last executing test programs:

1.77308096s ago: executing program 2 (id=120):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r4)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25410000000e0001006e1d368fc50525181f0000000f0002006e657464657673696d3000001200870001000000726f7073000000005ebe74a1cc97275bafc96d0a0740f31312c58eea824c7142f0e3ec7ccaaa74fef8ae1f02000000000000005a0cf2aa913e2f07cb11"], 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000740)=""/73, 0x49}, {0x0}, {0x0}], 0x4}, 0x6}], 0x1, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r7, 0x181}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r2, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x40, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2f, 0x0, 0x4, 0x0, 0xc, 0x28, 0xfe}, @hopopts={0x87}]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r13}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
listen(r0, 0x9)

1.667601444s ago: executing program 2 (id=122):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\r\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="5c21df04e583d51de9a78cad82f4be41bf449d02c56a3b2967d4323d8de4982299583463b60d393326f85820e29be59fef50f1d3442257d7802b0be910a4f32e34c524cd2688d76d6d44d60098e3465ef11b2478ed433a6afa8e6c49fbce45dd3c0f605a487a81511a82881038f4c199ed12e8f505f080d81b759daab7fc497608004fc943e56444a43b413ebaaae01579df109239216d7e237deebbac7c64bd03e891e621a7e3361323814606", @ANYRES64=0x0], 0x20)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x400c080)
r2 = socket(0x28, 0x5, 0x0)
getsockopt(r2, 0x28, 0x8, 0x0, &(0x7f0000000040))
ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000680)="a37f2dc467b82e2986d839cac108da4a280864a7268d193406e7749ecc1f6e6d41e41c13e1e2a504b1b87b56040bb992ddd8531419b19282ef78018b4cc8629d0b58a99aaa9f1d5a0924cb40772e16f8b0898340a8a1404d603b3297aa7f7f56fe47724c14ec6c740808f3195af81834f2f661ff12a647d5a563fa61d4ca814a2476d51a8ea64c296883ab49e6c3718c10845929791dc9cd491e04103568c1bc9d3348c93f63eeefe02bfe855a2bc5a69620aac121993eb85e2cb97df4a13d2be0cfae4128fac142")
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0x20, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/251, 0xfb}], 0x2}}], 0x1, 0x2000, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)
sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1.459618251s ago: executing program 2 (id=125):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@restrict, @union={0x4, 0x5, 0x0, 0x5, 0x1, 0x2, [{0xf, 0x4, 0x7fffffff}, {0x9, 0x2, 0x4}, {0x10, 0x5, 0x7}, {0x40000006, 0x4, 0xc}, {0x0, 0x3, 0x8}]}]}}, &(0x7f0000001b80)=""/4090, 0x6e, 0xffa, 0xa}, 0x28)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000})
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@restrict, @union={0x4, 0x5, 0x0, 0x5, 0x1, 0x2, [{0xf, 0x4, 0x7fffffff}, {0x9, 0x2, 0x4}, {0x10, 0x5, 0x7}, {0x40000006, 0x4, 0xc}, {0x0, 0x3, 0x8}]}]}}, &(0x7f0000001b80)=""/4090, 0x6e, 0xffa, 0xa}, 0x28) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) (async)

1.458383809s ago: executing program 2 (id=126):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0xc0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRES64=0x0, @ANYBLOB="d35e835192d0f9919ffadede0341ca3db812b6e946e318b557127c4340f80fe1785abcf962e7d6b758ad8a20e16916585f460b78eb0d411289f088dc19f565deca25e2bb81e2b6b152e6f53529a00638b8b76e31abbaf2f43dc04405cff923c5608582813eea4322fc93c50590780da7f7f21baa2e56228f7695c28f4d1c317995531e182c6f0df6bf5c0d670cb68b404f6a8e982e1988c117db89e538c3523063e7579d6eb15193727b8166f515b6e23145c03871050d09abbc34b98c24bbe27fff17a9e4317e0c17d0"], &(0x7f0000000100)='GPL\x00', 0xffffffff}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
close(r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000680)={0x2, 0x7}, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r9 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050000000300000000270c0c0500000000615f2e00"], 0x0, 0x29, 0x0, 0x0, 0x1, 0x10000, @value=r9}, 0x28)
sendmsg$AUDIT_LIST_RULES(r8, 0x0, 0x800)

1.221307403s ago: executing program 0 (id=132):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x810) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

1.100212997s ago: executing program 0 (id=135):
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801) (async)
setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
read(r2, &(0x7f0000000240)=""/146, 0x92)
syz_emit_ethernet(0x52, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1486dd60cb653e00f9390000000000000000000000ffffac1414bbff020000ff00000000000000000000018200907800000000200100000000000000000000000000028c060000"], 0x0) (async)
setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000340)=0xffe02, 0x66)
sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x100000001, 0x4)
recvfrom$inet6(r1, 0x0, 0xffffffffffffff32, 0x40010043, 0x0, 0x0) (async, rerun: 64)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000086) (rerun: 64)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) (async)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000800)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8)
socket$kcm(0x2, 0x5, 0x84) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x400}, 0x800) (async)
close(0xffffffffffffffff) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000002, 0x3) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYBLOB="311f56c5db3e5389067c5d4bdba063fcc0ddeb74c095ee4edc8f18b21915128c34056a0feee028e698dd6140ebf2a88cf86008ac2e01d99555335e7e5b6fec590b8481f665484ac260d85cfb1bb0ffd96b6c5e325c49", @ANYRESHEX=r3], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040041)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={<r7=>0x0, @in6={{0xa, 0x4e24, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x0, 0xff, 0x2, 0x3, 0x88, 0x8, 0x7f}, &(0x7f00000000c0)=0x9c)
setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r7, 0x0, 0xff, 0xc0000}, 0x10)
sendmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="5c89a188baee25fab0fd72e51fb0f0139d7b15b83786b689847620f74bb82fe9180234030b257119de5df0d364a0925728e4e89a5765e731458ec98c0919ab48029b29575f5f1ee2806baecca5585e1493e00b29f6665c1500a82da80a42c14400c77df81c217e46a1df7daa75986c4cbb21b059d1ed46ced3bc0624e7cb2d30b34df58c90cb5e9f5672e2ef8d0da3e3fa4d8ae8e11c6865e14f216990c3aae673140d11f18408589980ef0f8e7b05774c4c5aa78433c3b93979422352ee72143b6c73c2bc2fe60d6940dc948b390169256e3e1f85a9ce590977611d5370e3d9671e75c456b36f76", 0xe8}], 0x1, &(0x7f0000000b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r6, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0xb8, 0x4000000}}], 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111670000000000851000000200000085000000b200000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

821.838763ms ago: executing program 0 (id=139):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001040)={0x0, 0x2, 0x1e46, 0x6fd})
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000009, 0x11, r2, 0xd5092000)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600)
r3 = socket$inet6(0xa, 0x802, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x54, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x28, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x18)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000cac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

820.755614ms ago: executing program 1 (id=140):
r0 = socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x24040400)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x4004)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x6, 0x1002, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x1}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffffd, 0x8, 0x3ff, 0x4, 0xa0, 0x10}}]}}}]}, 0x84}}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', <r6=>0x0, 0x700, 0x1, 0x0, 0x0, {{0x24, 0x4, 0x1, 0x9, 0x90, 0x66, 0x0, 0x8, 0x29, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0xb8, 0x3, 0x3, [{@local, 0xb}, {@multicast2, 0x8}, {@broadcast}, {@private=0xa010102, 0x101}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4}]}, @timestamp={0x44, 0x8, 0x80, 0x0, 0x2, [0x80]}, @generic={0x7, 0xe, "4c8cc212c7e8af8c78c3ebfc"}, @lsrr={0x83, 0xb, 0x7f, [@rand_addr=0x64010100, @broadcast]}, @noop, @cipso={0x86, 0x1f, 0x2, [{0x2, 0x7, "329596ea1a"}, {0x0, 0x12, "aa490fc4fd842fdf29de68af1a281e46"}]}, @noop, @end, @cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "897d4be356"}]}]}}}}})
r7 = socket(0xa, 0x2, 0x6)
r8 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0})
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x3, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86dd}}}]}, 0x38}}, 0x40084c0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf2513000000d80001801400020067656e657665300000000000000000001400020069703665727370616e3000000000000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468305f746f5f626f6e64000000140002006261746164765f736c6176655f310000080003000100000014000200627269646765300000000000000000001400020070696d72656730000000000000000000140002006970766c616e300000000000000000001400020065727370616e300000000000000000000800030000000000140002007465616d30000000000000000000000008000300020000000c00018008000100", @ANYRES32=r6, @ANYBLOB="000000010400901ef57700", @ANYRES32=r11, @ANYBLOB="24000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030001000000"], 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x4010)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x7ad3, 0x400, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0xd, 0x4, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x4, 0xdc, 0x0, 0x1}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780), &(0x7f00000007c0)=[0x0], 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x8, 0x38, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x10)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r12 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r12, &(0x7f0000004cc0)={0x2, 0xfffc, @rand_addr=0x64010100}, 0x6)

820.440757ms ago: executing program 0 (id=141):
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011020000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x6, 0x0, 0x0, 0xfffffb81}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xe}]}}}]}, 0x48}}, 0x4000000)

817.654034ms ago: executing program 0 (id=142):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b459bedce76c127ae96de24e3c415a898bbfaa0e4b971392f56c6f8a57a5abf785a7802435647e4a52121aeb7ed534e6f37eae64c0b0ed62c54eea08c01053b00246f0561bb8d603867938bfa579ccc2d99ffc38db068e0a7a637c1595b6ff4d8aea4d3f5599dcbfc99f3a825f27ef8aac301b6fa68dfd77360724dffbe53d3608b5d46b2b8ebc1c107c7e39ecc2cf5142b8f7d7e84454d9666b64e9d4ae8fb996617120618699", @ANYRES16=r0, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r2, @ANYRESDEC=r0], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff2a09349e}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0xc0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001921888800000000000000000300000a20000000000a030000000000000000acc7304d000b00010073797a300000000044000000090a0124000000000000000007eefff00800ea3f0000000009000273797a30000000000900010073797a3000000000f3010514000000020a01030000000000000000070000051400000088080000000000000068c2a7edbeff19810100002ca6d8f093fc588ba7f34c2e1c7d34e69300a0ac74e308f17275b9ec25d7ad2d12e4eaa1e8bece2d23953a3f3776bee78193421769b7a853000062bc06749c0c979e2882a2e13aea9cab5893f5e63cca83d687292cc3955f53ea8c3b1997628400"/271], 0xa0}}, 0x20050800)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r8, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r10 = accept(r7, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r1, &(0x7f0000000100)=""/61, 0xffffffffffffffcd, 0x2, 0x0, 0x11)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r11, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r11, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000680)={0x2, 0x7}, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="c9bbb7298f8e44029feb010018000000000000000c0000000c00000005000000030000000000000c0500000000615f2e00"], 0x0, 0x29, 0x0, 0x0, 0xffffffff, 0x10000}, 0x28)

775.23943ms ago: executing program 1 (id=143):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000004f80)={'wlan0\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x8, 0x5}})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
r4 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4004000)
r5 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000001}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8})
ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="b963272721a3c6cb4ac7cc5adb631e5f735500000000000000000000ff000500"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_getaddr={0x48, 0x16, 0x400, 0x70bd25, 0x25dfdbfc, {0x2, 0x78, 0x50, 0xc8, r8}, [@IFA_LABEL={0x14, 0x3, 'erspan0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x6, 0x1, 0x6}}]}, 0x48}}, 0x4040)
close(r2)

628.893765ms ago: executing program 1 (id=144):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000300)={0x5, [{}, {}, {0x0, <r3=>0x0}], 0x1, "0c9f6d2940e1b6"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001300)={<r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xfc, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0xe}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0xb4, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x88, 0x9, 0x0, 0x1, [@m_ct={0x84, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x5c, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b0ee}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001500)={r3, r4, "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", "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"})

625.568965ms ago: executing program 1 (id=145):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x3, 0x3}]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0)
close(r4)
socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x5, 0x0, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

558.331355ms ago: executing program 2 (id=146):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x3, 0xffffffff, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1404, 0x0, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004001}, 0x20002850)

508.113687ms ago: executing program 2 (id=147):
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000600000000000000bde20000950000000000000018310000040000000000000000000000183300000100000000000000000000009500000000000000b785ffffffffffff183300000300000000000000000000000d393000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c800000b700000000000000851000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x48980000, 0x98, &(0x7f0000000780)=""/152, 0x40f00, 0x12, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, r1, 0x6, &(0x7f00000009c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1], &(0x7f0000000a00)=[{0x3, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x3, 0xa, 0x1}], 0x10, 0xffffffff}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r8, 0x0, 0x0}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x20, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r12, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c)
connect$rose(r12, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x0, 0x1, 0x0, 0x4, 0xba, 0x9b0}, 0x20)

445.834727ms ago: executing program 1 (id=148):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0xc6e9f000)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xd1383000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010025bd700022a44a9200000000", @ANYRES32=r5, @ANYBLOB="1008040007000000080004000001000014001680100001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40010)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4)

340.059246ms ago: executing program 1 (id=149):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0xa6)
epoll_create1(0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x14, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f933a3c92b", 0x14}], 0x1}, 0x0)
socket$unix(0x1, 0x2, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000180)=@bpq0, 0x10)
vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000001500)="6e800000000001000000", 0xa}], 0x1, 0x2)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x95, 0xe4}]}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r7, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001540)="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", 0xa3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f0000001940)}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002e40)="fbeb6ccbcd8cbecab0dc48969e2668988448c6", 0x13}], 0x1}}, {{&(0x7f0000002f80)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000003080)}}], 0x5, 0x1)

0s ago: executing program 0 (id=150):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
mmap(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x2000002, 0x31714de4c0a16af0, 0xffffffffffffffff, 0x2000)
socket(0x2b, 0x80801, 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000640)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r3], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084)
socket(0x23, 0x803, 0xfffffffd)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0)
r5 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r6 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r6, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f)
close(r5)
close(r0)
getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r7, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59509' (ED25519) to the list of known hosts.
syzkaller login: [   47.337848][ T5833] cgroup: Unknown subsys name 'net'
[   47.415810][ T5833] cgroup: Unknown subsys name 'cpuset'
[   47.419091][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   48.966175][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.449776][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.452466][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.455513][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.458369][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.461128][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.569053][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.571451][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   52.573933][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.576821][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.579009][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.581378][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.584235][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.586909][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.589660][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.597912][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.617507][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.659747][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.662288][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.666525][ T5842] bridge_slave_0: entered allmulticast mode
[   52.669550][ T5842] bridge_slave_0: entered promiscuous mode
[   52.673240][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.676487][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.679308][ T5842] bridge_slave_1: entered allmulticast mode
[   52.682289][ T5842] bridge_slave_1: entered promiscuous mode
[   52.712622][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.727330][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.751621][ T5842] team0: Port device team_slave_0 added
[   52.757257][ T5842] team0: Port device team_slave_1 added
[   52.787892][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.790078][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.798879][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.816982][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.819341][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.827768][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.858596][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   52.892887][ T5842] hsr_slave_0: entered promiscuous mode
[   52.896510][ T5842] hsr_slave_1: entered promiscuous mode
[   52.908091][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   52.948511][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.950825][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.953636][ T5850] bridge_slave_0: entered allmulticast mode
[   52.957160][ T5850] bridge_slave_0: entered promiscuous mode
[   52.965010][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.967182][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.969416][ T5850] bridge_slave_1: entered allmulticast mode
[   52.971690][ T5850] bridge_slave_1: entered promiscuous mode
[   52.995665][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.007480][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.027665][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.030429][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.033334][ T5849] bridge_slave_0: entered allmulticast mode
[   53.036782][ T5849] bridge_slave_0: entered promiscuous mode
[   53.049366][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.051751][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.054322][ T5849] bridge_slave_1: entered allmulticast mode
[   53.056636][ T5849] bridge_slave_1: entered promiscuous mode
[   53.063453][ T5850] team0: Port device team_slave_0 added
[   53.077739][ T5850] team0: Port device team_slave_1 added
[   53.080646][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.089292][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.105372][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.107559][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.115668][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.126135][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.128312][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.136480][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.142514][ T5849] team0: Port device team_slave_0 added
[   53.156291][ T5849] team0: Port device team_slave_1 added
[   53.167559][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.178527][ T5850] hsr_slave_0: entered promiscuous mode
[   53.180727][ T5850] hsr_slave_1: entered promiscuous mode
[   53.182655][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   53.184757][ T5850] Cannot create hsr debugfs directory
[   53.186661][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.190522][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.192968][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.202987][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.208014][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.213141][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.215872][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.225039][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.229117][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.269417][ T5849] hsr_slave_0: entered promiscuous mode
[   53.272150][ T5849] hsr_slave_1: entered promiscuous mode
[   53.274479][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   53.276293][ T5849] Cannot create hsr debugfs directory
[   53.290911][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.293152][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.295537][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.297743][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.381731][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.386038][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.391129][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.396801][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.406779][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.416233][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.419042][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.446832][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   53.449705][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.455537][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.466766][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.469529][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.472734][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.477125][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.483301][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.486005][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.568582][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.580878][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.590402][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   53.601477][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   53.606368][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.608654][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.628514][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.630761][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.644443][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.650181][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.652662][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.665671][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.667982][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.720891][ T5842] veth0_vlan: entered promiscuous mode
[   53.735694][ T5842] veth1_vlan: entered promiscuous mode
[   53.759128][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.765245][ T5842] veth0_macvtap: entered promiscuous mode
[   53.769268][ T5842] veth1_macvtap: entered promiscuous mode
[   53.791278][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.803530][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.816659][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.827586][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.831248][ T5849] veth0_vlan: entered promiscuous mode
[   53.841063][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.845838][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.859445][ T5849] veth1_vlan: entered promiscuous mode
[   53.866146][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.886362][ T3616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.889445][ T3616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.891112][ T5850] veth0_vlan: entered promiscuous mode
[   53.910971][ T5849] veth0_macvtap: entered promiscuous mode
[   53.915265][ T5850] veth1_vlan: entered promiscuous mode
[   53.915464][ T3616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.919525][ T3616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.930478][ T5849] veth1_macvtap: entered promiscuous mode
[   53.935563][ T5850] veth0_macvtap: entered promiscuous mode
[   53.942693][ T5850] veth1_macvtap: entered promiscuous mode
[   53.945993][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   53.951643][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.962032][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.970422][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.977501][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.982411][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.986874][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.990013][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.993507][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.000883][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.009261][ T5907] batadv_slave_1: entered promiscuous mode
[   54.012120][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.016211][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.023683][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.061740][ T5907] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.091887][ T5906] batadv_slave_1: left promiscuous mode
[   54.097273][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.099926][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.127055][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.129552][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.137462][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.142060][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.164700][ T5916] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.175737][ T5916] bond_slave_0: entered promiscuous mode
[   54.177995][ T5916] bond_slave_1: entered promiscuous mode
[   54.180497][ T5916] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   54.185696][ T5916] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   54.189707][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.193381][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.194836][ T5916] bridge_slave_0: left allmulticast mode
[   54.197786][ T5916] bridge_slave_0: left promiscuous mode
[   54.199962][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.205669][ T5916] bridge_slave_1: left allmulticast mode
[   54.207463][ T5916] bridge_slave_1: left promiscuous mode
[   54.209427][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.217859][ T5916] bond0: (slave bond_slave_0): Releasing backup interface
[   54.220940][ T5916] bond_slave_0: left promiscuous mode
[   54.224791][ T5916] bond0: (slave bond_slave_1): Releasing backup interface
[   54.227956][ T5916] bond_slave_1: left promiscuous mode
[   54.232237][ T5916] team0: Port device team_slave_0 removed
[   54.236210][ T5916] team0: Port device team_slave_1 removed
[   54.238365][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.240722][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.243940][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.246355][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.252313][ T5916] bond1: (slave macvlan2): Releasing backup interface
[   54.315800][ T5921] Zero length message leads to an empty skb
[   54.319038][ T5921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'.
[   54.336009][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   54.359497][ T5919] bond1 (unregistering): Released all slaves
[   54.364978][ T5925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5'.
[   54.395420][ T5928] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   54.413457][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'.
[   54.440639][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'.
[   54.471044][ T5937] netlink: 'syz.0.9': attribute type 1 has an invalid length.
[   54.488042][ T5939] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET)
[   54.502364][ T5941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'.
[   54.502417][ T5879] IPVS: starting estimator thread 0...
[   54.510096][ T5939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'.
[   54.534386][ T5855] Bluetooth: hci0: command tx timeout
[   54.594146][ T5942] IPVS: using max 92 ests per chain, 220800 per kthread
[   54.648752][ T5948] team0: Device macvlan3 is already an upper device of the team interface
[   54.680388][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   54.694623][ T5855] Bluetooth: hci1: command tx timeout
[   54.695781][ T5238] Bluetooth: hci2: command tx timeout
[   54.742577][ T5961] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   54.767559][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'.
[   54.778217][ T5968] netlink: 'syz.1.15': attribute type 5 has an invalid length.
[   54.780894][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'.
[   54.786738][ T5968] geneve2: entered promiscuous mode
[   54.788465][ T5968] geneve2: entered allmulticast mode
[   54.790779][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   54.793566][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   54.798200][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   54.801655][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   54.982200][ T5978] lo speed is unknown, defaulting to 1000
[   54.987034][ T5978] lo speed is unknown, defaulting to 1000
[   54.989185][ T5978] lo speed is unknown, defaulting to 1000
[   55.038842][ T5979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   55.043851][ T5978] infiniband syz0: set active
[   55.045907][ T5879] lo speed is unknown, defaulting to 1000
[   55.048298][ T5978] infiniband syz0: added lo
[   55.067608][ T5978] RDS/IB: syz0: added
[   55.070964][ T5978] smc: adding ib device syz0 with port count 1
[   55.072993][ T5978] smc:    ib device syz0 port 1 has pnetid 
[   55.075614][ T5879] lo speed is unknown, defaulting to 1000
[   55.077782][ T5978] lo speed is unknown, defaulting to 1000
[   55.130460][ T5978] lo speed is unknown, defaulting to 1000
[   55.202637][ T5978] lo speed is unknown, defaulting to 1000
[   55.352797][ T5994] bridge_slave_0: left allmulticast mode
[   55.357935][ T5994] bridge_slave_0: left promiscuous mode
[   55.360432][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.412197][ T5994] bridge_slave_1: left allmulticast mode
[   55.416696][ T5994] bridge_slave_1: left promiscuous mode
[   55.418971][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.510750][ T6000] ieee802154 phy0 wpan0: encryption failed: -22
[   56.200636][ T5994] bond0: (slave bond_slave_0): Releasing backup interface
[   56.205272][ T5994] bond0: (slave bond_slave_1): Releasing backup interface
[   56.215780][ T5994] team0: Port device team_slave_0 removed
[   56.218144][ T6003] netlink: 'syz.1.25': attribute type 27 has an invalid length.
[   56.222544][ T5994] team0: Port device team_slave_1 removed
[   56.225351][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.227738][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.231001][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.233687][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.484487][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.487286][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.495635][ T6023] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   56.541709][ T6028] netlink: 'syz.0.34': attribute type 7 has an invalid length.
[   56.585160][ T6032] lo speed is unknown, defaulting to 1000
[   56.614135][ T5238] Bluetooth: hci0: command tx timeout
[   56.775460][ T5855] Bluetooth: hci2: command tx timeout
[   56.777350][ T5238] Bluetooth: hci1: command tx timeout
[   56.906125][ T6043] tipc: Started in network mode
[   56.908096][ T6043] tipc: Node identity 2275d51b8a64, cluster identity 4711
[   56.910936][ T6043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.916793][ T6043] syzkaller0: entered promiscuous mode
[   56.918910][ T6043] syzkaller0: entered allmulticast mode
[   57.000908][ T6043] tipc: Resetting bearer <eth:syzkaller0>
[   57.005559][ T6042] tipc: Resetting bearer <eth:syzkaller0>
[   57.009046][ T6042] tipc: Disabling bearer <eth:syzkaller0>
[   57.099012][ T6048] netlink: 'syz.0.40': attribute type 1 has an invalid length.
[   57.105566][ T6048] ipvlan2: entered allmulticast mode
[   57.107251][ T6048] veth0_to_bond: entered allmulticast mode
[   57.485840][ T6063] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   57.610352][ T6067] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.956272][ T6085] lo speed is unknown, defaulting to 1000
[   58.239164][ T6099] netlink: 'syz.2.54': attribute type 4 has an invalid length.
[   58.246295][ T6099] netlink: 'syz.2.54': attribute type 4 has an invalid length.
[   58.424422][ T6109] : renamed from wg2 (while UP)
[   58.543673][ T6122] trusted_key: syz.2.61 sent an empty control message without MSG_MORE.
[   58.548693][ T6126] tap0: tun_chr_ioctl cmd 1074025681
[   58.551169][ T6125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.556885][ T5880] lo speed is unknown, defaulting to 1000
[   58.558206][ T6126] tap0: tun_chr_ioctl cmd 1074025677
[   58.561230][ T6126] tap0: linktype set to 804
[   58.567616][ T6126] tap0: tun_chr_ioctl cmd 1074812118
[   58.668486][ T6134] tipc: Started in network mode
[   58.670123][ T6134] tipc: Node identity ea8d26bb1598, cluster identity 4711
[   58.672513][ T6134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.684351][ T6134] syzkaller0: entered promiscuous mode
[   58.686139][ T6134] syzkaller0: entered allmulticast mode
[   58.694205][ T5238] Bluetooth: hci0: command tx timeout
[   58.697108][ T6132] tipc: Resetting bearer <eth:syzkaller0>
[   58.703561][ T6132] tipc: Disabling bearer <eth:syzkaller0>
[   58.826110][ T6149] 0: renamed from hsr0 (while UP)
[   58.828993][ T6149] 0: entered allmulticast mode
[   58.830901][ T6149] hsr_slave_0: entered allmulticast mode
[   58.832929][ T6149] hsr_slave_1: entered allmulticast mode
[   58.835480][ T6149] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   58.854014][ T5238] Bluetooth: hci1: command tx timeout
[   58.854062][ T5855] Bluetooth: hci2: command tx timeout
[   58.918680][ T6163] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.968212][ T6163] syzkaller0: entered promiscuous mode
[   58.970085][ T6163] syzkaller0: entered allmulticast mode
[   59.072808][ T6172] netlink: 'syz.1.76': attribute type 1 has an invalid length.
[   59.087729][ T6172] 8021q: adding VLAN 0 to HW filter on device bond2
[   59.100121][ T6172] bond2: (slave ip6gretap1): making interface the new active one
[   59.103711][ T6172] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   59.117272][ T6172] veth5: entered promiscuous mode
[   59.153139][ T6175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.208343][ T6182] Illegal XDP return value 16128 on prog  (id 15) dev syz_tun, expect packet loss!
[   59.306495][ T6196] lo speed is unknown, defaulting to 1000
[   59.433567][ T6216] team0: Port device dummy0 added
[   59.441301][ T6216] team0: Port device dummy0 removed
[   59.446764][ T6216] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   59.505492][ T6214] validate_nla: 6 callbacks suppressed
[   59.505516][ T6214] netlink: 'syz.2.88': attribute type 21 has an invalid length.
[   59.517019][ T6214] ipvlan2: entered promiscuous mode
[   59.519243][ T6214] bridge0: port 1(ipvlan2) entered blocking state
[   59.524768][ T6214] bridge0: port 1(ipvlan2) entered disabled state
[   59.527598][ T6214] ipvlan2: entered allmulticast mode
[   59.530098][ T6214] gretap0: entered allmulticast mode
[   59.533158][ T6214] ipvlan2: left allmulticast mode
[   59.538250][ T6214] gretap0: left allmulticast mode
[   59.640842][ T6228] tipc: Started in network mode
[   59.648278][ T6228] tipc: Node identity 5607efbe233a, cluster identity 4711
[   59.651291][ T6228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.664669][ T6228] syzkaller0: entered promiscuous mode
[   59.668847][ T6228] syzkaller0: entered allmulticast mode
[   59.681624][ T6228] tipc: Resetting bearer <eth:syzkaller0>
[   59.686742][ T6227] tipc: Resetting bearer <eth:syzkaller0>
[   59.689806][ T6231] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   59.695177][ T6227] tipc: Disabling bearer <eth:syzkaller0>
[   59.697780][ T6231] __nla_validate_parse: 36 callbacks suppressed
[   59.697792][ T6231] netlink: 228 bytes leftover after parsing attributes in process `syz.2.91'.
[   59.708360][ T6231] bridge0: port 1(syz_tun) entered blocking state
[   59.710654][ T6231] bridge0: port 1(syz_tun) entered disabled state
[   59.713713][ T6231] syz_tun: entered allmulticast mode
[   59.716849][ T6231] syz_tun: entered promiscuous mode
[   59.719688][ T6231] bridge0: port 1(syz_tun) entered blocking state
[   59.722047][ T6231] bridge0: port 1(syz_tun) entered forwarding state
[   59.771655][ T6236] IPVS: Scheduler module ip_vs_sip not found
[   59.997708][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.007213][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.010652][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.013647][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.651462][ T6287] pim6reg1: entered promiscuous mode
[   60.653176][ T6287] pim6reg1: entered allmulticast mode
[   60.739371][ T6291] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   60.744645][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[   60.744971][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[   60.751316][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'.
[   60.754013][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'.
[   60.778620][ T6295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.100'.
[   60.784280][ T5855] Bluetooth: hci0: command tx timeout
[   60.801395][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[   60.804272][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'.
[   60.819628][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[   60.822484][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'.
[   60.865455][ T6308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.871904][ T6308] syzkaller0: entered promiscuous mode
[   60.873669][ T6308] syzkaller0: entered allmulticast mode
[   60.886025][ T6308] tipc: Resetting bearer <eth:syzkaller0>
[   60.889432][ T6306] tipc: Resetting bearer <eth:syzkaller0>
[   60.896628][ T6306] tipc: Disabling bearer <eth:syzkaller0>
[   60.934108][ T5855] Bluetooth: hci1: command tx timeout
[   60.943870][ T5855] Bluetooth: hci2: command tx timeout
[   61.036628][ T6326] lo speed is unknown, defaulting to 1000
[   61.267962][ T6349] lo: entered allmulticast mode
[   61.274689][ T6349] lo: left allmulticast mode
[   61.322593][ T6356] netlink: 'syz.0.109': attribute type 6 has an invalid length.
[   61.415620][ T6367] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.446972][ T6369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.449546][ T6369] syzkaller0: entered promiscuous mode
[   61.451304][ T6369] syzkaller0: entered allmulticast mode
[   61.457419][ T6369] tipc: Resetting bearer <eth:syzkaller0>
[   61.469264][ T6367] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.475662][ T6370] tipc: Resetting bearer <eth:syzkaller0>
[   61.477869][ T6370] tipc: Disabling bearer <eth:syzkaller0>
[   61.519706][ T6367] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.610623][ T6367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.659462][ T5872] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.669329][ T5872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.672104][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.678761][ T5872] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.776128][ T6380] dvmrp8: entered allmulticast mode
[   61.778924][ T6379] dvmrp8: left allmulticast mode
[   61.912579][ T6386] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   61.916051][ T6386] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   61.920955][ T6386] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   62.262668][ T6390] nbd: must specify a device to reconfigure
[   62.270173][ T6390] batman_adv: batadv0: Adding interface: dummy0
[   62.272266][ T6390] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.281205][ T6390] batman_adv: batadv0: Interface activated: dummy0
[   62.289618][ T6390] batadv0: mtu less than device minimum
[   62.292420][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.297702][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.302877][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.308276][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.313401][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.318647][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.323919][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.328628][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.333505][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.345721][ T6393] batman_adv: batadv0: Adding interface: ip6gretap1
[   62.348081][ T6393] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.357452][ T6393] batman_adv: batadv0: Interface activated: ip6gretap1
[   62.410988][ T6396] netlink: 'syz.2.122': attribute type 1 has an invalid length.
[   62.512770][ T6396] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.517750][ T6396] bond1: (slave bond2): making interface the new active one
[   62.521449][ T6396] bond1: (slave bond2): Enslaving as an active interface with an up link
[   62.532101][ T6396] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   62.542976][ T6396] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   62.551185][ T6413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.555046][ T6413] syzkaller0: entered promiscuous mode
[   62.557452][ T6413] syzkaller0: entered allmulticast mode
[   62.569012][ T6413] tipc: Resetting bearer <eth:syzkaller0>
[   62.572254][ T6412] tipc: Resetting bearer <eth:syzkaller0>
[   62.580643][ T6412] tipc: Disabling bearer <eth:syzkaller0>
[   62.668424][ T6428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.677152][ T6428] syzkaller0: entered promiscuous mode
[   62.679042][ T6428] syzkaller0: entered allmulticast mode
[   62.710354][ T6426] tipc: Resetting bearer <eth:syzkaller0>
[   62.715078][ T6426] tipc: Disabling bearer <eth:syzkaller0>
[   62.766800][ T6438] netlink: 'syz.0.128': attribute type 1 has an invalid length.
[   62.769227][ T6438] netlink: 'syz.0.128': attribute type 2 has an invalid length.
[   62.931013][ T6457] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.936359][ T6457] bridge0: port 1(bond2) entered blocking state
[   62.938505][ T6457] bridge0: port 1(bond2) entered disabled state
[   62.940649][ T6457] bond2: entered allmulticast mode
[   62.943180][ T6457] bond2: entered promiscuous mode
[   62.975848][ T6467] can: request_module (can-proto-4) failed.
[   63.191831][ T6500] gretap2: entered promiscuous mode
[   63.193650][ T6500] gretap2: entered allmulticast mode
[   63.354382][ T6517] bond0: entered promiscuous mode
[   63.356209][ T6517] bond_slave_0: entered promiscuous mode
[   63.358346][ T6517] bond_slave_1: entered promiscuous mode
[   63.360198][ T6517] dummy0: entered promiscuous mode
[   63.362599][ T6517] batadv0: entered promiscuous mode
[   63.367724][ T6517] hsr1: entered allmulticast mode
[   63.369501][ T6517] bond0: entered allmulticast mode
[   63.371131][ T6517] bond_slave_0: entered allmulticast mode
[   63.372868][ T6517] bond_slave_1: entered allmulticast mode
[   63.375202][ T6517] dummy0: entered allmulticast mode
[   63.376800][ T6517] batadv0: entered allmulticast mode
[   63.379693][ T6517] 8021q: adding VLAN 0 to HW filter on device hsr1
[   63.382692][ T6517] bond0: left promiscuous mode
[   63.384945][ T6517] bond_slave_0: left promiscuous mode
[   63.386738][ T6517] bond_slave_1: left promiscuous mode
[   63.388587][ T6517] dummy0: left promiscuous mode
[   63.390585][ T6517] batadv0: left promiscuous mode
[   63.479997][ T6528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.483411][ T6528] syzkaller0: entered promiscuous mode
[   63.485922][ T6528] syzkaller0: entered allmulticast mode
[   63.559574][ T6528] tipc: Resetting bearer <eth:syzkaller0>
[   63.579070][ T6527] tipc: Resetting bearer <eth:syzkaller0>
[   63.587872][ T6527] tipc: Disabling bearer <eth:syzkaller0>
[   63.745934][ T6548] syzkaller0: entered promiscuous mode
[   63.747715][ T6548] syzkaller0: entered allmulticast mode
[   63.756284][ T6548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   64.088404][ T6551] lo speed is unknown, defaulting to 1000
[   64.475248][ T6539] ==================================================================
[   64.478056][ T6539] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[   64.480402][ T6539] Read of size 1 at addr ffff888110ee9c32 by task syz.2.147/6539
[   64.483569][ T6539] 
[   64.484295][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz.2.147 Not tainted syzkaller #0 PREEMPT(full) 
[   64.484307][ T6539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   64.484313][ T6539] Call Trace:
[   64.484330][ T6539]  <TASK>
[   64.484335][ T6539]  dump_stack_lvl+0x189/0x250
[   64.484351][ T6539]  ? __virt_addr_valid+0x1c8/0x5c0
[   64.484364][ T6539]  ? rcu_is_watching+0x15/0xb0
[   64.484373][ T6539]  ? __pfx_dump_stack_lvl+0x10/0x10
[   64.484383][ T6539]  ? rcu_is_watching+0x15/0xb0
[   64.484391][ T6539]  ? lock_release+0x4b/0x3e0
[   64.484404][ T6539]  ? __virt_addr_valid+0x1c8/0x5c0
[   64.484413][ T6539]  ? __virt_addr_valid+0x4a5/0x5c0
[   64.484423][ T6539]  print_report+0xca/0x240
[   64.484431][ T6539]  ? rose_transmit_link+0x5c3/0x740
[   64.484441][ T6539]  kasan_report+0x118/0x150
[   64.484453][ T6539]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   64.484465][ T6539]  ? rose_transmit_link+0x5c3/0x740
[   64.484476][ T6539]  rose_transmit_link+0x5c3/0x740
[   64.484484][ T6539]  ? skb_put+0x11b/0x210
[   64.484494][ T6539]  rose_write_internal+0x11dc/0x1ac0
[   64.484507][ T6539]  ? __pfx_rose_write_internal+0x10/0x10
[   64.484516][ T6539]  ? __timer_delete+0x5d/0x390
[   64.484532][ T6539]  rose_release+0x24e/0x520
[   64.484543][ T6539]  sock_close+0xc3/0x240
[   64.484554][ T6539]  ? __pfx_sock_close+0x10/0x10
[   64.484563][ T6539]  __fput+0x44c/0xa70
[   64.484575][ T6539]  task_work_run+0x1d4/0x260
[   64.484585][ T6539]  ? __pfx_task_work_run+0x10/0x10
[   64.484595][ T6539]  ? task_work_add+0x377/0x420
[   64.484605][ T6539]  ? __pfx_task_work_add+0x10/0x10
[   64.484615][ T6539]  get_signal+0x11ed/0x1340
[   64.484624][ T6539]  ? __might_fault+0xb0/0x130
[   64.484637][ T6539]  arch_do_signal_or_restart+0x9a/0x750
[   64.484650][ T6539]  ? __pfx___sys_connect+0x10/0x10
[   64.484662][ T6539]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   64.484675][ T6539]  ? rcu_is_watching+0x15/0xb0
[   64.484682][ T6539]  ? rcu_is_watching+0x15/0xb0
[   64.484690][ T6539]  exit_to_user_mode_loop+0x75/0x110
[   64.484701][ T6539]  do_syscall_64+0x2bd/0x3b0
[   64.484711][ T6539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.484718][ T6539]  ? exc_page_fault+0x9f/0xf0
[   64.484729][ T6539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.484737][ T6539] RIP: 0033:0x7f1d7758ebe9
[   64.484746][ T6539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.484753][ T6539] RSP: 002b:00007f1d757ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   64.484763][ T6539] RAX: fffffffffffffe00 RBX: 00007f1d777b5fa0 RCX: 00007f1d7758ebe9
[   64.484769][ T6539] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000011
[   64.484774][ T6539] RBP: 00007f1d77611e19 R08: 0000000000000000 R09: 0000000000000000
[   64.484780][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   64.484784][ T6539] R13: 00007f1d777b6038 R14: 00007f1d777b5fa0 R15: 00007ffdd65091d8
[   64.484794][ T6539]  </TASK>
[   64.484797][ T6539] 
[   64.591418][ T6539] Allocated by task 6539:
[   64.593157][ T6539]  kasan_save_track+0x3e/0x80
[   64.595097][ T6539]  __kasan_kmalloc+0x93/0xb0
[   64.596951][ T6539]  __kmalloc_cache_noprof+0x230/0x3d0
[   64.599154][ T6539]  rose_add_node+0x23a/0xde0
[   64.600997][ T6539]  rose_rt_ioctl+0xa48/0xfb0
[   64.602855][ T6539]  rose_ioctl+0x3ce/0x8b0
[   64.604589][ T6539]  sock_do_ioctl+0xdc/0x300
[   64.606425][ T6539]  sock_ioctl+0x576/0x790
[   64.608070][ T6539]  __se_sys_ioctl+0xfc/0x170
[   64.609983][ T6539]  do_syscall_64+0xfa/0x3b0
[   64.611834][ T6539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.614206][ T6539] 
[   64.615192][ T6539] Freed by task 6548:
[   64.616802][ T6539]  kasan_save_track+0x3e/0x80
[   64.618713][ T6539]  kasan_save_free_info+0x46/0x50
[   64.620787][ T6539]  __kasan_slab_free+0x5b/0x80
[   64.622718][ T6539]  kfree+0x18e/0x440
[   64.624287][ T6539]  rose_rt_device_down+0x473/0x4c0
[   64.626353][ T6539]  rose_device_event+0x603/0x6a0
[   64.628352][ T6539]  notifier_call_chain+0x1b6/0x3e0
[   64.630422][ T6539]  __dev_notify_flags+0x18d/0x2e0
[   64.632422][ T6539]  netif_change_flags+0xe8/0x1a0
[   64.634426][ T6539]  dev_change_flags+0x130/0x260
[   64.636365][ T6539]  dev_ioctl+0x7b4/0x1150
[   64.638118][ T6539]  sock_do_ioctl+0x22c/0x300
[   64.639979][ T6539]  sock_ioctl+0x576/0x790
[   64.641697][ T6539]  __se_sys_ioctl+0xfc/0x170
[   64.643523][ T6539]  do_syscall_64+0xfa/0x3b0
[   64.645306][ T6539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.647675][ T6539] 
[   64.648655][ T6539] The buggy address belongs to the object at ffff888110ee9c00
[   64.648655][ T6539]  which belongs to the cache kmalloc-512 of size 512
[   64.654055][ T6539] The buggy address is located 50 bytes inside of
[   64.654055][ T6539]  freed 512-byte region [ffff888110ee9c00, ffff888110ee9e00)
[   64.659363][ T6539] 
[   64.660329][ T6539] The buggy address belongs to the physical page:
[   64.662841][ T6539] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110ee8
[   64.666294][ T6539] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   64.669590][ T6539] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   64.672605][ T6539] page_type: f5(slab)
[   64.674191][ T6539] raw: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[   64.677616][ T6539] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   64.680864][ T6539] head: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[   64.684415][ T6539] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   64.687828][ T6539] head: 057ff00000000002 ffffea000443ba01 00000000ffffffff 00000000ffffffff
[   64.691147][ T6539] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   64.694476][ T6539] page dumped because: kasan: bad access detected
[   64.696849][ T6539] page_owner tracks the page as allocated
[   64.699026][ T6539] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5842, tgid 5842 (syz-executor), ts 53520644856, free_ts 53442956487
[   64.707144][ T6539]  post_alloc_hook+0x240/0x2a0
[   64.709004][ T6539]  get_page_from_freelist+0x21e4/0x22c0
[   64.711110][ T6539]  __alloc_frozen_pages_noprof+0x181/0x370
[   64.713298][ T6539]  alloc_pages_mpol+0x232/0x4a0
[   64.715190][ T6539]  allocate_slab+0x8a/0x370
[   64.716933][ T6539]  ___slab_alloc+0xbeb/0x1410
[   64.718909][ T6539]  __kmalloc_noprof+0x305/0x4f0
[   64.720904][ T6539]  fib6_info_alloc+0x30/0xf0
[   64.722765][ T6539]  ip6_route_info_create+0x142/0x860
[   64.724979][ T6539]  ip6_route_add+0x49/0x1b0
[   64.726783][ T6539]  addrconf_add_dev+0x24f/0x340
[   64.728771][ T6539]  addrconf_init_auto_addrs+0x57c/0xa30
[   64.731001][ T6539]  addrconf_notify+0xacc/0x1010
[   64.732881][ T6539]  notifier_call_chain+0x1b6/0x3e0
[   64.734972][ T6539]  __dev_notify_flags+0x18d/0x2e0
[   64.736975][ T6539]  netif_change_flags+0xe8/0x1a0
[   64.738928][ T6539] page last free pid 5850 tgid 5850 stack trace:
[   64.741461][ T6539]  __free_frozen_pages+0xbc4/0xd30
[   64.743520][ T6539]  __put_partials+0x156/0x1a0
[   64.745427][ T6539]  put_cpu_partial+0x17c/0x250
[   64.747379][ T6539]  __slab_free+0x2d5/0x3c0
[   64.749199][ T6539]  qlist_free_all+0x97/0x140
[   64.751053][ T6539]  kasan_quarantine_reduce+0x148/0x160
[   64.753268][ T6539]  __kasan_slab_alloc+0x22/0x80
[   64.755260][ T6539]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[   64.757631][ T6539]  sock_alloc_inode+0x28/0xc0
[   64.759529][ T6539]  alloc_inode+0x6a/0x1b0
[   64.761291][ T6539]  __sock_create+0x12d/0x9f0
[   64.763139][ T6539]  __sys_socket+0xd7/0x1b0
[   64.764966][ T6539]  __x64_sys_socket+0x7a/0x90
[   64.766881][ T6539]  do_syscall_64+0xfa/0x3b0
[   64.768707][ T6539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.771079][ T6539] 
[   64.772079][ T6539] Memory state around the buggy address:
[   64.774310][ T6539]  ffff888110ee9b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   64.777481][ T6539]  ffff888110ee9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   64.780645][ T6539] >ffff888110ee9c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   64.783810][ T6539]                                      ^
[   64.784067][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   64.786022][ T6539]  ffff888110ee9c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   64.792534][ T6539]  ffff888110ee9d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   64.795772][ T6539] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   64.805731][ T6539] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   64.808765][ T6539] CPU: 1 UID: 0 PID: 6539 Comm: syz.2.147 Not tainted syzkaller #0 PREEMPT(full) 
[   64.812364][ T6539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   64.816369][ T6539] Call Trace:
[   64.817718][ T6539]  <TASK>
[   64.818927][ T6539]  dump_stack_lvl+0x99/0x250
[   64.820812][ T6539]  ? __asan_memcpy+0x40/0x70
[   64.822642][ T6539]  ? __pfx_dump_stack_lvl+0x10/0x10
[   64.824747][ T6539]  ? __pfx__printk+0x10/0x10
[   64.826607][ T6539]  vpanic+0x281/0x750
[   64.828267][ T6539]  ? __pfx_print_hex_dump+0x10/0x10
[   64.830446][ T6539]  ? __pfx_vpanic+0x10/0x10
[   64.832256][ T6539]  ? preempt_schedule_common+0x83/0xd0
[   64.834449][ T6539]  ? preempt_schedule+0xae/0xc0
[   64.836411][ T6539]  panic+0xb9/0xc0
[   64.837924][ T6539]  ? __pfx_panic+0x10/0x10
[   64.839748][ T6539]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   64.842253][ T6539]  ? rose_transmit_link+0x5c3/0x740
[   64.844357][ T6539]  check_panic_on_warn+0x89/0xb0
[   64.846320][ T6539]  ? rose_transmit_link+0x5c3/0x740
[   64.848446][ T6539]  end_report+0x78/0x160
[   64.850176][ T6539]  kasan_report+0x129/0x150
[   64.852003][ T6539]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   64.854436][ T6539]  ? rose_transmit_link+0x5c3/0x740
[   64.856519][ T6539]  rose_transmit_link+0x5c3/0x740
[   64.858556][ T6539]  ? skb_put+0x11b/0x210
[   64.860265][ T6539]  rose_write_internal+0x11dc/0x1ac0
[   64.862503][ T6539]  ? __pfx_rose_write_internal+0x10/0x10
[   64.864820][ T6539]  ? __timer_delete+0x5d/0x390
[   64.866748][ T6539]  rose_release+0x24e/0x520
[   64.868590][ T6539]  sock_close+0xc3/0x240
[   64.870288][ T6539]  ? __pfx_sock_close+0x10/0x10
[   64.872247][ T6539]  __fput+0x44c/0xa70
[   64.873893][ T6539]  task_work_run+0x1d4/0x260
[   64.875789][ T6539]  ? __pfx_task_work_run+0x10/0x10
[   64.877797][ T6539]  ? task_work_add+0x377/0x420
[   64.879738][ T6539]  ? __pfx_task_work_add+0x10/0x10
[   64.881742][ T6539]  get_signal+0x11ed/0x1340
[   64.883582][ T6539]  ? __might_fault+0xb0/0x130
[   64.885489][ T6539]  arch_do_signal_or_restart+0x9a/0x750
[   64.887729][ T6539]  ? __pfx___sys_connect+0x10/0x10
[   64.889805][ T6539]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   64.892292][ T6539]  ? rcu_is_watching+0x15/0xb0
[   64.894250][ T6539]  ? rcu_is_watching+0x15/0xb0
[   64.896196][ T6539]  exit_to_user_mode_loop+0x75/0x110
[   64.898255][ T6539]  do_syscall_64+0x2bd/0x3b0
[   64.900133][ T6539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.902562][ T6539]  ? exc_page_fault+0x9f/0xf0
[   64.904501][ T6539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.906876][ T6539] RIP: 0033:0x7f1d7758ebe9
[   64.908678][ T6539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.916239][ T6539] RSP: 002b:00007f1d757ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   64.919591][ T6539] RAX: fffffffffffffe00 RBX: 00007f1d777b5fa0 RCX: 00007f1d7758ebe9
[   64.922659][ T6539] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000011
[   64.925728][ T6539] RBP: 00007f1d77611e19 R08: 0000000000000000 R09: 0000000000000000
[   64.928894][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   64.931965][ T6539] R13: 00007f1d777b6038 R14: 00007f1d777b5fa0 R15: 00007ffdd65091d8
[   64.934914][ T6539]  </TASK>
[   64.936517][ T6539] Kernel Offset: disabled
[   64.937809][ T6539] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:37:37  Registers:
info registers vcpu 0

CPU#0
RAX=ffa5b79cae9bf300 RBX=ffffffff819683b8 RCX=ffa5b79cae9bf300 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38630 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79d3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3f5bc4 CR3=0000000028d7e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fb7a4812e53
XMM06=0000000000000000 00007fb7a4812e4d XMM07=0000000000000000 00007fb7a4812e61
XMM08=0000000000000000 00007fb7a4812ee7 XMM09=0000000000000000 00007fb7a4812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013fc RDI=00000000000013fd RBP=00000000000003f8 RSP=ffffc90003bcf210
R8 =ffff8880201c0237 R9 =1ffff11004038046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afd915 R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1d757ee6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f328cd0b580 CR3=000000010f820000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=c648849868269e96 48dcb0cabe8ccdcb
XMM02=9c3d7f047d5cd633 5e55a9d0460b5e38 XMM03=d264bf5bec921a57 9576872bb6ac32fd
XMM04=12e7c2c497c444f1 de9b18d5585a82de XMM05=c166a0c85c3f303a 93b88b5adc419d2a
XMM06=3bc777cdae54c689 9263da50f7040af5 XMM07=6627fd3a38a7d3bc 2cbea743369012e7
XMM08=c2c497c444f1de9b 18d5585a82ded264 XMM09=0000000000000000 00007fcd7f012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
