last executing test programs:

1m42.77465088s ago: executing program 0 (id=1):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

1m42.573927518s ago: executing program 0 (id=7):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000140)=0x81000) (async)
r2 = socket(0x1e, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000680)={'wg0\x00'}) (async)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "ceed62a2f91df1ac", "b22f9288b1a80a5eb638bee5d8e11586", "9457d648", "233a0c66057bc526"}, 0x28) (async)
ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000000280)) (async)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8, r0}, 0x18)
pread64(r5, &(0x7f0000000740)=""/204, 0xcc, 0x29bd) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) (async)
recvmsg$can_j1939(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f00000004c0)=""/17, 0x11}, {&(0x7f0000000500)=""/56, 0x38}, {&(0x7f0000000540)=""/8, 0x8}], 0x4, &(0x7f00000005c0)=""/15, 0xf}, 0x40020120) (async)
sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x14, 0x80, 0x28, 0x87, 0x0, 0x0, 0x6, 0x10000}, [@FRA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x800) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

1m42.485031272s ago: executing program 0 (id=8):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1m42.435611944s ago: executing program 0 (id=9):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = gettid()
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="851000000400000095000000000000001800000000000000000000000000000085100000feffffff85100000fcffffffbed0bdab650cad59d65151fee70f82a3f6557714fe5e41bab7e71295d860479226d814cf6824add1168e"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
write(r3, &(0x7f0000000000)="09000000010017", 0x7)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/cgroup\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0xffffffffffffff8e, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x9}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000040000000000000080000000850000009b000000180100002020702500000000002020207b2bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00', @ANYBLOB="000829bd7000fddb52a3045a00e607000100600000000c009d0005000000520000000c406f1a74b4767591e52e86591983ca0099000800a4b334e3f65586a69a1bba00005d000000000000000000000000000089d3a138d9f83591d3e70a1c01b184edfcbf83fc2e1519ad635b9d41b40076b6b1", @ANYRES32=r2, @ANYBLOB="080001", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="0c009900000000000e000000"], 0x74}, 0x1, 0x0, 0x0, 0x4008010}, 0x8044)
close(0x3)

1m42.131797319s ago: executing program 0 (id=13):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x3, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x24, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="28000000000000002900000002000000", @ANYBLOB="26497f33608bfedf192365e2479abc1799"], 0x28}}], 0x1, 0x4040040)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r3, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040001}, 0x40000)
r6 = socket$inet6(0xa, 0x5, 0x0)
syz_emit_ethernet(0x41, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0xb, 0x4, 0x0, @private2, @mcast2, {[], "92d766fceaa6ec3b3a4d7b"}}}}}, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c)
listen(r6, 0x50)
r7 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0xe23, 0x5, @empty, 0x4}, 0x1c)
listen(r7, 0x50)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000000))
sendto(r8, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80)
close(0x4)
close(r9)

1m41.864764493s ago: executing program 1 (id=18):
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xd}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1m41.786173269s ago: executing program 1 (id=20):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r1, 0x29, 0xce, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r2=>0x0})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r2}, 0x10)
recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40000002, 0x0)
pipe(&(0x7f0000001540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000003140100000000000000000009000280"], 0x60}}, 0x20000000)
r6 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r6, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0x2)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r8 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:'], 0xa)
r9 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r11, 0x80}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3a}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x20000040)
listen(r7, 0x0)
r12 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xffff, 0xd}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}]}, 0x2c}}, 0x4c840)
sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x4, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0xc245}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
splice(r7, 0x0, r4, 0x0, 0xffffffffffffff00, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@canfd={{0x2}, 0x16, 0x2, 0x0, 0x0, "92a4883372f6632556a6b68da1aaeffa7b55af2ee640861c92a78cda69612182a805540d81b0fcce100e3170050b4b501f11cc0f78db10e2c75693ab90ec3b35"}, 0x48}}, 0xd209f6d814827b17)
socket(0x1d, 0x1, 0x5)

1m41.495241924s ago: executing program 2 (id=24):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'gre0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', r2, 0x20, 0x8000, 0xfffff761, 0x88, {{0xf, 0x4, 0x2, 0x1, 0x3c, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1b}, {[@ssrr={0x89, 0x17, 0x13, [@empty, @remote, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xc3, [@rand_addr=0x64010100, @rand_addr=0x64010102]}]}}}}})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24008084}, 0x488d1)
connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x5, @broadcast, 'gre0\x00'}}, 0x1e)

1m41.415071952s ago: executing program 2 (id=25):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626b6e640000000014000280050011000000000008001200fcffffff"], 0x44}}, 0x0)

1m41.414276426s ago: executing program 2 (id=26):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r2=>0x0})
sendto(0xffffffffffffffff, &(0x7f0000000080)="29b5de75c8b70e474c6c3965ea3dd22800540da31b30e6b0bab7f181de946930ed4ec73fe4c29b", 0x27, 0x8000, &(0x7f0000000180)=@can={0x1d, r2}, 0x80)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x11, 0x804}}, 0x20}}, 0x0)

1m41.356061392s ago: executing program 2 (id=27):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20040814}, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000023c0)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB='.'], 0x20) (async, rerun: 32)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'gre0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x7800, 0x80000000, 0xd, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback}}}})
getsockname$unix(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x6e)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, 0x0, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x22010000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x801)
socket(0x10, 0x800, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32=r9, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) (async)
sendto$inet6(r6, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000108c5d6f71fbd70c1c1775d394816ce29c159a0f1ffcdbcc6c9de711a1965d68a2eaba4ed90998e980b5ee2d49c519f01ad"], 0x9) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'}) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)

1m40.875052342s ago: executing program 1 (id=28):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
ppoll(&(0x7f0000000280)=[{r2, 0x4b0}], 0x1, 0x0, 0x0, 0x0)
unshare(0x22020600)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r3, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000840), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x84}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080), 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r8=>0x0})
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r10 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40005}, 0x8010)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf2521000000050020000100000005002000010004000a0001007770616e3000000009001f0070687932000000000c0005000203aaaaaaaaaaaa0a0001007770616ea8000000050020000100000012b399acdbd4d548"], 0x5c}, 0x1, 0x0, 0x0, 0x20080010}, 0x0)

1m40.805731315s ago: executing program 1 (id=29):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x308)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4080)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0x20, 0x0, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000100)=0x20)
socket$inet_sctp(0x2, 0x1, 0x84)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
socket$l2tp(0x2, 0x2, 0x73)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}], 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})

1m40.735255257s ago: executing program 1 (id=30):
r0 = socket(0x10, 0x803, 0x0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xfffffdac, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0xc5005}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000123800000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fc}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@op={0x18, 0x117, 0x3, 0x2}], 0x18}], 0x1, 0x20008054)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESHEX=0x0, @ANYBLOB="00030000000000002800128009000100697069700000000018000280080014000000000004001300080003000a01010008000a00", @ANYRES32=r4, @ANYRES64=r3], 0x50}}, 0x884)

1m40.595491998s ago: executing program 2 (id=31):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'})
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040))
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r9 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r7, &(0x7f0000000340)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4a", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc715d9569f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xc6)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

1m40.478096688s ago: executing program 1 (id=32):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x17, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff777, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x3, 0x1, 0xe, 0x8000, 0x11}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x98, &(0x7f00000003c0)=""/152, 0x41000, 0x14, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x2, 0x5, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000540)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000580)=[{0x2, 0x1, 0x9, 0x6}, {0x3, 0x4, 0x3, 0x7}, {0x3, 0x4, 0x7, 0x9}, {0x5, 0x2, 0x1}, {0x5, 0x5, 0xf, 0x4}, {0x4, 0x2, 0x2, 0x9}, {0x4, 0x2, 0xa}, {0x5, 0x1, 0x1}, {0x1, 0x2, 0xc, 0x5}, {0x3, 0x3, 0x10, 0xb}], 0x10, 0x80}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000180)=0xffffffff)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044)

1m21.480897901s ago: executing program 2 (id=33):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x2c, 0x803, 0x20)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newaddr={0x30, 0x14, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x280}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x30}}, 0x40000c0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xab84a}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x20040080)

1m15.777569168s ago: executing program 32 (id=13):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x3, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x24, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="28000000000000002900000002000000", @ANYBLOB="26497f33608bfedf192365e2479abc1799"], 0x28}}], 0x1, 0x4040040)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r3, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040001}, 0x40000)
r6 = socket$inet6(0xa, 0x5, 0x0)
syz_emit_ethernet(0x41, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0xb, 0x4, 0x0, @private2, @mcast2, {[], "92d766fceaa6ec3b3a4d7b"}}}}}, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c)
listen(r6, 0x50)
r7 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0xe23, 0x5, @empty, 0x4}, 0x1c)
listen(r7, 0x50)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000000))
sendto(r8, 0x0, 0x0, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80)
close(0x4)
close(r9)

41.724447787s ago: executing program 33 (id=32):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000b0400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x17, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff777, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x3, 0x1, 0xe, 0x8000, 0x11}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x98, &(0x7f00000003c0)=""/152, 0x41000, 0x14, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x2, 0x5, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000540)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000580)=[{0x2, 0x1, 0x9, 0x6}, {0x3, 0x4, 0x3, 0x7}, {0x3, 0x4, 0x7, 0x9}, {0x5, 0x2, 0x1}, {0x5, 0x5, 0xf, 0x4}, {0x4, 0x2, 0x2, 0x9}, {0x4, 0x2, 0xa}, {0x5, 0x1, 0x1}, {0x1, 0x2, 0xc, 0x5}, {0x3, 0x3, 0x10, 0xb}], 0x10, 0x80}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000180)=0xffffffff)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044)

0s ago: executing program 34 (id=33):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x2c, 0x803, 0x20)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newaddr={0x30, 0x14, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x280}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x30}}, 0x40000c0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xab84a}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x20040080)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3124' (ED25519) to the list of known hosts.
syzkaller login: [   50.399235][ T5582] cgroup: Unknown subsys name 'net'
[   50.526735][ T5582] cgroup: Unknown subsys name 'cpuset'
[   50.533901][ T5582] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.283270][ T5582] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.638247][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.643089][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.647772][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.655543][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.660052][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.665164][ T4996] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.669917][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.673056][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.679874][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.685510][ T4996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.715292][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.720423][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.724884][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.731926][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.736994][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.388306][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.393161][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.395841][ T5617] bridge_slave_0: entered allmulticast mode
[   57.399586][ T5617] bridge_slave_0: entered promiscuous mode
[   57.418642][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.421806][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.426000][ T5617] bridge_slave_1: entered allmulticast mode
[   57.430706][ T5617] bridge_slave_1: entered promiscuous mode
[   57.506619][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.517250][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.519641][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.522090][ T5607] bridge_slave_0: entered allmulticast mode
[   57.528086][ T5607] bridge_slave_0: entered promiscuous mode
[   57.533907][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.536998][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.540086][ T5607] bridge_slave_1: entered allmulticast mode
[   57.545656][ T5607] bridge_slave_1: entered promiscuous mode
[   57.549695][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.600813][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.608718][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.650808][ T5617] team0: Port device team_slave_0 added
[   57.653870][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.657222][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.660356][ T5610] bridge_slave_0: entered allmulticast mode
[   57.664141][ T5610] bridge_slave_0: entered promiscuous mode
[   57.681338][ T5617] team0: Port device team_slave_1 added
[   57.694746][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.697428][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.700530][ T5610] bridge_slave_1: entered allmulticast mode
[   57.704840][ T5610] bridge_slave_1: entered promiscuous mode
[   57.711306][ T5607] team0: Port device team_slave_0 added
[   57.716270][ T5607] team0: Port device team_slave_1 added
[   57.755352][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.758455][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.769760][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.798960][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.802980][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.811895][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.818659][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.822984][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.825306][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.833463][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.838023][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.840300][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.848423][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.863877][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.943807][ T5610] team0: Port device team_slave_0 added
[   57.954281][ T5607] hsr_slave_0: entered promiscuous mode
[   57.957795][ T5607] hsr_slave_1: entered promiscuous mode
[   57.965673][ T5617] hsr_slave_0: entered promiscuous mode
[   57.968193][ T5617] hsr_slave_1: entered promiscuous mode
[   57.970791][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   57.973854][ T5617] Cannot create hsr debugfs directory
[   57.978136][ T5610] team0: Port device team_slave_1 added
[   58.032550][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.035149][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.044542][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.078996][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.082120][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.092763][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.208716][ T5610] hsr_slave_0: entered promiscuous mode
[   58.211881][ T5610] hsr_slave_1: entered promiscuous mode
[   58.214894][ T5610] debugfs: 'hsr0' already exists in 'hsr'
[   58.217267][ T5610] Cannot create hsr debugfs directory
[   58.346839][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.354920][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.358319][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.363615][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.376609][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.381366][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.384442][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.389330][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.451472][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.458409][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.466971][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.471938][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.478180][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.483884][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.503829][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.508369][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.541824][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.547044][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.556493][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.563748][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.567628][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.574409][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.577251][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.583591][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.667594][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.700771][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[   58.717526][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.720939][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.732884][   T55] Bluetooth: hci1: command tx timeout
[   58.736503][ T4996] Bluetooth: hci0: command tx timeout
[   58.738256][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.744225][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.746504][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.778982][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.784411][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   58.791835][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.794339][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.813001][ T4996] Bluetooth: hci2: command tx timeout
[   58.831832][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.834196][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.838587][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   58.871294][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.874696][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.898494][ T4824] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.901482][ T4824] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.142056][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.176457][ T5607] veth0_vlan: entered promiscuous mode
[   59.186342][ T5607] veth1_vlan: entered promiscuous mode
[   59.209683][ T5607] veth0_macvtap: entered promiscuous mode
[   59.215887][ T5607] veth1_macvtap: entered promiscuous mode
[   59.229914][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.238932][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.255258][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.260227][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.353429][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.354042][ T5610] veth0_vlan: entered promiscuous mode
[   59.358473][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.388461][ T5610] veth1_vlan: entered promiscuous mode
[   59.391418][ T5617] veth0_vlan: entered promiscuous mode
[   59.403293][ T5665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.411141][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.415785][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.418447][ T5617] veth1_vlan: entered promiscuous mode
[   59.426141][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.451869][ T5610] veth0_macvtap: entered promiscuous mode
[   59.460870][ T5610] veth1_macvtap: entered promiscuous mode
[   59.475108][ T5617] veth0_macvtap: entered promiscuous mode
[   59.485759][ T5617] veth1_macvtap: entered promiscuous mode
[   59.488020][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.492717][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.500156][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.515772][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.520179][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.538207][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.586697][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.589991][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.604900][ T5723] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.629130][ T5665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.702554][ T5665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.706590][ T4824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.711443][ T4824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.754490][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.755705][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.760468][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.765561][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.813060][ T5732] bridge_slave_0: left allmulticast mode
[   59.816333][ T5732] bridge_slave_0: left promiscuous mode
[   59.819160][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.828733][ T5732] bridge_slave_1: left allmulticast mode
[   59.830695][ T5732] bridge_slave_1: left promiscuous mode
[   59.838168][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.843636][ T5732] bond0: (slave bond_slave_0): Releasing backup interface
[   59.849299][ T5732] bond0: (slave bond_slave_1): Releasing backup interface
[   59.858814][ T5732] team0: Port device team_slave_0 removed
[   59.863909][ T5732] team0: Port device team_slave_1 removed
[   59.866184][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.868583][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.871843][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.877737][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.881032][ T5732] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   59.901800][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.908901][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.933312][ T5644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.965030][ T5665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.975283][ T5665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.982100][ T5665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.988344][ T5665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.046569][ T5736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5'.
[   60.112541][ T5743] netlink: 'syz.1.6': attribute type 1 has an invalid length.
[   60.135499][ T5746] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   60.137331][ T5743] dummy0: entered promiscuous mode
[   60.140466][ T5743] dummy0: entered allmulticast mode
[   60.151997][ T5744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   60.156925][ T5746] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   60.170928][ T5744] vlan2: entered promiscuous mode
[   60.182823][ T5744] erspan0: entered promiscuous mode
[   60.252308][ T5761] Bluetooth: MGMT ver 1.23
[   60.332584][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.335193][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.379798][ T5760] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.388997][ T5760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.459317][ T5774] netlink: 'syz.1.11': attribute type 9 has an invalid length.
[   60.484169][ T5665] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.559796][ T5780] netlink: 'syz.2.12': attribute type 13 has an invalid length.
[   60.564017][ T5644] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.568595][ T5644] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.573246][ T5644] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.613348][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   60.620161][ T5783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   60.636288][ T5781] hsr_slave_1 (unregistering): left promiscuous mode
[   60.667532][ T5780] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   60.684654][ T5780] syzkaller0: entered promiscuous mode
[   60.688232][ T5780] syzkaller0: entered allmulticast mode
[   60.812857][   T55] Bluetooth: hci1: command tx timeout
[   60.814827][ T4996] Bluetooth: hci0: command tx timeout
[   60.866545][ T5809] netlink: 84 bytes leftover after parsing attributes in process `syz.2.19'.
[   60.893671][ T4996] Bluetooth: hci2: command tx timeout
[   60.908699][ T5809] vlan3: entered allmulticast mode
[   60.915760][ T5809] bond0: entered allmulticast mode
[   60.919404][ T5809] bond_slave_0: entered allmulticast mode
[   60.921927][ T5809] bond_slave_1: entered allmulticast mode
[   61.005963][ T5819] Zero length message leads to an empty skb
[   61.010000][ T5816] can: request_module (can-proto-5) failed.
[   61.094214][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23'.
[   61.097309][ T5819] veth0: Caught tx_queue_len zero misconfig
[   61.260643][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'.
[   61.326678][ T5832] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET)
[   61.870070][ T5840] dvmrp1: tun_chr_ioctl cmd 1074025677
[   61.871959][ T5840] dvmrp1: linktype set to 776
[   61.887034][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'.
[   61.993934][ T5848] netlink: 48 bytes leftover after parsing attributes in process `syz.1.30'.
[   62.108180][ T5854] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   62.178596][ T5854] vlan2: left promiscuous mode
[   62.181788][ T5854] erspan0: left promiscuous mode
[   62.216712][ T5860] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   62.287951][ T5860] bond1 (unregistering): Released all slaves
[   62.922568][ T4996] Bluetooth: hci0: command tx timeout
[   62.924887][ T4996] Bluetooth: hci1: command tx timeout
[   62.976477][   T55] Bluetooth: hci2: command tx timeout
[   65.074661][   T55] Bluetooth: hci1: command tx timeout
[   65.076383][   T55] Bluetooth: hci0: command tx timeout
[   65.087432][   T55] Bluetooth: hci2: command tx timeout
[   67.549017][    C0] sched: DL replenish lagged too much
[   72.445193][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   72.457217][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   87.069227][   T33] cfg80211: failed to load regulatory.db
[  134.275098][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  134.284188][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  181.544496][ T5612] Bluetooth: hci1: command 0x0406 tx timeout
[  181.546500][ T5612] Bluetooth: hci2: command 0x0406 tx timeout
[  195.157934][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  195.172590][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  256.794427][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  256.806304][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  258.781578][   T35] INFO: task kworker/1:3:5321 blocked for more than 144 seconds.
[  258.795430][   T35]       Not tainted syzkaller #0
[  258.797536][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  258.800945][   T35] task:kworker/1:3     state:D stack:23176 pid:5321  tgid:5321  ppid:2      task_flags:0x4208060 flags:0x00080000
[  262.220025][   T35] Workqueue: events_power_efficient crda_timeout_work
[  264.299786][   T35] Call Trace:
[  264.301314][   T35]  <TASK>
[  264.316546][   T35]  __schedule+0x17d9/0x56c0
[  264.318463][   T35]  ? __lock_acquire+0x683/0x2cf0
[  264.320714][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  267.195828][   T35]  ? wq_worker_sleeping+0x101/0x250
[  267.197854][   T35]  ? __pfx___schedule+0x10/0x10
[  267.199463][   T35]  ? schedule+0x90/0x2b0
[  267.201001][   T35]  schedule+0x164/0x2b0
[  267.213118][   T35]  schedule_preempt_disabled+0x13/0x30
[  267.214845][   T35]  __mutex_lock+0x7bf/0x1550
[  267.216317][   T35]  ? __mutex_lock+0x5d4/0x1550
[  267.217806][   T35]  ? crda_timeout_work+0x16/0x80
[  267.219363][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  267.221130][   T35]  ? process_scheduled_works+0xa20/0x14e0
