last executing test programs:

1.801028981s ago: executing program 0 (id=228):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="800100001200010a28bd7000000000000700000004003700660169802000088004006a800400ac800c00e10003000000000000000400088004005680080041"], 0x180}}, 0x0)
read(r2, &(0x7f0000001280)=""/4107, 0x100b)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000200)={@initdev, @local, <r3=>0x0}, &(0x7f0000000280)=0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000300)={'syztnl1\x00', <r5=>0x0, 0x80, 0x40, 0x4, 0x4, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x66, 0x0, 0x7, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0x23, 0x7f, [@dev={0xac, 0x14, 0x14, 0x21}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @multicast1, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0x4, [{@remote, 0x6}, {@private=0xa010100, 0xd}, {@multicast1}]}, @timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x4, [{@multicast2, 0x80000001}]}, @ssrr={0x89, 0xb, 0x1e, [@empty, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r6=>0x0, 0x2f, 0xff, 0x6, 0x7, 0x63, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8000, 0x700, 0xb7, 0x101}})
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000580)=<r7=>0x0, &(0x7f00000005c0)=0x4)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r10=>0x0})
bind$can_raw(r9, &(0x7f0000000000)={0x1d, r10}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000002440)=@delchain={0x1618, 0x65, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x2, 0xfff2}, {0xfff1, 0x1a}, {0xffff, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x3}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0x15b0, 0x2, [@TCA_BASIC_ACT={0x146c, 0x3, [@m_mirred={0xcc, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3359c114, 0xf3c, 0x1, 0x80, 0x7}, 0x1, r4}}]}, {0x7f, 0x6, "9b85db043c8316eaad25569e9e0d8c9a2006daba6ae54b7e56b951bdad7f7dafb23bafbfc0b92334312989b256af2197868b66df0b41281aba99367d0538d97ace126ee6b8eae24c1f4d6c368f4bee905ab22de1687c1f9c85b2fa427f9bfc9e44249d86cabdf461d0c96a4fde3ad1aaf26a92645990b752ea8b68"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x154, 0x14, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1, 0x4e, 0x1, 0x7}, {0xd, 0xac, 0x5, 0x2}, {0x511e, 0x40, 0xa, 0x7}, {0x4, 0x22, 0x3, 0x4}, {0x2c4, 0x80, 0x1, 0x9}, {0x66, 0x2, 0xd, 0xffff}, {0xfffd, 0x8, 0x9, 0x7}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xb8, 0x3, 0x9, 0x800080}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0xac, 0x6, "c13530b1c9408be11af38597a87c9232021514dfda239db555ad0afbfb6d56a8b4e12443733e8e187e07838b83e39de7048c1dc6aba782b2669ed950e81e49cee6d6fc0a9de111cd377c4754f195f8881ab4794eeccf4a61eca6315d03ecefc5776d35f0f83d178ec827fba3f4015171df4c6ca89cec00b43554df203e59e5b15d14521aa171f31c937ff7b40d5a55f71643c46693e4d8ede1eaf8dd8e1e7104458a8d3352661fd9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x204, 0x16, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0xd, 0x3, 0x8, 0x2}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x80000000, 0x6, 0x6, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0xfaa, 0x1, 0x7570, 0x5}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x10000, 0x5, 0xe, 0x2}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2bc6, 0x5, 0x5, 0x400}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x6, 0x2, 0xff}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8d, 0xfffffff3, 0x3, 0x6, 0x5}, 0x2, r11}}]}, {0xf7, 0x6, "6402fdd8552f383c332ded34f8a352fb27a0d4d1b8bff4aa9b6746d99e20d0f20e96c0e431d4fd496572748936001d7c541cdfb0d49df8f281bbedc341f48daf049b6c727037aaeccf81e41581fe3af9a0ee44c0248f67813a6f6313c653e04e3d37579da50ecd4b281d60534a80bd06daf5ea7b6477636a782141e57f753fab98276a448715f44474aa5e81374c5d16cc2a0c582f72f8783a16e617d7ded1692a99fc0277e5298c2c8a19caaeb472fdbfd23792d79541829ce9d19b1dcd76480fd3d2106396182dcbaafeea2204bbfc098651e73e1f5531193333cf334295b1f5bbf327fce7623a86cf48bbf2d1104594d495"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}, @m_tunnel_key={0x1044, 0x1c, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0x8}}, @TCA_BASIC_EMATCHES={0x138, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x8, 0x0, 0x0, {{0xbf, 0x1, 0x3}, {0x2b0e, 0x7, 0xcc00, 0x3, 0x6, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xf}, {0x1, 0x5, 0x4}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xdf, 0x8, 0x401}, {0x2, 0x0, 0x4}}}, @TCF_EM_IPT={0x64, 0x3, 0x0, 0x0, {{0x3, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x27, 0x5, "810e4cf7b47ad5830bc4f83edf95fb0eace077981cd86dfba37222afc179c62716ecf3"}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x3}, {{0x1, 0x0, 0x1}, {0x3}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x14b7, 0x8, 0x1}, {0xffffffffffffffff, 0x2, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x40, 0x2, 0x9}, {0xf, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x200, 0x3, 0x32}, {0x9, 0xc, 0x7, 0x3b}}}, @TCF_EM_META={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="b3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3]}]}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x9}, {0xc, 0x5, 0x0, "fb307f9c39"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc0, 0xe}}]}, 0x1618}, 0x1, 0x0, 0x0, 0x40880}, 0x101)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$key(r0, &(0x7f0000000400)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x2, 0x4, 0x0, 0x6, 0x7, 0x0, 0x70bd23, 0x40007e, [@sadb_address={0x5, 0x5, 0x33, 0xa0, 0x0, @in6={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x38}, 0x1, 0x7}, 0x20000000)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r15, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}}, 0x0)
r16 = socket(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r16, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', 0x0})
r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(r16, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r17, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4844)

761.526699ms ago: executing program 0 (id=229):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept4(r0, &(0x7f0000000000)=@can, &(0x7f00000000c0)=0x80, 0x80400)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008001100ffffff7f36710baf1188ef132726e59d6c90ab61c7cd88e2f8d6f6d81723eaf16c0876d2eb512f94e68e5c4881bcbc8bd0f7878e5d964593926c94b6f6a4209ea23d311ad1264c8961a7a349bf4dd3c09668b27706e4e6fb9dbb438b6c62a7ef88057b0a090e3793cb4e3744882bde30cbd3d05f54ebb4e4a347aba4a4b2a730d32978e0aea54c057518bf0e945b3d3e4fce20c13f21931fefdcba492393f4c80cc9b27f41dafdb693c53a524e11fcd44b1e58abb6313eef5a408f04915bac80ed28ab45719b7dfba8705ce0c628a70d24472508f2f790788b3c85d51ebb0725abf5c558c017b811926751cd12b55a7d5202acef8f893991247abd44e1937dc3418993bd9122bd1fc294455eb8eaa9ce8f619dc3c1c98a889d1df1a73e3db7ba8935c3b931efb21224dc03b79951d1d2094640e9ddc3cfa31d07907b2b2c02d5ed099f7f0a8ae202f9f33c1ce6618accae511aa3955a60881328788c40c210198440144b719b9584240a5262ea78fec1afc132c9cd08ce2562796e787a3c87e9579ba8617ff1b280dc7c162437a04ee98acc4535388c465b6ffb484cabfdd9231b7a4f279d004c87386d322ff648bf48cc78783dcb4035f53e755178cd2d16fc01cf97e2fec7a6720510bfbaccc63edcc25a8de14117ebb0822f155f0c12d61752de1fd7510a71bc2f3c9784a315c4a09faa49cccab33882cad8"], 0x2c}}, 0x8000)

697.701222ms ago: executing program 0 (id=231):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)

696.026482ms ago: executing program 0 (id=233):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100003052bbd70000000000000001f00", @ANYRES8=r0, @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001"], 0x60}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001"], 0x60}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000005c0), r4)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048d4}, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bind$l2tp(r6, &(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10) (async)
bind$l2tp(r6, &(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r8, 0x0, 0x0, 0x44011, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) (async)
sendto$inet6(r8, 0x0, 0x0, 0x44011, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c)
sendmsg$can_raw(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0xee, 0x0, 0x0, 0x40041}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
socket$unix(0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40000)
sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x19e172f08959ac6e, 0x10001, 0x47}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x19e172f08959ac6e, 0x10001, 0x47}, 0x2c)
ioctl$SIOCSIFHWADDR(r6, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast})
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6)
sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r11, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x80}, 0x2000)

658.714084ms ago: executing program 2 (id=235):
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000002c0), 0x2)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}], 0x5}, 0xfffffffc}], 0x2, 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000000340)={'nat\x00', 0x0, 0x3, 0x1f, [0xffffffff, 0x0, 0x400, 0xfbd6, 0x2, 0x6], 0xa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/31}, &(0x7f0000000240)=0x78)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600156f"], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x8080)
recvmsg$can_j1939(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000020)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

559.525434ms ago: executing program 1 (id=237):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000000c2b95fc19e117651ec000180c200000008004500001c00000000001190780800001ce0000001000017c101089078627a03b411ac2b5e640f4fadfc6d646b74caf8bd0d131a612649466e6b0a4c122bdb6ab9451b1301162c363b1a9eaf16fb0dde0163d46a4173a1f63fdbf782d646bab828e01a8746edaf1a54139e720d76d1f8e3d2fe0d9bfa"], 0x0)
close(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
socket$igmp(0x2, 0x3, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10)
sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000001840)="efe1", 0x2}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf250100000000000000014100000018001700000004000000017564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000c0d5}, 0x40801)
socketpair(0x1a, 0x5, 0x4, &(0x7f0000000000))
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

545.334616ms ago: executing program 2 (id=238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x1d8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x6a, 0x8, "5965e4c0f5c3adaf0dd75ecd262c2929dcb39750cbfe4ecd8af1b6a73b79f5acb9766133db54e40c8afed413cef3990107f570896dbb40eaa6725ce1df511afa646ab0dbabbe30443b74b83d7837d2305f9b4d349d3cdc2225731bd1015cec93eef62b50fbcc"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xfe, 0x8, "15ed825b51a1c722b25dadff9ae973ec4edc95044afad6f8f206046a3e5805807244ff37c5e9472ac9a4a81d95052e14d23af21a07c9500907dcc64656f0e2b0ca8644a98423ece89f0015734b639fd4203bb1a2b349cc30dae566c4686e744a83be0825d52c573e9b161eda28002ae22e74bd7183c03a093beba049f6f62118372adeba515d1f77eec4fe33e3cd90b273ccf23667c5de0602940ca8fce2289fa9fcb64845e6bec1e5599f9f00bdb6dcf57311ed5c2c55de9187c43ee5b1ce1273fa0497719ab163d8201ae2bf39e4c60a3ef4164aae7eec854328607de6b011659c7d50b6afb92582ef84b0b152c0ce283605b48a8e2d822791"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x118, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_DESC={0xec, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x167}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x60, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9e4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7336}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}]}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0xa01, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x24}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffff9aa}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3cc}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a0104000000000000000007000000080014"], 0xe4}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xf, 0x0, &(0x7f0000000400)="1069c2704a075e307300ac14dd46df", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r2, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0)

468.580115ms ago: executing program 0 (id=239):
socket(0x29, 0xa, 0x5)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_buf(r4, 0x1, 0x3, &(0x7f0000000100)=""/193, &(0x7f0000000040)=0xc1)
write(r1, &(0x7f0000000240)="94", 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x800)
sendto$inet6(r3, &(0x7f0000000280)="794a220a58929ab86eb838a12d84266cb84d0694bf874ba111132318aca2a63c6ba77ebefb8bae86e7623d7607fd984b838313c452c50b6672427ba8b4784836509d3f7e68cf96a78cd78d8d26ef8319e4f5b4c78541384dc130c4a2b393a0b6e69c7ede286effb774a044389054eac25fa6d6497242ddf80742cd8353d686adbd4c72fdc9b703a9e8079940e2a6b0a2d8642f8ac63792d9d653ec0f2e8befdeca82c3d6e86b29ffa03e1c9e8cee5506d6435683dea969127ecf9314246e960a299c7de5d1b5fcb92fc2aa5dda5321570fc32e814ecb6ddf7885b11dc37d9cdf2c", 0xe1, 0x4004084, 0x0, 0x0)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000013580)='\r', 0x1}, {&(0x7f00000003c0)="a9b4d724fb963cf08e7b0b7e9004e7d76821ab2847acad3aa7c22888941fb8c847999fb1fc62f654836048e4d1ea1208203c82ea1aea6ce0be8bea95addb69ec739b368ab66d48f7be074ec041cce03ad64c2a7ed17e1d3cf9554021abbff35d324199e4f733b712c66a5652847b693aa9357d5c9fe124f1e4e1713bca7bf18f623bbc1a0d8dd35cd8242d07dac4088a5fdd7676131599909b7bdcb7a59c0dbfcee0c61ef440601f614a56e395f5f214a729249a8c1f154ae68d25039af6d7bbc949515384be400168e72bfdb60ec7ad1cae28effeee27db41c58a0d1d9a53f9383f659a4b894f4fe2397ef5109925e9105e744787", 0xf5}], 0x2, 0x0)
tee(r0, r3, 0x8f5, 0x100000000000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0)

467.915757ms ago: executing program 2 (id=240):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010000000040000000003900000004005a80"], 0x18}}, 0x0)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="cf12c4b8671c70e66764d54dd5af4ea47d0f16b6f4bea394b0a1e96d6415f7c21c94caeb1e79b0f1cbaf2fcfcd630570d5f8e8da6415ab6b7c8be32442f65ec0cb5c01eb54b7e594a30f4a16f85f70b025b182285905146bef4a63664e8b6bb11e18d6c1471b18e8900e61471f7a47401c45462525721ce0e8e0215ba6223fc28599a4dc9e5f1dc511b580d335eccc1af68cb3909ee57e7013676f3b318f68da71646fb026cd6583947f645d1fe7b330ebd69e3234b8181cca2c1b60a0a4c152816730e8a590c2fdd57cafe400b286ad5ddcbb6ef4a9f344900abe66387cb8a81dcba6bc327d23c4d436cc97a577d5fd", 0xf0}, {&(0x7f0000000000)="2b30e0581c825afd649e76995f1cb024ff26c320d6a743fbc8394723fc06cea00cbe5f753b54df65af1fa098a4cff708af120ec2cd7aa382d1d8e72bd6fe88985f71fa52a8675544889f634b77198f5bdc0158a131480f760f8d334eb5160fe7d7a60297f2bd324ac42ab802ec40fcd93d8358bf76dd58451c31f1bcbd439f443f880e336ec62ce5626ee7dc46", 0x8d}, {&(0x7f00000002c0)="c950d8390c531117fd8e1b905ae7e17c53138fb340dc6b1a4bc5a1015fd9f9190db0905083b8441172b47254a2aefb841fc7e6719b55a4154212e74ababf6ccd4b7cf50758ff3dcca26da469ae37e7ee30adbf138a937471eef57101de5eef4b13701180e551800b97ab4d8583fe1e20f3ae01fa140f5e26d79105d2ab651cd004a6743279b8a06be9f91f7d8acc6db305b79b9eb56d963e26e113ce057fb475", 0xa0}, {&(0x7f0000000380)="171bc6aad519bbc8d5d5de697749a744927a5e6a1e57063b847421c99614feb40e50bbc9eef87570e8f3669e85e6f4bd13caa2a21401d157231ec7dac74ef417e8fe56937f2074785c7ffb56b2cdfb27ec6f17c7c5a93229b4d8510e8a62b83900fe1ef5fbb3c57358b13ed62f04defb44b59737365af4eddb5cb6e8ccd00af8235750268112aa355126115b227213c4fc40ce1caa60fd202372bb85bdcc3bdfcf01a9", 0xa3}, {&(0x7f0000000440)="bd592767ff0592f2be99d6ef38209873c4ad67ee47dcc38c8fcb84253f1348a7dac28cf76a127feaf9ee82944cc1bc3c271327f7e7", 0x35}], 0x5)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010000000040000000003900000004005a80"], 0x18}}, 0x0) (async)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="cf12c4b8671c70e66764d54dd5af4ea47d0f16b6f4bea394b0a1e96d6415f7c21c94caeb1e79b0f1cbaf2fcfcd630570d5f8e8da6415ab6b7c8be32442f65ec0cb5c01eb54b7e594a30f4a16f85f70b025b182285905146bef4a63664e8b6bb11e18d6c1471b18e8900e61471f7a47401c45462525721ce0e8e0215ba6223fc28599a4dc9e5f1dc511b580d335eccc1af68cb3909ee57e7013676f3b318f68da71646fb026cd6583947f645d1fe7b330ebd69e3234b8181cca2c1b60a0a4c152816730e8a590c2fdd57cafe400b286ad5ddcbb6ef4a9f344900abe66387cb8a81dcba6bc327d23c4d436cc97a577d5fd", 0xf0}, {&(0x7f0000000000)="2b30e0581c825afd649e76995f1cb024ff26c320d6a743fbc8394723fc06cea00cbe5f753b54df65af1fa098a4cff708af120ec2cd7aa382d1d8e72bd6fe88985f71fa52a8675544889f634b77198f5bdc0158a131480f760f8d334eb5160fe7d7a60297f2bd324ac42ab802ec40fcd93d8358bf76dd58451c31f1bcbd439f443f880e336ec62ce5626ee7dc46", 0x8d}, {&(0x7f00000002c0)="c950d8390c531117fd8e1b905ae7e17c53138fb340dc6b1a4bc5a1015fd9f9190db0905083b8441172b47254a2aefb841fc7e6719b55a4154212e74ababf6ccd4b7cf50758ff3dcca26da469ae37e7ee30adbf138a937471eef57101de5eef4b13701180e551800b97ab4d8583fe1e20f3ae01fa140f5e26d79105d2ab651cd004a6743279b8a06be9f91f7d8acc6db305b79b9eb56d963e26e113ce057fb475", 0xa0}, {&(0x7f0000000380)="171bc6aad519bbc8d5d5de697749a744927a5e6a1e57063b847421c99614feb40e50bbc9eef87570e8f3669e85e6f4bd13caa2a21401d157231ec7dac74ef417e8fe56937f2074785c7ffb56b2cdfb27ec6f17c7c5a93229b4d8510e8a62b83900fe1ef5fbb3c57358b13ed62f04defb44b59737365af4eddb5cb6e8ccd00af8235750268112aa355126115b227213c4fc40ce1caa60fd202372bb85bdcc3bdfcf01a9", 0xa3}, {&(0x7f0000000440)="bd592767ff0592f2be99d6ef38209873c4ad67ee47dcc38c8fcb84253f1348a7dac28cf76a127feaf9ee82944cc1bc3c271327f7e7", 0x35}], 0x5) (async)

381.596016ms ago: executing program 1 (id=241):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r0, 0xf11a3000)

380.681854ms ago: executing program 2 (id=242):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r0, 0x0, 0x0) (async)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan1\x00'})
r1 = socket$inet6(0xa, 0x2, 0x1)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async)
bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async)
bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r9, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)

379.991227ms ago: executing program 0 (id=243):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @mcast1, 0x8}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
r5 = socket$inet(0xa, 0x801, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x7}, 0x8)
close(r4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10)

373.110964ms ago: executing program 1 (id=244):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async, rerun: 64)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', <r4=>0x0}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xfffffffffffffed6}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)

240.487894ms ago: executing program 2 (id=245):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
r1 = accept$inet6(r0, 0x0, &(0x7f0000000040)) (async)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) (async)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000200), &(0x7f0000000240)=@udp=r3, 0x1}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x2, 0x1, 0x2, 0x6, 0x7d}, 0x20) (async)
getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=""/206, &(0x7f0000000200)=0xce)
recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4, 0x4}, 0x40}], 0x1, 0x2, 0x0) (async, rerun: 32)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 32)
socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @local, 0x2}, 0x1c)

237.228286ms ago: executing program 1 (id=246):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000040)="09000000010000", 0x7)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a05000000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c00038005000100ac000000080001400000080908000240000000010900010073797a30"], 0xcc}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x80)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x3, 0x6, 0x305, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000080)

236.118283ms ago: executing program 2 (id=247):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0)
close(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], <r2=>0x0, 0x61, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0xb, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa8f6, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @generic={0x6, 0x0, 0x8, 0x7, 0x6}, @ldst={0x1, 0x3, 0x2, 0x1, 0x3, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f0000000b00)='syzkaller\x00', 0x7, 0x88, &(0x7f0000000b40)=""/136, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0xe, 0x8, 0xffff56b0}, 0x10, 0x546c, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x0, 0x2, 0x0, 0xb}, {0x5, 0x3, 0x9, 0x7}, {0x3, 0x5, 0x8, 0x9}, {0x2e, 0x2, 0x2}, {0x4, 0x4, 0x7, 0x1}, {0x1, 0x2, 0x9}, {0x1, 0x5, 0x3, 0x3}, {0x3, 0x2, 0xb, 0xa}], 0x10, 0xa}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000011c0)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001180)='#\x00'}, 0x30)
write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000007f00000000000000000000000020000000000000000000"], 0x48)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r10, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r9}, &(0x7f0000000c40), &(0x7f0000000c80)=r7}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e80)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000200d4d14c0c48149c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50)
r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f40)={0xffffffffffffffff, 0xe, 0x30}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xf, 0xf, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0xb, 0x5, 0x6, 0x6, 0xffffffffffffffff}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x7a, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x4, 0x1, 0xa}, 0x10, r2, r3, 0x8, &(0x7f0000000f80)=[r5, r6, r9, 0xffffffffffffffff, r11, r12, r13, r14], &(0x7f0000000fc0)=[{0x4, 0x3, 0xb, 0xb}, {0x4, 0x4, 0x6}, {0x2, 0x4, 0xe, 0x6}, {0x5, 0x1, 0x9, 0x6}, {0x4, 0x5, 0x5, 0x8}, {0x2, 0x4, 0xb, 0x9f70adeee2c84846}, {0x5, 0x5, 0x2, 0x5}, {0x1, 0x2, 0x12, 0xa}], 0x10, 0x7}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36)

101.797472ms ago: executing program 1 (id=248):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd0403fedbdf2356ed6c0c10a614cc2d1d6b8b16380a9278440008000300", @ANYRES32=r2, @ANYBLOB="0c0006000300000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x2000885d}, 0x8004)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002c5570000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd0403fedbdf2356ed6c0c10a614cc2d1d6b8b16380a9278440008000300", @ANYRES32=r2, @ANYBLOB="0c0006000300000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x2000885d}, 0x8004) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) (async)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002c5570000000000006000009"], 0x14}, 0x2, 0x34005}, 0x0) (async)

0s ago: executing program 1 (id=249):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0)
listen(r0, 0xfff)
r1 = accept(r0, 0xfffffffffffffffd, &(0x7f0000000680))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000ffffffffe500feff0010000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070}, 0x94)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a0002"], 0x48}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x36}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xfff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={0xed0, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xe80, 0x8, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e14577efa6c64b6d52df66135458c2e86c388d6a081f56d26359b251f6d61975"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @remote, 0x807}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x33c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @empty, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x81}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a758d8bb16d3295918c29bc4976b45f71937d7b7c059eb35ddb40decc374aa73"}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "141168a427ae759f18cfe8f6a5b3fb4747c0a4d4f2f0c96dfdc35dd93219cc10"}]}, {0x1c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "51d7ec628910f3511fc4790b05b9a215caf9fbac50a3be66d4af9801593e6438"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x40, @dev={0xfe, 0x80, '\x00', 0x21}, 0x200}}]}, {0x7d0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x14}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @remote, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @mcast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xeeb8}, @WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x9}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0xed0}, 0x1, 0x0, 0x0, 0x30000100}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004200)=ANY=[@ANYBLOB="ac0c0000", @ANYRES16=r2, @ANYBLOB="050027bd7000bddbdf25010000001400020077673000000000000000000000000000840c088050000080200004000a004e2200000000000000000000000000000000000000010500000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b060005"], 0xcac}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11060' (ED25519) to the list of known hosts.
syzkaller login: [   49.007802][ T5749] cgroup: Unknown subsys name 'net'
[   49.116607][ T5749] cgroup: Unknown subsys name 'cpuset'
[   49.137031][ T5749] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.137237][ T5749] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.682036][ T5201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.686724][ T5201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.690181][ T5201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.693892][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.710913][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.715713][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.719131][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.722242][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.725388][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.761579][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.833255][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.844761][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.848370][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.852714][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.856422][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.026116][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   56.108844][ T5807] chnl_net:caif_netlink_parms(): no params data found
[   56.200614][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.203697][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.206118][ T5811] bridge_slave_0: entered allmulticast mode
[   56.209356][ T5811] bridge_slave_0: entered promiscuous mode
[   56.246230][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.249222][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.252387][ T5811] bridge_slave_1: entered allmulticast mode
[   56.256889][ T5811] bridge_slave_1: entered promiscuous mode
[   56.295110][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   56.315109][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.317346][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.319554][ T5807] bridge_slave_0: entered allmulticast mode
[   56.322643][ T5807] bridge_slave_0: entered promiscuous mode
[   56.329136][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.337607][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.340406][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.350649][ T5807] bridge_slave_1: entered allmulticast mode
[   56.356324][ T5807] bridge_slave_1: entered promiscuous mode
[   56.360867][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.449008][ T5811] team0: Port device team_slave_0 added
[   56.452889][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.467839][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.470182][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.472432][ T5816] bridge_slave_0: entered allmulticast mode
[   56.476432][ T5816] bridge_slave_0: entered promiscuous mode
[   56.480909][ T5811] team0: Port device team_slave_1 added
[   56.495560][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.508575][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.511103][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.515275][ T5816] bridge_slave_1: entered allmulticast mode
[   56.518644][ T5816] bridge_slave_1: entered promiscuous mode
[   56.531291][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.533431][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.541862][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.558588][ T5807] team0: Port device team_slave_0 added
[   56.562124][ T5807] team0: Port device team_slave_1 added
[   56.574205][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.576477][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.586010][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.620325][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.622557][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.631206][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.637699][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.640286][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.648619][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.654500][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.659859][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.727393][ T5816] team0: Port device team_slave_0 added
[   56.733250][ T5807] hsr_slave_0: entered promiscuous mode
[   56.736784][ T5807] hsr_slave_1: entered promiscuous mode
[   56.745195][ T5811] hsr_slave_0: entered promiscuous mode
[   56.747625][ T5811] hsr_slave_1: entered promiscuous mode
[   56.749850][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.752284][ T5811] Cannot create hsr debugfs directory
[   56.756922][ T5816] team0: Port device team_slave_1 added
[   56.823303][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.825869][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.833424][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.838247][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.840622][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.850617][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.988340][ T5816] hsr_slave_0: entered promiscuous mode
[   56.991523][ T5816] hsr_slave_1: entered promiscuous mode
[   56.995063][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.997986][ T5816] Cannot create hsr debugfs directory
[   57.207482][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.238409][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.253196][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.279200][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.347345][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.356544][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.362885][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.374067][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.439759][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.451044][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.456726][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.468875][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.514003][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.548985][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   57.568626][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.571448][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.588936][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.591704][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.616214][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.642287][ T5807] 8021q: adding VLAN 0 to HW filter on device team0
[   57.662118][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.664669][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.678873][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.696902][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.699179][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.727254][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   57.756274][   T55] Bluetooth: hci1: command tx timeout
[   57.761098][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.763291][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.775050][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.777236][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.838483][   T55] Bluetooth: hci0: command tx timeout
[   57.869476][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.913868][   T55] Bluetooth: hci2: command tx timeout
[   57.928893][ T5811] veth0_vlan: entered promiscuous mode
[   57.946817][ T5811] veth1_vlan: entered promiscuous mode
[   57.965536][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.969348][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.003948][ T5811] veth0_macvtap: entered promiscuous mode
[   58.010974][ T5811] veth1_macvtap: entered promiscuous mode
[   58.039864][ T5816] veth0_vlan: entered promiscuous mode
[   58.044541][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.061861][ T5816] veth1_vlan: entered promiscuous mode
[   58.066627][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.070213][ T5807] veth0_vlan: entered promiscuous mode
[   58.078835][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.082018][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.086333][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.089287][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.098848][ T5807] veth1_vlan: entered promiscuous mode
[   58.136870][ T5816] veth0_macvtap: entered promiscuous mode
[   58.154311][ T5816] veth1_macvtap: entered promiscuous mode
[   58.170281][ T5807] veth0_macvtap: entered promiscuous mode
[   58.178915][ T5807] veth1_macvtap: entered promiscuous mode
[   58.186400][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.210164][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.210759][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.214662][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.226353][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.229029][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.232228][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.236789][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.240168][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.251033][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.271013][ T5807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.276437][ T5807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.279120][ T5807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.281742][ T5807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.326318][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.332775][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.371306][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.377502][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.428202][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.455277][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.465752][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.482538][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.495993][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.516163][ T5874] Zero length message leads to an empty skb
[   58.519565][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.521920][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.537102][ T5874] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   58.539538][ T5874] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.577302][ T5874] team0: Failed to send port change of device geneve0 via netlink (err -105)
[   58.580804][ T5874] team0: Failed to send options change via netlink (err -105)
[   58.583166][ T5874] team0: Port device geneve0 added
[   58.677389][ T5883] netlink: 'syz.1.2': attribute type 4 has an invalid length.
[   58.841170][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'.
[   58.904331][ T5898] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.989945][ T5900] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   59.006290][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.010499][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.071230][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   59.090023][ T5906] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   59.225306][ T5910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.387811][    C1] Unknown status report in ack skb
[   59.749686][ T5918] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   59.834129][ T5814] Bluetooth: hci1: command tx timeout
[   59.912324][ T5924] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   59.917633][ T5814] Bluetooth: hci0: command tx timeout
[   59.923299][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.926045][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.994215][ T5814] Bluetooth: hci2: command tx timeout
[   60.116558][ T5933] netlink: 'syz.1.21': attribute type 39 has an invalid length.
[   60.142670][ T5934] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   60.458711][ T5957] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   60.557935][ T5966] ip6gretap1: entered promiscuous mode
[   60.602213][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'.
[   60.622493][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'.
[   60.710881][ T5982] xt_bpf: check failed: parse error
[   60.799997][ T5988] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   60.827889][ T5990] x_tables: duplicate underflow at hook 2
[   61.079183][ T6016] netlink: 96 bytes leftover after parsing attributes in process `syz.0.45'.
[   61.083050][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[   61.089857][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[   61.130124][ T6018] netlink: 'syz.2.46': attribute type 1 has an invalid length.
[   61.306740][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'.
[   61.916757][ T5814] Bluetooth: hci1: command tx timeout
[   61.995613][ T5814] Bluetooth: hci0: command tx timeout
[   62.075003][ T5814] Bluetooth: hci2: command 0x040f tx timeout
[   62.218465][ T6043] warning: `syz.1.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.361559][ T6059] netlink: 'syz.1.56': attribute type 7 has an invalid length.
[   62.389092][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.393206][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.496778][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.502761][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.507370][   T33] audit: type=1804 audit(1751553261.213:2): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.58" name="/newroot/25/cgroup.controllers" dev="tmpfs" ino=146 res=1 errno=0
[   62.515526][   T33] audit: type=1800 audit(1751553261.213:3): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.58" name="cgroup.controllers" dev="tmpfs" ino=146 res=0 errno=0
[   62.522701][   T33] audit: type=1800 audit(1751553261.223:4): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.58" name="cgroup.controllers" dev="tmpfs" ino=146 res=0 errno=0
[   62.577888][ T6060] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.580681][ T6060] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.583312][ T6060] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.587612][ T6060] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.993696][ T5814] Bluetooth: hci1: command tx timeout
[   64.076850][ T5814] Bluetooth: hci0: command tx timeout
[   64.120494][ T6119] netlink: 'syz.1.69': attribute type 1 has an invalid length.
[   64.154778][ T5814] Bluetooth: hci2: command 0x040f tx timeout
[   64.385946][ T6126] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   64.618503][ T6152] __nla_validate_parse: 2 callbacks suppressed
[   64.618520][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'.
[   64.665973][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'.
[   64.795971][ T6170] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.958790][ T6176] unsupported nlmsg_type 40
[   65.029223][ T6181] syz.0.86 uses obsolete (PF_INET,SOCK_PACKET)
[   65.035482][ T6181] 8021q: VLANs not supported on syzkaller1
[   65.039574][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.86'.
[   65.133388][ T6183] tipc: Enabling of bearer <et:g> rejected, media not registered
[   65.145964][ T6183] syzkaller1: entered promiscuous mode
[   65.148292][ T6183] syzkaller1: entered allmulticast mode
[   65.679944][ T6194] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   65.683272][ T6194] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   65.686145][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.91'.
[   65.691072][ T6195] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   65.693671][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.91'.
[   65.696594][ T6195] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   65.706475][ T6199] netlink: 'syz.1.92': attribute type 2 has an invalid length.
[   65.867917][ T6210] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   65.946370][ T6216] netlink: 64 bytes leftover after parsing attributes in process `syz.1.99'.
[   66.234092][ T5814] Bluetooth: hci2: command 0x040f tx timeout
[   67.036336][ T6235] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   67.100417][ T6237] xt_cgroup: invalid path, errno=-2
[   67.277463][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.111'.
[   67.281007][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.111'.
[   67.438306][ T6264] raw_sendmsg: syz.2.113 forgot to set AF_INET. Fix it!
[   67.512870][ T6267] netlink: 'syz.0.114': attribute type 10 has an invalid length.
[   67.623340][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.114'.
[   68.402789][ T6267] veth0_vlan: left promiscuous mode
[   68.408324][ T6267] veth0_vlan: entered promiscuous mode
[   68.417655][ T6267] team0: Device veth0_vlan failed to register rx_handler
[   68.555696][ T6280] netlink: 13772 bytes leftover after parsing attributes in process `syz.0.117'.
[   68.559949][ T6280] openvswitch: netlink: Flow key attr not present in new flow.
[   68.935017][ T6303] xt_cgroup: xt_cgroup: no path or classid specified
[   70.007555][ T6320] __nla_validate_parse: 1 callbacks suppressed
[   70.007576][ T6320] netlink: 48 bytes leftover after parsing attributes in process `syz.1.130'.
[   70.014646][ T6322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.131'.
[   70.290365][ T6322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.131'.
[   70.338936][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'.
[   70.462272][ T6344] bridge0: entered promiscuous mode
[   70.526696][ T6346] netlink: 'syz.0.136': attribute type 21 has an invalid length.
[   70.529829][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.
[   70.543263][ T6346] netlink: 'syz.0.136': attribute type 21 has an invalid length.
[   70.548700][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.
[   70.729912][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[   70.980851][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.988439][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   72.075113][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[   72.339477][ T6374] xt_CT: No such helper "snmp"
[   72.417201][ T6387] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   72.685448][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'.
[   72.765781][ T6402] netlink: 36 bytes leftover after parsing attributes in process `syz.2.151'.
[   72.801721][ T6399] netlink: 'syz.0.150': attribute type 5 has an invalid length.
[   73.098009][ T6423] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   73.115709][ T6425] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   73.653313][ T6445] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   73.724717][ T6449] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   73.817526][ T6453] tipc: Can't bind to reserved service type 1
[   73.952309][ T6462] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   73.986665][ T6463] xt_cluster: node mask cannot exceed total number of nodes
[   74.176971][ T6469] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   74.186587][ T6468] nbd: socks must be embedded in a SOCK_ITEM attr
[   74.246117][ T6473] netlink: 'syz.2.176': attribute type 2 has an invalid length.
[   74.531183][ T6491] xt_TPROXY: Can be used only with -p tcp or -p udp
[   74.618832][ T6493] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   75.654987][ T6504] Bluetooth: MGMT ver 1.23
[   75.782156][ T6506] __nla_validate_parse: 10 callbacks suppressed
[   75.782175][ T6506] netlink: 14 bytes leftover after parsing attributes in process `syz.1.187'.
[   75.898050][ T6508] netlink: 36 bytes leftover after parsing attributes in process `syz.1.187'.
[   75.953386][ T6506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.961746][ T6506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.965722][ T6506] bond0 (unregistering): Released all slaves
[   75.997664][ T6515] vlan2: entered promiscuous mode
[   76.003675][ T6515] vlan2: entered allmulticast mode
[   76.005312][ T6515] hsr_slave_1: entered allmulticast mode
[   76.022892][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'.
[   76.069295][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[   76.107293][ T6525] netlink: 'syz.0.191': attribute type 1 has an invalid length.
[   76.117919][ T6525] netlink: 'syz.0.191': attribute type 1 has an invalid length.
[   76.201858][ T6527] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   76.312995][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'.
[   76.484857][ T6547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.488043][ T6547] IPv6: NLM_F_CREATE should be set when creating new route
[   76.491023][ T6547] IPv6: NLM_F_CREATE should be set when creating new route
[   76.568935][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'.
[   76.581264][ T6554] bridge0: port 3(macvlan2) entered blocking state
[   76.587873][ T6554] bridge0: port 3(macvlan2) entered disabled state
[   76.590325][ T6554] macvlan2: entered allmulticast mode
[   76.592055][ T6554] bridge0: entered allmulticast mode
[   76.600341][ T6554] macvlan2: left allmulticast mode
[   76.602084][ T6554] bridge0: left allmulticast mode
[   76.663351][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.202'.
[   76.668084][ T6558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.202'.
[   76.673402][ T6558] netlink: 45 bytes leftover after parsing attributes in process `syz.1.202'.
[   76.922230][ T6570] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   76.994675][ T6576] netlink: 'syz.2.206': attribute type 2 has an invalid length.
[   77.013384][ T6576] : entered promiscuous mode
[   77.165558][ T6585] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   77.178542][ T6588] Driver unsupported XDP return value 0 on prog  (id 91) dev N/A, expect packet loss!
[   77.187222][ T6588] netlink: 'syz.2.208': attribute type 21 has an invalid length.
[   77.190516][ T6588] IPv6: NLM_F_CREATE should be specified when creating new route
[   77.193391][ T6588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   77.195716][ T6588] IPv6: NLM_F_CREATE should be set when creating new route
[   77.197898][ T6588] IPv6: NLM_F_CREATE should be set when creating new route
[   77.200473][ T6588] IPv6: NLM_F_CREATE should be set when creating new route
[   77.762470][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'.
[   79.915450][ T6649] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   79.922136][ T6646] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   79.931625][ T5859] IPVS: starting estimator thread 0...
[   80.023686][ T6652] IPVS: using max 62 ests per chain, 148800 per kthread
[   80.880493][ T6661] netlink: 'syz.1.227': attribute type 4 has an invalid length.
[   81.207529][   T10] cfg80211: failed to load regulatory.db
[   81.916791][ T6674] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   81.984844][ T6681] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   82.084131][ T6691] __nla_validate_parse: 2 callbacks suppressed
[   82.084454][ T6691] netlink: 48 bytes leftover after parsing attributes in process `syz.0.233'.
[   82.132579][ T6691] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   82.153077][ T6694] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   82.275580][ T6704] netlink: 'syz.0.239': attribute type 1 has an invalid length.
[   82.367881][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'.
[   82.375860][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'.
[   82.492352][ T6734] netlink: 'syz.1.246': attribute type 10 has an invalid length.
[   82.501836][ T6734] veth0_vlan: left promiscuous mode
[   82.509663][ T6734] veth0_vlan: entered promiscuous mode
[   82.517905][ T6734] team0: Device veth0_vlan failed to register rx_handler
[   82.765167][ T6750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.249'.
[   82.771538][ T6750] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI
[   82.776096][ T6750] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af]
[   82.780528][ T6750] CPU: 0 UID: 0 PID: 6750 Comm: syz.1.249 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   82.785335][ T6750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.789119][ T6750] RIP: 0010:htb_qlen_notify+0x31/0xc0
[   82.791165][ T6750] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 fd c5 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 1a ca 46 f8 85
[   82.798455][ T6750] RSP: 0018:ffffc90004eef0f0 EFLAGS: 00010206
[   82.800786][ T6750] RAX: ffffffff89798873 RBX: 00000000000001a8 RCX: 0000000000080000
[   82.803810][ T6750] RDX: ffffc9000f76a000 RSI: 00000000000002ff RDI: 0000000000000300
[   82.806818][ T6750] RBP: dffffc0000000000 R08: ffff88811bbe0000 R09: 0000000000000002
[   82.809841][ T6750] R10: 00000000ffffffff R11: ffffffff89798850 R12: dffffc0000000000
[   82.812903][ T6750] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88810887c000
[   82.815875][ T6750] FS:  00007f4e875ab6c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[   82.819292][ T6750] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   82.821806][ T6750] CR2: 00007f4e86774980 CR3: 000000010f39a000 CR4: 00000000000006f0
[   82.824353][ T6750] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   82.827264][ T6750] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   82.830290][ T6750] Call Trace:
[   82.831563][ T6750]  <TASK>
[   82.832602][ T6750]  qdisc_tree_reduce_backlog+0x29c/0x480
[   82.834892][ T6750]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[   82.837150][ T6750]  hhf_change+0x764/0xad0
[   82.838877][ T6750]  ? __pfx_hhf_change+0x10/0x10
[   82.840826][ T6750]  ? __pfx_hhf_init+0x10/0x10
[   82.842665][ T6750]  hhf_init+0x213/0x950
[   82.844311][ T6750]  ? __pfx_hhf_init+0x10/0x10
[   82.846137][ T6750]  qdisc_create+0x7ac/0xea0
[   82.847861][ T6750]  tc_modify_qdisc+0x1426/0x2010
[   82.849777][ T6750]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   82.851863][ T6750]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   82.853930][ T6750]  rtnetlink_rcv_msg+0x77c/0xb70
[   82.855888][ T6750]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   82.857811][ T6750]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   82.859967][ T6750]  netlink_rcv_skb+0x208/0x470
[   82.861878][ T6750]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   82.863999][ T6750]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   82.866066][ T6750]  ? netlink_deliver_tap+0x2e/0x1b0
[   82.868127][ T6750]  ? netlink_deliver_tap+0x2e/0x1b0
[   82.870166][ T6750]  netlink_unicast+0x75b/0x8d0
[   82.872078][ T6750]  netlink_sendmsg+0x805/0xb30
[   82.873997][ T6750]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.876078][ T6750]  ? aa_sock_msg_perm+0x94/0x160
[   82.878026][ T6750]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   82.879997][ T6750]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.882051][ T6750]  __sock_sendmsg+0x21c/0x270
[   82.883961][ T6750]  ____sys_sendmsg+0x505/0x830
[   82.885912][ T6750]  ? __pfx_____sys_sendmsg+0x10/0x10
[   82.888003][ T6750]  ? import_iovec+0x74/0xa0
[   82.889790][ T6750]  ___sys_sendmsg+0x21f/0x2a0
[   82.891666][ T6750]  ? __pfx____sys_sendmsg+0x10/0x10
[   82.893719][ T6750]  ? __fget_files+0x2a/0x420
[   82.895451][ T6750]  ? __fget_files+0x3a0/0x420
[   82.897317][ T6750]  __x64_sys_sendmsg+0x19b/0x260
[   82.899300][ T6750]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   82.901431][ T6750]  ? do_syscall_64+0xbe/0x3b0
[   82.903278][ T6750]  do_syscall_64+0xfa/0x3b0
[   82.905031][ T6750]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.906619][ T6750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.908905][ T6750]  ? exc_page_fault+0x9f/0xf0
[   82.910745][ T6750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.913016][ T6750] RIP: 0033:0x7f4e8678e929
[   82.914779][ T6750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.922154][ T6750] RSP: 002b:00007f4e875ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   82.925303][ T6750] RAX: ffffffffffffffda RBX: 00007f4e869b6080 RCX: 00007f4e8678e929
[   82.928487][ T6750] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000006
[   82.931533][ T6750] RBP: 00007f4e86810b39 R08: 0000000000000000 R09: 0000000000000000
[   82.934467][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.937418][ T6750] R13: 0000000000000000 R14: 00007f4e869b6080 R15: 00007fffe257f978
[   82.940178][ T6750]  </TASK>
[   82.941418][ T6750] Modules linked in:
[   82.943125][ T6750] ---[ end trace 0000000000000000 ]---
[   82.945330][ T6750] RIP: 0010:htb_qlen_notify+0x31/0xc0
[   82.947480][ T6750] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 fd c5 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 1a ca 46 f8 85
[   82.955051][ T6750] RSP: 0018:ffffc90004eef0f0 EFLAGS: 00010206
[   82.957420][ T6750] RAX: ffffffff89798873 RBX: 00000000000001a8 RCX: 0000000000080000
[   82.960333][ T6750] RDX: ffffc9000f76a000 RSI: 00000000000002ff RDI: 0000000000000300
[   82.963589][ T6750] RBP: dffffc0000000000 R08: ffff88811bbe0000 R09: 0000000000000002
[   82.966723][ T6750] R10: 00000000ffffffff R11: ffffffff89798850 R12: dffffc0000000000
[   82.969850][ T6750] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88810887c000
[   82.973064][ T6750] FS:  00007f4e875ab6c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[   82.976588][ T6750] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   82.979263][ T6750] CR2: 00007f4e86774980 CR3: 000000010f39a000 CR4: 00000000000006f0
[   82.982402][ T6750] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   82.985711][ T6750] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   82.988823][ T6750] Kernel panic - not syncing: Fatal exception in interrupt
[   82.992333][ T6750] Kernel Offset: disabled
[   82.994102][ T6750] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:34:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000fd7 RDI=0000000000000fd8 RBP=00000000000003f8 RSP=ffffc90004eee930
R8 =ffff8880216b0237 R9 =1ffff110042d6046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4906 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4e875ab6c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4e86774980 CR3=000000010f39a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f4e874ed100 00007f4e86984440 XMM05=00007f4e86984458 00007f4e869844a0
XMM06=00007f4e86984498 00007f4e86984490 XMM07=00007f4e86984488 00007f4e86984480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4e86811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a2f63ce9e3784500 RBX=ffffffff81974d58 RCX=a2f63ce9e3784500 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c259797 CR3=000000003979c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=4d42270ae4fbd4cd 841519b5177d1d25 XMM03=24289445c0d37a03 7db551442e85511c
XMM04=00007fd4a44ed100 00007fd4a3984440 XMM05=00007fd4a3984458 00007fd4a39844a0
XMM06=00007fd4a3984498 00007fd4a3984490 XMM07=00007fd4a3984488 00007fd4a3984480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd4a3811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
