last executing test programs:

900.255566ms ago: executing program 1 (id=213):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001200)=@o_path={&(0x7f0000001100)='./file0\x00', r3}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

820.375963ms ago: executing program 1 (id=214):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe59, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0)

819.817508ms ago: executing program 1 (id=215):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, <r2=>0x0}, 0xfffffffffffffcb7) (async)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x12, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2805}, 0x80)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=<r13=>0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r12], 0x54}}, 0x0) (async)
r14 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
r15 = socket$netlink(0x10, 0x3, 0x0) (async)
r16 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) (async)
sendmsg$nl_route(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r13, @ANYRES32=r2, @ANYRES8=r14], 0x20}}, 0x0) (async)
r17 = socket(0x1, 0x803, 0x0)
getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r18}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

749.790381ms ago: executing program 1 (id=216):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

749.155153ms ago: executing program 1 (id=217):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x40d, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_CARRIER={0x5, 0x21, 0x9}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip_vti0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_TXQLEN={0x8, 0xd, 0x3ff}]}, 0x4c}}, 0x0)

700.785199ms ago: executing program 1 (id=218):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f100000"], 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

369.103125ms ago: executing program 2 (id=221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10, 0x5}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0xb, 0x4}, 0x28)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0)
getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x49, 0x4)
getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0)

330.749661ms ago: executing program 2 (id=222):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x8001, 0x0, 0xf, 0xfffffff7}}}}]}, 0x4c}}, 0x44000)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r3=>0x0)
sendmsg$kcm(r1, &(0x7f0000001880)={&(0x7f0000000080)=@nfc={0x27, r3, 0x1, 0x2}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="face9c78ff6763dfb8e96874d94b909763e5fd5426b3b91432d7ec31fc4997d26aec730cdf57697edabddbdbd5038e482c2ea31489798b6fc88d7184b091f609dbc49a953b0c6346dc601e1cb64931dd1146685d641937a264a381eb57b0859c278bf9", 0x63}, {&(0x7f0000000280)="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", 0xfb}, {&(0x7f0000000100)="c87e223e6cf559999a523c5f31", 0xd}, {&(0x7f0000000380)="739229ce42895d1af034fe7136ae235ce88cc3cd6178f88c51614a9607516b028ed2aad7365fc51209163e52f3aa6b494da3aee77b5b9087ec06d057fbd050057ad97e9287f178b17a7290abe46c6fc04ccaaf1621036fa7e2ada97d2cb8e5cd650828efd64415bb8acbbdcd398b26436962bd99450dcc71a841d0137353ec63b8a1fe77670047efd33352baba226711d6ab9061d0fd81c7de7472c34e216080c06099c0fd5cfdb1bc9028126f61c8", 0xaf}, {&(0x7f0000000440)="8629955c5d0cc01cd857f4a4d1fa78f728ffaf647c33f7d483e8e084c146d354b89a541644fcb6461a922216eaee694a1466c762", 0x34}, {&(0x7f0000000480)="c6c9fe263afb354fa31649d1a7109c0e33cd976bfcb831c081935415592755e33125a74ba49aca06dc10048c1d65331e7e7d2b9fdac2add674fb8b5bd2fda91e476b255aa1e7a70ff2188638547c7b5c3af450985c07d0638445128afc46e73772a3f7e3f51dfa005720996eeb2db6801a", 0x71}, {&(0x7f0000000500)="5b548daf3d981b021d5ff1d2070a4e811b65ab25ce1f9942cfda6bbf754f8e8cbd18ec1800b251e1", 0x28}], 0x7, &(0x7f00000005c0)=[{0x1010, 0x101, 0x8, "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"}, {0x108, 0x3a, 0x9, "4aa02095444df4180cf351d230821e9771d8e9ae744c009d1beadd61f5accae56c0d49e005761cfe4d2e7163d6a1518aef9812e0b2b5a4fac7dadbe374086866b4bba2c4dc09d2706803fa2c1e15252f6adc8dddb758807644e249bac743972de81037b8ee8261382f6acedfbdbfca006067721d0f7d116d54c14f37b99365e7a710f3029ff34574a00641a0e142717c20769fa85f98345f4a5d7acd82fdac8e85833b5c45e99b24736808160cdd0e4e92cfa424c692c70b50027382d6ec22526f065b689884450413f1cdfce53cf354b2db8ad99ab0d5f7f5281fc5ecea0b8bafbba20c859038f5419c03d0440044b21727c9af"}, {0x38, 0x1, 0x80000000, "80189ccaa2c930b3443e973e9d8c6e426982fbf802d0ff779ca29eccb6ae74e3cb3376220437b96e"}, {0x108, 0x0, 0x5, "df1ab59ea0873a15f837fe6ec86e235839a2ab93b95004b0d156d5708fa2c61cb08ba5add7a0c7892a5f5c3456c5765b62257940f7fa944e166f0f15a963f8e20b119238d11d7a010c5588fe29a5ebc7d2af09ce2b1590282ec1cb85030cb4caa2027bf8e18d393dfaae47b6ba33dc515608e955beaab90a7532984759464a2b6aea4149175c24bea391e93f96702b84159346743b7fc9804edf615285fef821b0427ffeafde9897e5bde4493e355c7e334208a913e2c5531b02703512f4641acf923fb6d4cd7b7a0a48942fd11267d1d2e5d971df1a85851101c8e364b012e29395fd02cda18557870ded653efebffddf68"}, {0x30, 0x10f, 0x73, "70d4bc5798023231805c4e84bbdf95f0137cdfd77ab686cf387994179609"}], 0x1288}, 0x20004050)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000b1bda00000000002c00128009000100626f6e6400005712b928e07f05000100040000000600180000100000060019"], 0x4c}}, 0x0)

270.809678ms ago: executing program 2 (id=223):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8854}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x4000)

209.597822ms ago: executing program 2 (id=224):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0xf)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES32=r5, @ANYBLOB="626f6e64000000000c0002000800010004"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000140), 0x10) (async)
sendmmsg$sock(r10, &(0x7f0000003180)=[{{&(0x7f0000000240)=@qipcrtr={0x1d, 0x4, 0x3fff}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="024468f75872dc275c4a865167ce141180f86d6d2d2b667592a3c33936462143e78071d6c161acbb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86985e3ae7dbd8b6bc88af3374be083ced9a2b1f3b847103a9ad492dabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25", 0x7e}, {&(0x7f0000000340)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d84173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x200000c1) (async)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
r11 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) (async)
unshare(0x2c060000) (async)
unshare(0x2c020400) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r12, &(0x7f0000000340)=ANY=[@ANYRESOCT=r12, @ANYBLOB="41bf0359dedeb1c9a2af5381a5e01b0749a78b97f0047d6f64b166f1c4bdd43a558ca6ce35d71616429ddc0de0190ec6fa84fffe5aff637d197bfbc63394a4dc076cb4b826235b5953a530060efd532bd1f87fde32bd", @ANYRESHEX, @ANYRESHEX=r12, @ANYRESOCT=r12], 0x141)

207.689457ms ago: executing program 0 (id=225):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r1=>0x0}) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x1630, 0x12c8, 0x1400, 0x1400, 0x1400, 0x1400, 0x1560, 0x1560, 0x1560, 0x1560, 0x1560, 0x6, 0x0, {[{{@ipv6={@loopback, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x7, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x7, {0x5}}}, @common=@hl={{0x28}, {0x0, 0x8}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1690)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x400c844}, 0x50)
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000040)={r6}) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080)={r6}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async)
r8 = epoll_create(0x2)
epoll_pwait(r8, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x5, &(0x7f0000000180)={[0x1]}, 0x8) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
r12 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', <r13=>0x0})
r14 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="5b2c751c5a43ce8e807ee644d6820a01ab782e0ff8484b2b92ca386fab3a906b3ed017b78488a57e5281c46bb3ea33068354fd4dc69737ee1756df5dade2cdfb299a96ed1148a235df9f6fcee32b4f5fada0717acc62302a8930365f440a288c8a5289ae18ef42199dfc043107aab4b53b5415d0c066c6880a6e10d2b9a43b6b2c79f3c6974a03ae111f5eadaffbe7f9cbe4d4a3584e8cf185d87bf62ef2a050ffa6e0220f5ce44c2b58740e267b8d72500df6fe78b6e6b0602bab986f8ccf6637849efa802eb304555a941b367c23bdbeb789addeff981fb81a561de729be9fee71838fce08928936efcc", 0xeb}, {&(0x7f00000003c0)="8df5a33f240aba8e0963336121ceb66d624d22438ed194ef6e5f0dd07a91934e09cd6eb17ed79bf70710150a09da1507a20929f9d36bad7971db014c2162170a46246c44b0d6e62f8d84ed92f10695da98ef81b25761d2d837512c957dfac80955d61355b1", 0x65}], 0x2, &(0x7f0000000180)}, 0x41084) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

206.424916ms ago: executing program 2 (id=226):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10009}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x3}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000000c0)=0x3, 0x4)

206.179765ms ago: executing program 0 (id=227):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080005"], 0x24}}, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

118.520778ms ago: executing program 2 (id=228):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
sendto$inet6(r0, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[], 0x34}}, 0x8050)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$EBT_SO_GET_INFO(r12, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78)
getsockopt$EBT_SO_GET_ENTRIES(r12, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x9, 0xfa, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x78)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13], 0x20}}, 0x0)

118.264734ms ago: executing program 0 (id=229):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r1 = gettid()
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0xa) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x4000801}, 0x8000) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r7, @ANYRES64=r4, @ANYRES8=0x0, @ANYRES64=r8, @ANYRESDEC=r6], 0x54}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r10, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
sendmsg$inet6(r10, &(0x7f0000000340)={&(0x7f00000000c0)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x20000000) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000400))
sendmsg$nl_route(r11, 0x0, 0x44004)

70.555354ms ago: executing program 0 (id=230):
r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000000)=0x80) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0}) (async)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x3001}, 0xc, &(0x7f0000000780)={&(0x7f0000000fc0)={0x3f8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x50a5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1037}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @loopback, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x10, @empty, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @remote, 0x422}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa3, 0x3, "a91372f3dd8c6c93439ee1f0927a8c3eea8fe66cd704bb13b85625ab40a914a0845eed6b031247053c7644349894b67f55425760fddb856eb5a1403a1dfab2ee80a63bced68547c632b40bc9b6d5854c7d7bfdcd2f0c1bc46650a4c38de6245f92183d38a4149bcc40d9fdaf3600fbdda372268f9cbf250a2d692595b1a0c6027ead2b9830c96b843b765d554ac767db5ff5aeaa2a2eb57f913c007abe1d66"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4ec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf9}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0xa0}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', <r6=>0x0}) (async)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4)
sendto$packet(r5, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r7, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40810)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000006c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r7, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x72, 0x54}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xf}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x11)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x30}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xdd0e}]}, 0x38}}, 0x0)

229.107µs ago: executing program 0 (id=231):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)={0x1cc, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x130, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) (async)
r11 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0) (async)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

0s ago: executing program 0 (id=232):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@dev, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x48, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40090}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000100007010000000000000000037c00001800018014fb"], 0x2c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28257' (ED25519) to the list of known hosts.
syzkaller login: [   40.769396][ T5754] cgroup: Unknown subsys name 'net'
[   40.877356][ T5754] cgroup: Unknown subsys name 'cpuset'
[   40.881474][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.160345][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.524367][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.535383][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.538067][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.540948][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.543699][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.585092][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.588068][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.590724][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.593772][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.596720][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.626631][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.629296][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.632016][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.636068][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.638896][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.748732][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   45.856275][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   45.860987][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.863603][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.867405][ T5826] bridge_slave_0: entered allmulticast mode
[   45.870169][ T5826] bridge_slave_0: entered promiscuous mode
[   45.881607][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.883936][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.886680][ T5826] bridge_slave_1: entered allmulticast mode
[   45.889305][ T5826] bridge_slave_1: entered promiscuous mode
[   45.913268][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   45.920481][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.930700][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.973811][ T5826] team0: Port device team_slave_0 added
[   45.987974][ T5826] team0: Port device team_slave_1 added
[   45.997806][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.000705][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.003675][ T5831] bridge_slave_0: entered allmulticast mode
[   46.007987][ T5831] bridge_slave_0: entered promiscuous mode
[   46.038217][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.040575][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.042927][ T5831] bridge_slave_1: entered allmulticast mode
[   46.047251][ T5831] bridge_slave_1: entered promiscuous mode
[   46.056414][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.058713][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.061018][ T5833] bridge_slave_0: entered allmulticast mode
[   46.063784][ T5833] bridge_slave_0: entered promiscuous mode
[   46.067984][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.070258][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.072533][ T5833] bridge_slave_1: entered allmulticast mode
[   46.075323][ T5833] bridge_slave_1: entered promiscuous mode
[   46.078128][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.080335][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.088714][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.101891][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.119591][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.121802][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.130282][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.136464][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.144394][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.155921][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.167823][ T5831] team0: Port device team_slave_0 added
[   46.190578][ T5831] team0: Port device team_slave_1 added
[   46.201832][ T5833] team0: Port device team_slave_0 added
[   46.213903][ T5826] hsr_slave_0: entered promiscuous mode
[   46.216812][ T5826] hsr_slave_1: entered promiscuous mode
[   46.220330][ T5833] team0: Port device team_slave_1 added
[   46.252643][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.255917][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.266410][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.281483][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.283803][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.293447][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.297546][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.299792][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.310071][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.321061][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.323320][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.331958][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.392128][ T5831] hsr_slave_0: entered promiscuous mode
[   46.394441][ T5831] hsr_slave_1: entered promiscuous mode
[   46.396870][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.399366][ T5831] Cannot create hsr debugfs directory
[   46.415934][ T5833] hsr_slave_0: entered promiscuous mode
[   46.418177][ T5833] hsr_slave_1: entered promiscuous mode
[   46.420232][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.422619][ T5833] Cannot create hsr debugfs directory
[   46.556956][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.570777][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.586633][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.597029][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.630247][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.632696][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.635483][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.637765][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.654933][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.661818][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.680379][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.688834][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.697717][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.701722][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.709674][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.717813][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.738238][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.740545][ T5831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.742908][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.745272][ T5831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.757396][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.761729][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.768366][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.771764][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.789436][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.818346][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   46.835639][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.837960][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.847505][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.849824][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.860920][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.879437][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.884180][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   46.897229][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.899567][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.911929][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   46.916745][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.919142][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.941393][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.943787][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.954620][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.957051][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.978828][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.049807][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.096851][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.112669][ T5826] veth0_vlan: entered promiscuous mode
[   47.118820][ T5826] veth1_vlan: entered promiscuous mode
[   47.141480][ T5826] veth0_macvtap: entered promiscuous mode
[   47.158573][ T5826] veth1_macvtap: entered promiscuous mode
[   47.161060][ T5831] veth0_vlan: entered promiscuous mode
[   47.165385][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.176382][ T5831] veth1_vlan: entered promiscuous mode
[   47.180360][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.189103][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.195687][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.198566][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.201320][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.204127][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.229511][ T5831] veth0_macvtap: entered promiscuous mode
[   47.245616][ T5831] veth1_macvtap: entered promiscuous mode
[   47.251557][ T5833] veth0_vlan: entered promiscuous mode
[   47.277661][ T5833] veth1_vlan: entered promiscuous mode
[   47.283556][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.285956][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.288815][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.303015][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.311648][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.312667][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.316163][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.318666][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.322265][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.327060][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.345930][ T5833] veth0_macvtap: entered promiscuous mode
[   47.358640][ T5833] veth1_macvtap: entered promiscuous mode
[   47.369721][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.381727][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.398415][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.406693][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.409156][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.416766][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.419505][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.422259][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.431532][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.451055][ T3188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.455653][ T3188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.473056][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.480101][ T5891] Zero length message leads to an empty skb
[   47.524332][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.527942][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.541463][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4'.
[   47.555508][ T5219] Bluetooth: hci0: command tx timeout
[   47.558599][ T5893] sch_tbf: burst 0 is lower than device erspan0 mtu (1464) !
[   47.565201][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.567723][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.609885][ T5895] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.617001][ T5897] pim6reg1: entered promiscuous mode
[   47.618803][ T5897] pim6reg1: entered allmulticast mode
[   47.635421][ T5219] Bluetooth: hci1: command tx timeout
[   47.678411][ T5901] bridge_slave_0: left allmulticast mode
[   47.680283][ T5901] bridge_slave_0: left promiscuous mode
[   47.682163][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.687671][ T5901] bridge_slave_1: left allmulticast mode
[   47.689701][ T5901] bridge_slave_1: left promiscuous mode
[   47.691591][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.698078][ T5901] bond0: (slave bond_slave_0): Releasing backup interface
[   47.702341][ T5901] bond0: (slave bond_slave_1): Releasing backup interface
[   47.712456][ T5901] team0: Port device team_slave_0 removed
[   47.715235][ T5219] Bluetooth: hci2: command tx timeout
[   47.720509][ T5901] team0: Port device team_slave_1 removed
[   47.722826][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.725857][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.728873][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.731246][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.753345][ T5901] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   47.766738][    C0] Illegal XDP return value 16128 on prog  (id 3) dev lo, expect packet loss!
[   47.804023][ T5908] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   47.872825][ T5908] veth3: entered promiscuous mode
[   47.966891][ T5912] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8'.
[   47.969781][ T5912] netlink: 35 bytes leftover after parsing attributes in process `syz.2.8'.
[   47.974105][ T5913] netlink: 'syz.2.8': attribute type 1 has an invalid length.
[   48.042861][ T5923] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   48.062249][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'.
[   48.068684][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'.
[   48.157411][ T5935] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   48.160684][ T5939] netlink: 'syz.2.13': attribute type 1 has an invalid length.
[   48.163792][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'.
[   48.166560][ T5937] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.174668][ T5935] bridge_slave_0: left allmulticast mode
[   48.177328][ T5935] bridge_slave_0: left promiscuous mode
[   48.179250][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.183668][ T5935] bridge_slave_1: left allmulticast mode
[   48.198832][ T5935] bridge_slave_1: left promiscuous mode
[   48.200719][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.209274][ T5935] bond0: (slave bond_slave_0): Releasing backup interface
[   48.213517][ T5935] bond0: (slave bond_slave_1): Releasing backup interface
[   48.230099][ T5935] team0: Port device team_slave_0 removed
[   48.235338][ T5935] team0: Port device team_slave_1 removed
[   48.238020][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.241150][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0
[   48.246209][ T5935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.249298][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.260872][ T5937] netlink: 'syz.0.14': attribute type 10 has an invalid length.
[   48.263626][ T5937] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   48.269260][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.273314][ T5937] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   48.829514][ T5951] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   48.844356][ T5951] bridge_slave_0: left allmulticast mode
[   48.847506][ T5951] bridge_slave_0: left promiscuous mode
[   48.849363][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.853197][ T5951] bridge_slave_1: left allmulticast mode
[   48.855686][ T5951] bridge_slave_1: left promiscuous mode
[   48.857680][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.862032][ T5951] bond0: (slave bond_slave_0): Releasing backup interface
[   48.868829][ T5951] bond0: (slave bond_slave_1): Releasing backup interface
[   48.877389][ T5951] team0: Port device team_slave_0 removed
[   48.882109][ T5951] team0: Port device team_slave_1 removed
[   48.884347][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.887683][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0
[   48.891125][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.892966][ T5952] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.893533][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.922886][ T5951] netlink: 'syz.1.16': attribute type 10 has an invalid length.
[   48.928754][ T5951] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   48.933579][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.938680][ T5951] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   48.985841][   T10] cfg80211: failed to load regulatory.db
[   48.986030][ T5937] syz.0.14 (5937) used greatest stack depth: 19992 bytes left
[   49.034536][ T5954] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   49.041535][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'.
[   49.058439][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   49.116804][ T5943] delete_channel: no stack
[   49.129741][ T5954] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   49.135845][ T5954] bond0 (unregistering): Released all slaves
[   49.183754][ T5969] netlink: 'syz.0.21': attribute type 1 has an invalid length.
[   49.243335][ T5975] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   49.258029][ T5975] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET)
[   49.264172][ T5975] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   49.367208][ T5983] netlink: 'syz.2.25': attribute type 16 has an invalid length.
[   49.369734][ T5983] netlink: 'syz.2.25': attribute type 17 has an invalid length.
[   49.419182][ T5985] IPv6: NLM_F_REPLACE set, but no existing node found!
[   49.549862][ T5983] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.552739][ T5983] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.557077][ T5983] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.559944][ T5983] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.634913][ T5219] Bluetooth: hci0: command tx timeout
[   49.715197][ T5219] Bluetooth: hci1: command tx timeout
[   49.794849][ T5219] Bluetooth: hci2: command tx timeout
[   50.223181][ T5992] netlink: 'syz.1.28': attribute type 1 has an invalid length.
[   50.284092][ T5992] veth3: entered promiscuous mode
[   50.295271][ T5994] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   50.298740][ T5994] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   50.330701][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.28'.
[   50.370876][ T5999] batman_adv: batadv0: Adding interface: ip6gretap1
[   50.373248][ T5999] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.382227][ T5999] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[   50.462605][ T6001] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.523475][ T6008] sch_tbf: burst 0 is lower than device wg1 mtu (1420) !
[   50.560351][ T6010] veth0_to_bridge: entered promiscuous mode
[   50.562422][ T6010] veth0_to_bridge: entered allmulticast mode
[   50.621523][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.027536][ T6017] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   51.030913][ T6017] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   51.065116][ T6020] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   51.068266][ T6020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.254252][ T6040] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) !
[   51.287475][ T6038] veth3: entered promiscuous mode
[   51.410255][ T6045] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.413132][ T6045] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.416824][ T6045] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.419668][ T6045] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.495772][ T6047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.559831][ T6056] veth0_to_bridge: left promiscuous mode
[   51.561791][ T6056] veth0_to_bridge: left allmulticast mode
[   51.574141][ T6057] tipc: Started in network mode
[   51.576795][ T6057] tipc: Node identity 4e881dd1141e, cluster identity 4711
[   51.579413][ T6057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.581901][ T6057] syzkaller0: entered promiscuous mode
[   51.583756][ T6057] syzkaller0: entered allmulticast mode
[   51.597378][ T6057] tipc: Resetting bearer <eth:syzkaller0>
[   51.682536][ T6063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   51.687082][ T6063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   51.691786][ T6063] sch_tbf: burst 0 is lower than device hsr0 mtu (1508) !
[   51.714878][ T5219] Bluetooth: hci0: command tx timeout
[   51.723774][ T6065] veth0_virt_wifi: entered promiscuous mode
[   51.725880][ T6065] veth0_virt_wifi: entered allmulticast mode
[   51.804777][ T5219] Bluetooth: hci1: command tx timeout
[   51.835830][ T6067] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.839911][ T6067] batman_adv: batadv0: Removing interface: ip6gretap1
[   51.884819][ T5219] Bluetooth: hci2: command tx timeout
[   51.935294][ T6080] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   51.952926][ T6080] bond0: (slave wlan1): Releasing backup interface
[   51.993944][ T6084] macsec0: entered promiscuous mode
[   51.996159][ T6084] macsec0: entered allmulticast mode
[   51.997882][ T6084] veth1_macvtap: entered allmulticast mode
[   52.074973][ T6085] veth1_macvtap: left allmulticast mode
[   52.356729][ T6053] tipc: Resetting bearer <eth:syzkaller0>
[   52.371682][ T6053] tipc: Disabling bearer <eth:syzkaller0>
[   52.391087][ T6120] veth3: entered promiscuous mode
[   52.479802][ T6127] xt_cgroup: xt_cgroup: no path or classid specified
[   52.557517][ T6132] 8021q: adding VLAN 0 to HW filter on device bond3
[   52.568116][ T6132] bond3: (slave ip6gretap2): making interface the new active one
[   52.571219][ T6132] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link
[   52.587499][ T6132] veth3: entered promiscuous mode
[   52.590669][ T6132] bond3: (slave veth3): Enslaving as an active interface with a down link
[   52.595621][ T6132] erspan0: entered allmulticast mode
[   52.599098][ T6132] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   52.703040][ T6144] __nla_validate_parse: 14 callbacks suppressed
[   52.703049][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[   52.713208][ T6125] vlan2: entered allmulticast mode
[   52.715600][ T6125] veth1: entered allmulticast mode
[   52.730377][ T6144] veth3: entered promiscuous mode
[   52.744272][ T6145] veth5: entered promiscuous mode
[   52.775859][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.70'.
[   52.779503][ T6123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   52.843049][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'.
[   52.848202][ T6153] validate_nla: 20 callbacks suppressed
[   52.848209][ T6153] netlink: 'syz.1.72': attribute type 1 has an invalid length.
[   52.887803][ T6156] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.896160][ T6156] bond0: (slave macvlan2): Opening slave failed
[   52.937110][ T6156] bond3: (slave erspan0): Releasing active interface
[   52.939317][ T6156] ip6gretap2: entered promiscuous mode
[   52.943214][ T6156] bond3: (slave ip6gretap2): Releasing active interface
[   52.945847][ T6156] bond3: (slave ip6gretap2): the permanent HWaddr of slave - 46:a1:41:bd:5e:7f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   52.951565][ T6156] ip6gretap2: left promiscuous mode
[   52.955162][ T6156] bond3: (slave veth3): Releasing active interface
[   52.984355][ T6158] netlink: 'syz.1.74': attribute type 1 has an invalid length.
[   53.004785][ T6158] 8021q: adding VLAN 0 to HW filter on device bond5
[   53.016264][ T6158] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   53.019973][ T6158] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   53.023209][ T6158] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   53.026404][ T6158] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   53.031075][ T6166] netlink: 'syz.2.76': attribute type 3 has an invalid length.
[   53.048652][ T6158] vlan2: entered promiscuous mode
[   53.056313][ T6158] bond5: entered promiscuous mode
[   53.058061][ T6158] vlan2: entered allmulticast mode
[   53.059743][ T6158] bond5: entered allmulticast mode
[   53.071925][ T6158] bond5: (slave gretap1): making interface the new active one
[   53.074415][ T6158] gretap1: entered promiscuous mode
[   53.077917][ T6158] gretap1: entered allmulticast mode
[   53.080482][ T6158] bond5: (slave gretap1): Enslaving as an active interface with an up link
[   53.089641][ T6168] netlink: 76 bytes leftover after parsing attributes in process `syz.2.77'.
[   53.110267][ T6158] syz.1.74 (6158) used greatest stack depth: 19624 bytes left
[   53.152518][ T6175] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[   53.156759][ T6175] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[   53.181104][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'.
[   53.184326][ T6181] netlink: 'syz.1.80': attribute type 1 has an invalid length.
[   53.310718][ T6187] x_tables: duplicate underflow at hook 1
[   53.346128][ T6190] netlink: 'syz.0.83': attribute type 1 has an invalid length.
[   53.398305][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.83'.
[   53.424500][ T6195] netlink: 'syz.0.84': attribute type 1 has an invalid length.
[   53.428631][ T6195] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[   53.431153][ T6195] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   53.435635][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   53.478490][ T6200] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[   53.481573][ T6200] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[   53.504872][ T6202] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   53.507479][ T6202] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   53.537228][ T6207] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   53.602954][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'.
[   53.780305][ T6219] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[   53.782695][ T6219] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[   53.795612][ T5219] Bluetooth: hci0: command tx timeout
[   53.804938][ T6219] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.807861][ T6219] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.810840][ T6219] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.814397][ T6219] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.822569][ T6219] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   53.825950][ T6219] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[   53.867867][ T6224] netlink: 'syz.0.92': attribute type 1 has an invalid length.
[   53.875015][ T5219] Bluetooth: hci1: command tx timeout
[   53.876815][ T6224] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   53.881542][ T6224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   53.886178][ T5876] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   53.887012][ T6224] 8021q: adding VLAN 0 to HW filter on device bond4
[   53.956697][ T5219] Bluetooth: hci2: command tx timeout
[   53.977628][ T6224] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   53.981552][ T6224] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface
[   53.986743][ T6224] bond4 (unregistering): Released all slaves
[   54.068281][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'.
[   54.072139][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'.
[   54.152114][ T6234] pim6reg1: entered promiscuous mode
[   54.154053][ T6234] pim6reg1: entered allmulticast mode
[   54.192197][ T6236] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   54.204586][ T6236] veth3: entered promiscuous mode
[   54.298462][ T6234] 8021q: adding VLAN 0 to HW filter on device bond8
[   54.301683][ T6234] team0: Port device bond8 added
[   54.451232][ T6254] netlink: 'syz.2.99': attribute type 1 has an invalid length.
[   54.470585][ T6254] 8021q: adding VLAN 0 to HW filter on device bond4
[   54.505096][ T6257] 8021q: adding VLAN 0 to HW filter on device bond5
[   54.534098][ T6261] erspan0: left allmulticast mode
[   54.539125][ T6261] veth0_virt_wifi: left promiscuous mode
[   54.541114][ T6261] veth0_virt_wifi: left allmulticast mode
[   54.543803][ T6261] macsec0: left promiscuous mode
[   54.545864][ T6261] macsec0: left allmulticast mode
[   54.550204][ T6261] veth3: left promiscuous mode
[   54.556947][ T6261] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   54.560003][ T6261] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   54.562972][ T6261] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   54.566354][ T6261] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   54.570809][ T6261] vlan2: left promiscuous mode
[   54.572870][ T6261] bond5: left promiscuous mode
[   54.574990][ T6261] gretap1: left promiscuous mode
[   54.577182][ T6261] vlan2: left allmulticast mode
[   54.579222][ T6261] bond5: left allmulticast mode
[   54.581256][ T6261] gretap1: left allmulticast mode
[   54.586220][ T6262] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[   54.596137][ T6261] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   54.602129][ T6261] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   54.605236][ T6261] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   54.608195][ T6261] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   54.754547][ T6275] veth5: entered promiscuous mode
[   54.758419][ T6275] bond11: (slave veth5): Enslaving as a backup interface with a down link
[   54.857403][ T5861] hid-generic 0005:0B57:1010.0001: item fetching failed at offset 0/1
[   54.864215][ T5861] hid-generic 0005:0B57:1010.0001: probe with driver hid-generic failed with error -22
[   54.897792][ T6291] bond5: (slave gretap1): Releasing active interface
[   54.908562][ T6291] team0: Port device bond8 removed
[   54.911606][ T6291] bond11: (slave veth5): Releasing backup interface
[   55.637636][ T6297] 8021q: adding VLAN 0 to HW filter on device bond6
[   55.678269][ T6297] bond6 (unregistering): Released all slaves
[   55.783645][ T6300] veth3: entered promiscuous mode
[   55.857487][ T6309] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   55.866435][ T6309] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   55.893196][ T6309] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   55.906097][ T6309] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   56.113728][ T6330] veth7: entered promiscuous mode
[   56.211024][ T6335] xfrm1: entered promiscuous mode
[   56.311175][ T6342] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) !
[   56.414971][ T6351] veth7: entered promiscuous mode
[   56.528441][ T6359] bond15: entered promiscuous mode
[   56.530484][ T6359] bond15: entered allmulticast mode
[   56.532460][ T6359] 8021q: adding VLAN 0 to HW filter on device bond15
[   56.711336][ T6371] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) !
[   56.832839][ T6379] 8021q: adding VLAN 0 to HW filter on device bond17
[   56.963941][ T6389] 8021q: adding VLAN 0 to HW filter on device bond18
[   57.051616][ T6396] sch_tbf: burst 0 is lower than device bridge3 mtu (1514) !
[   57.174106][ T6404] bond19: (slave gretap2): making interface the new active one
[   57.178926][ T6404] bond19: (slave gretap2): Enslaving as an active interface with an up link
[   57.259957][ T6407] bond19: (slave gretap2): Releasing active interface
[   57.321754][ T6415] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   57.326685][ T6415] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   57.605952][ T6453] IPVS: set_ctl: invalid protocol: 27767 49.0.0.0:0
[   57.652480][ T6469] 8021q: adding VLAN 0 to HW filter on device bond21
[   57.706909][ T6479] 8021q: adding VLAN 0 to HW filter on device bond22
[   57.710357][ T6473] 8021q: adding VLAN 0 to HW filter on device bond8
[   57.743269][ T6473] veth3: entered promiscuous mode
[   57.748087][ T6473] bond8: (slave veth3): Enslaving as a backup interface with a down link
[   57.758777][ T6479] veth7: entered promiscuous mode
[   57.765374][ T6479] erspan0: entered allmulticast mode
[   57.808958][ T6482] __nla_validate_parse: 23 callbacks suppressed
[   57.808967][ T6482] netlink: 52 bytes leftover after parsing attributes in process `syz.1.158'.
[   57.834744][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'.
[   57.837614][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'.
[   57.840499][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.158'.
[   57.849986][ T6485] veth5: entered promiscuous mode
[   57.853127][ T6485] bond9: (slave veth5): Enslaving as a backup interface with a down link
[   57.858202][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'.
[   57.878805][ T6485] 8021q: adding VLAN 0 to HW filter on device bond9
[   57.883036][ T6492] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   57.927623][ T6500] validate_nla: 27 callbacks suppressed
[   57.927632][ T6500] netlink: 'syz.1.161': attribute type 1 has an invalid length.
[   57.932465][ T6498] bond8: (slave veth3): Releasing backup interface
[   57.939514][ T6498] bond9: (slave veth5): Releasing backup interface
[   57.974568][ T6506] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   57.992559][ T6500] veth9: entered promiscuous mode
[   57.996866][ T6500] bond23: (slave veth9): Enslaving as a backup interface with a down link
[   58.003691][ T6500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.161'.
[   58.010662][ T6508] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   58.016199][ T6500] 8021q: adding VLAN 0 to HW filter on device bond23
[   58.025843][ T6506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   58.028785][ T6506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   58.032561][ T6506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   58.036015][ T6506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   58.040073][ T6506] bond8: (slave geneve2): making interface the new active one
[   58.042914][ T6506] bond8: (slave geneve2): Enslaving as an active interface with an up link
[   58.046438][ T6511] netlink: 'syz.1.166': attribute type 1 has an invalid length.
[   58.052777][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'.
[   58.079783][ T6511] bond24: (slave bridge4): making interface the new active one
[   58.082553][ T6511] bond24: (slave bridge4): Enslaving as an active interface with an up link
[   58.086100][ T6508] netlink: 'syz.0.165': attribute type 10 has an invalid length.
[   58.088620][ T6508] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   58.106202][ T6508] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   58.141316][ T6516] netlink: 'syz.1.168': attribute type 1 has an invalid length.
[   58.160965][ T6516] 8021q: adding VLAN 0 to HW filter on device bond25
[   58.169739][ T6516] bond25: (slave gretap3): making interface the new active one
[   58.172980][ T6516] bond25: (slave gretap3): Enslaving as an active interface with an up link
[   58.178219][ T6516] syz.1.168 (6516) used greatest stack depth: 19000 bytes left
[   58.201663][ T6524] netlink: 148 bytes leftover after parsing attributes in process `syz.1.170'.
[   58.206314][ T6524] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   58.317066][ T6528] Bluetooth: MGMT ver 1.23
[   58.322943][ T6528] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.170'.
[   59.037385][ T6540] netlink: 80 bytes leftover after parsing attributes in process `syz.2.172'.
[   59.057075][ T6541] netlink: 'syz.0.173': attribute type 1 has an invalid length.
[   59.065177][ T6543] netlink: 'syz.1.174': attribute type 1 has an invalid length.
[   59.069751][ T6541] veth7: entered promiscuous mode
[   59.081857][ T6541] erspan0: entered allmulticast mode
[   59.086737][ T6543] 8021q: adding VLAN 0 to HW filter on device bond26
[   59.098015][ T6543] veth11: entered promiscuous mode
[   59.108334][ T6543] bond26: (slave veth11): Enslaving as a backup interface with a down link
[   59.119309][ T6546] netlink: 'syz.0.175': attribute type 1 has an invalid length.
[   59.131856][ T6546] 8021q: adding VLAN 0 to HW filter on device bond10
[   59.141862][ T6546] vlan2: entered promiscuous mode
[   59.143535][ T6546] bond10: entered promiscuous mode
[   59.146709][ T6546] vlan2: entered allmulticast mode
[   59.148468][ T6546] bond10: entered allmulticast mode
[   59.160100][ T6546] bond10: (slave gretap1): making interface the new active one
[   59.162577][ T6546] gretap1: entered promiscuous mode
[   59.164356][ T6546] gretap1: entered allmulticast mode
[   59.167637][ T6546] bond10: (slave gretap1): Enslaving as an active interface with an up link
[   59.187350][ T6550] sch_tbf: burst 0 is lower than device bridge5 mtu (1514) !
[   59.238820][ T6556] netlink: 'syz.1.178': attribute type 1 has an invalid length.
[   59.323215][ T6562] netlink: 'syz.0.181': attribute type 1 has an invalid length.
[   59.347152][ T6563] bond11 (unregistering): Released all slaves
[   59.497278][ T6578] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[   59.677961][ T6597] bond23: (slave veth9): Releasing backup interface
[   59.687188][ T6597] bond24: (slave bridge4): Releasing active interface
[   59.691903][ T6597] bond25: (slave gretap3): Releasing active interface
[   59.698821][ T6597] bond26: (slave veth11): Releasing backup interface
[   59.743700][ T6600] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   59.750021][ T6600] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   59.753214][ T6600] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   59.867454][ T6608] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   59.915718][ T6611] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) !
[   59.952039][ T6616] 8021q: adding VLAN 0 to HW filter on device bond10
[   59.956328][ T6613] 8021q: adding VLAN 0 to HW filter on device bond11
[   59.962086][ T6616] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[   59.965840][ T6616] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[   59.968677][ T6616] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[   59.971552][ T6616] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[   59.978649][ T6616] bond10: (slave geneve3): making interface the new active one
[   59.981872][ T6616] bond10: (slave geneve3): Enslaving as an active interface with an up link
[   60.022734][ T6613] bond11 (unregistering): Released all slaves
[   60.049038][ T6616] bond10: entered promiscuous mode
[   60.050848][ T6616] geneve3: entered promiscuous mode
[   60.161577][ T6626] bond11: (slave ip6gretap3): Enslaving as a backup interface with an up link
[   60.189120][ T6626] bond0: (slave wlan1): Releasing backup interface
[   60.193779][ T6626] bond10: (slave gretap1): Releasing active interface
[   60.196599][ T6626] gretap1: left promiscuous mode
[   60.198420][ T6626] gretap1: left allmulticast mode
[   60.202989][ T6626] bond11: (slave ip6gretap3): Releasing backup interface
[   60.215676][ T6629] veth5: entered promiscuous mode
[   60.288611][ T6635] veth9: entered promiscuous mode
[   60.334929][ T6638] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   60.356956][ T5219] Bluetooth: hci0: command tx timeout
[   60.609564][ T6645] pim6reg1: entered promiscuous mode
[   60.611311][ T6645] pim6reg1: entered allmulticast mode
[   60.663180][ T6650] 8021q: adding VLAN 0 to HW filter on device bond12
[   60.685273][ T6650] veth9: entered promiscuous mode
[   60.689900][ T6650] bond12: (slave veth9): Enslaving as a backup interface with a down link
[   60.703683][ T6650] bond12: (slave veth9): Releasing backup interface
[   60.710224][ T6653] 8021q: adding VLAN 0 to HW filter on device bond27
[   60.727126][ T6653] veth13: entered promiscuous mode
[   60.730780][ T6653] bond27: (slave veth13): Enslaving as a backup interface with a down link
[   60.741035][ T6653] bond27: (slave veth13): Releasing backup interface
[   60.960462][ T6675] bond30: entered promiscuous mode
[   60.962443][ T6675] 8021q: adding VLAN 0 to HW filter on device bond30
[   60.973003][ T6675] bond30: (slave bridge6): making interface the new active one
[   60.975675][ T6675] bridge6: entered promiscuous mode
[   60.977757][ T6675] bond30: (slave bridge6): Enslaving as an active interface with an up link
[   61.046698][ T6680] veth15: entered promiscuous mode
[   61.050107][ T6680] bond31: (slave veth15): Enslaving as a backup interface with a down link
[   61.482645][ T6703] veth7: entered promiscuous mode
[   61.489307][ T6703] bond14: (slave veth7): Enslaving as a backup interface with a down link
[   61.494468][ T6703] 8021q: adding VLAN 0 to HW filter on device bond14
[   61.570894][ T6708] bond15: (slave gretap1): making interface the new active one
[   61.573894][ T6708] bond15: (slave gretap1): Enslaving as an active interface with an up link
[   61.609805][ T6711] xt_TPROXY: Can be used only with -p tcp or -p udp
[   61.677896][ T6723] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.683167][ T6723] bond0: (slave rose0): Enslaving as an active interface with an up link
[   61.956616][ T6689] ==================================================================
[   61.959220][ T6689] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[   61.961680][ T6689] Read of size 1 at addr ffff888029924c32 by task syz.1.218/6689
[   61.964857][ T6689] 
[   61.965661][ T6689] CPU: 1 UID: 0 PID: 6689 Comm: syz.1.218 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[   61.965671][ T6689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.965676][ T6689] Call Trace:
[   61.965681][ T6689]  <TASK>
[   61.965690][ T6689]  dump_stack_lvl+0x189/0x250
[   61.965701][ T6689]  ? __virt_addr_valid+0x1c8/0x5c0
[   61.965711][ T6689]  ? rcu_is_watching+0x15/0xb0
[   61.965720][ T6689]  ? __kasan_check_byte+0x12/0x40
[   61.965732][ T6689]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.965740][ T6689]  ? rcu_is_watching+0x15/0xb0
[   61.965748][ T6689]  ? lock_release+0x4b/0x3e0
[   61.965757][ T6689]  ? __virt_addr_valid+0x1c8/0x5c0
[   61.965766][ T6689]  ? __virt_addr_valid+0x4a5/0x5c0
[   61.965775][ T6689]  print_report+0xca/0x230
[   61.965783][ T6689]  ? rose_transmit_link+0x5c3/0x740
[   61.965789][ T6689]  kasan_report+0x118/0x150
[   61.965799][ T6689]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   61.965808][ T6689]  ? rose_transmit_link+0x5c3/0x740
[   61.965816][ T6689]  rose_transmit_link+0x5c3/0x740
[   61.965822][ T6689]  ? skb_put+0x11b/0x210
[   61.965833][ T6689]  rose_write_internal+0x11dc/0x1ac0
[   61.965844][ T6689]  ? __pfx_rose_write_internal+0x10/0x10
[   61.965852][ T6689]  ? __timer_delete+0x5d/0x390
[   61.965862][ T6689]  rose_release+0x24e/0x520
[   61.965872][ T6689]  sock_close+0xc3/0x240
[   61.965879][ T6689]  ? __pfx_sock_close+0x10/0x10
[   61.965886][ T6689]  __fput+0x44c/0xa70
[   61.965895][ T6689]  task_work_run+0x1d4/0x260
[   61.965906][ T6689]  ? __pfx_task_work_run+0x10/0x10
[   61.965918][ T6689]  ? task_work_add+0x377/0x420
[   61.965928][ T6689]  ? __pfx_task_work_add+0x10/0x10
[   61.965937][ T6689]  get_signal+0x11ed/0x1340
[   61.965948][ T6689]  arch_do_signal_or_restart+0x9a/0x750
[   61.965959][ T6689]  ? __pfx___sys_connect+0x10/0x10
[   61.965968][ T6689]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   61.965981][ T6689]  ? exit_to_user_mode_loop+0x40/0x110
[   61.965989][ T6689]  exit_to_user_mode_loop+0x75/0x110
[   61.965995][ T6689]  do_syscall_64+0x2bd/0x3b0
[   61.966004][ T6689]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.966011][ T6689]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.966017][ T6689]  ? exc_page_fault+0x9f/0xf0
[   61.966024][ T6689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.966031][ T6689] RIP: 0033:0x7fc8a5b8e9a9
[   61.966038][ T6689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.966044][ T6689] RSP: 002b:00007fc8a6a94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   61.966053][ T6689] RAX: fffffffffffffe00 RBX: 00007fc8a5db5fa0 RCX: 00007fc8a5b8e9a9
[   61.966059][ T6689] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d
[   61.966063][ T6689] RBP: 00007fc8a5c10d69 R08: 0000000000000000 R09: 0000000000000000
[   61.966067][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   61.966072][ T6689] R13: 0000000000000000 R14: 00007fc8a5db5fa0 R15: 00007ffe6a7cb098
[   61.966079][ T6689]  </TASK>
[   61.966082][ T6689] 
[   62.060811][ T6689] Allocated by task 6168:
[   62.062206][ T6689]  kasan_save_track+0x3e/0x80
[   62.063755][ T6689]  __kasan_kmalloc+0x93/0xb0
[   62.065280][ T6689]  __kmalloc_cache_noprof+0x230/0x3d0
[   62.067013][ T6689]  rose_add_node+0x23a/0xde0
[   62.068520][ T6689]  rose_rt_ioctl+0xa48/0xfb0
[   62.070063][ T6689]  rose_ioctl+0x3ce/0x8b0
[   62.071500][ T6689]  sock_do_ioctl+0xdc/0x300
[   62.072990][ T6689]  sock_ioctl+0x576/0x790
[   62.074390][ T6689]  __se_sys_ioctl+0xfc/0x170
[   62.075931][ T6689]  do_syscall_64+0xfa/0x3b0
[   62.077409][ T6689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.079276][ T6689] 
[   62.080057][ T6689] Freed by task 6723:
[   62.081330][ T6689]  kasan_save_track+0x3e/0x80
[   62.082855][ T6689]  kasan_save_free_info+0x46/0x50
[   62.084471][ T6689]  __kasan_slab_free+0x62/0x70
[   62.086005][ T6689]  kfree+0x18e/0x440
[   62.087238][ T6689]  rose_rt_device_down+0x473/0x4c0
[   62.088875][ T6689]  rose_device_event+0x603/0x6a0
[   62.090455][ T6689]  notifier_call_chain+0x1b6/0x3e0
[   62.092074][ T6689]  dev_close_many+0x29c/0x410
[   62.093563][ T6689]  netif_close+0x158/0x210
[   62.094972][ T6689]  dev_close+0x10a/0x220
[   62.096313][ T6689]  bpq_device_event+0x2f4/0x600
[   62.097853][ T6689]  notifier_call_chain+0x1b6/0x3e0
[   62.099486][ T6689]  dev_close_many+0x29c/0x410
[   62.101005][ T6689]  netif_close+0x158/0x210
[   62.102524][ T6689]  dev_close+0x10a/0x220
[   62.103963][ T6689]  bond_setup_by_slave+0x5f/0x3f0
[   62.105646][ T6689]  bond_enslave+0x7a0/0x3a20
[   62.107200][ T6689]  bond_do_ioctl+0x635/0x9b0
[   62.108771][ T6689]  dev_ifsioc+0x90b/0xf00
[   62.110202][ T6689]  dev_ioctl+0x7b4/0x1150
[   62.111625][ T6689]  sock_do_ioctl+0x22c/0x300
[   62.113150][ T6689]  sock_ioctl+0x576/0x790
[   62.114556][ T6689]  __se_sys_ioctl+0xfc/0x170
[   62.116097][ T6689]  do_syscall_64+0xfa/0x3b0
[   62.117580][ T6689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.119492][ T6689] 
[   62.120310][ T6689] The buggy address belongs to the object at ffff888029924c00
[   62.120310][ T6689]  which belongs to the cache kmalloc-512 of size 512
[   62.124776][ T6689] The buggy address is located 50 bytes inside of
[   62.124776][ T6689]  freed 512-byte region [ffff888029924c00, ffff888029924e00)
[   62.129117][ T6689] 
[   62.129911][ T6689] The buggy address belongs to the physical page:
[   62.131953][ T6689] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29924
[   62.134736][ T6689] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   62.137451][ T6689] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   62.139992][ T6689] page_type: f5(slab)
[   62.141338][ T6689] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[   62.144055][ T6689] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   62.146818][ T6689] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[   62.149607][ T6689] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   62.152397][ T6689] head: 00fff00000000002 ffffea0000a64901 00000000ffffffff 00000000ffffffff
[   62.155145][ T6689] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   62.157944][ T6689] page dumped because: kasan: bad access detected
[   62.159973][ T6689] page_owner tracks the page as allocated
[   62.161786][ T6689] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5831, tgid 5831 (syz-executor), ts 47343103779, free_ts 47149290366
[   62.168499][ T6689]  post_alloc_hook+0x240/0x2a0
[   62.170041][ T6689]  get_page_from_freelist+0x21e4/0x22c0
[   62.171886][ T6689]  __alloc_frozen_pages_noprof+0x181/0x370
[   62.173766][ T6689]  alloc_pages_mpol+0x232/0x4a0
[   62.175349][ T6689]  allocate_slab+0x8a/0x3b0
[   62.176878][ T6689]  ___slab_alloc+0xbfc/0x1480
[   62.178409][ T6689]  __kmalloc_noprof+0x305/0x4f0
[   62.179948][ T6689]  fib6_info_alloc+0x30/0xf0
[   62.181501][ T6689]  ip6_route_info_create+0x142/0x860
[   62.183219][ T6689]  addrconf_f6i_alloc+0x1d2/0x450
[   62.184901][ T6689]  ipv6_add_addr+0x56e/0x1090
[   62.186484][ T6689]  inet6_addr_add+0x387/0xc00
[   62.188070][ T6689]  inet6_rtm_newaddr+0x93d/0xd20
[   62.189737][ T6689]  rtnetlink_rcv_msg+0x7cf/0xb70
[   62.191386][ T6689]  netlink_rcv_skb+0x208/0x470
[   62.192943][ T6689]  netlink_unicast+0x75c/0x8e0
[   62.194548][ T6689] page last free pid 52 tgid 52 stack trace:
[   62.196553][ T6689]  __free_frozen_pages+0xc71/0xe70
[   62.198257][ T6689]  __slab_free+0x326/0x400
[   62.199717][ T6689]  qlist_free_all+0x97/0x140
[   62.201205][ T6689]  kasan_quarantine_reduce+0x148/0x160
[   62.202997][ T6689]  __kasan_slab_alloc+0x22/0x80
[   62.204586][ T6689]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[   62.206501][ T6689]  __alloc_skb+0x112/0x2d0
[   62.207967][ T6689]  rtmsg_ifinfo_build_skb+0x84/0x260
[   62.209662][ T6689]  rtmsg_ifinfo+0x8c/0x1a0
[   62.211123][ T6689]  netif_state_change+0x29e/0x3a0
[   62.212798][ T6689]  linkwatch_do_dev+0x117/0x170
[   62.214383][ T6689]  __linkwatch_run_queue+0x56d/0x7e0
[   62.216105][ T6689]  linkwatch_event+0x4c/0x60
[   62.217628][ T6689]  process_scheduled_works+0xae1/0x17b0
[   62.219430][ T6689]  worker_thread+0x8a0/0xda0
[   62.220935][ T6689]  kthread+0x711/0x8a0
[   62.222284][ T6689] 
[   62.223090][ T6689] Memory state around the buggy address:
[   62.224906][ T6689]  ffff888029924b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   62.227453][ T6689]  ffff888029924b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   62.229997][ T6689] >ffff888029924c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   62.232564][ T6689]                                      ^
[   62.234385][ T6689]  ffff888029924c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   62.236895][ T6689]  ffff888029924d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   62.239461][ T6689] ==================================================================
[   62.254600][ T6689] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   62.256975][ T6689] CPU: 1 UID: 0 PID: 6689 Comm: syz.1.218 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[   62.260862][ T6689] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   62.264132][ T6689] Call Trace:
[   62.265259][ T6689]  <TASK>
[   62.266225][ T6689]  dump_stack_lvl+0x99/0x250
[   62.267752][ T6689]  ? __asan_memcpy+0x40/0x70
[   62.269313][ T6689]  ? __pfx_dump_stack_lvl+0x10/0x10
[   62.271017][ T6689]  ? __pfx__printk+0x10/0x10
[   62.272587][ T6689]  panic+0x2db/0x790
[   62.273853][ T6689]  ? __pfx_preempt_schedule+0x10/0x10
[   62.275607][ T6689]  ? __pfx_panic+0x10/0x10
[   62.277058][ T6689]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   62.278966][ T6689]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   62.280916][ T6689]  ? rose_transmit_link+0x5c3/0x740
[   62.282601][ T6689]  check_panic_on_warn+0x89/0xb0
[   62.284234][ T6689]  ? rose_transmit_link+0x5c3/0x740
[   62.285919][ T6689]  end_report+0x78/0x160
[   62.287327][ T6689]  kasan_report+0x129/0x150
[   62.288851][ T6689]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   62.290833][ T6689]  ? rose_transmit_link+0x5c3/0x740
[   62.292564][ T6689]  rose_transmit_link+0x5c3/0x740
[   62.294172][ T6689]  ? skb_put+0x11b/0x210
[   62.295534][ T6689]  rose_write_internal+0x11dc/0x1ac0
[   62.297235][ T6689]  ? __pfx_rose_write_internal+0x10/0x10
[   62.299027][ T6689]  ? __timer_delete+0x5d/0x390
[   62.300555][ T6689]  rose_release+0x24e/0x520
[   62.302002][ T6689]  sock_close+0xc3/0x240
[   62.303432][ T6689]  ? __pfx_sock_close+0x10/0x10
[   62.305035][ T6689]  __fput+0x44c/0xa70
[   62.306320][ T6689]  task_work_run+0x1d4/0x260
[   62.307797][ T6689]  ? __pfx_task_work_run+0x10/0x10
[   62.309464][ T6689]  ? task_work_add+0x377/0x420
[   62.310989][ T6689]  ? __pfx_task_work_add+0x10/0x10
[   62.312603][ T6689]  get_signal+0x11ed/0x1340
[   62.314079][ T6689]  arch_do_signal_or_restart+0x9a/0x750
[   62.315823][ T6689]  ? __pfx___sys_connect+0x10/0x10
[   62.317451][ T6689]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   62.319439][ T6689]  ? exit_to_user_mode_loop+0x40/0x110
[   62.321167][ T6689]  exit_to_user_mode_loop+0x75/0x110
[   62.322874][ T6689]  do_syscall_64+0x2bd/0x3b0
[   62.324392][ T6689]  ? lockdep_hardirqs_on+0x9c/0x150
[   62.326035][ T6689]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.327929][ T6689]  ? exc_page_fault+0x9f/0xf0
[   62.329424][ T6689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.331308][ T6689] RIP: 0033:0x7fc8a5b8e9a9
[   62.332745][ T6689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.338730][ T6689] RSP: 002b:00007fc8a6a94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   62.341358][ T6689] RAX: fffffffffffffe00 RBX: 00007fc8a5db5fa0 RCX: 00007fc8a5b8e9a9
[   62.343844][ T6689] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d
[   62.346356][ T6689] RBP: 00007fc8a5c10d69 R08: 0000000000000000 R09: 0000000000000000
[   62.348877][ T6689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   62.351425][ T6689] R13: 0000000000000000 R14: 00007fc8a5db5fa0 R15: 00007ffe6a7cb098
[   62.353912][ T6689]  </TASK>
[   62.355550][ T6689] Kernel Offset: disabled
[   62.356934][ T6689] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:11:20  Registers:
info registers vcpu 0

CPU#0
RAX=1455ff3e2a186f00 RBX=ffff8880296f2800 RCX=1ffff11009607501 RDX=ffffc9000355e1f0
RSI=00000000ffffffff RDI=ffff88804b039f98 RBP=dffffc0000000000 RSP=ffffc9000355de30
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff520006abbf4
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffff88804b039f80 R15=ffff88804b03adf0
RIP=ffffffff8b6d8c0f RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc39e6566c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000005200 CR3=0000000104db0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc39d811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000011a8 RDI=00000000000011a9 RBP=00000000000003f8 RSP=ffffc9000395f210
R8 =ffff888021ac8237 R9 =1ffff11004359046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18bc R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc8a6a946c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd6b63a3998 CR3=0000000114d7a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd6b6386478 00007fd6b6386450 XMM03=00007fd6b6386488 00007fd6b6386480
XMM04=00007fd6b6eed100 00007fd6b6386440 XMM05=00007fd6b6386458 00007fd6b63864a0
XMM06=00007fd6b6386498 00007fd6b6386490 XMM07=00007fd6b6386488 00007fd6b6386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd6b6211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
