last executing test programs:

3m37.90946897s ago: executing program 0 (id=263):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000b700000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00bd700000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r5)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20004000)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000080)={<r9=>r8, 0x8}, &(0x7f00000000c0)=0x8)
sendmmsg$inet_sctp(r7, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r9}}], 0x20, 0x4c004}], 0x1, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e20, 0xff, @empty, 0x9}}, 0x6, 0x400}, &(0x7f0000000040)=0x90)
sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2006)
r10 = socket(0x2b, 0x1, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r12=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x10d, &(0x7f0000000900)=""/269, 0xb6df4c32c1d5c814}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8044, 0xffe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x9601}}]}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x68}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xd, r12, 0x1, 0x2, 0x6, @broadcast}, 0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0)

3m37.437498401s ago: executing program 0 (id=266):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$xdp(0x2c, 0x3, 0x0) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x20000000}, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r5, &(0x7f00000000c0), 0x12)
close(r5)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x16, 0xa01}, 0x14}}, 0x0)
recvmmsg$unix(r6, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async)
recvmmsg$unix(r6, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) (async)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, <r7=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$nl_generic(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x17, 0x800, 0x70bd2d, 0x25dfdbfc, {0x16}, [@typed={0x8, 0xf6, 0x0, 0x0, @uid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in=@loopback, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e24, 0x7fff, 0xa, 0x80, 0xa0, 0x3c, r4, r7}, {0x5, 0x2, 0x6, 0x8000000000000000, 0x5, 0x5, 0x7, 0x4}, {0x9, 0x5, 0x1, 0x2}, 0xb9, 0x6e6bb5, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d3, 0x6c}, 0x2, @in=@multicast1, 0x3507, 0x2, 0x0, 0xf9, 0x8, 0x2, 0x7fff}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in=@loopback, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e24, 0x7fff, 0xa, 0x80, 0xa0, 0x3c, r4, r7}, {0x5, 0x2, 0x6, 0x8000000000000000, 0x5, 0x5, 0x7, 0x4}, {0x9, 0x5, 0x1, 0x2}, 0xb9, 0x6e6bb5, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d3, 0x6c}, 0x2, @in=@multicast1, 0x3507, 0x2, 0x0, 0xf9, 0x8, 0x2, 0x7fff}}, 0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe80000000000000000000aae000400100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001"], 0xf8}}, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011002ff0004"], 0x28}, 0x4004004)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x7, 0x3}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x7, 0x3})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}}, 0x0)

3m37.149101852s ago: executing program 0 (id=270):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48)
r1 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r1, 0x2}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x3}}}}}}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a)
writev(r2, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
recvfrom$inet(r1, &(0x7f0000000040)=""/228, 0xe4, 0x0, &(0x7f0000000140)={0x2, 0x4e2c, @local}, 0x10)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x5)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r6, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x370}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x1f, 0x115, "73050218f1e7789c3fdde824fab534ae29f5d74dba82ff52149d7f"}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC_HINT={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x85}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x244}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x31}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x800)
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)

3m36.800103024s ago: executing program 1 (id=276):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a3200000000780004806400018009000100686173680000000054000280080007400000000108000540"], 0xcc}}, 0x24000840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00', <r0=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c000600000000000000000008000b0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m36.736285893s ago: executing program 1 (id=277):
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x3f, 0x2, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x1, 0x700, 0x66b6, 0x40}})
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x14, 0xff, 0x3, 0x8, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x40}, 0x1, 0x7}, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendto$x25(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}}, 0x400c810)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', 0x0})
socket(0x10, 0x80002, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x3f, 0x2, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x1, 0x700, 0x66b6, 0x40}}) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x14, 0xff, 0x3, 0x8, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x40}, 0x1, 0x7}, 0x0) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
sendto$x25(r2, 0x0, 0x0, 0x80, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}}, 0x400c810) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', 0x0}) (async)

3m36.660241952s ago: executing program 1 (id=279):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x20000000, 0x80000008, 0x308}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4041048}, 0x20000001)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@getneigh={0x14, 0x1e, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x4000000)

3m36.65663827s ago: executing program 1 (id=280):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000040))
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xd, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r8 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r6, &(0x7f0000000340)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4a", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc715d9569f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xc6)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

3m35.995855127s ago: executing program 2 (id=284):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x137, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendto(r2, &(0x7f0000000180)="235ab57cdf9addf495dbf2a6dcb7e58cfbb3530d1bca7cd36daf9e5665efc67508595fd2", 0x24, 0x4880, &(0x7f0000000380)=@generic={0x1, "14d0f31c35a407995ab735b5523d55078897df307938feb5797dcf087672dc23b9f2ff49154056801338f0f901c1347fb3948107c7f6e603aee6d4d8073a48e8801c80ae37d9a5051e8eb79b32b8e2131a77778ac8c4c0ce186ef29c8a9f069a678f285600605d09f7cc5deace9b93f3869593833d96b71eb7d6fda0af6c"}, 0x80) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) (async, rerun: 64)
socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe00002400"], 0xfe33) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000004", @ANYRES32=0x0, @ANYBLOB="04000d800800010002"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket(0x1d, 0x800, 0xffffffff)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9)
getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000140)=0x321993f6, 0x4)

3m35.878196143s ago: executing program 0 (id=285):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f)
close(r0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@delqdisc={0x4f0, 0x25, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {0x4, 0xffe0}, {0x1, 0xd}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0x8, 0x8, 0x0, 0x101, 0x2, 0x1}}, {0x6, 0x2, [0x10]}}, {{0x1c, 0x1, {0x2, 0xb, 0x2, 0x9, 0x2, 0x4, 0xf, 0x6}}, {0x10, 0x2, [0x9, 0x5, 0x3, 0xc, 0x2, 0x6]}}, {{0x1c, 0x1, {0x6, 0xfa, 0x4, 0x2, 0x1, 0x0, 0x9c00000, 0x2}}, {0x8, 0x2, [0x5, 0x7]}}, {{0x1c, 0x1, {0x0, 0xf, 0x2, 0x80, 0x2, 0x7, 0x8, 0x4}}, {0xc, 0x2, [0x1ff, 0x0, 0x6, 0xe]}}]}, @qdisc_kind_options=@q_choke={{0xa}, {0x368, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4d22, 0x4, 0x6, 0x1e, 0xb, 0xe, 0x6}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8000}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4d, 0x9, 0x10000, 0x1c, 0xf, 0x1c, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xe170, 0x100, 0x7273, 0x18, 0x3, 0x18, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xbb3, 0x800, 0x2, 0x1e, 0x1f, 0x13, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4, 0x9, 0xe, 0x1, 0x917c, 0x1, 0x8}}, {0x14, 0x2, [0x3ff, 0x81, 0x1, 0x1ff, 0xffff, 0x0, 0xfff8, 0x1]}}, {{0x1c, 0x1, {0x0, 0x3, 0x0, 0x7f585e07, 0x2, 0xa, 0x9, 0x3}}, {0xa, 0x2, [0x9, 0x1ff, 0xff]}}, {{0x1c, 0x1, {0x9b, 0x9, 0x0, 0x9000, 0x0, 0x1, 0x9, 0x4}}, {0xc, 0x2, [0xfc00, 0x1, 0xeef, 0x80]}}, {{0x1c, 0x1, {0x0, 0xf, 0xbc, 0x6, 0x1, 0x401, 0x4, 0x1}}, {0x6, 0x2, [0x2]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r6, @ANYRES16=r6, @ANYRESOCT=r5, @ANYRES32=r7, @ANYBLOB="84008480180000800a00050050505050505000000800020009000000240000800a000100010101010101000008000200060000000a00010002020202020200002800008008000200060000000a0005005050505050500000080002005916000008000200030000001c0000801500b9081975b8965eff2fb9d9e9bbd228d904fbb90000000600eb00030000000400ff00"], 0xac}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000000)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000100000000000000000000000030005003c00000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200"], 0x82}}, 0x0)
close(r4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000000000001100100000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000047010000f8ffffffb702000008000000b7030000010000008500000006000000850000005000000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010036bd7000fbdbdb2505000000280001800d0001007564701c20da449d80"], 0x3c}}, 0x4040140)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000009b00010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000100000900edd007b3edda14a08a25a5010073797a31000600010000030100140000001100010000000000000000000300000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x2efe}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)

3m35.759936994s ago: executing program 0 (id=286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}]}, &(0x7f0000000340)=0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x5}, &(0x7f00000001c0)=0x8)
r4 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)

3m33.415586559s ago: executing program 2 (id=287):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DONE(r1, 0x0, 0x21, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008f6ff00000000000800000071117a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000001380)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="000500"/14, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000ffffffbfa400000000000007040000f0ffffffb70200000800000018230000000000000000009779f2dac53a9d949a2260bae513ff8406bb999c7a6c054b5f084199cfc071b1", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
r7 = socket$packet(0x11, 0x2, 0x300)
socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x100})
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000280)={'team0\x00', <r8=>0x0})
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r10, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r11 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r10, 0x10042}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff11125ce882cbf420180bf4533f00429c65112a", 0x26}, {&(0x7f0000000580)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r14, @ANYBLOB="01"], 0x3c}}, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={0x32c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa2c}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x1, 0x3}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400100, 0x0)
ioctl$TUNSETVNETBE(r15, 0x400454de, &(0x7f0000000100)=0x1)

3m31.011472923s ago: executing program 1 (id=288):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
r3 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x4c, 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0xe0}, 0x1, 0x0, 0x0, 0x8080}, 0x800)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@delchain={0x74, 0x65, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5, 0x8}, {0x1f, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0xd76}, @filter_kind_options=@f_bpf={{0x8}, {0x40, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x10}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX=r9, @ANYRES32=0x0, @ANYBLOB="04000b2ac553d3c63ed48fbc0c9ae362070b000800090005ac0f00046d34b0d48736fc9d3fc7db0f1710a9d6c90364cf7242fb3fc464f4172b872573ded26c0b2375bdca0611e375efffc63e1de0755d8b58fa7f6d74fba76730ec296099e4ba"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4004800)

3m29.335777264s ago: executing program 0 (id=289):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xada6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)=':', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@delchain={0x24, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x3, 0xb}, {0x6, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x8000002}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x10, 0x20, 0x41, 0x0, 0x0, 0x3, 0x0, 0xf28ef7f04b0ad71}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000046}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

3m19.303071737s ago: executing program 2 (id=290):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
close(0x3) (async)
ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000004c0))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000400)={@local, 0x1a, r2}) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x14, 0x7, 0x2, 0x7, 0x0, 0x80000001, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x3c, 0xa0, 0x0, @in6={0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x15}, 0x1}}]}, 0x38}}, 0x40008d4) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r5, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xa00, 0x20}, &(0x7f0000002380)=0x18) (async)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f008400000000000000a76448a7"}}}}}}}, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_mreq(r8, 0x0, 0x20, &(0x7f0000000440)={@local, @remote}, &(0x7f0000000480)=0x8) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20114, 0x2838c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}, @IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x44}}, 0x0)

3m18.903070261s ago: executing program 1 (id=291):
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f6669736829"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000000e0a010200000000000000000a000000140000001100010000000000000000000100000a87454738bff29645384338fcf8a706f5908a6bab604eb4a1c1"], 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0)
sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x2, 0x4f22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="500b570fc980bb95a72f3c5647da5c85ebbf0dceeff6b1665d53d4310e2d4f4894aa1940aed0a0e82ef5805a316a765cc0b4e8e51f95633f6a8b76d1cf911ff937160ad2b7ca6b3c138d47ef3716eb6c3e9c72cf5ccdbe25b4b146ff3b3e31ea238632c3cf0122a160b979d726bf44d8d0fb70", 0x73}, {&(0x7f0000000340)="c8075843864ca0eb2ffe2decab114471786a29e4cfcf15431fc3ac9e66a5dcbc9944158e2574475f428af045d299787bd5b0bc0a4e5011d15ba0ce882ffe4cea36c55208f2c59aeb1385f29b39154b881879f2b8a1ff90b582c36739fb682d7ed05daf79def2ec848e62884a6334965fa3b5f700bb5669fafb0e1c5e9cc70dec9bec4e281177ed729e17e08f6dbc01b96ba98419fa2989f16fa1b7dbef247d7b1bc065ed65d8b5f7ce64d082d3e4953c4a3b017d20334b8874b9b08e610434d6080458d351257d", 0xc7}, {&(0x7f0000000440)="8e702ab02c109aa5fc4b9ae599d1b1c108e05788835149dd597de31bbf9d4c528d34528f1b9c195b8686767afb35d307f89e5cc0e203a1867fd2050ff26534e781cfe2fa4ad8c035138693f826365fbdcebe52459c76a1bace8f97e64dbafdd3f831fe9237721a20e812e3470c1a560aafbc277f0549", 0x76}], 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1400000000000000000000000a00000040000000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="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"], 0x140}, 0x800)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/188, 0xbc}, {&(0x7f0000000dc0)=""/196, 0xc4}, {&(0x7f0000000ec0)=""/218, 0xda}, {&(0x7f0000000fc0)=""/26, 0x1a}], 0x4, 0x0, 0x0, 0x8800}, 0x4000800)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x7, 0x8}, {0xffff, 0x5}, {0x0, 0x3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24040084)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x1, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r13, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000140)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x1c, r13, 0x800, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x22a4d906d6f773ff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x2b}, 0x1, 0x0, 0x0, 0x4000011}, 0x20004005)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)

3m10.418422626s ago: executing program 32 (id=289):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xada6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)=':', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@delchain={0x24, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x3, 0xb}, {0x6, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x8000002}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x10, 0x20, 0x41, 0x0, 0x0, 0x3, 0x0, 0xf28ef7f04b0ad71}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000046}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

3m9.832921023s ago: executing program 2 (id=293):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x83}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x20, 0x3, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b32998b7239316730514000000", @ANYRES16=r3, @ANYBLOB="997428bd7000fbdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000884}, 0x20008000)
socket$inet6(0xa, 0x800, 0xe13)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000480)=ANY=[@ANYRES16=r6], 0x48)
ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x4008af03, &(0x7f00000001c0)={{r4}, 0x0, 0x10, @unused=[0x4830, 0xb, 0xc, 0x1], @name="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"})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21800000004000002c001280080001006774700020000280050005000000000014000800"/52], 0x4c}}, 0x40)

3m3.4365309s ago: executing program 33 (id=291):
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f6669736829"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000000e0a010200000000000000000a000000140000001100010000000000000000000100000a87454738bff29645384338fcf8a706f5908a6bab604eb4a1c1"], 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0)
sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x2, 0x4f22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="500b570fc980bb95a72f3c5647da5c85ebbf0dceeff6b1665d53d4310e2d4f4894aa1940aed0a0e82ef5805a316a765cc0b4e8e51f95633f6a8b76d1cf911ff937160ad2b7ca6b3c138d47ef3716eb6c3e9c72cf5ccdbe25b4b146ff3b3e31ea238632c3cf0122a160b979d726bf44d8d0fb70", 0x73}, {&(0x7f0000000340)="c8075843864ca0eb2ffe2decab114471786a29e4cfcf15431fc3ac9e66a5dcbc9944158e2574475f428af045d299787bd5b0bc0a4e5011d15ba0ce882ffe4cea36c55208f2c59aeb1385f29b39154b881879f2b8a1ff90b582c36739fb682d7ed05daf79def2ec848e62884a6334965fa3b5f700bb5669fafb0e1c5e9cc70dec9bec4e281177ed729e17e08f6dbc01b96ba98419fa2989f16fa1b7dbef247d7b1bc065ed65d8b5f7ce64d082d3e4953c4a3b017d20334b8874b9b08e610434d6080458d351257d", 0xc7}, {&(0x7f0000000440)="8e702ab02c109aa5fc4b9ae599d1b1c108e05788835149dd597de31bbf9d4c528d34528f1b9c195b8686767afb35d307f89e5cc0e203a1867fd2050ff26534e781cfe2fa4ad8c035138693f826365fbdcebe52459c76a1bace8f97e64dbafdd3f831fe9237721a20e812e3470c1a560aafbc277f0549", 0x76}], 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1400000000000000000000000a00000040000000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="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"], 0x140}, 0x800)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/188, 0xbc}, {&(0x7f0000000dc0)=""/196, 0xc4}, {&(0x7f0000000ec0)=""/218, 0xda}, {&(0x7f0000000fc0)=""/26, 0x1a}], 0x4, 0x0, 0x0, 0x8800}, 0x4000800)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x7, 0x8}, {0xffff, 0x5}, {0x0, 0x3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24040084)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x1, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r13, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000140)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x1c, r13, 0x800, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x22a4d906d6f773ff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x2b}, 0x1, 0x0, 0x0, 0x4000011}, 0x20004005)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)

2m53.7645703s ago: executing program 2 (id=295):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x400c}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0xccda}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xffffffffffffffa9, &(0x7f0000000180)={&(0x7f0000000080)={0x74, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x0, 0x4, 0x44}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_MRU={0x0, 0x1d, 0xd64}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x8f}, @L2TP_ATTR_FD={0x0, 0x17, @udp=r1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4040885)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))

2m44.264909396s ago: executing program 2 (id=296):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000040), 0x8)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f00000004c0)={0x1f, @none}, 0x14)
listen(r2, 0xc)
listen(r1, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, r4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r7], 0x44}}, 0x28000)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89ff, &(0x7f0000000100)="66b68972c5acdc1c75")
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
socket(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbbb, {0x0, 0x0, 0x0, r8, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14)

2m28.336986866s ago: executing program 34 (id=296):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000040), 0x8)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f00000004c0)={0x1f, @none}, 0x14)
listen(r2, 0xc)
listen(r1, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, r4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r7], 0x44}}, 0x28000)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89ff, &(0x7f0000000100)="66b68972c5acdc1c75")
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
socket(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbbb, {0x0, 0x0, 0x0, r8, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14)

0s ago: executing program 5 (id=297):
poll(0x0, 0x0, 0x101)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:25691' (ED25519) to the list of known hosts.
syzkaller login: [   50.815770][ T5601] cgroup: Unknown subsys name 'net'
[   50.917333][ T5601] cgroup: Unknown subsys name 'cpuset'
[   50.921132][ T5601] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.292386][ T5601] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.748356][ T4996] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.753261][ T4996] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.756661][ T4996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.760010][ T4996] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.762910][ T4996] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.813502][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.817002][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.820595][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.826922][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.829443][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.834176][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.839241][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.842693][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.843247][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.848485][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.990943][ T5644] modprobe (5644) used greatest stack depth: 20072 bytes left
[   57.388203][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.391309][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.395454][ T5613] bridge_slave_0: entered allmulticast mode
[   57.398194][ T5613] bridge_slave_0: entered promiscuous mode
[   57.402193][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.404786][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.407162][ T5613] bridge_slave_1: entered allmulticast mode
[   57.409730][ T5613] bridge_slave_1: entered promiscuous mode
[   57.460512][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.472307][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.476456][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.479114][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.481709][ T5620] bridge_slave_0: entered allmulticast mode
[   57.484669][ T5620] bridge_slave_0: entered promiscuous mode
[   57.515862][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.518751][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.521331][ T5620] bridge_slave_1: entered allmulticast mode
[   57.524588][ T5620] bridge_slave_1: entered promiscuous mode
[   57.540661][ T5613] team0: Port device team_slave_0 added
[   57.555243][ T5613] team0: Port device team_slave_1 added
[   57.558978][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.563784][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.608919][ T5620] team0: Port device team_slave_0 added
[   57.619197][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.622171][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.632349][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.638524][ T5620] team0: Port device team_slave_1 added
[   57.640557][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.643255][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.646232][ T5621] bridge_slave_0: entered allmulticast mode
[   57.649137][ T5621] bridge_slave_0: entered promiscuous mode
[   57.652643][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.655439][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.663641][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.676206][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.678819][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.681331][ T5621] bridge_slave_1: entered allmulticast mode
[   57.684367][ T5621] bridge_slave_1: entered promiscuous mode
[   57.715692][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.718633][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.728449][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.734590][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.751630][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.754710][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.764126][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.770224][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.778903][ T5613] hsr_slave_0: entered promiscuous mode
[   57.781246][ T5613] hsr_slave_1: entered promiscuous mode
[   57.806395][ T5621] team0: Port device team_slave_0 added
[   57.824359][ T5621] team0: Port device team_slave_1 added
[   57.874615][ T5620] hsr_slave_0: entered promiscuous mode
[   57.878805][ T5620] hsr_slave_1: entered promiscuous mode
[   57.881737][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   57.885170][ T5620] Cannot create hsr debugfs directory
[   57.888020][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.890601][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.899740][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.905430][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.907818][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.918305][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.007619][ T5621] hsr_slave_0: entered promiscuous mode
[   58.010051][ T5621] hsr_slave_1: entered promiscuous mode
[   58.012238][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[   58.014256][ T5621] Cannot create hsr debugfs directory
[   58.221916][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.233557][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.240416][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.246717][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.252239][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.259439][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.276094][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.285139][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.361019][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.370563][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.378796][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.385754][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.390965][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.397918][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.400797][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.408188][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.472361][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.478012][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.486455][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.490894][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.498660][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.503052][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.507165][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.513075][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.610681][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.647759][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   58.659680][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.663103][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.682406][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.685340][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.694730][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.718089][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.737982][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   58.753702][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.756554][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.766541][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   58.777764][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.780530][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.791382][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.793670][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.813756][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.816143][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.845372][ T5626] Bluetooth: hci0: command tx timeout
[   58.927257][ T5626] Bluetooth: hci2: command tx timeout
[   58.930038][ T4996] Bluetooth: hci1: command tx timeout
[   59.172282][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.217790][ T5613] veth0_vlan: entered promiscuous mode
[   59.227412][ T5613] veth1_vlan: entered promiscuous mode
[   59.249893][ T5613] veth0_macvtap: entered promiscuous mode
[   59.257688][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.262402][ T5613] veth1_macvtap: entered promiscuous mode
[   59.277588][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.292342][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.313182][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.359812][ T5620] veth0_vlan: entered promiscuous mode
[   59.388987][ T5620] veth1_vlan: entered promiscuous mode
[   59.414283][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.421532][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.435103][ T5475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.439988][ T5475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.454291][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.475514][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.477425][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.482125][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.489514][ T5621] veth0_vlan: entered promiscuous mode
[   59.502040][ T5620] veth0_macvtap: entered promiscuous mode
[   59.522429][ T5620] veth1_macvtap: entered promiscuous mode
[   59.529661][ T5621] veth1_vlan: entered promiscuous mode
[   59.556468][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.561881][ T5613] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.577994][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.612478][ T5621] veth0_macvtap: entered promiscuous mode
[   59.625457][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.657024][ T5621] veth1_macvtap: entered promiscuous mode
[   59.674339][ T5475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.683302][ T5475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.733130][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.741065][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.747734][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.751198][ T5727] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   59.758387][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.831646][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.837229][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.865098][ T5687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.871041][ T5687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.926176][ T5732] erspan1: entered allmulticast mode
[   59.953388][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.957365][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.991510][ T5732] syz.2.4 (5732) used obsolete PPPIOCDETACH ioctl
[   59.992791][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.997628][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.004310][ T5687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.012310][ T5687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.019372][ T5687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.031154][ T5732] Zero length message leads to an empty skb
[   60.116945][ T5738] vlan2: entered promiscuous mode
[   60.118791][ T5738] gretap0: entered promiscuous mode
[   60.190490][ T5735] bond1: Unable to set peer notification delay as MII monitoring is disabled
[   60.197025][ T5735] bond1 (unregistering): Released all slaves
[   60.332408][ T5753] netlink: 'syz.1.8': attribute type 1 has an invalid length.
[   60.341056][ T5753] netlink: 'syz.1.8': attribute type 10 has an invalid length.
[   60.345288][ T5753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'.
[   60.349338][ T5753] dummy0: entered promiscuous mode
[   60.367291][ T5756] netlink: 'syz.1.8': attribute type 1 has an invalid length.
[   60.408954][ T5760] x_tables: duplicate underflow at hook 1
[   60.438626][ T5752] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9'.
[   60.452117][ T5752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.461854][ T5765] tipc: Started in network mode
[   60.465895][ T5765] tipc: Node identity 8a812fefd3d5, cluster identity 4711
[   60.469171][ T5765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.472945][ T5769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12'.
[   60.477349][ T5769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.499371][ T5765] tipc: Disabling bearer <eth:syzkaller0>
[   60.526184][ T5771] netlink: 'syz.0.14': attribute type 1 has an invalid length.
[   60.603403][ T5773] bond1: option primary_reselect: invalid value (6)
[   60.606546][ T5777] netlink: 5 bytes leftover after parsing attributes in process `syz.1.16'.
[   60.611594][ T5773] bond1 (unregistering): Released all slaves
[   60.645929][ T5771] macvlan2: entered promiscuous mode
[   60.647766][ T5771] macvlan2: entered allmulticast mode
[   60.654734][ T5777] 0<w,: renamed from gretap0 (while UP)
[   60.671006][ T5777] 0<w,: entered allmulticast mode
[   60.678497][ T5777] A link change request failed with some changes committed already. Interface 30<w, may have been left with an inconsistent configuration, please check.
[   60.762028][ T5786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'.
[   60.862037][ T5783] netlink: 'syz.1.18': attribute type 39 has an invalid length.
[   60.900483][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'.
[   60.906867][ T5795] netlink: 'syz.0.22': attribute type 25 has an invalid length.
[   60.909792][ T5795] netlink: 'syz.0.22': attribute type 25 has an invalid length.
[   60.912269][ T5795] netlink: 'syz.0.22': attribute type 3 has an invalid length.
[   60.924261][ T4996] Bluetooth: hci0: command tx timeout
[   61.004871][ T5626] Bluetooth: hci2: command tx timeout
[   61.008208][ T4996] Bluetooth: hci1: command tx timeout
[   61.055956][ T5805] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   61.070659][ T5805] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.111241][ T5805] veth3: entered allmulticast mode
[   61.490346][ T5818] netlink: 'syz.2.29': attribute type 2 has an invalid length.
[   62.449332][ T5830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.34'.
[   62.612789][ T5833] hsr_slave_0: left promiscuous mode
[   62.627083][ T5833] hsr_slave_1: left promiscuous mode
[   62.639687][ T5842] x_tables: duplicate underflow at hook 3
[   62.697882][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'.
[   62.728970][ T5849] syzkaller0: entered promiscuous mode
[   62.734668][ T5849] syzkaller0: entered allmulticast mode
[   62.752549][ T5851] xt_NFQUEUE: number of total queues is 0
[   62.877787][ T5857] netlink: 72 bytes leftover after parsing attributes in process `syz.1.40'.
[   62.880866][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'.
[   63.013995][ T4996] Bluetooth: hci0: command tx timeout
[   63.094026][ T4996] Bluetooth: hci1: command tx timeout
[   63.095867][ T5626] Bluetooth: hci2: command tx timeout
[   63.679527][ T5872] xt_recent: Unsupported userspace flags (000000c5)
[   63.696564][ T5872] bond2: option fail_over_mac: invalid value (127)
[   63.699664][ T5872] bond2 (unregistering): Released all slaves
[   63.916676][ T5882] geneve3: entered promiscuous mode
[   63.999715][ T5884] trusted_key: syz.0.48 sent an empty control message without MSG_MORE.
[   64.178149][ T5892] veth0: entered promiscuous mode
[   64.247372][ T5891] veth0: left promiscuous mode
[   64.277130][ T5894] : renamed from lo (while UP)
[   64.391366][ T5907] nbd: must specify a device to reconfigure
[   64.517445][ T5918] Bluetooth: MGMT ver 1.23
[   64.846464][ T5950] warning: `syz.2.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.915115][ T5958] pim6reg: entered allmulticast mode
[   65.076323][ T5970] openvswitch: netlink: IP tunnel TTL not specified.
[   65.080662][ T5970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.087471][ T4996] Bluetooth: hci0: command tx timeout
[   65.110100][ T5972] !: renamed from virt_wifi0
[   65.144157][ T5975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.164820][ T4996] Bluetooth: hci1: command tx timeout
[   65.166649][ T5626] Bluetooth: hci2: command tx timeout
[   65.366232][ T5987] xt_l2tp: invalid flags combination: 0
[   65.370930][ T5987] __nla_validate_parse: 14 callbacks suppressed
[   65.370941][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.75'.
[   65.378050][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.75'.
[   65.385404][ T5987] erspan0: entered promiscuous mode
[   65.393545][ T5983] wlan0: renamed from sit0 (while UP)
[   65.403489][ T5983] wlan0: entered promiscuous mode
[   65.411310][ T5983] wlan0: entered allmulticast mode
[   65.419043][ T5983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76'.
[   65.422354][ T5983] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   65.432755][ T5983] netlink: 72 bytes leftover after parsing attributes in process `syz.1.76'.
[   65.436254][ T5983] netlink: 72 bytes leftover after parsing attributes in process `syz.1.76'.
[   65.440288][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'.
[   65.585351][ T5991] block nbd0: server does not support multiple connections per device.
[   65.591559][ T5991] block nbd0: shutting down sockets
[   65.695214][ T6004] validate_nla: 8 callbacks suppressed
[   65.695224][ T6004] netlink: 'syz.0.79': attribute type 1 has an invalid length.
[   65.716423][ T6004] gretap1: entered allmulticast mode
[   65.727021][ T6004] bond2: (slave gretap1): making interface the new active one
[   65.730862][ T6004] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   66.046772][ T6030] netlink: 'syz.0.81': attribute type 16 has an invalid length.
[   66.051829][ T6030] netlink: 'syz.0.81': attribute type 17 has an invalid length.
[   66.241249][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   66.252840][ T6051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.84'.
[   66.319353][ T5991] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   66.322036][ T5991] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   66.342442][ T5991] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   66.345936][ T5991] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   66.367577][ T5991] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   66.372697][ T5991] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   66.470312][ T6058] veth1_to_hsr: entered promiscuous mode
[   66.475825][ T6058] netlink: 76 bytes leftover after parsing attributes in process `syz.0.86'.
[   66.478925][ T6058] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[   66.479648][ T6061] netlink: 'syz.1.87': attribute type 1 has an invalid length.
[   66.543284][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'.
[   66.561989][ T6065] netlink: 'syz.0.89': attribute type 7 has an invalid length.
[   66.607427][ T6065] netlink: 'syz.0.89': attribute type 7 has an invalid length.
[   66.617189][ T5475] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.624160][ T5475] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.630368][ T5475] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.655763][ T5475] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.755411][ T6082] netlink: 'syz.1.95': attribute type 13 has an invalid length.
[   66.760606][ T6083] netlink: 'syz.0.94': attribute type 1 has an invalid length.
[   66.805188][ T5475] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.817509][ T5475] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.828163][ T6093] netlink: 'syz.1.97': attribute type 1 has an invalid length.
[   66.874923][ T6093] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.898368][ T6093] netlink: 'syz.1.97': attribute type 3 has an invalid length.
[   66.941898][ T6097] syzkaller0: entered promiscuous mode
[   66.943709][ T6097] syzkaller0: entered allmulticast mode
[   66.954056][ T5475] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.959881][ T5475] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.975060][ T6097] sit1: entered promiscuous mode
[   67.008887][ T6106] netlink: 'syz.1.102': attribute type 11 has an invalid length.
[   67.849122][ T6119] team0: entered promiscuous mode
[   67.850844][ T6119] team_slave_0: entered promiscuous mode
[   67.852748][ T6119] team_slave_1: entered promiscuous mode
[   67.855837][ T6119] team0: entered allmulticast mode
[   67.857729][ T6119] team_slave_0: entered allmulticast mode
[   67.859748][ T6119] team_slave_1: entered allmulticast mode
[   67.980731][ T6133] tipc: Failed to obtain node identity
[   67.986553][ T6133] tipc: Enabling of bearer <ib:bond_slave_0> rejected, failed to enable media
[   68.171795][ T6157] 8021q: adding VLAN 0 to HW filter on device bond3
[   68.287743][ T6164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.292951][ T6166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.299458][ T6164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.309718][ T6166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.313122][ T6165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.317467][ T6164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.615274][ T6183] 8021q: adding VLAN 0 to HW filter on device bond4
[   68.633662][ T6183] bond4: (slave veth3): Enslaving as an active interface with a down link
[   68.649898][ T6183] 8021q: adding VLAN 0 to HW filter on device batadv1
[   68.653544][ T6183] bond4: (slave batadv1): making interface the new active one
[   68.659512][ T6183] batadv1: entered promiscuous mode
[   68.661626][ T6183] bond4: (slave batadv1): Enslaving as an active interface with an up link
[   68.673442][ T6183] bond4 (unregistering): (slave veth3): Releasing active interface
[   68.680100][ T6183] bond4 (unregistering): (slave batadv1): Releasing active interface
[   68.684944][ T6183] bond4 (unregistering): Released all slaves
[   68.903599][ T6201] bond2: entered promiscuous mode
[   68.907546][ T6201] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.995080][ T6210] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   69.006100][ T6210] bond4 (unregistering): Released all slaves
[   69.038990][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.042474][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.108836][ T6219] bond3: entered promiscuous mode
[   69.110592][ T6219] bond3: entered allmulticast mode
[   69.112469][ T6219] 8021q: adding VLAN 0 to HW filter on device bond3
[   69.189539][ T6226] 8021q: adding VLAN 0 to HW filter on device bond4
[   69.205196][ T6226] bond4: (slave veth5): Enslaving as an active interface with a down link
[   69.255703][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.258505][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.261202][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.263541][ T6228] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.272944][ T6228] team0: left promiscuous mode
[   69.277086][ T6228] team_slave_0: left promiscuous mode
[   69.279579][ T6228] team_slave_1: left promiscuous mode
[   69.291451][ T6228] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   69.302193][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.305356][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.482232][ T6234] bond5: (slave veth7): Enslaving as an active interface with a down link
[   69.486665][ T6237] geneve1: entered allmulticast mode
[   69.497122][ T6234] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   69.627565][ T6242] bond6: (slave veth9): Enslaving as an active interface with a down link
[   69.644489][ T6242] bond6: (slave veth11): Enslaving as an active interface with a down link
[   69.658510][   T10] cfg80211: failed to load regulatory.db
[   69.933687][ T6266] xt_connbytes: Forcing CT accounting to be enabled
[   70.007683][ T6273] ip6tnl2: entered promiscuous mode
[   70.052058][ T6279] 8021q: adding VLAN 0 to HW filter on device bond7
[   70.121493][ T6282] bond8: entered promiscuous mode
[   70.123411][ T6282] 8021q: adding VLAN 0 to HW filter on device bond8
[   70.142007][ T6283] ipvlan2: entered allmulticast mode
[   70.144279][ T6283] bond8: entered allmulticast mode
[   70.152052][ T6282] ipvlan3: entered allmulticast mode
[   70.178211][ T6282] bond8: (slave bridge3): making interface the new active one
[   70.180877][ T6282] bridge3: entered promiscuous mode
[   70.182805][ T6282] bridge3: entered allmulticast mode
[   70.186697][ T6282] bond8: (slave bridge3): Enslaving as an active interface with an up link
[   70.347264][ T6301] ip6tnl3: entered promiscuous mode
[   70.361178][ T6304] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   70.548337][ T6326] syzkaller0: entered promiscuous mode
[   70.551770][ T6326] syzkaller0: entered allmulticast mode
[   70.563060][ T6329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.566439][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.572132][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.594728][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.598315][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.728070][ T6337] bridge5: entered promiscuous mode
[   70.733008][ T6337] bond4: (slave bridge5): making interface the new active one
[   70.736151][ T6337] bond4: (slave bridge5): Enslaving as an active interface with an up link
[   70.777891][ T6341] __nla_validate_parse: 24 callbacks suppressed
[   70.777903][ T6341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'.
[   70.784986][ T6341] validate_nla: 10 callbacks suppressed
[   70.784995][ T6341] netlink: 'syz.2.165': attribute type 1 has an invalid length.
[   70.871655][ T6346] bond6: entered allmulticast mode
[   70.882241][ T6346] macvlan2: entered promiscuous mode
[   70.884191][ T6346] macvlan2: entered allmulticast mode
[   70.886550][ T6346] bond6: (slave macvlan2): Opening slave failed
[   71.059491][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'.
[   71.123383][ T6360] netlink: 'syz.1.170': attribute type 2 has an invalid length.
[   71.162304][ T6360] : entered promiscuous mode
[   71.208368][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'.
[   71.271457][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'.
[   71.276391][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'.
[   71.279568][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'.
[   71.283098][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.176'.
[   71.287500][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'.
[   71.288668][ T6376] geneve2: entered promiscuous mode
[   71.290985][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.176'.
[   71.293020][ T6376] geneve2: entered allmulticast mode
[   71.341794][ T6385] netlink: 'syz.0.178': attribute type 1 has an invalid length.
[   71.363456][ T6385] 8021q: adding VLAN 0 to HW filter on device bond10
[   71.377280][ T6385] bond10: (slave veth13): Enslaving as an active interface with a down link
[   71.385845][ T6387] vti0: entered promiscuous mode
[   71.388846][ T6382] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.177'.
[   71.402351][ T6385] bond10: (slave veth15): Enslaving as an active interface with a down link
[   71.433355][ T6398] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   71.463161][ T6402] xt_policy: neither incoming nor outgoing policy selected
[   71.468422][ T6402] 0: renamed from hsr0 (while UP)
[   71.472159][ T6402] 0: entered allmulticast mode
[   71.473793][ T6402] hsr_slave_0: entered allmulticast mode
[   71.476209][ T6402] hsr_slave_1: entered allmulticast mode
[   71.479629][ T6402] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[   71.586226][ T6410] vlan3: entered promiscuous mode
[   71.588158][ T6410] bridge0: entered promiscuous mode
[   71.664230][ T6415] macvlan0: entered promiscuous mode
[   71.727613][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   71.731544][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[   71.749337][ T6416] 8021q: adding VLAN 0 to HW filter on device bond3
[   71.755507][ T6416] bridge0: port 3(bond3) entered blocking state
[   71.760238][ T6416] bridge0: port 3(bond3) entered disabled state
[   71.763088][ T6416] bond3: entered allmulticast mode
[   71.768928][ T6416] bond3: entered promiscuous mode
[   71.771112][ T6416] bridge0: port 3(bond3) entered blocking state
[   71.773350][ T6416] bridge0: port 3(bond3) entered forwarding state
[   71.808082][ T2973] bridge0: port 3(bond3) entered disabled state
[   71.848779][ T6427] vlan4: entered allmulticast mode
[   71.850640][ T6427] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   72.074438][ T6434] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   72.079628][ T6434] bond4 (unregistering): Released all slaves
[   72.152555][ T6436] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[   72.565834][ T6466] netlink: 'syz.1.199': attribute type 1 has an invalid length.
[   72.613141][ T6466] 8021q: adding VLAN 0 to HW filter on device bond4
[   72.659149][ T6475] bond4: (slave geneve2): making interface the new active one
[   72.663551][ T6475] bond4: (slave geneve2): Enslaving as an active interface with an up link
[   72.719696][ T6473] syzkaller0: entered promiscuous mode
[   72.721645][ T6473] syzkaller0: entered allmulticast mode
[   73.803859][ T6503] netlink: 'syz.2.206': attribute type 21 has an invalid length.
[   73.832805][ T6503] veth0_to_bond: entered allmulticast mode
[   74.052437][ T6516] bond7 (unregistering): Released all slaves
[   74.112546][ T6522] gre0: entered allmulticast mode
[   74.178010][ T6530] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[   74.195198][ T6530] 8021q: adding VLAN 0 to HW filter on device bond7
[   74.231130][ T6535] pim6reg1: entered promiscuous mode
[   74.242033][ T6535] pim6reg1: entered allmulticast mode
[   74.413171][ T6543] vlan3: entered promiscuous mode
[   74.415064][ T6543] bridge0: entered promiscuous mode
[   74.477586][ T6548] openvswitch: netlink: Actions may not be safe on all matching packets
[   74.581919][ T6551] netlink: 'syz.1.220': attribute type 14 has an invalid length.
[   74.592800][ T6551] netlink: 'syz.1.220': attribute type 13 has an invalid length.
[   74.602337][ T6551] netlink: 'syz.1.220': attribute type 1 has an invalid length.
[   74.605600][ T6551] dummy0: left promiscuous mode
[   74.622128][ T6551] netlink: 'syz.1.220': attribute type 10 has an invalid length.
[   74.632007][ T6551] dummy0: entered promiscuous mode
[   74.753857][ T6563] 8021q: adding VLAN 0 to HW filter on device bond8
[   74.766694][ T6563] bond8: (slave geneve3): Opening slave failed
[   75.008851][ T6591] team0 (unregistering): Port device team_slave_0 removed
[   75.013954][ T6591] team0 (unregistering): Port device team_slave_1 removed
[   75.066476][ T6593] syzkaller0: entered promiscuous mode
[   75.074136][ T6593] syzkaller0: entered allmulticast mode
[   75.130511][ T6601] syzkaller0: entered promiscuous mode
[   75.132904][ T6601] syzkaller0: entered allmulticast mode
[   75.136600][ T6602] tipc: Started in network mode
[   75.138746][ T6602] tipc: Node identity f6281a56e98d, cluster identity 4711
[   75.142102][ T6602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.155883][ T6601] tipc: Resetting bearer <eth:syzkaller0>
[   75.166474][ T6601] tipc: Disabling bearer <eth:syzkaller0>
[   75.888479][ T6622] __nla_validate_parse: 22 callbacks suppressed
[   75.888489][ T6622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.234'.
[   75.932480][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'.
[   75.980640][ T6628] netlink: 52 bytes leftover after parsing attributes in process `syz.1.236'.
[   75.984074][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'.
[   75.988271][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'.
[   75.992930][ T6628] syzkaller0: entered promiscuous mode
[   75.995272][ T6628] syzkaller0: entered allmulticast mode
[   76.157812][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'.
[   76.163785][ T6633] validate_nla: 1 callbacks suppressed
[   76.163799][ T6633] netlink: 'syz.2.238': attribute type 1 has an invalid length.
[   76.166453][ T6634] netlink: 'syz.2.238': attribute type 1 has an invalid length.
[   76.193130][ T6634] 8021q: adding VLAN 0 to HW filter on device bond9
[   76.201636][ T6633] bond9: (slave dummy0): Enslaving as a backup interface with an up link
[   76.209127][ T6636] netlink: 164 bytes leftover after parsing attributes in process `syz.1.237'.
[   76.220143][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'.
[   76.308244][ T6617] bond9: (slave dummy0): link status definitely down, disabling slave
[   76.350484][ T6646] netlink: 'syz.0.240': attribute type 1 has an invalid length.
[   76.382926][ T6646] 8021q: adding VLAN 0 to HW filter on device bond11
[   76.434737][ T6643] Driver unsupported XDP return value 0 on prog  (id 42) dev N/A, expect packet loss!
[   76.454595][ T6646] vlan3: entered allmulticast mode
[   76.456764][ T6646] bond11: entered allmulticast mode
[   76.458317][ T6655] netlink: 'syz.2.243': attribute type 1 has an invalid length.
[   76.471798][ T6655] 8021q: adding VLAN 0 to HW filter on device bond10
[   76.486201][ T6646] bond11: (slave geneve4): making interface the new active one
[   76.489227][ T6646] geneve4: entered allmulticast mode
[   76.493264][ T6646] bond11: (slave geneve4): Enslaving as an active interface with an up link
[   76.513777][ T6655] bond10: (slave veth5): Enslaving as an active interface with a down link
[   76.527432][ T6655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.243'.
[   76.583784][ T6655] bond10: (slave veth7): Enslaving as an active interface with a down link
[   76.807217][ T6670] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   76.897952][ T6678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.930500][ T6681] netlink: 'syz.2.250': attribute type 13 has an invalid length.
[   76.978640][ T6681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.250'.
[   77.130683][ T6685] dvmrp0: entered allmulticast mode
[   77.297480][ T6710] syzkaller0: entered promiscuous mode
[   77.299754][ T6710] syzkaller0: entered allmulticast mode
[   77.400386][ T6714] syzkaller0: entered promiscuous mode
[   77.402502][ T6714] syzkaller0: entered allmulticast mode
[   77.417805][ T6714] tipc: Started in network mode
[   77.419539][ T6714] tipc: Node identity b20419157f63, cluster identity 3
[   77.422517][ T6714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.431558][ T6714] tipc: Resetting bearer <eth:syzkaller0>
[   77.444432][ T6713] tipc: Resetting bearer <eth:syzkaller0>
[   77.457802][ T6713] tipc: Disabling bearer <eth:syzkaller0>
[   77.516159][ T6720] netlink: 'syz.2.255': attribute type 2 has an invalid length.
[   77.525266][ T6720] : entered promiscuous mode
[   77.693111][ T6736] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   77.699182][ T6736] bond11 (unregistering): Released all slaves
[   77.719141][ T6677] tipc: Disabling bearer <eth:syzkaller0>
[   77.799536][ T6495] dvmrp0: left allmulticast mode
[   77.927167][ T6745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.933148][ T6745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.958302][ T6750] vlan2: entered promiscuous mode
[   78.010136][ T6749] vlan4: entered promiscuous mode
[   78.048540][ T6745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.052953][ T6745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.180564][ T6757] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.188119][ T6757] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.201728][ T6757] veth1_to_hsr: left promiscuous mode
[   78.236768][ T6757] macvlan0: left promiscuous mode
[   78.269036][ T6757] geneve3: left promiscuous mode
[   78.271726][ T6757] gretap1: left allmulticast mode
[   78.283347][ T6757] ip6tnl2: left promiscuous mode
[   78.288182][ T6757] bond8: left promiscuous mode
[   78.289713][ T6757] bridge3: left promiscuous mode
[   78.292574][ T6757] ipvlan2: left allmulticast mode
[   78.295261][ T6757] ipvlan3: left allmulticast mode
[   78.296941][ T6757] bond8: left allmulticast mode
[   78.298508][ T6757] bridge3: left allmulticast mode
[   78.305115][ T6757] vlan3: left allmulticast mode
[   78.306806][ T6757] bond11: left allmulticast mode
[   78.308459][ T6757] geneve4: left allmulticast mode
[   78.328987][    T9] bridge0: entered promiscuous mode
[   78.370871][ T6745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.377622][ T6745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.415475][ T5672] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.423256][ T5672] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.429388][ T5672] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.432634][ T5672] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.436287][ T5672] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.439675][ T5672] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.466737][ T6760] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   78.473087][ T6760] bond13 (unregistering): Released all slaves
[   78.517503][ T6745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.536390][ T6745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.594233][ T5672] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.597472][ T5672] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.795835][ T6617] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.799468][ T6617] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.803768][ T6617] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.807652][ T6617] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.811240][ T6617] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.814621][ T6617] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.817767][ T6617] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.820725][ T6617] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.935037][ T6794] bond0: entered promiscuous mode
[   78.936771][ T6794] bond_slave_0: entered promiscuous mode
[   78.938669][ T6794] bond_slave_1: entered promiscuous mode
[   78.943204][ T6794] ipvlan1: entered promiscuous mode
[   78.945861][ T6794] ipvlan1: left promiscuous mode
[   78.947834][ T6794] bond0: left promiscuous mode
[   78.949467][ T6794] bond_slave_0: left promiscuous mode
[   78.951426][ T6794] bond_slave_1: left promiscuous mode
[   78.997561][ T6795] bond0: entered promiscuous mode
[   79.003048][ T6795] bond_slave_0: entered promiscuous mode
[   79.005521][ T6795] bond_slave_1: entered promiscuous mode
[   79.008169][ T6795] ipvlan1: entered promiscuous mode
[   79.011040][ T6795] ipvlan1: left promiscuous mode
[   79.012817][ T6795] bond0: left promiscuous mode
[   79.016287][ T6795] bond_slave_0: left promiscuous mode
[   79.018220][ T6795] bond_slave_1: left promiscuous mode
[   79.027460][ T6797] geneve3: entered promiscuous mode
[   79.029261][ T6797] geneve3: entered allmulticast mode
[   79.203186][ T6814] wlan0: left promiscuous mode
[   79.224372][ T6814] dummy0: left promiscuous mode
[   79.238387][ T6814] A link change request failed with some changes committed already. Interface ! may have been left with an inconsistent configuration, please check.
[   79.340364][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.343053][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.425015][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.431825][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.684278][ T6617] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.688209][ T6617] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.697794][ T6617] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.707502][ T6617] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.717175][ T6617] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.727139][ T6617] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.737871][ T6617] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.745378][ T6617] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.749649][ T6823] netlink: 'syz.2.282': attribute type 25 has an invalid length.
[   79.995344][ T6832] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   79.997739][ T6832] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   80.000160][ T6832] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   88.858536][ T6841] __nla_validate_parse: 14 callbacks suppressed
[   88.858550][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'.
[   92.279689][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'.
[   92.283026][ T6850] netlink: 'syz.0.289': attribute type 30 has an invalid length.
[   99.858032][ T6617] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.860875][ T6617] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.863665][ T6617] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.879079][ T6617] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.480883][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'.
[  113.175499][ T4996] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.234536][ T4996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  113.280148][ T4996] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  113.921885][ T4996] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.090688][ T4996] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  117.923936][    C1] sched: DL replenish lagged too much
[  118.873647][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  118.917210][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  118.935989][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.261012][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.794338][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  123.256932][ T4996] Bluetooth: hci3: command tx timeout
[  125.068445][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  125.107094][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  125.131531][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  125.340836][ T5626] Bluetooth: hci3: command tx timeout
[  125.894779][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.100385][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.681581][ T4996] Bluetooth: hci3: command tx timeout
[  128.545925][ T4996] Bluetooth: hci1: command tx timeout
[  129.741971][ T4996] Bluetooth: hci3: command tx timeout
[  130.670593][ T4996] Bluetooth: hci1: command tx timeout
[  132.723275][ T4996] Bluetooth: hci1: command tx timeout
[  133.601238][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  133.675652][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  135.502184][ T4996] Bluetooth: hci1: command tx timeout
[  151.275458][ T6617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  152.570471][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  152.626443][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  152.673070][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  152.735962][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.180429][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  156.693533][ T4996] Bluetooth: hci0: command tx timeout
[  158.768920][ T4996] Bluetooth: hci0: command tx timeout
[  160.845934][ T6617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.867476][ T4996] Bluetooth: hci0: command tx timeout
[  162.940189][ T4996] Bluetooth: hci0: command tx timeout
[  166.083031][ T6617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.698937][ T6617] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.014918][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.334465][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.351920][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.415906][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.486659][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.048338][ T4996] Bluetooth: hci2: command tx timeout
[  177.154330][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.192461][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.246048][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.326337][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.407381][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  178.156144][ T4996] Bluetooth: hci2: command tx timeout
[  179.845279][ T4996] Bluetooth: hci4: command tx timeout
[  180.226832][ T4996] Bluetooth: hci2: command tx timeout
[  181.896708][ T4996] Bluetooth: hci4: command tx timeout
[  182.360513][ T5626] Bluetooth: hci2: command tx timeout
[  184.475416][ T4996] Bluetooth: hci4: command tx timeout
[  186.533060][ T4996] Bluetooth: hci4: command tx timeout
[  194.674035][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  194.685537][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  225.079042][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  225.098371][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  225.319272][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  225.786572][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  226.108968][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  227.075023][ T6617] bridge_slave_1: left allmulticast mode
[  227.104919][ T6617] bridge_slave_1: left promiscuous mode
[  227.158035][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.434902][ T6617] bridge_slave_0: left allmulticast mode
[  227.462379][ T6617] bridge_slave_0: left promiscuous mode
[  227.697212][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.451153][ T5626] Bluetooth: hci5: command tx timeout
[  230.755424][ T5626] Bluetooth: hci5: command tx timeout
[  232.622315][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  232.738055][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  232.769477][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  232.783406][ T5626] Bluetooth: hci5: command tx timeout
[  232.937558][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  233.106737][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  234.872937][ T4996] Bluetooth: hci5: command tx timeout
[  235.588391][ T4996] Bluetooth: hci6: command tx timeout
[  237.668552][ T4996] Bluetooth: hci6: command tx timeout
[  239.349160][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  239.560018][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  239.681563][ T5626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  239.726764][ T5626] Bluetooth: hci6: command tx timeout
[  239.815611][ T5626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  239.874062][ T5626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  241.809399][ T5626] Bluetooth: hci6: command tx timeout
[  242.149083][ T5626] Bluetooth: hci7: command tx timeout
[  244.227663][ T5626] Bluetooth: hci7: command tx timeout
[  246.289505][ T4996] Bluetooth: hci7: command tx timeout
[  247.889026][ T4996] Bluetooth: hci3: command 0x0406 tx timeout
[  248.382095][ T5626] Bluetooth: hci7: command tx timeout
[  253.012265][ T5626] Bluetooth: hci1: command 0x0406 tx timeout
[  256.357750][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  256.372431][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  278.619941][ T5626] Bluetooth: hci0: command 0x0406 tx timeout
[  292.146747][ T4996] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  292.829339][ T4996] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  294.849019][ T6985] Bluetooth: hci8: Opcode 0x0c03 failed: -110
[  295.277694][ T6617] bond2 (unregistering): (slave gretap1): Releasing active interface
[  296.666959][ T5626] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  296.754937][ T5626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  296.799777][ T5626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  296.952393][ T5626] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  297.017427][ T5626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  299.098186][ T4996] Bluetooth: hci2: command 0x0406 tx timeout
[  299.331147][ T4996] Bluetooth: hci8: command tx timeout
[  301.427616][   T54] Bluetooth: hci8: command tx timeout
[  303.489493][ T4996] Bluetooth: hci8: command tx timeout
[  304.210422][ T4996] Bluetooth: hci4: command 0x0406 tx timeout
[  305.269580][ T4996] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  305.299226][ T4996] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  305.506726][ T4996] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  305.574836][ T4996] Bluetooth: hci8: command tx timeout
[  305.604954][ T4996] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  305.638017][ T4996] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  306.905619][ T4996] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  307.058722][ T4996] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  307.095864][ T4996] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  307.206130][ T4996] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  307.300439][ T4996] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  308.299057][ T4996] Bluetooth: hci10: command tx timeout
[  309.571005][   T54] Bluetooth: hci9: command tx timeout
[  310.368050][   T54] Bluetooth: hci10: command tx timeout
[  311.721158][   T54] Bluetooth: hci9: command tx timeout
[  312.658554][   T54] Bluetooth: hci10: command tx timeout
[  313.693030][ T6617] bond11 (unregistering): (slave geneve4): Releasing active interface
[  313.833592][   T54] Bluetooth: hci9: command tx timeout
[  314.704919][   T54] Bluetooth: hci10: command tx timeout
[  315.913118][   T54] Bluetooth: hci9: command tx timeout
[  317.754335][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  317.765962][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  350.321132][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  357.808419][   T34] INFO: task syz-executor:6923 blocked for more than 143 seconds.
[  357.817864][   T34]       Not tainted syzkaller #0
[  357.819444][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  357.822274][   T34] task:syz-executor    state:D stack:25704 pid:6923  tgid:6923  ppid:1      task_flags:0x400140 flags:0x00080002
[  357.867998][   T34] Call Trace:
[  357.869140][   T34]  <TASK>
[  357.870087][   T34]  __schedule+0x17d9/0x56c0
[  357.871510][   T34]  ? __lock_acquire+0x683/0x2cf0
[  358.029192][   T34]  ? __lock_acquire+0x683/0x2cf0
[  358.030787][   T34]  ? rcu_read_lock_any_held+0x5d/0x90
[  358.032443][   T34]  ? __pfx___schedule+0x10/0x10
[  358.047659][   T34]  ? schedule+0x90/0x2b0
[  358.049032][   T34]  schedule+0x164/0x2b0
[  358.050604][   T34]  schedule_preempt_disabled+0x13/0x30
[  358.226997][   T34]  __mutex_lock+0x7bf/0x1550
[  358.228492][   T34]  ? __mutex_lock+0x5d4/0x1550
[  358.230063][   T34]  ? ops_undo_list+0x28e/0x8d0
[  358.319050][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  358.320925][   T34]  ops_undo_list+0x28e/0x8d0
[  358.496907][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  358.498675][   T34]  ? ops_init+0x46a/0x5d0
[  358.500108][   T34]  setup_net+0x2f6/0x350
[  358.501637][   T34]  ? __pfx_setup_net+0x10/0x10
[  358.503226][   T34]  ? preinit_net+0x492/0x7b0
[  358.508437][   T34]  copy_net_ns+0x4f9/0x720
[  358.509900][   T34]  create_new_namespaces+0x3f0/0x6b0
[  358.511924][   T34]  ? security_capable+0x7e/0x2c0
[  358.513609][   T34]  unshare_nsproxy_namespaces+0x149/0x190
[  358.535213][   T34]  ksys_unshare+0x57d/0xa00
[  358.536950][   T34]  ? __pfx_ksys_unshare+0x10/0x10
[  358.599712][   T34]  ? rcu_is_watching+0x15/0xb0
[  358.681091][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.683164][   T34]  __x64_sys_unshare+0x38/0x50
[  358.729845][   T34]  do_syscall_64+0x174/0x580
[  358.731278][   T34]  ? trace_irq_disable+0x3b/0x140
[  358.732812][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.965959][   T34] RIP: 0033:0x7f7c3259f167
[  358.967399][   T34] RSP: 002b:00007ffced69c0a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  358.970428][   T34] RAX: ffffffffffffffda RBX: 00007f7c32825f40 RCX: 00007f7c3259f167
[  358.977176][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  358.980062][   T34] RBP: 00007f7c328267b8 R08: 0000000000000000 R09: 0000000000000000
[  358.983199][   T34] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  359.273150][   T34] R13: 0000000000000003 R14: 00007ffced69c2e8 R15: 0000000000000000
[  359.467241][   T34]  </TASK>
[  359.468318][   T34] INFO: task syz-executor:6938 blocked for more than 145 seconds.
[  359.551119][   T34]       Not tainted syzkaller #0
[  359.552651][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  359.559100][   T34] task:syz-executor    state:D stack:26792 pid:6938  tgid:6938  ppid:1      task_flags:0x400140 flags:0x00080002
[  359.562846][   T34] Call Trace:
[  359.847779][   T34]  <TASK>
[  359.849096][   T34]  __schedule+0x17d9/0x56c0
[  359.851043][   T34]  ? __lock_acquire+0x683/0x2cf0
[  359.859260][   T34]  ? __lock_acquire+0x683/0x2cf0
[  359.861299][   T34]  ? stack_depot_save_flags+0x33/0x800
[  359.863479][   T34]  ? __pfx___schedule+0x10/0x10
[  359.915527][   T34]  ? schedule+0x90/0x2b0
[  359.917192][   T34]  schedule+0x164/0x2b0
[  359.918586][   T34]  schedule_preempt_disabled+0x13/0x30
[  360.061940][   T34]  __mutex_lock+0x7bf/0x1550
[  360.063469][   T34]  ? __mutex_lock+0x5d4/0x1550
[  360.088292][   T34]  ? rtnl_newlink+0x8a3/0x1bd0
[  360.089819][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  360.091387][   T34]  ? ns_capable+0x89/0xe0
[  360.096076][   T34]  ? rtnl_link_get_net_capable+0xd3/0x310
[  360.097818][   T34]  rtnl_newlink+0x8a3/0x1bd0
[  360.112037][   T34]  ? __lock_acquire+0x683/0x2cf0
[  360.113792][   T34]  ? __pfx_rtnl_newlink+0x10/0x10
[  360.309574][   T34]  ? __lock_acquire+0x683/0x2cf0
[  360.311346][   T34]  ? __lock_acquire+0x683/0x2cf0
[  360.312923][   T34]  ? is_bpf_text_address+0x26/0x2b0
[  360.569563][ T4996] Bluetooth: hci6: command 0x0406 tx timeout
[  360.894508][   T34]  ? unwind_next_frame+0x8f/0x2550
[  360.896210][   T34]  ? is_bpf_text_address+0x26/0x2b0
[  361.367674][   T34]  ? is_bpf_text_address+0x26/0x2b0
[  361.376668][   T34]  ? __lock_acquire+0x683/0x2cf0
[  361.378307][   T34]  ? kernel_text_address+0xa5/0xe0
[  361.379940][   T34]  ? __kernel_text_address+0xd/0x30
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  361.583859][   T34]  ? unwind_get_return_address+0x4d/0x90
[  361.597849][   T34]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  361.603288][   T34]  ? arch_stack_walk+0xfb/0x150
[  362.068696][   T34]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  362.070931][   T34]  ? __pfx_rtnl_newlink+0x10/0x10
[  362.072921][   T34]  ? __pfx_rtnl_newlink+0x10/0x10
[  362.279384][   T34]  rtnetlink_rcv_msg+0x802/0xc00
[  362.281468][   T34]  ? netlink_sendmsg+0x5d4/0xb40
[  362.598265][   T34]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  362.618952][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  362.621246][   T34]  ? __lock_acquire+0x683/0x2cf0
[  362.623354][   T34]  netlink_rcv_skb+0x226/0x4a0
[  362.640966][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  362.643267][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  362.651989][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  363.015091][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  363.016773][   T34]  netlink_unicast+0x7bb/0x940
[  363.018255][   T34]  netlink_sendmsg+0x813/0xb40
[  363.097192][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.099111][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  363.100677][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.298949][   T34]  sock_sendmsg_nosec+0x13a/0x180
[  363.300966][   T34]  __sys_sendto+0x408/0x5a0
[  363.302606][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  363.316333][   T34]  ? lockdep_hardirqs_on+0x7a/0x110
[  363.318028][   T34]  ? fput_close_sync+0x11f/0x240
[  363.319846][   T34]  ? kmem_cache_free+0x462/0x650
[  363.335288][   T34]  ? __pfx_fput_close_sync+0x10/0x10
[  363.390014][   T34]  __x64_sys_sendto+0xde/0x100
[  363.391718][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.418068][   T34]  do_syscall_64+0x174/0x580
[  363.419839][   T34]  ? trace_irq_disable+0x3b/0x140
[  363.447081][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.448954][   T34] RIP: 0033:0x7f6227f5e6ce
[  363.450334][   T34] RSP: 002b:00007ffd1c115d88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  363.788161][   T34] RAX: ffffffffffffffda RBX: 000055559037b500 RCX: 00007f6227f5e6ce
[  363.805934][   T34] RDX: 000000000000002c RSI: 00007f6228d54670 RDI: 0000000000000003
[  363.808925][   T34] RBP: 0000000000000001 R08: 00007ffd1c115e04 R09: 000000000000000c
[  363.946229][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  363.948765][   T34] R13: 0000000000000000 R14: 00007f6228d54670 R15: 0000000000000000
[  364.081323][   T34]  </TASK>
[  364.088895][   T34] INFO: task syz-executor:6946 blocked for more than 149 seconds.
[  364.276435][   T34]       Not tainted syzkaller #0
[  364.396946][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  364.508123][   T34] task:syz-executor    state:D stack:25704 pid:6946  tgid:6946  ppid:1      task_flags:0x400140 flags:0x00080002
[  364.564180][   T34] Call Trace:
[  364.565276][   T34]  <TASK>
[  364.566242][   T34]  __schedule+0x17d9/0x56c0
[  364.567675][   T34]  ? __lock_acquire+0x683/0x2cf0
[  365.040840][   T34]  ? __lock_acquire+0x683/0x2cf0
[  365.042323][   T34]  ? __pfx___schedule+0x10/0x10
[  365.043769][   T34]  ? schedule+0x90/0x2b0
[  365.059402][   T34]  schedule+0x164/0x2b0
[  365.064461][   T34]  schedule_preempt_disabled+0x13/0x30
[  365.066445][   T34]  __mutex_lock+0x7bf/0x1550
[  365.087898][   T34]  ? __mutex_lock+0x5d4/0x1550
[  365.089393][   T34]  ? inet_rtm_newaddr+0x464/0x19e0
[  365.091122][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  365.096787][   T34]  ? __nla_parse+0x40/0x60
[  365.098649][   T34]  inet_rtm_newaddr+0x464/0x19e0
[  365.100661][   T34]  ? unwind_get_return_address+0x4d/0x90
[  365.102922][   T34]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  365.214094][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  365.216438][   T34]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  365.423435][   T34]  rtnetlink_rcv_msg+0x802/0xc00
[  365.458550][   T34]  ? netlink_sendmsg+0x5d4/0xb40
[  365.760604][   T34]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  365.762294][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  365.774310][   T34]  ? __lock_acquire+0x683/0x2cf0
[  365.775929][   T34]  netlink_rcv_skb+0x226/0x4a0
[  365.777574][   T34]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  365.779466][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  365.781673][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  365.783637][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  365.948744][   T34]  netlink_unicast+0x7bb/0x940
[  365.950304][   T34]  netlink_sendmsg+0x813/0xb40
[  365.951757][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.953389][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  366.179852][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  366.181782][   T34]  sock_sendmsg_nosec+0x13a/0x180
[  366.252270][   T34]  __sys_sendto+0x408/0x5a0
[  366.260434][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  366.262465][   T34]  ? lockdep_hardirqs_on+0x7a/0x110
[  366.271127][   T34]  ? fput_close_sync+0x11f/0x240
[  366.334478][   T34]  ? kmem_cache_free+0x462/0x650
[  366.336279][   T34]  ? __pfx_fput_close_sync+0x10/0x10
[  366.338109][   T34]  __x64_sys_sendto+0xde/0x100
[  366.344105][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.346254][   T34]  do_syscall_64+0x174/0x580
[  366.348061][   T34]  ? trace_irq_disable+0x3b/0x140
[  366.350142][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.352679][   T34] RIP: 0033:0x7f851cf5e6ce
[  366.586644][ T7007] Bluetooth: hci7: command 0x0406 tx timeout
[  366.590470][   T34] RSP: 002b:00007fffa0a21b98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  366.619626][   T34] RAX: ffffffffffffffda RBX: 000055556336f500 RCX: 00007f851cf5e6ce
[  366.622905][   T34] RDX: 0000000000000028 RSI: 00007f851dd54670 RDI: 0000000000000003
[  366.671292][   T34] RBP: 0000000000000001 R08: 00007fffa0a21c14 R09: 000000000000000c
[  366.717240][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  366.719785][   T34] R13: 0000000000000000 R14: 00007f851dd54670 R15: 0000000000000000
[  366.722824][   T34]  </TASK>
[  366.834976][   T34] 
[  366.834976][   T34] Showing all locks held in the system:
[  367.042828][   T34] 3 locks held by kworker/1:1/31:
[  367.137776][   T34]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  367.141410][   T34]  #1: ffffc90000a67c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  367.280354][   T34]  #2: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  367.349352][   T34] 1 lock held by khungtaskd/34:
[  367.350960][   T34]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  367.357869][   T34] 3 locks held by kworker/u10:3/63:
[  367.359733][   T34] 3 locks held by kworker/u9:3/2973:
[  367.361614][   T34]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  367.538950][   T34]  #1: ffffc9000afe7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  367.667874][   T34]  #2: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
