last executing test programs:

3.137639551s ago: executing program 2 (id=243):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r0, 0x1ad72f7)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x3, 0x10, 0xf, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x700, 0x7, 0x0, 0x5a}})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="24605d54b6f70000001c080006009d0f00", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
accept4(r0, 0x0, 0x0, 0x80000)
r4 = accept4$netrom(r0, 0x0, 0x0, 0x80000)
writev(r4, &(0x7f0000001b40)=[{&(0x7f0000000600)="16f68b2017beba386312104a1458eb86de", 0x11}, {&(0x7f0000000640)="bb23d9aa9dc40dbda08b06498139a31c4f1c5202930204fe2753dce105cc368976704bdd8275a54b9e939e443d622e78e5439015948fd277697a658dc8c76c5959ad12de9154952a498d61cbb8cf12437e0ef2614fd255c6c693627de0fa2f34c9bf6e8a3be6b5da4be70ae70ec2b2260d489d5dac9b2c3036ccb499dced69a8bc299b00cbf4dbd272d537d37a6769080528c014317ff4baa17ae4e35063a811b32a63f899f529c0b51e8edcbf2a18bbdb4a984fe33ea3a274b6285f3e719d78d1bebe550aaad86c012535d0a9e61ef78d18a460ce413b44bbdcd02f7761d41a7d67cadf49c5d1166d3ee77859dc023fed01e331e3e64d7d9d1754e9588078d5efbb4317aa504360d8d68e9856943fd672a66f8dfd562602d958b858f4d4a9afd1eac5f8c83e4d001ced818fa1680fe9127e850df33b6a03dec960737a093a1468ee83126b3570ab40aa4c059313d78573cdf5e6293ccc0c2a882b22692c1c03fa699aeeb31229d99d49d8785ac6cc37c6e50ecdd445a7d4e2420dce1beb8dda1f76b965433e5ee3d90f530c828586f178b94107ca976458f5e6d93f44e3b7abd9f0d42297311ae37c080a666d1280e4033094555e87b32921769007d2576b18b300a3c1249f9d8ece5b813831f03dd42813a1dc95832e6636b2b1e5e87340d225ca6d5600f15b34af57061e9d9eb12945b30a5c31a9d2a6589a81e50e2eeb6a5a495cb3bf6de80da64c3ee898bcda4c02074067ddb645ac7749e7f295e33ae98a400c688eedbf2ebcb9390b26dc9f0a53c8f45c314c4ed16b5826e025ea519860de858ca5fa709fb15fdb776a062a51d32327e6247b8085042c302ae3efef93a94d7793aa37f96d9831d2ac5b0c496b1f4c6b2df1b711502c7a2bde44904f43a812c291437a90456880864a314a63721eaf8b4ef415b6c85d3f9c1bd4eedee09f8a98d25b5fc2aee556b2910f572736b9cc5124", 0x2b4}], 0x2)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)="9b", 0x1}], 0x1)

2.21121974s ago: executing program 2 (id=247):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x84, 0x0, 0x7, 0x0, @loopback, @mcast2={0xff, 0x3}, 0x20, 0x40, 0x1, 0x3}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c00020036e8040ed82e"], 0xb4}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000001c0), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="a76ff4ffffff", @ANYRES16=0x0, @ANYBLOB="010626bd7000fedbdf25050000001400018005000200d0000000060001000a00000004000180080003000800000008000300000000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20041801}, 0x40010)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4)

2.160082469s ago: executing program 2 (id=249):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40010)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091401001000000002000000080021"], 0x18}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)={0x1b8, 0x9, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'dvmrp0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7fff}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf}}]}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xd7}}]}, @IPSET_ATTR_ADT={0xb8, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x46b}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge_slave_1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, '}@]@\'\\\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_team\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0x1}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x60004}, 0x20000805)
sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

1.441153407s ago: executing program 0 (id=256):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900f8010000000000000058c07ac949300e0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)='e', &(0x7f0000000000)=""/6, 0x2}, 0x20)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r1, 0x1ad72f7)
socket$netlink(0x10, 0x3, 0x0)
accept4(r1, 0x0, 0x0, 0x80000)
r2 = accept4$netrom(r1, 0x0, 0x0, 0x80000)
writev(r2, &(0x7f0000001b40)=[{&(0x7f0000000600)="16f68b2017beba386312104a1458eb86de", 0x11}, {&(0x7f0000000640)="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", 0x2b4}], 0x2)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="9b", 0x1}], 0x1)

1.262613956s ago: executing program 2 (id=258):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', <r2=>0x0, 0x1, 0x80, 0x7fffffff, 0x8b4, {{0x47, 0x4, 0x3, 0x6, 0x11c, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @multicast2, {[@cipso={0x86, 0x19, 0x3, [{0x2, 0x6, "ac3e8ce2"}, {0xa, 0xd, "8b50113b96b3e4d7aa074b"}]}, @end, @timestamp_prespec={0x44, 0x34, 0x80, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@multicast2, 0x8}, {@broadcast, 0x3}, {@multicast1, 0x6}, {@local, 0x3}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0x54, 0xa0, 0x1, 0x9, [{@multicast2, 0x1}, {@broadcast, 0x913}, {@multicast1, 0x86}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf1a}, {@multicast2, 0x8}, {@multicast1, 0x475}, {@empty, 0xfff}, {@rand_addr=0x64010101, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0x1}]}, @generic={0x86, 0xa, "33ec6440a1fbe01c"}, @generic={0x44, 0xf, "24d4a321acfaf6b2b6bac2ece6"}, @timestamp_addr={0x44, 0x2c, 0x9d, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x200}, {@rand_addr=0x64010100, 0x5}, {@broadcast, 0x9f}, {@empty, 0x2}, {@remote, 0x2}]}, @timestamp={0x44, 0x20, 0x15, 0x0, 0x4, [0x3, 0x800, 0x4495ad77, 0x7, 0x401, 0x3, 0x0]}, @noop]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r4=>0x0, 0x29, 0x2, 0x3, 0x2, 0x10, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8, 0x20, 0x5, 0x7f}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', <r5=>0x0, 0x29, 0xfa, 0x5, 0x1, 0x11, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x10, 0x80, 0x6, 0x10}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040884}, 0x24000080)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x90, r6, 0x100, 0x1, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfd5}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xfffffff8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2008001}, 0x1)
r7 = accept4(r0, &(0x7f0000000700)=@qipcrtr, &(0x7f0000000780)=0x80, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r9, 0x332, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x11)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x8ac1dfeb4a557423)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a00)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r10, r11}, 0xc)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b80)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000001dc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d80)={&(0x7f0000000bc0)={0x118c, r12, 0xb00, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x81, 0x4c}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1148, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1130, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xce, 0x6, "d9812419b06f9f10c5abfb5cef62255b0bf4680cb513243bd330e1832b597e28ccddfd556d7efbd7c2b732ac8f50738fc64a73fe037114b29451c6bc2e1b048edcde42e5d4179099e21c6e5d22d384629076570c7aa62eeaeba1211aacc78ffd61c2243e3a874bdc4e89292c7516e3a8f0c5889fc3ea8053f689ed1564d3c16fb0df5223d3b6bcae46fd35f21a6bf8818b61bf094f3d6eb9207e720affd21ae1558e46e860f96a07544a7e87a09d04c0311eb05f175265e3cf33db22b828771800bfdf8fd59f29123d81"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x18, 0x8, {0x8, 0x730f, "d480c15848da01de9b740166"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x1, 0xb6, 0x6}}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x4e7}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x9, 0x81}}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x1004, 0xa, "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"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x6, 0x5, 0xf}}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x4}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0x118c}, 0x1, 0x0, 0x0, 0x800}, 0xc4850)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000002140)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002100)={&(0x7f0000001e40)={0x284, r12, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x16, 0x3, 0x1b, 0x2, 0x9, 0x36, 0x4, 0x60, 0x18, 0xc, 0x12, 0x18, 0x48, 0x60, 0x5, 0x12, 0x36, 0x18, 0x30, 0x6c, 0x2, 0x36, 0x1c, 0x4, 0xb, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x25, 0x0, 0x8, 0xffff, 0x8, 0x6029, 0x1, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xcc3f, 0x8000, 0x7, 0x0, 0x4, 0x7, 0xa3]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x2, 0xc, 0x32, 0x12, 0xb, 0x3, 0x1, 0x3, 0x13, 0x18, 0x9, 0x36, 0x60, 0x16, 0x2, 0x1, 0x1b, 0x4, 0x12]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0xa}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x2, 0x8}, {0x7, 0xa}, {0x0, 0x2}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0x1c}, {0x0, 0x4}, {0x2, 0x6}, {0x7, 0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x2}, {0x6, 0x1}, {0x2, 0x8}, {0x6, 0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x7, 0xa}, {0x5, 0x9}, {0x2, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x6}, {0x5, 0x7}, {0x3, 0x6}, {0x5}, {}, {0x3, 0x3}, {0x4, 0xa}, {0x4, 0x7}, {0x5, 0x8}, {0x6, 0x5}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x3}, {0x0, 0x1}, {0x3, 0x5}, {0x6, 0x3}, {0x1, 0x5}, {0x2, 0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x10, 0x81, 0xd11, 0x7, 0x5, 0x7, 0x80]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x5, 0x24, 0x48, 0x16, 0x4, 0x2, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x8, 0x7, 0x621, 0x4da, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x7, 0x6, 0x7, 0x4, 0x6, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x2}, {0x0, 0x3}, {0x4, 0xa}, {0x1, 0x4}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x7}, {0x0, 0x6}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x3}, {0x4}, {0x6, 0x8}, {}, {0x1, 0x4}, {0x7, 0x8}, {0x4, 0x8}, {0x3, 0x4}, {0x6, 0x4}, {0x3, 0x7}, {0x6, 0xa}, {0x4}, {0x1, 0x4}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0x4}, {0x7, 0x3}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x6}, {0x3, 0x9}, {0x4}, {0x2, 0x4}, {0x4, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x3}, {0x5, 0x1}, {0x5, 0x7}, {0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x6, 0xa}, {0x2, 0xa}, {0x3, 0x6}, {0x0, 0x8}, {0x2, 0x1}, {0x3, 0x6}, {0x6, 0x3}, {0x6, 0x6}, {0x0, 0x2}, {0x2}, {0x6}, {0x2, 0x5}, {0x5, 0x1}, {0x3, 0xa}, {0x2, 0x3}, {0x3, 0x5}, {0x5, 0x9}, {0x2, 0x9}, {0x6, 0xa}, {0x5, 0x9}, {0x7, 0x7}, {0x1}, {0x7, 0x9}, {0x0, 0x7}, {0x7, 0xa}, {0x2, 0x9}, {0x4, 0x4}, {0x2, 0xa}, {0x0, 0x1}, {0x2, 0x3}]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x1}, {0x3, 0xa}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x3}, {0x3, 0x2}, {0x7}, {0x5, 0x9}, {0x5, 0x7}, {0x3, 0xa}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x4}, {0x1, 0x1}, {0x7, 0x8}, {0x7, 0x3}, {0x6, 0x1}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x5, 0x2}, {0x6}, {0x6, 0x2}, {0x7, 0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfff7, 0xc, 0x2f7e, 0x1, 0x40, 0x9, 0x3]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x2}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x7}, {0x4, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x7, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0xe95, 0x4bb, 0x1, 0x13, 0x0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc28, 0x2, 0x2, 0x800, 0x0, 0x449, 0xff80, 0x7]}}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x41}, 0x44085)
ioctl$FICLONE(r8, 0x40049409, r8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000002180)={<r14=>0x0, 0x40}, &(0x7f00000021c0)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000002200)={<r15=>r14, 0xcf, "4677b26ff37734eaa23cb770523f1770bbc74103e70538f9862d0c075868cc51f906c15dd7123f6650654db68322df4c02f0e4278cde4def5d49e47da20ad061461c54d38b488955102c3e4ea1ece6048662290ad127245e60b7296f05ac7108a63331456b8c350582351170a9321471ae3d199e1af90e63b13007ebdc38b0f48a10c7af7ca578afe641611af14a0edabf653f07ac4dfa572087f91edaba0237951f21d4d2366e8af3a41292ae9c61e1b673158bdb86a9df4a87f89598e6c26ecd203aa4f2cbcbd7193c9ae4ce084c"}, &(0x7f0000002300)=0xd7)
r16 = getpid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x40, r12, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x21}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_PID={0x8, 0x52, r16}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x80)
r17 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000002440)={0x0, 0x0, 0x4, 0xeae, <r18=>r15}, &(0x7f0000002480)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r17, 0x84, 0x77, &(0x7f00000024c0)={r18, 0x3, 0x2, [0x0, 0x5]}, 0xc)
ioctl$sock_SIOCSIFBR(r10, 0x8941, &(0x7f0000002540)=@add_del={0x2, &(0x7f0000002500)='nr0\x00'})

1.130823396s ago: executing program 2 (id=259):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10)
sendmsg$nl_netfilter(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x18, 0x4, 0x1, 0x5, 0x0, 0x0, {}, [@generic='}']}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) (async)
sendmsg$nl_netfilter(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x18, 0x4, 0x1, 0x5, 0x0, 0x0, {}, [@generic='}']}, 0x18}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) (async)

1.128997742s ago: executing program 2 (id=260):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_GATEWAY={0x14, 0x5, @local}]}, 0x30}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x7}}}, 0x24}}, 0x0)

628.566452ms ago: executing program 1 (id=265):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000fcb000)=0xfffffffc, 0x4) (async)
r2 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r3, 0x0) (async)
listen(r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000", @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) (async)
recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10051, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4)
unshare(0x22020600) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001440)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="1000"/12, @ANYRES32, @ANYBLOB="e7bea6f2ca4a037eb265c83d122f44302b51a8b7e5e15c096e054ea34811f7ce370a693e1412e4e1d78b7edb6881e900a1c84700cdbee3f1facac5ab2a08a488413c34", @ANYRES64=0x0], 0x20) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x2010, 0xffffffffffffffff, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7}, 0x18) (async)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000003000)={0x1}, 0x2) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=ANY=[@ANYBLOB="700000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05220000000000001400128009000100766c616e00000000040002803c0012800b00010069703667726500002c000280060010004e230000080004000900000008000d000500000006000f000600000008001400ff070000dab5bf387dd1612d379996f55c496316ca9fafafd9f277739f746f34b692a9444849147a8598de0e3403ef7f8eab9c519842a2acad93660c107bc9d9453e4baaede3ef8fd65cd4862374a78f13d247e75ad82430a5d691eea8c6ede25ba1cf3f5d753bdea0e3fc6682fdd265483b7dea839f928ed649312fef627a5c626ba1547791eecd39ddb1ee07fb45ffd5aefb208c0df298ae3faa2153e4ab3f856dbcecf5b0815ea116e2"], 0x70}, 0x1, 0xba01}, 0x0)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000810}, 0x0)

580.340222ms ago: executing program 1 (id=266):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'wlan1\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @udp_ip4_spec={@remote, @broadcast, 0x4e23, 0x4e23, 0xc}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ether_spec={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @random="72094a4d2c9f", 0x4}, {0x0, @empty, 0x6, 0x6, [0x2, 0x9]}, 0xff, 0x3}}}) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'wlan1\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @udp_ip4_spec={@remote, @broadcast, 0x4e23, 0x4e23, 0xc}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ether_spec={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @random="72094a4d2c9f", 0x4}, {0x0, @empty, 0x6, 0x6, [0x2, 0x9]}, 0xff, 0x3}}})

579.55472ms ago: executing program 0 (id=267):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
shutdown(r1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb0}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0xb704, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x7}]}}}]}, 0x44}, 0x1, 0xba01}, 0x810)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x5, 0x1000}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
socket$alg(0x26, 0x5, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r8, &(0x7f0000000000)="3f000000010040", 0x7)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x80586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x29}]}}}]}, 0x40}}, 0x0)

579.18754ms ago: executing program 1 (id=268):
r0 = socket(0x10, 0x803, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000fd00", @ANYRES16=r2, @ANYBLOB="59bb28bd7000010000000100000008002b01ffffffff08000300", @ANYRES32=0x0, @ANYBLOB="0c0099000800000013000000"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x174, r2, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x59}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x55}, @NL80211_ATTR_FRAME={0x13e, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_a, @broadcast, @initial, {0x1, 0xa}, @device_b}, @random="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"}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf9}]}, 0x174}, 0x1, 0x0, 0x0, 0x1}, 0xc0d0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20)
sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0x40c0)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000080)=0xf3e, 0x4)
socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)

450.246524ms ago: executing program 1 (id=269):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00b235"], 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x12, @dev={0xfe, 0x80, '\x00', 0x34}, @local, 0x700, 0x40, 0x5, 0x1}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0)
r5 = socket(0xa, 0x2, 0x0)
getpeername$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYBLOB="0395d29bd7a74875760e32a6c6674d05ed55ef0805b383b08c3f5a1a6adf79e898d09bdb2b92d63ee487758c0be79dda11fca9cbe76c09d7be5bdc05cfcd9a42ec5fcb445e328cd189b4d92ac1145f9faa4c62c71f2bd2707e1d92307a0f42558693429d44661315b3ec677b260cc77cbff5aaa18722c0ec237cac3145d48619e41f8cdcacfd8fa2044f40e88e5c38335d13055875ffbf27b19beeb7c7bd12b8b147e3638720c6377f20c000", @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000a40)=""/4096, 0x1000, <r7=>0x0, 0x0}}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r9, &(0x7f00000000c0), 0x9)
r10 = socket(0x10, 0x3, 0x0)
connect$bt_sco(r10, &(0x7f0000000340)={0x1f, @none}, 0x8)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r11, 0x29, 0xf, 0xb, 0x1, 0x10, @private0, @mcast2, 0x10, 0x7, 0x5b, 0x4}})
getsockname$netrom(r8, &(0x7f0000000840)={{0x3, @null}, [@remote, @default, @rose, @netrom, @remote, @default, @netrom, @null]}, &(0x7f00000008c0)=0x48)
sendfile(r9, r8, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000020000000000000000800018150000", @ANYRESDEC=0x0, @ANYBLOB="00000000e800000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x5b8c, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @xdp, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ff00000000000000ffffffff1801000020696c250000000000202020fb1af8ff00000002bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000400000000"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xf, 0x101, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x7b3}, 0x94)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r12, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4)

369.37902ms ago: executing program 0 (id=270):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getpeername$netrom(r0, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @null, @netrom, @rose, @null, @default, @bcast]}, &(0x7f0000000080)=0x48) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @private0, 0x5d09}, 0x1c) (async)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)=0xd23) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={<r4=>0x0, 0xfffffff7, 0x10}, &(0x7f0000000240)=0xc)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)={r4, 0x2, 0x4, [0x8, 0x9, 0x2, 0x9d5]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={<r5=>r4, 0x16, "bef42202940276e8e792093fea4acd5ca6d4057ce089"}, &(0x7f0000000340)=0x1e)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000380)={<r6=>r5, 0x7}, &(0x7f00000003c0)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000400)={r6, 0x4, 0x5, 0xdd, 0x10000000, 0x10000}, 0x14)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000440)={0x0, 'batadv0\x00', {}, 0x5}) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={r4, 0x97, "aa58e5720576d520d562bc3d2d6db96fcb1d829cae5a81218eaecf67ad90019df199c459bf9041cc204e7fb522004db4f9d3ccf2f851dda98a4eb1d929cf9709694d156a3f9e89dcb6314cf771c18aaeac94822203dfd234c53aefe2249b32da688cddc4bc1d23267a8c5022f9a10ba9b1b09f495714a0b4818b9facb37aab2b17294b556d38952c9f46a0ce924bd2a33d41741d063b66"}, &(0x7f0000000540)=0x9f) (async)
socketpair(0x0, 0x800, 0x401, &(0x7f0000000580)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', <r11=>0x0}) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x94, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2400c080}, 0x800) (async)
connect$can_bcm(r8, &(0x7f0000000880)={0x1d, r12}, 0x10) (async)
r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r9)
sendmsg$IPVS_CMD_DEL_DEST(r9, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xdc, r14, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x14}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x77b07130}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f0000000ac0)=0x8, 0x8) (async)
getsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4)

368.759521ms ago: executing program 1 (id=271):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}], 0x1, 0x40000)
shutdown(r1, 0x1)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000080)="aa8e0cf56164be5b", 0x8)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30, 0x4080}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_IFALIASn={0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x20ca}]}, 0x40}}, 0x0)

238.690094ms ago: executing program 0 (id=272):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket(0x10, 0x803, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8b53b0d1a14cd4c2, 0x8010, r0, 0x83284000)
r1 = socket$alg(0x26, 0x5, 0x0) (async)
r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000003c0), &(0x7f0000000440)=0x6) (async)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f00000002c0)=""/4, &(0x7f0000000300)=0x4) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r4, 0x0, 0x417}, 0x18) (async)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="15", 0x1}], 0x1}, 0x4000080) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e25, 0x0, 0x3, 0x0, 0x2}, {0x2, 0x53, 0xfff, 0x0, 0xfffffffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@remote, 0x0, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0x0, 0x3439, 0x400009}}, 0xe8) (async)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) (async)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0xffff}, 0x5c) (async)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}, 0x1c) (async)
bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) (async)
accept4(r1, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000002daad000a"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)

237.901728ms ago: executing program 1 (id=273):
socket$kcm(0x10, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900f8010000000000000058c07ac949300e0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)='e', &(0x7f0000000000)=""/6, 0x2}, 0x20)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r1, 0x1ad72f7)
socket$netlink(0x10, 0x3, 0x0)
accept4(r1, 0x0, 0x0, 0x80000)
r2 = accept4$netrom(r1, 0x0, 0x0, 0x80000)
writev(r2, &(0x7f0000001b40)=[{&(0x7f0000000600)="16f68b2017beba386312104a1458eb86de", 0x11}, {&(0x7f0000000640)="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", 0x2b4}], 0x2)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="9b", 0x1}], 0x1)

180.700919ms ago: executing program 0 (id=274):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000200)='cgro\x1d\x9b\xebup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001240)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [{{0x254, 0x1, {{}, 0xe, 0x8, 0x4, 0x80, 0x13, 'syz1\x00', "fdc9945bc96dbd64febf6f2c4956f406e0f9fec8804f96f5b909c1909ed4d41d", "48f0a2d5623626fc0fcb41d811a5166f663f0cd9fd79c45091e694c1f967edaf", [{0x1, 0xfffc, {0x0, 0x2}}, {0x4, 0x4, {0x2, 0x6b}}, {0x7f, 0x8, {0x3, 0xcc2e56ba}}, {0x100, 0x7, {0x0, 0x7}}, {0x357, 0x4000, {0x2, 0xc}}, {0xfff0, 0x4, {0x3, 0x7}}, {0x0, 0x0, {0x0, 0x8}}, {0x0, 0x6, {0x2, 0x1ff}}, {0x80, 0xc, {0x0, 0xe28}}, {0x1, 0x8d, {0x3}}, {0x675, 0x80}, {0x8, 0xfffc, {0x1cda161c84f61b9d, 0x7f}}, {0x100f, 0x1, {0x0, 0x4}}, {0x917, 0x0, {0x1, 0x6}}, {0x9, 0x1, {0x0, 0x200}}, {0x3, 0xc, {0x2, 0x7}}, {0x40, 0xc18b, {0x2, 0x183d}}, {0x1, 0x0, {0x1, 0x2}}, {0xd0, 0x0, {0x3, 0x1}}, {0x10, 0x3, {0x0, 0xa1}}, {0xfffa, 0x8001, {0x0, 0x3}}, {0x3, 0x200, {0x0, 0x4}}, {0x7ff, 0x1, {0x3, 0x1}}, {0xf37a, 0xffff, {0x1, 0xfffffffd}}, {0xefb, 0x1, {0x3}}, {0x1000, 0x8, {0x2, 0x800}}, {0x2, 0x7, {0x3, 0x7}}, {0x7, 0x4, {0x2, 0x15}}, {0x0, 0x7, {0x0, 0x8}}, {0x1, 0x6, {0x1, 0x6}}, {0x6, 0x3, {0x2, 0xfd64}}, {0x7ff, 0x8001, {0x3, 0x4}}, {0x6, 0x9, {0x1, 0x9}}, {0x7, 0x100, {0x3, 0xcc33}}, {0x825, 0x2, {0x0, 0x6}}, {0x8000, 0x8, {0x1, 0x8}}, {0x9, 0x6, {0x0, 0x1}}, {0x6, 0x957, {0x1, 0x2}}, {0x1000, 0x3, {0x2, 0x20000000}}, {0x7, 0x5, {0x0, 0x1ff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 0 (id=275):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
sendmmsg(r2, &(0x7f0000008c40)=[{{0x0, 0x0, &(0x7f0000003b80)=[{0x0}, {&(0x7f00000028c0)="ac", 0x1}], 0x2, &(0x7f00000091c0)=ANY=[], 0x4d8}}, {{0x0, 0x0, &(0x7f0000004640)}}], 0x2, 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44354' (ED25519) to the list of known hosts.
syzkaller login: [   56.600010][ T5832] cgroup: Unknown subsys name 'net'
[   56.719086][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.723548][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.876057][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.232126][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.235137][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.239176][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.241898][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.244724][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.247910][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.250919][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.282490][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.287507][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.291184][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.306860][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.310444][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.314325][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.322001][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.325869][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.520838][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.624161][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   64.708764][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.711368][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.714993][ T5847] bridge_slave_0: entered allmulticast mode
[   64.718288][ T5847] bridge_slave_0: entered promiscuous mode
[   64.723319][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.727605][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.730712][ T5847] bridge_slave_1: entered allmulticast mode
[   64.733550][ T5847] bridge_slave_1: entered promiscuous mode
[   64.780000][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.790108][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.816456][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.843392][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.845771][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.848070][ T5846] bridge_slave_0: entered allmulticast mode
[   64.850929][ T5846] bridge_slave_0: entered promiscuous mode
[   64.860324][ T5847] team0: Port device team_slave_0 added
[   64.869373][ T5847] team0: Port device team_slave_1 added
[   64.880108][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.882295][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.885291][ T5846] bridge_slave_1: entered allmulticast mode
[   64.888187][ T5846] bridge_slave_1: entered promiscuous mode
[   64.932786][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.935464][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.943522][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.949101][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.951390][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.960285][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.982318][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.988948][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.025083][ T5846] team0: Port device team_slave_0 added
[   65.056806][ T5846] team0: Port device team_slave_1 added
[   65.069367][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.071825][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.074759][ T5855] bridge_slave_0: entered allmulticast mode
[   65.077565][ T5855] bridge_slave_0: entered promiscuous mode
[   65.085112][ T5847] hsr_slave_0: entered promiscuous mode
[   65.087609][ T5847] hsr_slave_1: entered promiscuous mode
[   65.108438][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.111379][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.114929][ T5855] bridge_slave_1: entered allmulticast mode
[   65.118655][ T5855] bridge_slave_1: entered promiscuous mode
[   65.152318][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.155317][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.167581][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.196597][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.199416][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.209959][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.218503][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.252118][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.291952][ T5846] hsr_slave_0: entered promiscuous mode
[   65.294876][ T5846] hsr_slave_1: entered promiscuous mode
[   65.297338][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   65.299321][ T5846] Cannot create hsr debugfs directory
[   65.317728][ T5855] team0: Port device team_slave_0 added
[   65.322617][ T5855] team0: Port device team_slave_1 added
[   65.396907][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.399668][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.409823][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.446957][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.449715][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.459615][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.582359][ T5855] hsr_slave_0: entered promiscuous mode
[   65.586057][ T5855] hsr_slave_1: entered promiscuous mode
[   65.588820][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   65.591044][ T5855] Cannot create hsr debugfs directory
[   65.749843][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.774268][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.789198][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.796307][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.858226][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.863380][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.870659][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.895863][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.962293][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.985321][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.993532][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.005417][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.065337][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.100268][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.121829][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.124426][ T5225] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.138785][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.157811][  T487] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.160753][  T487] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.187568][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   66.203556][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.206613][ T5225] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.227282][  T487] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.229697][  T487] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.272071][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.320893][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   66.324834][   T54] Bluetooth: hci1: command tx timeout
[   66.327339][ T5852] Bluetooth: hci0: command tx timeout
[   66.348752][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.351705][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.366767][  T487] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.369729][  T487] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.409258][ T5852] Bluetooth: hci2: command tx timeout
[   66.460812][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.496714][ T5847] veth0_vlan: entered promiscuous mode
[   66.503091][ T5847] veth1_vlan: entered promiscuous mode
[   66.529048][ T5847] veth0_macvtap: entered promiscuous mode
[   66.546842][ T5847] veth1_macvtap: entered promiscuous mode
[   66.598484][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.610081][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.622436][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.660342][ T5735] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.667959][ T5735] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.677490][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.682201][ T5735] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.688111][ T5735] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.809917][ T5846] veth0_vlan: entered promiscuous mode
[   66.819951][ T5855] veth0_vlan: entered promiscuous mode
[   66.826016][ T2181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.830846][ T2181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.843555][ T5846] veth1_vlan: entered promiscuous mode
[   66.866360][ T5855] veth1_vlan: entered promiscuous mode
[   66.885229][ T2181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.889924][ T2181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.932672][ T5846] veth0_macvtap: entered promiscuous mode
[   66.946806][ T5855] veth0_macvtap: entered promiscuous mode
[   66.952731][ T5846] veth1_macvtap: entered promiscuous mode
[   66.976020][ T5855] veth1_macvtap: entered promiscuous mode
[   66.986211][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.000426][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.009670][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.035185][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.061273][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.068703][ T5896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.072162][ T5896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.096915][ T5896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.105181][ T5912] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.107562][ T5896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.164425][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.187307][ T5896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.191501][ T5913] bridge_slave_1: left allmulticast mode
[   67.195762][ T5913] bridge_slave_1: left promiscuous mode
[   67.198704][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.209491][ T5913] bridge_slave_0: left allmulticast mode
[   67.211791][ T5913] bridge_slave_0: left promiscuous mode
[   67.216237][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.310448][ T5896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.331587][ T5896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.338527][ T5735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.428078][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.431279][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.472386][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.477946][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.508287][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.512697][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.558417][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.561690][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.638754][ T5917] bond0: (slave bond_slave_1): Releasing backup interface
[   67.730839][ T5921] warning: `syz.0.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.741689][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4'.
[   67.785857][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.788391][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.841175][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.849611][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.944221][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.947962][ T5896] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.964827][ T5896] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.968444][ T5896] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.032847][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4'.
[   68.064178][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   68.066997][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4'.
[   68.096190][ T5931] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5'.
[   68.333538][ T5950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'.
[   68.387888][ T5955] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.397619][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.406074][ T5852] Bluetooth: hci0: command tx timeout
[   68.408289][ T5852] Bluetooth: hci1: command tx timeout
[   68.484154][   T54] Bluetooth: hci2: command tx timeout
[   68.505160][ T5957] gretap1: entered promiscuous mode
[   68.867849][ T6009] netlink: 'syz.0.12': attribute type 1 has an invalid length.
[   68.891948][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12'.
[   68.922519][ T6009] veth3: entered promiscuous mode
[   68.938775][ T6005] tipc: Started in network mode
[   68.940986][ T6005] tipc: Node identity 922a31196d7, cluster identity 4711
[   68.944926][ T6005] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.948263][ T6005] syzkaller0: entered promiscuous mode
[   68.950474][ T6005] syzkaller0: entered allmulticast mode
[   68.965629][ T6005] tipc: Resetting bearer <eth:syzkaller0>
[   68.973009][ T6001] tipc: Resetting bearer <eth:syzkaller0>
[   68.983984][ T6001] tipc: Disabling bearer <eth:syzkaller0>
[   69.192542][ T6021] pim6reg: entered allmulticast mode
[   69.195959][ T6021] pim6reg: left allmulticast mode
[   69.527109][ T6028] bond2: entered promiscuous mode
[   69.530080][ T6028] bond2: entered allmulticast mode
[   69.541248][ T6028] 8021q: adding VLAN 0 to HW filter on device bond2
[   69.650564][ T6037] netlink: 'syz.2.19': attribute type 4 has an invalid length.
[   69.663323][ T6037] bridge0: entered allmulticast mode
[   69.760929][ T6041] ieee802154 phy0 wpan0: encryption failed: -22
[   69.829196][ T6045] dvmrp1: entered allmulticast mode
[   69.833015][ T6045] dvmrp1: left allmulticast mode
[   70.351006][ T6052] gretap0: entered promiscuous mode
[   70.358357][ T6052] batman_adv: batadv0: Adding interface: macvlan2
[   70.360378][ T6052] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.368955][ T6052] batman_adv: batadv0: Interface activated: macvlan2
[   70.478782][ T6059] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET)
[   70.484353][   T54] Bluetooth: hci1: command tx timeout
[   70.484769][ T5852] Bluetooth: hci0: command tx timeout
[   70.564174][ T5852] Bluetooth: hci2: command tx timeout
[   70.839776][ T6075] Zero length message leads to an empty skb
[   71.032471][ T6091] netlink: 'syz.1.37': attribute type 10 has an invalid length.
[   71.043437][ T6092] bridge1: entered allmulticast mode
[   71.047751][ T6088] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.072882][ T6091] team0: Port device dummy0 added
[   71.080858][ T6091] netlink: 'syz.1.37': attribute type 10 has an invalid length.
[   71.090335][ T6091] team0: Port device dummy0 removed
[   71.098423][ T6091] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   71.121795][ T6097] IPVS: Error joining to the multicast group
[   71.127906][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.130309][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.797420][ T6091] syz.1.37 (6091) used greatest stack depth: 18744 bytes left
[   71.941544][ T6116] syzkaller1: entered promiscuous mode
[   71.943412][ T6116] syzkaller1: entered allmulticast mode
[   72.036308][ T6118] vlan2: entered allmulticast mode
[   72.038185][ T6118] macvtap0: entered allmulticast mode
[   72.040129][ T6118] veth0_macvtap: entered allmulticast mode
[   72.119507][ T6120] netlink: 'syz.0.44': attribute type 1 has an invalid length.
[   72.287730][ T6128] __nla_validate_parse: 11 callbacks suppressed
[   72.287745][ T6128] netlink: 52 bytes leftover after parsing attributes in process `syz.0.46'.
[   72.300804][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.46'.
[   72.307330][ T6128] netlink: 52 bytes leftover after parsing attributes in process `syz.0.46'.
[   72.311241][ T6128] netlink: 52 bytes leftover after parsing attributes in process `syz.0.46'.
[   72.360781][ T6134] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   72.366800][ T6134] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   72.372091][ T6134] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   72.494923][ T6142] pim6reg1: entered promiscuous mode
[   72.497688][ T6142] pim6reg1: entered allmulticast mode
[   72.557935][ T6148] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.565407][ T5852] Bluetooth: hci0: command tx timeout
[   72.565440][   T54] Bluetooth: hci1: command tx timeout
[   72.644428][   T54] Bluetooth: hci2: command tx timeout
[   72.677062][ T6152] batadv_slave_1: entered promiscuous mode
[   72.682130][ T6148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.51'.
[   72.690236][ T6148] netlink: 'syz.2.51': attribute type 3 has an invalid length.
[   72.693062][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'.
[   72.713087][ T6148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'.
[   72.808475][ T6151] batadv_slave_1: left promiscuous mode
[   72.931665][ T6182] netlink: 'syz.2.56': attribute type 1 has an invalid length.
[   72.980628][ T6182] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.993425][ T6179] batman_adv: batadv0: Adding interface: ip6gretap1
[   73.002260][ T6179] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.013473][ T6179] batman_adv: batadv0: Interface activated: ip6gretap1
[   73.057142][ T6182] veth3: entered promiscuous mode
[   73.317674][ T6211] netlink: 68 bytes leftover after parsing attributes in process `syz.1.60'.
[   73.343988][ T6213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.59'.
[   73.358486][ T6213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.59'.
[   73.407450][ T6216] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   73.410375][ T6216] team0: Device ipvlan2 is already an upper device of the team interface
[   73.626925][ T6220] bond0: (slave bond_slave_0): Releasing backup interface
[   73.634486][ T6220] bond0: (slave bond_slave_1): Releasing backup interface
[   73.649549][ T6220] team0: Port device team_slave_0 removed
[   73.659469][ T6220] team0: Port device team_slave_1 removed
[   73.661891][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.668783][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.678091][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.681017][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.748645][ T6222] netlink: 'syz.2.63': attribute type 33 has an invalid length.
[   73.749032][ T6223] netlink: 'syz.2.63': attribute type 33 has an invalid length.
[   74.348590][ T6269] netlink: 'syz.1.76': attribute type 1 has an invalid length.
[   74.612408][ T6287] netlink: 'syz.1.81': attribute type 1 has an invalid length.
[   74.672291][ T6287] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.687718][ T6293] ieee802154 phy0 wpan0: encryption failed: -22
[   74.703492][ T6294] bond1: (slave ip6gretap1): making interface the new active one
[   74.708585][ T6294] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   74.757404][ T6287] veth3: entered promiscuous mode
[   74.791950][ T6294] erspan0: entered allmulticast mode
[   75.002393][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   75.115092][ T6326] bond3: entered promiscuous mode
[   75.117329][ T6326] bond3: entered allmulticast mode
[   75.119527][ T6326] 8021q: adding VLAN 0 to HW filter on device bond3
[   75.882339][ T6338] netlink: 'syz.2.94': attribute type 10 has an invalid length.
[   75.890746][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.906803][ T6338] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   75.947852][ T6342] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   76.110406][ T6353] sctp: [Deprecated]: syz.2.98 (pid 6353) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.110406][ T6353] Use struct sctp_sack_info instead
[   76.271194][ T6368] netlink: 'syz.1.102': attribute type 1 has an invalid length.
[   76.299827][ T6368] 8021q: adding VLAN 0 to HW filter on device bond4
[   76.307530][ T6368] bond2: (slave bond4): Enslaving as an active interface with an up link
[   76.337318][ T6368] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   76.348095][ T6368] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.436750][ T6374] dvmrp1: entered allmulticast mode
[   76.442482][ T6374] dvmrp1: left allmulticast mode
[   76.452389][ T6373] netlink: 'syz.2.103': attribute type 10 has an invalid length.
[   76.476512][ T6373] team0: Port device dummy0 added
[   76.480267][ T6373] netlink: 'syz.2.103': attribute type 10 has an invalid length.
[   76.487914][ T6373] team0: Port device dummy0 removed
[   76.496644][ T6373] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   76.766709][ T6383] netlink: 'syz.1.107': attribute type 1 has an invalid length.
[   76.855697][ T6385] netlink: 'syz.0.108': attribute type 10 has an invalid length.
[   76.862555][ T6385] team0: Port device dummy0 added
[   76.866923][ T6385] netlink: 'syz.0.108': attribute type 10 has an invalid length.
[   76.877253][ T6385] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   76.886666][ T6385] team0: Failed to send options change via netlink (err -105)
[   76.889120][ T6385] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   76.891937][ T6385] team0: Port device dummy0 removed
[   76.896464][ T6385] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   76.930249][ T6387] veth3: entered promiscuous mode
[   76.977318][ T6392] vlan2: entered promiscuous mode
[   76.979266][ T6392] bridge0: entered promiscuous mode
[   76.990444][ T6392] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   76.999745][ T6392] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   77.016354][ T6392] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   77.018574][ T6392] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   77.216173][ T6403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.308817][ T6414] x9: renamed from bridge_slave_0
[   77.312466][ T6414] netlink: 'syz.1.118': attribute type 5 has an invalid length.
[   77.365004][ T6416] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   77.369698][ T6416] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   77.374893][ T6416] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   77.458725][ T6426] 8021q: adding VLAN 0 to HW filter on device bond5
[   77.468849][ T6426] __nla_validate_parse: 18 callbacks suppressed
[   77.468865][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'.
[   77.499442][ T6426] bond6: entered promiscuous mode
[   77.501979][ T6426] 8021q: adding VLAN 0 to HW filter on device bond6
[   77.590290][ T6426] bond6 (unregistering): Released all slaves
[   77.637667][ T6431] veth3: entered promiscuous mode
[   77.646474][ T6434] bond5: (slave erspan0): making interface the new active one
[   77.650280][ T6434] bond5: (slave erspan0): Enslaving as an active interface with an up link
[   77.654080][ T6432] syzkaller1: entered promiscuous mode
[   77.656532][ T6432] syzkaller1: entered allmulticast mode
[   77.907383][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'.
[   77.982541][ T6461] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   78.050747][ T6465] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   78.053630][ T6465] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   78.893184][ T6485] veth0_to_bond: entered allmulticast mode
[   79.060471][ T6495] pimreg3: entered allmulticast mode
[   79.169371][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.142'.
[   79.172073][ T6505] netlink: 44 bytes leftover after parsing attributes in process `syz.0.142'.
[   79.180847][ T6505] bridge2: the hash_elasticity option has been deprecated and is always 16
[   79.625486][ T6533] tipc: Started in network mode
[   79.627426][ T6533] tipc: Node identity 5a2ef97fb5, cluster identity 4711
[   79.630329][ T6533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.633408][ T6533] syzkaller0: entered promiscuous mode
[   79.636642][ T6533] syzkaller0: entered allmulticast mode
[   79.651866][ T6535] tipc: Resetting bearer <eth:syzkaller0>
[   79.656409][ T6532] tipc: Resetting bearer <eth:syzkaller0>
[   79.663378][ T6532] tipc: Disabling bearer <eth:syzkaller0>
[   79.746351][ T6537] validate_nla: 4 callbacks suppressed
[   79.746377][ T6537] netlink: 'syz.1.152': attribute type 10 has an invalid length.
[   79.751831][ T6537] bond0: (slave dummy0): Releasing backup interface
[   79.758644][ T6537] team0: Port device dummy0 added
[   79.762365][ T6537] netlink: 'syz.1.152': attribute type 10 has an invalid length.
[   79.769687][ T6537] team0: Port device dummy0 removed
[   79.773256][ T6537] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   79.963227][ T6548] netlink: 'syz.2.156': attribute type 1 has an invalid length.
[   79.981465][ T6548] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.995666][ T6548] bond3: (slave ip6gretap1): making interface the new active one
[   79.998949][ T6548] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[   80.051101][ T6551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.055191][ T6551] syzkaller0: entered promiscuous mode
[   80.057260][ T6551] syzkaller0: entered allmulticast mode
[   80.061181][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'.
[   80.080828][ T6550] tipc: Resetting bearer <eth:syzkaller0>
[   80.093685][ T6550] tipc: Disabling bearer <eth:syzkaller0>
[   80.281572][ T6565] tipc: Failed to remove unknown binding: 66,1,1/0:3635214508/3635214510
[   80.288397][ T6565] tipc: Failed to remove unknown binding: 66,1,1/0:3635214508/3635214510
[   80.292122][ T6565] tipc: Failed to remove unknown binding: 66,1,1/0:3635214508/3635214510
[   80.391580][ T6567] syzkaller0: create flow: hash 812812862 index 1
[   80.640151][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'.
[   80.643007][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'.
[   80.646974][ T6572] netlink: 'syz.0.162': attribute type 4 has an invalid length.
[   80.676625][ T6572] bond3: entered promiscuous mode
[   80.679207][ T6572] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.750212][ T6577] netlink: 'syz.1.164': attribute type 1 has an invalid length.
[   80.781838][ T6577] 8021q: adding VLAN 0 to HW filter on device bond6
[   80.799487][ T6577] bond6: (slave geneve2): making interface the new active one
[   80.803627][ T6577] bond6: (slave geneve2): Enslaving as an active interface with an up link
[   80.807771][ T6575] netlink: 'syz.0.163': attribute type 6 has an invalid length.
[   80.811166][ T5896] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.819450][ T5896] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.833488][ T5896] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.842122][ T5896] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.959861][ T6586] syzkaller0: entered promiscuous mode
[   80.962166][ T6586] syzkaller0: entered allmulticast mode
[   81.043119][ T6593] Bluetooth: MGMT ver 1.23
[   81.050823][   T13] syzkaller0: tun_net_xmit 76
[   81.052866][   T13] syzkaller0: tun_net_xmit 48
[   81.075651][ T2301] syzkaller0: tun_net_xmit 76
[   81.141497][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'.
[   81.146039][ T6564] syzkaller0: delete flow: hash 812812862 index 1
[   81.390373][ T6601] netlink: 'syz.1.168': attribute type 5 has an invalid length.
[   81.525916][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'.
[   82.311066][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'.
[   82.337514][ T6617] netlink: 'syz.0.174': attribute type 13 has an invalid length.
[   82.426908][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.429852][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.505332][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.513561][ T6617] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.637434][ T6617] batman_adv: batadv0: Interface deactivated: macvlan2
[   82.645563][ T6617] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   82.692935][ T5735] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.699181][ T5735] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.701842][ T5735] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.713027][ T5735] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.843073][ T6648] netlink: 'syz.1.179': attribute type 1 has an invalid length.
[   82.859224][ T6649] dummy0: entered promiscuous mode
[   82.861133][ T6649] vlan2: entered promiscuous mode
[   82.906708][ T6648] 8021q: adding VLAN 0 to HW filter on device bond7
[   82.909657][ T6655] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[   82.919794][ T6655] bond7: (slave wlan0): Enslaving as an active interface with a down link
[   83.002672][ T6655] vlan2: entered allmulticast mode
[   83.006137][ T6655] veth1: entered allmulticast mode
[   83.009038][ T6655] bond7: (slave vlan2): Opening slave failed
[   83.124755][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   83.134128][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[   83.269422][ T6674] netlink: 'syz.2.181': attribute type 1 has an invalid length.
[   83.290941][ T6673] netlink: 52 bytes leftover after parsing attributes in process `syz.2.181'.
[   83.332099][ T6682] bridge1: entered allmulticast mode
[   83.541995][ T6694] syz_tun: entered allmulticast mode
[   83.580921][ T6694] dvmrp1: entered allmulticast mode
[   83.695603][ T6692] syz_tun: left allmulticast mode
[   83.873273][ T6725] erspan0: left allmulticast mode
[   83.909747][ T6725] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.913627][ T6725] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   83.916296][ T6730] netlink: 44 bytes leftover after parsing attributes in process `syz.0.188'.
[   83.944618][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   83.948213][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   83.951536][ T6729] netlink: 124 bytes leftover after parsing attributes in process `syz.2.189'.
[   83.990881][ T6729] 8021q: adding VLAN 0 to HW filter on device bond5
[   83.997624][ T6730] batadv_slave_0: entered promiscuous mode
[   83.999672][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'.
[   84.014356][    C1] Illegal XDP return value 16128 on prog  (id 46) dev lo, expect packet loss!
[   84.142317][ T6737] bridge0: port 3(syz_tun) entered blocking state
[   84.147180][ T6737] bridge0: port 3(syz_tun) entered disabled state
[   84.149857][ T6737] syz_tun: entered allmulticast mode
[   84.160934][ T6737] syz_tun: entered promiscuous mode
[   84.238558][ T6739] syzkaller0: entered promiscuous mode
[   84.240685][ T6739] syzkaller0: entered allmulticast mode
[   85.332470][ T6755] ip6tnl1: entered promiscuous mode
[   85.356642][ T6755] ip6tnl1: entered allmulticast mode
[   85.362430][ T6755] team0: Device ip6tnl1 is of different type
[   85.383118][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[   85.401431][ T6757] bridge0: port 1(macvlan2) entered blocking state
[   85.404789][ T6757] bridge0: port 1(macvlan2) entered disabled state
[   85.407645][ T6757] macvlan2: entered allmulticast mode
[   85.412376][ T6757] macvlan2: left allmulticast mode
[   85.505859][ T6765] netlink: 4420 bytes leftover after parsing attributes in process `syz.0.199'.
[   85.692890][ T6773] netlink: 76 bytes leftover after parsing attributes in process `syz.1.205'.
[   85.786798][ T6776] validate_nla: 3 callbacks suppressed
[   85.786809][ T6776] netlink: 'syz.1.207': attribute type 9 has an invalid length.
[   85.792071][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[   85.804283][ T6776] macvlan3: entered promiscuous mode
[   85.806360][ T6776] hsr0: entered promiscuous mode
[   85.808567][ T6776] macvlan3: entered allmulticast mode
[   85.810915][ T6776] hsr0: entered allmulticast mode
[   85.812994][ T6776] hsr_slave_0: entered allmulticast mode
[   85.823579][ T6776] hsr_slave_1: entered allmulticast mode
[   85.834950][ T6777] netlink: 'syz.2.206': attribute type 1 has an invalid length.
[   85.895748][   T24] IPVS: starting estimator thread 0...
[   85.984142][ T6781] IPVS: using max 44 ests per chain, 105600 per kthread
[   86.077711][ T6787] netlink: 'syz.2.211': attribute type 1 has an invalid length.
[   86.292738][ T6798] netlink: 'syz.2.213': attribute type 1 has an invalid length.
[   86.507183][   T48] cfg80211: failed to load regulatory.db
[   87.214867][ T6845] syz_tun: entered allmulticast mode
[   87.317053][ T6851] netlink: 'syz.0.229': attribute type 1 has an invalid length.
[   87.319938][ T6851] netlink: 'syz.0.229': attribute type 4 has an invalid length.
[   87.323448][ T6851] netlink: 'syz.0.229': attribute type 1 has an invalid length.
[   87.333712][ T6851] netlink: 'syz.0.229': attribute type 4 has an invalid length.
[   87.435327][ T6851] C: renamed from team_slave_0
[   87.438140][ T6855] netlink: 'syz.2.230': attribute type 4 has an invalid length.
[   87.439023][ T6851] netlink: 'syz.0.229': attribute type 1 has an invalid length.
[   87.444320][ T6851] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   87.521402][ T6864] syzkaller1: entered promiscuous mode
[   87.523302][ T6864] syzkaller1: entered allmulticast mode
[   87.582433][ T6866] openvswitch: netlink: Tunnel attr 16 has unexpected len 12 expected 0
[   87.588239][ T6866] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   87.807980][ T6876] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   87.816537][ T6876] 8021q: adding VLAN 0 to HW filter on device bond4
[   87.819387][ T5873] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   87.836227][ T6881] bridge0: port 1(veth0_to_bridge) entered blocking state
[   87.839488][ T6881] bridge0: port 1(veth0_to_bridge) entered disabled state
[   87.842371][ T6881] veth0_to_bridge: entered allmulticast mode
[   87.849527][ T6881] veth0_to_bridge: entered promiscuous mode
[   87.934969][ T5896] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   88.084791][ T6886] bridge0: port 2(erspan0) entered blocking state
[   88.092454][ T6886] bridge0: port 2(erspan0) entered disabled state
[   88.112133][ T6886] erspan0: entered allmulticast mode
[   88.117646][ T6886] erspan0: entered promiscuous mode
[   88.149101][ T6895] bond8: entered promiscuous mode
[   88.150985][ T6895] bond8: entered allmulticast mode
[   88.153175][ T6895] 8021q: adding VLAN 0 to HW filter on device bond8
[   88.342172][ T6907] can: request_module (can-proto-4) failed.
[   89.176569][ T6921] __nla_validate_parse: 16 callbacks suppressed
[   89.176581][ T6921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.247'.
[   89.181873][ T6921] netlink: 92 bytes leftover after parsing attributes in process `syz.2.247'.
[   89.260572][ T6925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.272406][ T6927] veth0_to_bond: left allmulticast mode
[   89.275442][ T6927] batadv_slave_0: left promiscuous mode
[   89.279327][ T6927] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   89.282300][ T6927] bond2: left promiscuous mode
[   89.285302][ T6927] bond2: left allmulticast mode
[   89.287345][ T6927] bridge1: left allmulticast mode
[   89.289131][ T6927] vlan2: left promiscuous mode
[   89.290643][ T6927] bridge0: left promiscuous mode
[   89.292562][ T6927] syzkaller0: left promiscuous mode
[   89.294517][ T6927] syzkaller0: left allmulticast mode
[   89.296311][ T6927] bond3: left promiscuous mode
[   89.345541][ T6925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.422787][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'.
[   89.433551][ T6925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.506675][ T6925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.580989][ T6944] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.253'.
[   89.629081][ T5735] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.641377][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.660522][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.678520][ T6952] tipc: Started in network mode
[   89.686368][ T6952] tipc: Node identity bac0e7f18e5d, cluster identity 4711
[   89.688986][ T6952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.691410][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.701333][ T6952] syzkaller0: entered promiscuous mode
[   89.703603][ T6952] syzkaller0: entered allmulticast mode
[   89.716773][ T6952] tipc: Resetting bearer <eth:syzkaller0>
[   90.247979][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'.
[   90.251927][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'.
[   90.258981][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'.
[   90.375697][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[   90.716523][  T793] tipc: Node number set to 882763761
[   90.881014][ T7004] netlink: 2 bytes leftover after parsing attributes in process `syz.1.268'.
[   90.964925][ T7006] tunl0: Caught tx_queue_len zero misconfig
[   91.431647][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'.
[   91.485953][ T7034] validate_nla: 5 callbacks suppressed
[   91.485973][ T7034] netlink: 'syz.0.275': attribute type 4 has an invalid length.
[   91.499565][ T7034] netlink: 'syz.0.275': attribute type 4 has an invalid length.
[   91.615258][    C1] 
[   91.616103][    C1] ============================================
[   91.618033][    C1] WARNING: possible recursive locking detected
[   91.619964][    C1] syzkaller #0 Not tainted
[   91.621847][    C1] --------------------------------------------
[   91.625242][    C1] syz.0.276/7036 is trying to acquire lock:
[   91.627517][    C1] ffff8880270cb558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[   91.631195][    C1] 
[   91.631195][    C1] but task is already holding lock:
[   91.634159][    C1] ffff88803ac0d958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[   91.638112][    C1] 
[   91.638112][    C1] other info that might help us debug this:
[   91.641286][    C1]  Possible unsafe locking scenario:
[   91.641286][    C1] 
[   91.644317][    C1]        CPU0
[   91.645692][    C1]        ----
[   91.647048][    C1]   lock(&qdisc_xmit_lock_key#4);
[   91.649034][    C1]   lock(&qdisc_xmit_lock_key#4);
[   91.651045][    C1] 
[   91.651045][    C1]  *** DEADLOCK ***
[   91.651045][    C1] 
[   91.654229][    C1]  May be due to missing lock nesting notation
[   91.654229][    C1] 
[   91.657398][    C1] 14 locks held by syz.0.276/7036:
[   91.659402][    C1]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390
[   91.663236][    C1]  #1: ffffc900001e0be0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0
[   91.666994][    C1]  #2: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x20c/0x1440
[   91.670663][    C1]  #3: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0
[   91.674272][    C1]  #4: ffffffff8e139f00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[   91.677254][    C1]  #5: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xf8/0x1a10
[   91.680994][    C1]  #6: ffffffff8e139f00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[   91.685000][    C1]  #7: ffff88811b2eb258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[   91.689965][    C1]  #8: ffff88803ac0d958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[   91.694003][    C1]  #9: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0
[   91.697532][    C1]  #10: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[   91.701554][    C1]  #11: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[   91.705116][    C1]  #12: ffffffff8e139f00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[   91.709086][    C1]  #13: ffff88803ad1a258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[   91.714066][    C1] 
[   91.714066][    C1] stack backtrace:
[   91.716439][    C1] CPU: 1 UID: 0 PID: 7036 Comm: syz.0.276 Not tainted syzkaller #0 PREEMPT(full) 
[   91.716459][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.716469][    C1] Call Trace:
[   91.716478][    C1]  <IRQ>
[   91.716486][    C1]  dump_stack_lvl+0x189/0x250
[   91.716511][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.716527][    C1]  ? __pfx__printk+0x10/0x10
[   91.716546][    C1]  ? __bfs+0x154/0x2a0
[   91.716562][    C1]  ? print_lock_name+0xde/0x100
[   91.716580][    C1]  print_deadlock_bug+0x28b/0x2a0
[   91.716595][    C1]  validate_chain+0x1a3f/0x2140
[   91.716609][    C1]  ? validate_xmit_xfrm+0xbf/0x1160
[   91.716631][    C1]  ? is_bpf_text_address+0x26/0x2b0
[   91.716650][    C1]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[   91.716681][    C1]  __lock_acquire+0xab9/0xd20
[   91.716735][    C1]  ? sch_direct_xmit+0x153/0x4b0
[   91.716754][    C1]  lock_acquire+0x120/0x360
[   91.716772][    C1]  ? sch_direct_xmit+0x153/0x4b0
[   91.716791][    C1]  _raw_spin_lock+0x2e/0x40
[   91.716809][    C1]  ? sch_direct_xmit+0x153/0x4b0
[   91.716824][    C1]  sch_direct_xmit+0x153/0x4b0
[   91.716843][    C1]  ? __pfx_sch_direct_xmit+0x10/0x10
[   91.716860][    C1]  __dev_queue_xmit+0x1857/0x3b50
[   91.716877][    C1]  ? arp_send_dst+0xa7/0x2d0
[   91.716892][    C1]  ? arp_solicit+0xc1d/0xe60
[   91.716906][    C1]  ? __neigh_event_send+0xf70/0x1560
[   91.716928][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[   91.716943][    C1]  ? __run_timer_base+0x61a/0x860
[   91.716961][    C1]  ? run_timer_softirq+0xb7/0x180
[   91.716978][    C1]  ? handle_softirqs+0x286/0x870
[   91.716993][    C1]  ? irq_exit_rcu+0x9/0x30
[   91.717004][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[   91.717020][    C1]  ? lock_acquire+0x175/0x360
[   91.717037][    C1]  ? unwind_next_frame+0xc2/0x2390
[   91.717052][    C1]  ? arch_stack_walk+0x11c/0x150
[   91.717068][    C1]  ? stack_trace_save+0x9c/0xe0
[   91.717083][    C1]  ? kasan_save_track+0x3e/0x80
[   91.717100][    C1]  ? __kasan_kmalloc+0x93/0xb0
[   91.717117][    C1]  ? __kmalloc_cache_noprof+0x230/0x3d0
[   91.717136][    C1]  ? ref_tracker_alloc+0x133/0x460
[   91.717155][    C1]  ? sk_alloc+0x1b1/0x370
[   91.717167][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[   91.717181][    C1]  ? __x64_sys_socket+0x7a/0x90
[   91.717198][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.717217][    C1]  ? __lock_acquire+0xab9/0xd20
[   91.717237][    C1]  ? NF_HOOK+0x9e/0x3a0
[   91.717254][    C1]  ? NF_HOOK+0x9e/0x3a0
[   91.717269][    C1]  NF_HOOK+0x310/0x3a0
[   91.717285][    C1]  ? __pfx_arp_xmit_finish+0x10/0x10
[   91.717301][    C1]  ? NF_HOOK+0x9e/0x3a0
[   91.717315][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[   91.717330][    C1]  ? arp_xmit+0x23/0x270
[   91.717348][    C1]  arp_xmit+0x16c/0x270
[   91.717363][    C1]  ? arp_xmit+0x23/0x270
[   91.717378][    C1]  arp_solicit+0xc1d/0xe60
[   91.717395][    C1]  ? arp_solicit+0x11a/0xe60
[   91.717409][    C1]  ? __pfx_arp_solicit+0x10/0x10
[   91.717427][    C1]  ? __neigh_event_send+0xf08/0x1560
[   91.717444][    C1]  ? __pfx_arp_solicit+0x10/0x10
[   91.717459][    C1]  __neigh_event_send+0xf70/0x1560
[   91.717480][    C1]  neigh_resolve_output+0x198/0x750
[   91.717499][    C1]  ? __pfx_ip_neigh_gw4+0x10/0x10
[   91.717514][    C1]  ? __lock_acquire+0xab9/0xd20
[   91.717534][    C1]  ip_finish_output2+0xd40/0x1160
[   91.717551][    C1]  ? ip_finish_output2+0x452/0x1160
[   91.717564][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[   91.717578][    C1]  ? ip_skb_dst_mtu+0x1a5/0xab0
[   91.717590][    C1]  ? ip_skb_dst_mtu+0x866/0xab0
[   91.717603][    C1]  ? ip_finish_output+0x33a/0x3f0
[   91.717616][    C1]  ip_output+0x2a1/0x3c0
[   91.717631][    C1]  ? ip_output+0x60/0x3c0
[   91.717644][    C1]  iptunnel_xmit+0x592/0xa40
[   91.717678][    C1]  ip_tunnel_xmit+0x1c41/0x2390
[   91.717738][    C1]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[   91.717860][    C1]  ? gre_build_header+0x3fd/0xa40
[   91.717874][    C1]  ? __pfx_gre_build_header+0x10/0x10
[   91.717883][    C1]  gre_tap_xmit+0x590/0x7a0
[   91.717893][    C1]  ? __pfx_gre_tap_xmit+0x10/0x10
[   91.717900][    C1]  ? __lock_acquire+0xab9/0xd20
[   91.717914][    C1]  dev_hard_start_xmit+0x2d7/0x830
[   91.717927][    C1]  sch_direct_xmit+0x241/0x4b0
[   91.717939][    C1]  ? __pfx_sch_direct_xmit+0x10/0x10
[   91.717950][    C1]  __dev_queue_xmit+0x1857/0x3b50
[   91.717960][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[   91.717970][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[   91.717980][    C1]  ? _raw_spin_unlock+0x28/0x50
[   91.717990][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[   91.717999][    C1]  ? __pfx_tlb_choose_channel+0x10/0x10
[   91.718010][    C1]  ? alb_determine_nd+0x2d6/0x4e0
[   91.718021][    C1]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[   91.718033][    C1]  ? bond_get_slave_by_id+0x559/0x560
[   91.718041][    C1]  ? __pfx_bond_get_slave_by_id+0x10/0x10
[   91.718050][    C1]  bond_start_xmit+0xdc7/0x1a10
[   91.718065][    C1]  ? bond_start_xmit+0xf8/0x1a10
[   91.718075][    C1]  ? __pfx_bond_start_xmit+0x10/0x10
[   91.718086][    C1]  ? skb_network_protocol+0x508/0x760
[   91.718094][    C1]  ? validate_xmit_xfrm+0xbf/0x1160
[   91.718107][    C1]  ? __pfx_skb_network_protocol+0x10/0x10
[   91.718115][    C1]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[   91.718126][    C1]  ? __pfx_passthru_features_check+0x10/0x10
[   91.718140][    C1]  dev_hard_start_xmit+0x2d7/0x830
[   91.718155][    C1]  __dev_queue_xmit+0x1b8d/0x3b50
[   91.718170][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[   91.718183][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[   91.718193][    C1]  ? dst_cow_metrics_generic+0x56/0x1c0
[   91.718207][    C1]  ? icmp6_dst_alloc+0x264/0x420
[   91.718217][    C1]  ? ndisc_send_skb+0x41f/0x1440
[   91.718228][    C1]  ? addrconf_rs_timer+0x369/0x670
[   91.718239][    C1]  ? call_timer_fn+0x17e/0x5f0
[   91.718250][    C1]  ? __run_timer_base+0x61a/0x860
[   91.718259][    C1]  ? run_timer_softirq+0xb7/0x180
[   91.718269][    C1]  ? __lock_acquire+0xab9/0xd20
[   91.718281][    C1]  ? __lock_acquire+0xab9/0xd20
[   91.718292][    C1]  ? ndisc_send_skb+0xb54/0x1440
[   91.718303][    C1]  ? ndisc_send_skb+0xb54/0x1440
[   91.718315][    C1]  ? ip6_finish_output2+0xf99/0x16a0
[   91.718325][    C1]  ip6_finish_output2+0x11bc/0x16a0
[   91.718336][    C1]  ? ip6_finish_output2+0x701/0x16a0
[   91.718347][    C1]  ? __pfx_ip6_finish_output2+0x10/0x10
[   91.718357][    C1]  ? ip6_mtu+0x7d/0x3f0
[   91.718365][    C1]  ? ip6_finish_output+0x2ef/0x4e0
[   91.718374][    C1]  ndisc_send_skb+0xb54/0x1440
[   91.718392][    C1]  ? ndisc_send_skb+0x20c/0x1440
[   91.718404][    C1]  ? __pfx_ndisc_send_skb+0x10/0x10
[   91.718415][    C1]  ? ndisc_alloc_skb+0x1a6/0x480
[   91.718430][    C1]  addrconf_rs_timer+0x369/0x670
[   91.718442][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[   91.718454][    C1]  call_timer_fn+0x17e/0x5f0
[   91.718464][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[   91.718473][    C1]  ? call_timer_fn+0xbe/0x5f0
[   91.718483][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[   91.718495][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[   91.718504][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.718514][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[   91.718524][    C1]  __run_timer_base+0x61a/0x860
[   91.718534][    C1]  ? ktime_get+0x3e/0x1f0
[   91.718568][    C1]  ? __pfx___run_timer_base+0x10/0x10
[   91.718578][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[   91.718589][    C1]  run_timer_softirq+0xb7/0x180
[   91.718618][    C1]  handle_softirqs+0x286/0x870
[   91.718628][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[   91.718638][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[   91.718648][    C1]  __irq_exit_rcu+0xca/0x1f0
[   91.718655][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[   91.718664][    C1]  irq_exit_rcu+0x9/0x30
[   91.718671][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   91.718683][    C1]  </IRQ>
[   91.718686][    C1]  <TASK>
[   91.718720][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   91.718732][    C1] RIP: 0010:lock_acquire+0x175/0x360
[   91.718745][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 4b e3 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[   91.718753][    C1] RSP: 0018:ffffc90007db7658 EFLAGS: 00000206
[   91.718763][    C1] RAX: a33b177617b86500 RBX: 0000000000000000 RCX: a33b177617b86500
[   91.718769][    C1] RDX: 0000000000000001 RSI: ffffffff8dba5d78 RDI: ffffffff8be33300
[   91.718774][    C1] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195
[   91.718780][    C1] R10: ffffc90007db7818 R11: ffffffff81ac3910 R12: 0000000000000002
[   91.718785][    C1] R13: ffffffff8e139ea0 R14: 0000000000000000 R15: 0000000000000246
[   91.718791][    C1]  ? unwind_next_frame+0xa5/0x2390
[   91.718801][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   91.718811][    C1]  ? unwind_next_frame+0xa5/0x2390
[   91.718823][    C1]  ? unwind_next_frame+0xa5/0x2390
[   91.718831][    C1]  ? __netlink_create+0x65/0x260
[   91.718841][    C1]  ? unwind_next_frame+0xa5/0x2390
[   91.718849][    C1]  unwind_next_frame+0xc2/0x2390
[   91.718857][    C1]  ? unwind_next_frame+0xa5/0x2390
[   91.718866][    C1]  ? unwind_next_frame+0xa5/0x2390
[   91.718875][    C1]  ? sk_alloc+0x1b1/0x370
[   91.718882][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   91.718891][    C1]  arch_stack_walk+0x11c/0x150
[   91.718903][    C1]  ? __netlink_create+0x65/0x260
[   91.718913][    C1]  stack_trace_save+0x9c/0xe0
[   91.718922][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[   91.718931][    C1]  ? arch_stack_walk+0xfc/0x150
[   91.718941][    C1]  kasan_save_track+0x3e/0x80
[   91.718951][    C1]  ? kasan_save_track+0x3e/0x80
[   91.718959][    C1]  ? __kasan_kmalloc+0x93/0xb0
[   91.718968][    C1]  ? __kmalloc_cache_noprof+0x230/0x3d0
[   91.718981][    C1]  ? ref_tracker_alloc+0x133/0x460
[   91.718992][    C1]  ? sk_alloc+0x1b1/0x370
[   91.718998][    C1]  ? __netlink_create+0x65/0x260
[   91.719016][    C1]  ? ref_tracker_alloc+0x133/0x460
[   91.719025][    C1]  __kasan_kmalloc+0x93/0xb0
[   91.719036][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[   91.719046][    C1]  ? ref_tracker_alloc+0x133/0x460
[   91.719056][    C1]  ref_tracker_alloc+0x133/0x460
[   91.719067][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   91.719080][    C1]  ? sock_lock_init+0x41c/0x870
[   91.719087][    C1]  ? sk_prot_alloc+0x161/0x220
[   91.719094][    C1]  sk_alloc+0x1b1/0x370
[   91.719103][    C1]  __netlink_create+0x65/0x260
[   91.719114][    C1]  netlink_create+0x3ca/0x590
[   91.719121][    C1]  ? __pfx_rtnetlink_bind+0x10/0x10
[   91.719134][    C1]  __sock_create+0x4b3/0x9f0
[   91.719146][    C1]  __sys_socket+0xd7/0x1b0
[   91.719157][    C1]  __x64_sys_socket+0x7a/0x90
[   91.719166][    C1]  do_syscall_64+0xfa/0x3b0
[   91.719178][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.719188][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.719195][    C1]  ? exc_page_fault+0x9f/0xf0
[   91.719205][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.719213][    C1] RIP: 0033:0x7facda78ebe9
[   91.719222][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.719228][    C1] RSP: 002b:00007facdb589038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   91.719237][    C1] RAX: ffffffffffffffda RBX: 00007facda9b5fa0 RCX: 00007facda78ebe9
[   91.719242][    C1] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010
[   91.719250][    C1] RBP: 00007facda811e19 R08: 0000000000000000 R09: 0000000000000000
[   91.719257][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.719264][    C1] R13: 00007facda9b6038 R14: 00007facda9b5fa0 R15: 00007fff3db15b98
[   91.719277][    C1]  </TASK>

VM DIAGNOSIS:
12:26:42  Registers:
info registers vcpu 0

CPU#0
RAX=ba27d04c31d70a00 RBX=ffffffff819683a8 RCX=ba27d04c31d70a00 RDX=0000000000000001
RSI=ffffffff8d9b69f3 RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37d30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001140 CR3=000000010ccec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=f588bbaaaaaaaaaa bbbbbbbbbbbb0000
XMM02=00007facda987498 00007facda987470 XMM03=00007facda9874a8 00007facda9874a0
XMM04=00007facdb4ed100 00007facda987460 XMM05=00007facda987478 00007facda9874c0
XMM06=00007facda9874b8 00007facda9874b0 XMM07=00007facda9874a8 00007facda9874a0
XMM08=0000000000000000 00007facda812ee7 XMM09=0000000000000000 00007facda812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001de650
R8 =ffff888021758237 R9 =1ffff110042eb046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98e1 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007facdb5896c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010ccec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f48a0f87498 00007f48a0f87470 XMM03=00007f48a0f874a8 00007f48a0f874a0
XMM04=00007f48a1aed100 00007f48a0f87460 XMM05=00007f48a0f87478 00007f48a0f874c0
XMM06=00007f48a0f874b8 00007f48a0f874b0 XMM07=00007f48a0f874a8 00007f48a0f874a0
XMM08=91c212a8434f9044 de2b7a2c5011b7f1 XMM09=0000000000000000 00007f48a0e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
