last executing test programs:

1.620233196s ago: executing program 0 (id=213):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0xf, [0x69d1, 0x4, 0x1, 0x0, 0x5e7, 0x1000, 0xfffffffc, 0x5, 0x8, 0x1, 0x7, 0xb145, 0x6, 0x5d9b, 0x1, 0x6, 0x1, 0x4, 0x2, 0x0, 0xb, 0x7fffffff, 0xffffffff, 0x95b, 0x3, 0x8001, 0x7, 0xe, 0xffffffff, 0x4, 0x7f, 0x1, 0x80, 0x0, 0x7, 0x12, 0x1, 0x8, 0x0, 0xab, 0x7, 0x8, 0x43, 0x5, 0x3, 0x0, 0x0, 0x5, 0x6, 0x5, 0x5, 0x9, 0x4, 0x6, 0x4, 0x80000000, 0x9, 0xf0000000, 0x9, 0x8000, 0x100, 0x0, 0x5, 0xc, 0x4e, 0x6, 0x8, 0x5, 0x1, 0x5, 0x9, 0x6, 0x9, 0x7, 0x3, 0x2e9, 0x7, 0x1, 0x6, 0x4, 0x8000, 0x2, 0x6, 0x27d1, 0x80, 0x7f, 0x8001, 0x0, 0x0, 0x8, 0xffffffff, 0x8, 0x100, 0x400, 0x7, 0x101, 0x9, 0x3, 0x10000, 0x9, 0xff, 0x5, 0xe19d, 0x8ae, 0x4, 0xfffff000, 0x0, 0x7, 0xe, 0x5dc8, 0x7, 0xff, 0x5, 0x1, 0x67de, 0x8001, 0x80, 0x100, 0x8000003, 0xfffffffd, 0x7, 0x6, 0x6, 0x81, 0x0, 0x8d, 0x1, 0xffffff84]}})

1.485739998s ago: executing program 0 (id=217):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000880)
close(0x4)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
unshare(0x6a040000)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000210", @ANYBLOB="8770368b9161d85a40444b31e11f7190fb3e7550ac7e2e874a00142e6840769a2a4c4f6a50e0f58d426ea98ead500b79b8ed2351f1d3ac2bda4fa74c81b0f730668c1aa2"], 0x18}}, 0x0)

1.388050092s ago: executing program 1 (id=219):
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0)

1.326084254s ago: executing program 1 (id=220):
unshare(0x28000600)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r0, r1}, 0xc)

1.235355308s ago: executing program 1 (id=221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800)

1.23500395s ago: executing program 0 (id=222):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000097000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.135237642s ago: executing program 0 (id=224):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10)
r1 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1.1346232s ago: executing program 1 (id=225):
socket(0x10, 0x803, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r7}, 0x0, &(0x7f0000001040)}, 0x20)

869.281134ms ago: executing program 2 (id=228):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r5 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

488.276368ms ago: executing program 2 (id=229):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001580), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000015c0)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

399.992208ms ago: executing program 2 (id=230):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

203.192806ms ago: executing program 0 (id=231):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x82, &(0x7f00000001c0)="020900000080efff", 0x8)

202.588303ms ago: executing program 2 (id=232):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000180)=@ethtool_cmd={0x25, 0xbf, 0xcd, 0x1, 0xff, 0x2, 0x4, 0x7, 0x8, 0x17, 0x10, 0xd5d1, 0x4, 0x2, 0x4, 0x7f, [0x0, 0xdf92]}})

148.467937ms ago: executing program 1 (id=233):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x6, 0x2a, 0x0, &(0x7f0000000000)=0x2)

75.685241ms ago: executing program 2 (id=234):
select(0x40, &(0x7f0000000080), 0xfffffffffffffffe, 0x0, 0x0)

75.264468ms ago: executing program 1 (id=235):
unshare(0x22020600)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0xe)
r4 = epoll_create(0x9)
epoll_pwait(r4, &(0x7f0000000180)=[{}], 0x1, 0x3, &(0x7f0000000200)={[0xff]}, 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000000100000005000500aff700000500060000000000080003"], 0x2c}}, 0x0)
r6 = socket(0x11, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r7=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', <r8=>0x0, 0x2d, 0x9c, 0xe7, 0x8000, 0x28, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0xcac, 0x1}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x15, &(0x7f0000000500)=@raw=[@ldst={0x2, 0x2, 0x6, 0x9, 0xb, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0xb, 0x0, 0x2, 0x200, 0x10000}, @call={0x85, 0x0, 0x0, 0x85}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x15, &(0x7f0000000380)=""/21, 0x41000, 0x0, '\x00', r8, 0x25, r0, 0x8, &(0x7f0000000640)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xe, 0xa83, 0x1608}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff4a73}, 0x94)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000080)={0xa0179e08})
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x3, 'none\x00', 0x0, 0x7ff}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r10, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)

74.981159ms ago: executing program 0 (id=236):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008019f0fffeffe809005300fff5dd00000010000100080c1000664d00000000", 0x56}], 0x1)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@multicast1}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000100)=0xe8)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)

0s ago: executing program 2 (id=237):
unshare(0x2c020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
listen(r1, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19196' (ED25519) to the list of known hosts.
syzkaller login: [   56.764623][ T5793] cgroup: Unknown subsys name 'net'
[   56.868421][ T5793] cgroup: Unknown subsys name 'cpuset'
[   56.873551][ T5793] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.598820][ T5793] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.874402][ T5852] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.276651][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.372522][ T5902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.376634][ T5902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.380289][ T5902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.384653][ T5902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.403604][ T5902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.443704][ T5902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.455651][ T5902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.459335][ T5902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.463187][ T5902] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.467165][ T5902] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.526255][ T5902] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.533738][ T5902] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.537837][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.544975][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.551963][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.829672][ T5901] chnl_net:caif_netlink_parms(): no params data found
[   70.911036][ T5904] chnl_net:caif_netlink_parms(): no params data found
[   71.003235][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.007374][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.010709][ T5901] bridge_slave_0: entered allmulticast mode
[   71.014597][ T5901] bridge_slave_0: entered promiscuous mode
[   71.020454][ T5906] chnl_net:caif_netlink_parms(): no params data found
[   71.041714][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.047314][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.050300][ T5901] bridge_slave_1: entered allmulticast mode
[   71.054372][ T5901] bridge_slave_1: entered promiscuous mode
[   71.112235][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.138244][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.183239][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.186647][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.189473][ T5904] bridge_slave_0: entered allmulticast mode
[   71.193189][ T5904] bridge_slave_0: entered promiscuous mode
[   71.218950][ T5901] team0: Port device team_slave_0 added
[   71.232764][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.235818][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.238451][ T5904] bridge_slave_1: entered allmulticast mode
[   71.241783][ T5904] bridge_slave_1: entered promiscuous mode
[   71.267922][ T5901] team0: Port device team_slave_1 added
[   71.273298][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.277367][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.280236][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.283147][ T5906] bridge_slave_0: entered allmulticast mode
[   71.288289][ T5906] bridge_slave_0: entered promiscuous mode
[   71.306769][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.319702][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.322912][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.326437][ T5906] bridge_slave_1: entered allmulticast mode
[   71.330418][ T5906] bridge_slave_1: entered promiscuous mode
[   71.376152][ T5904] team0: Port device team_slave_0 added
[   71.395697][ T5906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.400209][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.403043][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.414654][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.420302][ T5904] team0: Port device team_slave_1 added
[   71.423240][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.425971][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.435627][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.441438][ T5906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.451813][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.454424][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.513811][ T5906] team0: Port device team_slave_0 added
[   71.517533][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.520240][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.529885][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.562795][ T5906] team0: Port device team_slave_1 added
[   71.566440][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.568749][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.578557][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.612115][ T5901] hsr_slave_0: entered promiscuous mode
[   71.614869][ T5901] hsr_slave_1: entered promiscuous mode
[   71.625260][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.628681][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.638545][ T5906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.643096][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.645395][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.653183][ T5906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.753156][ T5906] hsr_slave_0: entered promiscuous mode
[   71.756322][ T5906] hsr_slave_1: entered promiscuous mode
[   71.758826][ T5906] debugfs: 'hsr0' already exists in 'hsr'
[   71.760644][ T5906] Cannot create hsr debugfs directory
[   71.771539][ T5904] hsr_slave_0: entered promiscuous mode
[   71.774685][ T5904] hsr_slave_1: entered promiscuous mode
[   71.780761][ T5904] debugfs: 'hsr0' already exists in 'hsr'
[   71.782844][ T5904] Cannot create hsr debugfs directory
[   72.068042][ T5901] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.088215][ T5901] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.093874][ T5901] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.100065][ T5901] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.151938][ T5904] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.167658][ T5904] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.175002][ T5904] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.193004][ T5904] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.259012][ T5906] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.270870][ T5906] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.277863][ T5906] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.288992][ T5906] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.339431][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.373681][ T5901] 8021q: adding VLAN 0 to HW filter on device team0
[   72.391328][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.394368][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.404083][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.421318][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.424527][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.454156][ T5904] 8021q: adding VLAN 0 to HW filter on device team0
[   72.484365][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.487199][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.493487][ T5232] Bluetooth: hci1: command tx timeout
[   72.496157][   T54] Bluetooth: hci0: command tx timeout
[   72.520792][ T2189] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.523410][ T2189] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.558357][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.591038][ T5906] 8021q: adding VLAN 0 to HW filter on device team0
[   72.603920][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.606716][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.626716][ T2189] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.629381][ T2189] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.646133][   T54] Bluetooth: hci2: command tx timeout
[   72.721321][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.801058][ T5901] veth0_vlan: entered promiscuous mode
[   72.811688][ T5901] veth1_vlan: entered promiscuous mode
[   72.850891][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.862346][ T5901] veth0_macvtap: entered promiscuous mode
[   72.884944][ T5901] veth1_macvtap: entered promiscuous mode
[   72.921445][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.941931][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.949682][ T5904] veth0_vlan: entered promiscuous mode
[   72.969955][ T5910] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.975150][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.987230][ T5910] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.990644][ T5910] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.004392][ T5910] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.010348][ T5904] veth1_vlan: entered promiscuous mode
[   73.101437][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.106249][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.149155][ T5904] veth0_macvtap: entered promiscuous mode
[   73.155877][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.158285][ T5904] veth1_macvtap: entered promiscuous mode
[   73.167156][ T5906] veth0_vlan: entered promiscuous mode
[   73.170711][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.182775][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.191221][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.206626][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.213850][ T5906] veth1_vlan: entered promiscuous mode
[   73.228061][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.238508][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.248977][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.318186][ T5906] veth0_macvtap: entered promiscuous mode
[   73.345031][ T5906] veth1_macvtap: entered promiscuous mode
[   73.395213][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.398802][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.450242][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.454932][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.461872][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.462904][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.492708][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.497249][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.501075][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.504087][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.658986][ T5976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.670625][ T2189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.673454][ T2189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.733840][ T2189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.745842][ T2189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.566856][   T54] Bluetooth: hci1: command tx timeout
[   74.567249][ T5232] Bluetooth: hci0: command tx timeout
[   74.728350][ T5232] Bluetooth: hci2: command tx timeout
[   74.904873][ T6041] netlink: 88 bytes leftover after parsing attributes in process `syz.1.64'.
[   74.983926][ T6045] syz.0.65 uses obsolete (PF_INET,SOCK_PACKET)
[   75.134931][ T6057] Bluetooth: MGMT ver 1.23
[   75.509743][ T6073] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.818307][ T6095] dvmrp1: entered allmulticast mode
[   75.836313][ T6095] dvmrp1: left allmulticast mode
[   75.866634][ T6097] syzkaller1: entered promiscuous mode
[   75.875567][ T6097] syzkaller1: entered allmulticast mode
[   75.977600][ T6102] Zero length message leads to an empty skb
[   76.645764][ T5232] Bluetooth: hci1: command tx timeout
[   76.647879][ T5232] Bluetooth: hci0: command tx timeout
[   76.786775][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'.
[   76.790118][ T6122] netlink: 'syz.0.101': attribute type 1 has an invalid length.
[   76.816137][   T54] Bluetooth: hci2: command tx timeout
[   76.870078][ T6127] openvswitch: netlink: Multiple metadata blocks provided
[   76.874069][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'.
[   76.888469][ T6125] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   77.035886][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'.
[   77.298475][ T6151] pim6reg: entered allmulticast mode
[   77.320169][ T6151] pim6reg: left allmulticast mode
[   77.432861][ T6158] netlink: 14 bytes leftover after parsing attributes in process `syz.2.115'.
[   77.538013][    C0] Illegal XDP return value 16128 on prog  (id 11) dev bond_slave_0, expect packet loss!
[   78.302308][ T6158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.311203][ T6158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.317111][ T6158] bond0 (unregistering): Released all slaves
[   78.336618][ T6155] syzkaller1: entered promiscuous mode
[   78.339052][ T6155] syzkaller1: entered allmulticast mode
[   78.625288][ T6178] syzkaller1: entered promiscuous mode
[   78.632116][ T6178] syzkaller1: entered allmulticast mode
[   78.735805][   T54] Bluetooth: hci0: command tx timeout
[   78.736080][ T5232] Bluetooth: hci1: command tx timeout
[   78.792420][ T6183] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   78.879502][ T6187] tipc: Started in network mode
[   78.885526][ T6187] tipc: Node identity 7a2bb75a294f, cluster identity 4711
[   78.888326][ T5232] Bluetooth: hci2: command tx timeout
[   78.890801][ T6187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.902776][ T6187] syzkaller0: entered promiscuous mode
[   78.905157][ T6187] syzkaller0: entered allmulticast mode
[   78.936910][ T6187] tipc: Resetting bearer <eth:syzkaller0>
[   78.943801][ T6186] tipc: Resetting bearer <eth:syzkaller0>
[   78.969770][ T6186] tipc: Disabling bearer <eth:syzkaller0>
[   79.150575][ T6200] netlink: 'syz.1.133': attribute type 1 has an invalid length.
[   79.185072][ T6200] bond1: entered promiscuous mode
[   79.188289][ T6200] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.200346][ T6200] netlink: 3 bytes leftover after parsing attributes in process `syz.1.133'.
[   79.212842][ T6200] batadv1: entered promiscuous mode
[   79.215150][ T6200] batadv1: entered allmulticast mode
[   79.220298][ T6200] 8021q: adding VLAN 0 to HW filter on device batadv1
[   79.225251][ T6200] bond1: (slave batadv1): making interface the new active one
[   79.231020][ T6200] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   79.404437][ T6200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.133'.
[   79.670839][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[   80.411084][  T792] cfg80211: failed to load regulatory.db
[   80.609948][ T6248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.151'.
[   80.620428][ T6248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.151'.
[   81.003441][ T6269] bridge1: entered allmulticast mode
[   81.354075][ T6290] netlink: 'syz.2.169': attribute type 21 has an invalid length.
[   81.360485][ T6290] IPv6: NLM_F_CREATE should be specified when creating new route
[   81.364106][ T6290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.366713][ T6290] IPv6: NLM_F_CREATE should be set when creating new route
[   81.369234][ T6290] IPv6: NLM_F_CREATE should be set when creating new route
[   81.371775][ T6290] IPv6: NLM_F_CREATE should be set when creating new route
[   81.434866][ T6295] IPv6: addrconf: prefix option has invalid lifetime
[   81.437726][ T6295] IPv6: addrconf: prefix option has invalid lifetime
[   81.440336][ T6295] IPv6: addrconf: prefix option has invalid lifetime
[   81.553519][ T6304] netlink: 'syz.2.176': attribute type 12 has an invalid length.
[   81.696448][ T6312] sit1: entered promiscuous mode
[   81.774211][ T6318] netlink: 100 bytes leftover after parsing attributes in process `syz.1.183'.
[   82.119678][ T6334] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.191'.
[   82.262347][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'.
[   82.468900][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'.
[   82.676905][ T6364] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[   82.680038][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[   82.684256][ T6364] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[   82.933868][ T6394] netlink: 'syz.2.215': attribute type 10 has an invalid length.
[   82.949512][ T6394] team0: Device veth1_macvtap failed to register rx_handler
[   83.421308][    T9] IPVS: starting estimator thread 0...
[   83.479829][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'.
[   83.537556][ T6423] IPVS: using max 63 ests per chain, 151200 per kthread
[   83.694622][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'.
[   84.118315][ T6441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.122514][ T6441] syzkaller0: entered promiscuous mode
[   84.125267][ T6441] syzkaller0: entered allmulticast mode
[   84.155352][ T6441] tipc: Resetting bearer <eth:syzkaller0>
[   84.162717][ T6440] tipc: Resetting bearer <eth:syzkaller0>
[   84.178032][ T6440] tipc: Disabling bearer <eth:syzkaller0>
[   84.450157][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.236'.
Connection to localhost closed by remote host.

VM DIAGNOSIS:
14:00:20  Registers:
info registers vcpu 0

CPU#0
RAX=9c7b02b4be4ad300 RBX=ffffffff81968308 RCX=9c7b02b4be4ad300 RDX=0000000000000001
RSI=ffffffff8d9b6e8f RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2dd05ff8 CR3=000000010d5f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000017 000000000003bf12
XMM02=00141000060270f0 2010002280042210 XMM03=6fd6088080820800 0680030008000210
XMM04=0000000000000000 0000000000000000 XMM05=000055556967786d 00005555696776e0
XMM06=000055556964ffc4 000055556964ffc0 XMM07=0a016fd608808082 0800068003000800
XMM08=0210001410000602 70f0201000228004 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1220fc14ae1b4d00 RBX=ffffffff81968308 RCX=1220fc14ae1b4d00 RDX=0000000000000001
RSI=ffffffff8d9b6e8f RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556b2695c8 CR3=000000010d5f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000017 000000000003bf12
XMM02=00141000060270f0 2010002280042210 XMM03=6fd6088080820800 0680030008000210
XMM04=0000000000000000 0000000000000000 XMM05=000055556967786d 00005555696776e0
XMM06=000055556964ffc4 000055556964ffc0 XMM07=0a016fd608808082 0800068003000800
XMM08=0210001410000602 70f0201000228004 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
