7985]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  155.962419][ T7985]  genl_family_rcv_msg_doit+0x215/0x300
[  155.962433][ T7985]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  155.962450][ T7985]  ? bpf_lsm_capable+0x9/0x20
[  155.962460][ T7985]  ? security_capable+0x7e/0x2e0
[  155.962475][ T7985]  genl_rcv_msg+0x60e/0x790
[  155.962489][ T7985]  ? __pfx_genl_rcv_msg+0x10/0x10
[  155.962499][ T7985]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  155.962518][ T7985]  netlink_rcv_skb+0x208/0x470
[  155.962530][ T7985]  ? __lock_acquire+0xab9/0xd20
[  155.962548][ T7985]  ? __pfx_genl_rcv_msg+0x10/0x10
[  155.962569][ T7985]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  155.962600][ T7985]  ? down_read+0x1ad/0x2e0
[  155.962611][ T7985]  genl_rcv+0x28/0x40
[  155.962620][ T7985]  netlink_unicast+0x82f/0x9e0
[  155.962639][ T7985]  ? __pfx_netlink_unicast+0x10/0x10
[  155.962653][ T7985]  ? netlink_sendmsg+0x642/0xb30
[  155.962662][ T7985]  ? skb_put+0x11b/0x210
[  155.962676][ T7985]  netlink_sendmsg+0x805/0xb30
[  155.962695][ T7985]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.962772][ T7985]  ? aa_sock_msg_perm+0xf1/0x1d0
[  155.962791][ T7985]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  155.962809][ T7985]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.962826][ T7985]  __sock_sendmsg+0x21c/0x270
[  155.962850][ T7985]  ____sys_sendmsg+0x505/0x830
[  155.962876][ T7985]  ? __pfx_____sys_sendmsg+0x10/0x10
[  155.962902][ T7985]  ? import_iovec+0x74/0xa0
[  155.962919][ T7985]  ___sys_sendmsg+0x21f/0x2a0
[  155.962959][ T7985]  ? __pfx____sys_sendmsg+0x10/0x10
[  155.962990][ T7985]  ? __fget_files+0x2a/0x420
[  155.962997][ T7985]  ? __fget_files+0x3a0/0x420
[  155.963012][ T7985]  __x64_sys_sendmsg+0x19b/0x260
[  155.963024][ T7985]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  155.963038][ T7985]  ? rcu_is_watching+0x15/0xb0
[  155.963049][ T7985]  ? do_syscall_64+0xbe/0x3b0
[  155.963063][ T7985]  do_syscall_64+0xfa/0x3b0
[  155.963078][ T7985]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.963091][ T7985]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.963106][ T7985]  ? exc_page_fault+0x9f/0xf0
[  155.963125][ T7985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.963140][ T7985] RIP: 0033:0x7f1526d8eba9
[  155.963155][ T7985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.963165][ T7985] RSP: 002b:00007f1527c25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.963180][ T7985] RAX: ffffffffffffffda RBX: 00007f1526fd6090 RCX: 00007f1526d8eba9
[  155.963188][ T7985] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  155.963196][ T7985] RBP: 00007f1526e11e19 R08: 0000000000000000 R09: 0000000000000000
[  155.963202][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.963207][ T7985] R13: 00007f1526fd6128 R14: 00007f1526fd6090 R15: 00007ffdab6bbab8
[  155.963225][ T7985]  </TASK>
[  156.433648][ T7988] netlink: 'syz.4.459': attribute type 1 has an invalid length.
[  156.438462][ T7988] nbd: error processing sock list
[  156.440881][ T7988] block nbd0: shutting down sockets
[  156.612025][ T7983] tipc: Resetting bearer <eth:syzkaller0>
[  156.627339][ T7983] tipc: Disabling bearer <eth:syzkaller0>
[  156.633698][ T7996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.642110][ T7994] syzkaller0: entered promiscuous mode
[  156.644958][ T7994] syzkaller0: entered allmulticast mode
[  156.662563][ T7993] tipc: Resetting bearer <eth:syzkaller0>
[  156.709513][ T7993] tipc: Disabling bearer <eth:syzkaller0>
[  156.731963][ T8000] netlink: 32 bytes leftover after parsing attributes in process `syz.3.462'.
[  156.855904][ T8006] lo speed is unknown, defaulting to 1000
[  157.063762][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'.
[  157.124755][ T8027] netlink: 'syz.4.470': attribute type 2 has an invalid length.
[  157.127962][ T8027] netlink: 224 bytes leftover after parsing attributes in process `syz.4.470'.
[  157.144677][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'.
[  157.442306][ T8047] lo speed is unknown, defaulting to 1000
[  158.228585][ T8061] lo speed is unknown, defaulting to 1000
[  158.549140][ T8073] ipvlan2: entered promiscuous mode
[  158.551506][ T8073] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  158.745193][ T8089] lo speed is unknown, defaulting to 1000
[  159.221827][ T8104] lo speed is unknown, defaulting to 1000
[  159.363139][ T8108] lo speed is unknown, defaulting to 1000
[  159.464905][ T8113] netlink: 'syz.3.492': attribute type 16 has an invalid length.
[  159.467308][ T8113] __nla_validate_parse: 3 callbacks suppressed
[  159.467314][ T8113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'.
[  159.473062][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'.
[  159.950812][ T8134] netlink: 'syz.4.498': attribute type 1 has an invalid length.
[  160.512617][ T8149] lo speed is unknown, defaulting to 1000
[  160.689714][ T8157] netlink: 104 bytes leftover after parsing attributes in process `syz.4.504'.
[  160.747733][ T8162] netlink: 180 bytes leftover after parsing attributes in process `syz.4.506'.
[  160.752432][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.506'.
[  160.801227][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'.
[  160.816722][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'.
[  160.816913][ T5907] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.825056][ T5907] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.829402][ T5907] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.834019][ T5907] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  161.358357][ T8173] netlink: 'syz.5.509': attribute type 1 has an invalid length.
[  161.361369][ T8173] netlink: 'syz.5.509': attribute type 2 has an invalid length.
[  161.389025][ T8173] netlink: 'syz.5.509': attribute type 1 has an invalid length.
[  161.392066][ T8173] netlink: 'syz.5.509': attribute type 2 has an invalid length.
[  161.538339][ T8180] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  161.582951][ T8178] lo speed is unknown, defaulting to 1000
[  161.837988][ T8194] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.513'.
[  161.872673][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.5.515'.
[  161.876554][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'.
[  162.682288][ T8243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.828665][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.831854][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.914875][ T8267] netlink: 'syz.4.533': attribute type 1 has an invalid length.
[  162.951316][ T8267] 8021q: adding VLAN 0 to HW filter on device bond2
[  162.967450][ T8267] bond2: (slave geneve2): making interface the new active one
[  162.972266][ T8267] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  162.976397][ T5907] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.988448][ T5907] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.997945][ T5907] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.016472][ T5907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.029389][ T8275] netlink: 'syz.4.535': attribute type 6 has an invalid length.
[  163.186317][ T8286] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  163.209965][ T8286] netlink: 'syz.3.538': attribute type 5 has an invalid length.
[  163.240745][ T8289] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  163.345049][ T8300] TCP: TCP_TX_DELAY enabled
[  163.541403][ T8313] lo speed is unknown, defaulting to 1000
[  164.195326][ T5234] Bluetooth: hci5: command 0x0419 tx timeout
[  164.346711][ T8325] netlink: 'syz.5.548': attribute type 13 has an invalid length.
[  164.629337][ T8330] __nla_validate_parse: 13 callbacks suppressed
[  164.629357][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.549'.
[  164.656673][ T8330] netlink: 216 bytes leftover after parsing attributes in process `syz.4.549'.
[  164.838509][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'.
[  164.841803][ T5872] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.845103][ T5872] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.854785][ T5872] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.861094][ T5872] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.981188][ T8334] vlan2: entered allmulticast mode
[  164.985671][ T8334] bridge_slave_0: entered allmulticast mode
[  165.179790][ T8348] netlink: 'syz.5.552': attribute type 13 has an invalid length.
[  165.356345][ T8355] lo speed is unknown, defaulting to 1000
[  165.389790][ T8358] lo speed is unknown, defaulting to 1000
[  165.430161][ T8360] netlink: 'syz.3.557': attribute type 12 has an invalid length.
[  165.436764][ T8360] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.557'.
[  165.771326][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'.
[  166.051020][ T8384] lo speed is unknown, defaulting to 1000
[  166.071515][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'.
[  166.521961][ T8412] validate_nla: 3 callbacks suppressed
[  166.521973][ T8412] netlink: 'syz.3.571': attribute type 12 has an invalid length.
[  166.565238][ T8414] siw: device registration error -23
[  166.688410][ T8424] dvmrp0: entered allmulticast mode
[  167.430863][ T8460] IPv6: sit2: Disabled Multicast RS
[  167.435905][ T8460] sit2: entered allmulticast mode
[  167.800890][ T8479] lo speed is unknown, defaulting to 1000
[  167.811553][ T8478] lo speed is unknown, defaulting to 1000
[  168.104880][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'.
[  168.111603][ T8484] siw: device registration error -23
[  168.152402][ T8484] netlink: 'syz.3.589': attribute type 4 has an invalid length.
[  168.278780][ T8494] syz.3.591 (8494) used obsolete PPPIOCDETACH ioctl
[  168.821696][ T8528] lo speed is unknown, defaulting to 1000
[  168.861027][ T8528] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[  169.053181][ T8542] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  169.056139][ T8542] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  169.065526][ T8542] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  169.068624][ T8542] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  169.075517][ T8542] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  169.077517][ T8542] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  169.087046][ T8542] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  169.090930][ T8542] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  169.094258][ T8542] CPU: 1 UID: 0 PID: 8542 Comm: syz.4.603 Not tainted syzkaller #0 PREEMPT(full) 
[  169.098446][ T8542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.101512][ T8542] RIP: 0010:klist_remove+0x14a/0x340
[  169.103312][ T8542] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 69 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 69 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  169.109867][ T8542] RSP: 0018:ffffc9000403f800 EFLAGS: 00010202
[  169.112167][ T8542] RAX: 000000000000000b RBX: ffff88803b975640 RCX: 0000000000000000
[  169.115132][ T8542] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  169.118126][ T8542] RBP: ffffc9000403f900 R08: ffffffff8f8a09a3 R09: 1ffffffff1f14134
[  169.121103][ T8542] R10: dffffc0000000000 R11: fffffbfff1f14135 R12: 0000000000000000
[  169.124117][ T8542] R13: 1ffff1100719f40c R14: ffff888038cfa060 R15: dffffc0000000000
[  169.127086][ T8542] FS:  00007f317f0166c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  169.130511][ T8542] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.132856][ T8542] CR2: 0000000000000000 CR3: 0000000033c26000 CR4: 00000000000006f0
[  169.135881][ T8542] Call Trace:
[  169.137189][ T8542]  <TASK>
[  169.138407][ T8542]  ? __pfx_klist_remove+0x10/0x10
[  169.140418][ T8542]  ? __pfx_kobject_move+0x10/0x10
[  169.142139][ T8542]  ? do_raw_spin_unlock+0x4d/0x240
[  169.143886][ T8542]  ? get_device_parent+0x366/0x3a0
[  169.145729][ T8542]  device_move+0x193/0x700
[  169.147112][ T8542]  hci_conn_del_sysfs+0xb8/0x170
[  169.148700][ T8542]  hci_conn_del+0xc33/0x11b0
[  169.150278][ T8542]  hci_conn_hash_flush+0x191/0x230
[  169.151945][ T8542]  hci_dev_close_sync+0xaef/0x1330
[  169.153597][ T8542]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  169.155379][ T8542]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  169.157322][ T8542]  hci_dev_do_close+0x2f/0x90
[  169.159038][ T8542]  hci_rfkill_set_block+0x21d/0x2e0
[  169.160791][ T8542]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  169.162544][ T8542]  rfkill_set_block+0x1d2/0x440
[  169.164337][ T8542]  rfkill_fop_write+0x44b/0x570
[  169.165932][ T8542]  ? __pfx_rfkill_fop_write+0x10/0x10
[  169.167535][ T8542]  ? security_kernfs_init_security+0x240/0x290
[  169.169407][ T8542]  ? rw_verify_area+0x255/0x4d0
[  169.170916][ T8542]  ? __lock_acquire+0xab9/0xd20
[  169.172471][ T8542]  ? __pfx_rfkill_fop_write+0x10/0x10
[  169.174225][ T8542]  vfs_write+0x27e/0xb30
[  169.175531][ T8542]  ? __pfx_vfs_write+0x10/0x10
[  169.177007][ T8542]  ? __fget_files+0x2a/0x420
[  169.178508][ T8542]  ? __fget_files+0x2a/0x420
[  169.179940][ T8542]  ? __fget_files+0x3a0/0x420
[  169.181456][ T8542]  ? __fget_files+0x2a/0x420
[  169.183149][ T8542]  ksys_write+0x145/0x250
[  169.184818][ T8542]  ? __pfx_ksys_write+0x10/0x10
[  169.186693][ T8542]  ? rcu_is_watching+0x15/0xb0
[  169.188562][ T8542]  ? do_syscall_64+0xbe/0x3b0
[  169.190514][ T8542]  do_syscall_64+0xfa/0x3b0
[  169.192394][ T8542]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.194458][ T8542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.196684][ T8542]  ? exc_page_fault+0x9f/0xf0
[  169.198484][ T8542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.200773][ T8542] RIP: 0033:0x7f317e18eba9
[  169.202467][ T8542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.209760][ T8542] RSP: 002b:00007f317f016038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  169.212948][ T8542] RAX: ffffffffffffffda RBX: 00007f317e3d5fa0 RCX: 00007f317e18eba9
[  169.215953][ T8542] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000007
[  169.218863][ T8542] RBP: 00007f317e211e19 R08: 0000000000000000 R09: 0000000000000000
[  169.221861][ T8542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.224892][ T8542] R13: 00007f317e3d6038 R14: 00007f317e3d5fa0 R15: 00007ffccee59898
[  169.228073][ T8542]  </TASK>
[  169.229347][ T8542] Modules linked in:
[  169.231874][ T8542] ---[ end trace 0000000000000000 ]---
[  169.236874][ T8542] RIP: 0010:klist_remove+0x14a/0x340
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  169.239118][ T8542] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 69 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 69 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  169.254904][ T8542] RSP: 0018:ffffc9000403f800 EFLAGS: 00010202
[  169.259757][ T8542] RAX: 000000000000000b RBX: ffff88803b975640 RCX: 0000000000000000
[  169.266019][ T8542] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  169.269169][ T8542] RBP: ffffc9000403f900 R08: ffffffff8f8a09a3 R09: 1ffffffff1f14134
[  169.272381][ T8542] R10: dffffc0000000000 R11: fffffbfff1f14135 R12: 0000000000000000
[  169.277569][ T8542] R13: 1ffff1100719f40c R14: ffff888038cfa060 R15: dffffc0000000000
[  169.280255][ T8542] FS:  00007f317f0166c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  169.307375][ T8542] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.309468][ T8542] CR2: 0000000000000000 CR3: 0000000033c26000 CR4: 00000000000006f0
[  169.311986][ T8542] Kernel panic - not syncing: Fatal exception
[  169.314729][ T8542] Kernel Offset: disabled
[  169.316457][ T8542] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:03:02  Registers:
info registers vcpu 0

CPU#0
RAX=9f7d094561201e00 RBX=ffffffff819683f8 RCX=9f7d094561201e00 RDX=0000000000000001
RSI=ffffffff8be33860 RDI=ffffffff819683f8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38f30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a93f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f317efd3fc8 CR3=00000000297a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1526e12e53
XMM06=0000000000000000 00007f1526e12e4d XMM07=0000000000000000 00007f1526e12e61
XMM08=0000000000000000 00007f1526e12ee7 XMM09=0000000000000000 00007f1526e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000055 RBX=0000000000000055 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000403ef90
R8 =ffff888020468237 R9 =1ffff1100408d046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018da R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f317f0166c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000033c26000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000006864
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f1526e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
