last executing test programs:

943.581302ms ago: executing program 1 (id=113):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'veth0_to_bridge\x00', {0x2, 0x4e23, @broadcast}})
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x7c}}, 0x40)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000400)=0x2)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x46, 0x0, 0x1}, 0x28)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x20004091)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet(0x2, 0x3, 0x33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa2}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010002f010000000000000000000000000a6c000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004000048024000180090001006d6574610100000014000280080001400000000a080002400000001f180001800e000100636f6e6e7c696d6974000000040002801400000f1100010000000002000000000000000a598d14ddbb976f5345d9e32e74a7c31fe6b19356d1cf845011"], 0x94}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)

940.047675ms ago: executing program 0 (id=114):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x11, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

842.843198ms ago: executing program 2 (id=115):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20004844}, 0x40000)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x6e23, @local}, 0x10, 0x0}, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async)
recvmmsg(r3, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2022, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001050015001600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, 0x0, 0x0) (async)
setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000180)=0xbf7, 0x4) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f00000003c0)={{0x84, @loopback, 0x4e23, 0x1, 'rr\x00', 0x10, 0x2, 0x49}, {@rand_addr=0x64010100, 0x4e20, 0x2000, 0x3, 0x3, 0xfffffc00}}, 0x44)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {0xe, 0xffff}, {0xf, 0x4}}, ["", "", ""]}, 0x24}}, 0x0) (async)
r9 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0)

773.18471ms ago: executing program 1 (id=116):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r2=>r1}) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_reply\x00', r3, 0x0, 0x7}, 0x18) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), &(0x7f0000000680)=r3}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000700), &(0x7f0000000500)=r0}, 0x20)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f0000001ff0)={0x1d, r6}, 0x10)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r11, 0x0, 0x0)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1a1d0466e0241665}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x48054) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtfilter={0x15c, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r10, {0x6, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x12c, 0x2, [@TCA_FLOWER_ACT={0x128, 0x3, [@m_connmark={0x124, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0xf2, 0x6, "f40e81e70eeb1c25cd56e6c11f9809caa7cade1a9d6f45e713fc1c74249fce9264c21bf2139813bf3bea68b1b4d06de4de7435484abc24adbe5037b310572c34acf3e797a8f693ec90e38e610d90ef9be0fe32402b8e6c23044b176e74ab4d3fdb10c7fd275b229a99c983e278a242f0c8be6503aa63592f844f37e95b801d7f81158a7f55d7ced1b14b41990e5e6d82df9b107de108f8a35fbfa6922349245336ac6ed4f014e633387a4b07390c9b8f0f776f7bd95c2dd0fd1157355b72bc26d50eebfdeaf9c894f8f793a703000000733fee800000000c2447c855fd8f12d5a8e700"/238}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x15c}}, 0x24000000) (async)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x8, 0x800, 0x4, 0x131f]}, &(0x7f00000003c0)=0x78) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

720.542669ms ago: executing program 0 (id=117):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000140)="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")

717.390046ms ago: executing program 1 (id=118):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7cce6a92", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00068008000600fbffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

633.055088ms ago: executing program 2 (id=119):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0}) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x6, <r8=>0x0}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000940), 0x8, 0xae, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800e50000000000000000008518110000000000de71aa7b4b6ea0c0", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r9, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r11}, 0x10) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r12}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r6, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) (async)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c1fa8c22540c2dd93d796e7f4fac096e8fc5cc91a0b8ff30e33d677b8d10d6fc90488a018c3c222540f116d40ebafa36e0b77894b098621811bd9871a18e5dde7366e6d357e3d95427481c09d09e940db533876f8bc33a6d15e", @ANYRES16=r4, @ANYBLOB="020027bd7000ffdbdf25790000000400f4000400f4000400f4000400f4000400f4000400f400"], 0x2c}}, 0x800) (async, rerun: 64)
r13 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64)
pwritev(r13, &(0x7f0000000180), 0x0, 0x8, 0x2)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0)

575.085678ms ago: executing program 1 (id=120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=', 0x1}], 0x1}, 0x1) (async)
recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000400)=""/230, 0xe6}], 0x1}, 0x80}], 0x1, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r7, 0x0) (async)
setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
accept4(r7, 0x0, 0x0, 0x80800)
close(r6) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='veth0_to_hsr\x00', 0x10) (async)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x3) (async)
ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]})
write$ppp(r8, &(0x7f0000000300)="5af9", 0x2)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

574.680098ms ago: executing program 2 (id=121):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x1, 0x20008890)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$NL80211_CMD_SET_KEY(r3, 0x0, 0x4004)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x140a, 0x800, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)

570.045388ms ago: executing program 0 (id=122):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fddbdf25ffffffff000000000000000000000000000000000000000000000000000000004e2200004e2300010a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000000500000000000000f8ffffffffffffffff010000f2ff00000100000000000000010000000000008009000000000000000000000080000000010000000051a100010100000000000004000000000080000700000000000000000002030000000029"], 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x8010)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48)
listen(r0, 0x1ad72f7)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
close(r2)

474.633874ms ago: executing program 1 (id=123):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x21, 0x803, 0x2)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r4 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r4, &(0x7f0000000100)={0x11, 0x17, r3, 0x1, 0x80, 0x6, @random="3d1a95fe338f"}, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

405.11981ms ago: executing program 2 (id=124):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="008000000000000024001280050001006d6163766c616e00140002800800010010000000080003000300000008000500", @ANYRES32=r1, @ANYBLOB], 0x4c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c40001000004"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="008000000000000024001280050001006d6163766c616e00140002800800010010000000080003000300000008000500", @ANYRES32=r1, @ANYBLOB], 0x4c}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c40001000004"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x10) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)

235.896914ms ago: executing program 0 (id=125):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001214010002000000fcdbdf2508004b002c000000080001000000000008004f00000000000800150004000000080003"], 0x38}}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0)

232.881978ms ago: executing program 2 (id=126):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x1e, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031500000010000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="140012800b0001006d61637365630000040002800a000100aa"], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

94.904979ms ago: executing program 0 (id=127):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
clock_gettime(0x6, &(0x7f0000000000))
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0xc0, {{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x400}}, 0x3, 0x9, [{{0xa, 0x4e22, 0x202, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}, {{0xa, 0x4e20, 0x7, @mcast1, 0x4}}, {{0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, '\x00', 0x25}, 0x4}}, {{0xa, 0x4e22, 0x46df1c6e, @empty, 0x8}}, {{0xa, 0x4e24, 0x6, @private0, 0x40}}, {{0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff4c79}}, {{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7fff}}, {{0xa, 0x4e24, 0x2, @private2, 0x7f}}, {{0xa, 0x4e22, 0x3107a51b, @private1, 0x7}}]}, 0x510)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bind$netrom(0xffffffffffffffff, &(0x7f00000005c0)={{0x3, @null, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @default]}, 0x48)
r2 = socket$inet6(0xa, 0x4, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000640)={'team0\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000680), r4)
r5 = openat$cgroup_ro(r1, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r6, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}}, 0x24000001)
getsockopt(r5, 0x6ba, 0x7f, &(0x7f0000000880)=""/129, &(0x7f0000000940)=0x81)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000009c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000ec0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e80)={&(0x7f0000000a00)={0x480, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x9c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7142b3e5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fcab47a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46e88609}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16da50de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a58e5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x278584b3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bc8e694}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x354b807c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34db0a74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16edaa3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78a321c0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51dedb29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6774a5de}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x160, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9488f60}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59bb91db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a7982d1}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4341f1d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa738}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x949c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cef8ab8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5252d0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x617880a9}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6086325b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40f8bda2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7561581c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa16c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31c1a70d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1488}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fd6110f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x959b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x211bd184}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f6a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2466}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf276}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5608}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8aa4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f004738}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36175957}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16503761}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2db54938}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa78f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x63cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c16}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7da31e1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54c9b393}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b07ce40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50d70807}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad85}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb894}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d7d3df0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28a0f5de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6513a1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x750c0c17}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x234}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1112}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x180}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x266f99a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadfb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10be}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x17fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20c36e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x642befb7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71a4}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a16768}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee24}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c68e28e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2637dc89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26ea0dea}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6255f55c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x124, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c49a053}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x983c4d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c97fe5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x348f80c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x756e4c0d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x295ba2b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x114fdccf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7287ea05}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b8b54ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x319e88d0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x525b3668}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44c81203}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74059156}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25ec73a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77516e93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7053e58e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15910960}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fc70f08}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16639b8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000005)
ioctl$sock_qrtr_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000f00)={'geneve0\x00'})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000000f40), &(0x7f0000000f80)=0x8)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000001400)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001000)={0x3ac, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe8ed25}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d174ad1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d222508}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e3a5ff2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x134a46c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xff5201a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1592a59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77a90eb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45ea5b17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x176}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d06e9ec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c5de1e0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x444ea378}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x481645e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40459416}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2267}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x211c90d5}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e27d073}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x941b}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9639}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33615f97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x170d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d9bc7b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e960930}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dac85e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb137}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2935e6a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29a93986}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef6f}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xfc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x287ccb00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25225a04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d2c7194}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd90fa2b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f234a57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x668b65c2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4613}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f679f88}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29e4dac7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53f5258d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc268}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11be1340}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a82}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ec3eb77}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1131}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19588afd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1724641a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb102}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b66f09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30427d68}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb6b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a8c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb6ee4fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ef2336a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xace}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11ee3ec8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12e9b5dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12d86a50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1836}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6cb0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8077}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3471f948}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84b7}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x3ac}}, 0x8000)
r9 = accept4$packet(r5, 0x0, &(0x7f0000001440), 0x80800)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000014c0)={'bridge_slave_1\x00', &(0x7f0000001480)=@ethtool_eee={0x44, 0x12be, 0xfffffffa, 0x6780, 0x7, 0x8, 0x791c5206, 0x0, [0x2, 0x401]}})
syz_genetlink_get_family_id$smc(&(0x7f0000001500), r5)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001640)={@fallback=<r10=>r5, 0x2b, 0x1, 0x100, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000016c0)={0x298c, <r12=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)={@fallback=r1, r5, 0x31, 0x2020, 0x0, @void, @void, @value=r12, @void, r11}, 0x20)
write$cgroup_netprio_ifpriomap(r10, &(0x7f0000001700)={'team_slave_1', 0x32, 0x33}, 0xf)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000017c0)={'ip6tnl0\x00', &(0x7f0000001740)={'ip6gre0\x00', r3, 0x4, 0xb5, 0x0, 0x800, 0x21, @private0, @private2, 0x1, 0x40, 0xa44, 0x6}})
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001840), r4)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, r13, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x418c0)

93.862192ms ago: executing program 2 (id=128):
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
connect$caif(r0, &(0x7f0000000540)=@dbg={0x25, 0x2, 0x5}, 0x18)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x4e)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', <r5=>0x0})
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r5, 0x25, 0x2}, 0x14)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='nv\x00', 0x3)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r6, r7, 0x4, r2}, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xd, &(0x7f0000000080)=0x3, 0x4) (async)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) (async)
r11 = accept4$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @rose}, [@bcast, @bcast, @remote, @remote, @null, @null, @remote, @default]}, &(0x7f0000000080)=0x48, 0x80800)
ioctl$sock_inet_SIOCGIFDSTADDR(r11, 0x8917, &(0x7f0000000100)={'netpci0\x00', {0x2, 0x0, @local}})

90.423997ms ago: executing program 1 (id=129):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x60, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1d}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4b}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x60}}, 0x20004084)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030425bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="0005000200800000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

0s ago: executing program 0 (id=130):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x42, 0xb, 0x70bd26, 0x4000, {0x3}}, 0x14}}, 0x4040080)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x24, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={<r10=>0x0}, &(0x7f0000000580)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@setlink={0x30, 0x13, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x8211, 0xa0b614a7b07e669c}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6}, @IFLA_NET_NS_PID={0x8, 0x13, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9028' (ED25519) to the list of known hosts.
syzkaller login: [   70.380552][ T5833] cgroup: Unknown subsys name 'net'
[   70.529957][ T5833] cgroup: Unknown subsys name 'cpuset'
[   70.535883][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.278654][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.281147][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   72.665630][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   77.438676][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.441939][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.454557][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.457318][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.460042][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.562321][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.565667][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.568445][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.571113][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.573776][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.593792][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.597298][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.600834][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.605286][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.608471][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.796341][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   77.861933][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   77.929570][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.933324][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.937018][ T5841] bridge_slave_0: entered allmulticast mode
[   77.939988][ T5841] bridge_slave_0: entered promiscuous mode
[   77.961919][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.964491][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.967105][ T5841] bridge_slave_1: entered allmulticast mode
[   77.969901][ T5841] bridge_slave_1: entered promiscuous mode
[   78.022612][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.048209][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.050546][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.052902][ T5846] bridge_slave_0: entered allmulticast mode
[   78.055895][ T5846] bridge_slave_0: entered promiscuous mode
[   78.060015][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.063007][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.066052][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.068957][ T5846] bridge_slave_1: entered allmulticast mode
[   78.072173][ T5846] bridge_slave_1: entered promiscuous mode
[   78.107085][ T5841] team0: Port device team_slave_0 added
[   78.109314][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   78.132212][ T5841] team0: Port device team_slave_1 added
[   78.150396][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.163310][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.174966][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.177230][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.185362][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.212431][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.216179][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.226064][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.232095][ T5846] team0: Port device team_slave_0 added
[   78.236949][ T5846] team0: Port device team_slave_1 added
[   78.306406][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.309041][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.318212][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.336759][ T5841] hsr_slave_0: entered promiscuous mode
[   78.339673][ T5841] hsr_slave_1: entered promiscuous mode
[   78.342672][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.346205][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.348670][ T5848] bridge_slave_0: entered allmulticast mode
[   78.351293][ T5848] bridge_slave_0: entered promiscuous mode
[   78.354464][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.356577][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.365753][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.374555][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.376822][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.379463][ T5848] bridge_slave_1: entered allmulticast mode
[   78.382555][ T5848] bridge_slave_1: entered promiscuous mode
[   78.453851][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.482520][ T5846] hsr_slave_0: entered promiscuous mode
[   78.486843][ T5846] hsr_slave_1: entered promiscuous mode
[   78.489478][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   78.491722][ T5846] Cannot create hsr debugfs directory
[   78.495957][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.549910][ T5848] team0: Port device team_slave_0 added
[   78.576923][ T5848] team0: Port device team_slave_1 added
[   78.643536][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.645827][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.653344][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.657853][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.659906][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.667788][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.743076][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.752750][ T5848] hsr_slave_0: entered promiscuous mode
[   78.757986][ T5848] hsr_slave_1: entered promiscuous mode
[   78.760946][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   78.763120][ T5848] Cannot create hsr debugfs directory
[   78.769034][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.789715][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.819393][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.909963][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.930666][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.943869][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.956783][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.013521][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.019272][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.024087][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.032429][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.095612][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.136481][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   79.153067][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.155523][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.173077][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.179194][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.182064][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.222769][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   79.232838][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.244178][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.246795][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.257831][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.260381][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.282152][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   79.292896][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.295248][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.318773][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.321013][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.430379][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.503331][ T5841] veth0_vlan: entered promiscuous mode
[   79.515509][ T5850] Bluetooth: hci0: command tx timeout
[   79.520206][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.526319][ T5841] veth1_vlan: entered promiscuous mode
[   79.537735][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.571070][ T5841] veth0_macvtap: entered promiscuous mode
[   79.590370][ T5841] veth1_macvtap: entered promiscuous mode
[   79.604694][ T5850] Bluetooth: hci1: command tx timeout
[   79.606748][ T5848] veth0_vlan: entered promiscuous mode
[   79.620193][ T5846] veth0_vlan: entered promiscuous mode
[   79.628955][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.637178][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.642639][ T5848] veth1_vlan: entered promiscuous mode
[   79.652460][ T5869] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.658118][ T5869] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.664007][ T5869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.668419][ T5869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.672307][ T5846] veth1_vlan: entered promiscuous mode
[   79.674794][ T5850] Bluetooth: hci2: command tx timeout
[   79.744938][ T5848] veth0_macvtap: entered promiscuous mode
[   79.761987][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.766232][ T5846] veth0_macvtap: entered promiscuous mode
[   79.771702][ T5848] veth1_macvtap: entered promiscuous mode
[   79.773771][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.783142][ T5846] veth1_macvtap: entered promiscuous mode
[   79.817233][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.819789][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.819969][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.827960][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.849444][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.860439][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.871076][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.877181][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.889615][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.892563][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   79.898087][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.906513][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.909358][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.916261][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.919295][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.065711][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.068837][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.079703][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.094803][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.145671][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.152386][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.153396][ T5913] Zero length message leads to an empty skb
[   80.168336][ T5913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4'.
[   80.175915][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.179543][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.346207][ T5925] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.406980][ T5925] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.419446][ T5925] bond0: (slave bond1): Enslaving as an active interface with an up link
[   80.544051][ T5931] bridge0: port 3(erspan0) entered blocking state
[   80.546899][ T5931] bridge0: port 3(erspan0) entered disabled state
[   80.549318][ T5931] erspan0: entered allmulticast mode
[   80.552722][ T5931] erspan0: entered promiscuous mode
[   80.557220][ T5931] bridge0: port 3(erspan0) entered blocking state
[   80.559795][ T5931] bridge0: port 3(erspan0) entered forwarding state
[   80.566614][ T5931] erspan0: left allmulticast mode
[   80.568692][ T5931] erspan0: left promiscuous mode
[   80.578320][ T5931] bridge0: port 3(erspan0) entered disabled state
[   80.613596][ T5935] C: renamed from lo (while UP)
[   80.621150][ T5935] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   80.661442][ T5942] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10'.
[   80.684051][ T5946] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   80.688131][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'.
[   80.696499][ T5946] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET)
[   81.282014][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[   81.287262][ T5951] ip6_vti0: entered promiscuous mode
[   81.289573][ T5951] ip6_vti0: entered allmulticast mode
[   81.294063][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'.
[   81.595075][ T5850] Bluetooth: hci0: command tx timeout
[   81.607095][ T5961] netlink: 'syz.1.15': attribute type 1 has an invalid length.
[   81.675390][ T5850] Bluetooth: hci1: command tx timeout
[   81.697443][ T5965] veth3: entered promiscuous mode
[   81.728969][ T5961] erspan0: entered allmulticast mode
[   81.755929][ T5850] Bluetooth: hci2: command tx timeout
[   81.765697][ T5972] netlink: 'syz.2.18': attribute type 1 has an invalid length.
[   81.783600][ T5974] netlink: 'syz.1.19': attribute type 1 has an invalid length.
[   81.787974][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'.
[   81.856806][ T5976] netlink: 'syz.2.20': attribute type 1 has an invalid length.
[   81.859882][ T5976] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20'.
[   81.909715][ T5979] netlink: 'syz.2.21': attribute type 12 has an invalid length.
[   81.930186][ T5980] netlink: 'syz.2.21': attribute type 1 has an invalid length.
[   82.010744][ T5982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22'.
[   82.014675][ T5982] openvswitch: netlink: Flow key attr not present in new flow.
[   82.102902][ T5985] netlink: 'syz.0.23': attribute type 1 has an invalid length.
[   82.281290][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'.
[   82.295115][ T5993] vlan2: entered allmulticast mode
[   82.296859][ T5993] bridge0: entered allmulticast mode
[   82.301763][ T5993] team0: Port device vlan2 added
[   82.320022][ T5993] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[   82.671288][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.29'.
[   82.972443][ T6018] team0: entered promiscuous mode
[   82.978293][ T6018] team_slave_0: entered promiscuous mode
[   82.980686][ T6018] team_slave_1: entered promiscuous mode
[   83.032193][ T6024] netlink: 'syz.0.30': attribute type 10 has an invalid length.
[   83.163146][ T6018] team0 (unregistering): left promiscuous mode
[   83.165888][ T6018] team_slave_0: left promiscuous mode
[   83.168305][ T6018] team_slave_1: left promiscuous mode
[   83.186511][ T6018] team0 (unregistering): Port device team_slave_0 removed
[   83.218575][ T6018] team0 (unregistering): Port device team_slave_1 removed
[   83.279244][ T6024] team0: Port device dummy0 added
[   83.573390][ T6045] bridge0: port 3(erspan0) entered blocking state
[   83.578104][ T6045] bridge0: port 3(erspan0) entered disabled state
[   83.582572][ T6045] erspan0: entered promiscuous mode
[   83.621105][ T6048] bridge_slave_0: left allmulticast mode
[   83.623396][ T6048] bridge_slave_0: left promiscuous mode
[   83.628156][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.646210][ T6048] bridge_slave_1: left allmulticast mode
[   83.648013][ T6048] bridge_slave_1: left promiscuous mode
[   83.650083][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.664034][ T6048] bond0: (slave bond_slave_0): Releasing backup interface
[   83.675541][ T5850] Bluetooth: hci0: command tx timeout
[   83.685528][ T6048] bond0: (slave bond_slave_1): Releasing backup interface
[   83.697000][ T6048] team0: Port device team_slave_0 removed
[   83.703765][ T6048] team0: Port device team_slave_1 removed
[   83.707263][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.709950][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.713795][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.718153][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.725783][ T6045] erspan0: left promiscuous mode
[   83.728146][ T6045] bridge0: port 3(erspan0) entered disabled state
[   83.754478][ T5850] Bluetooth: hci1: command tx timeout
[   83.762373][ T6054] ip6_vti0: left promiscuous mode
[   83.764119][ T6054] ip6_vti0: left allmulticast mode
[   83.793028][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.796653][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.837071][ T5850] Bluetooth: hci2: command tx timeout
[   83.901751][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.909418][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.983464][ T6054] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[   83.992697][ T6054] vlan2: left allmulticast mode
[   83.996127][ T6054] bridge0: left allmulticast mode
[   84.008865][ T6062] bridge0: port 3(batadv1) entered blocking state
[   84.017419][ T6062] bridge0: port 3(batadv1) entered disabled state
[   84.021453][ T6062] batadv1: entered allmulticast mode
[   84.024775][ T6062] batadv1: entered promiscuous mode
[   84.027062][ T5854] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.037346][ T5854] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.054349][ T5854] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.057733][ T5854] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.334068][ T6076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.336824][ T6076] IPv6: NLM_F_CREATE should be set when creating new route
[   84.392643][ T6078] netlink: 'syz.2.44': attribute type 21 has an invalid length.
[   84.400386][ T6078] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   84.504518][   T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   84.507913][   T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   84.528500][ T6083] veth3: entered promiscuous mode
[   84.761781][ T6090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.767280][ T6090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.995549][ T6094] C: renamed from lo (while UP)
[   84.999911][ T6094] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   85.321772][ T6098] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   85.378621][ T6109] __nla_validate_parse: 80 callbacks suppressed
[   85.378635][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.52'.
[   85.384081][ T6108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'.
[   85.384103][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'.
[   85.442830][ T6112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.709393][ T6122] validate_nla: 4 callbacks suppressed
[   85.709423][ T6122] netlink: 'syz.0.57': attribute type 1 has an invalid length.
[   85.714301][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'.
[   85.763374][ T6093] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   85.766314][ T5850] Bluetooth: hci0: command tx timeout
[   85.779457][ T6119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.837936][ T5850] Bluetooth: hci1: command tx timeout
[   85.871892][ T6128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.59'.
[   85.914849][ T5850] Bluetooth: hci2: command tx timeout
[   85.958375][ T6132] netlink: 'syz.2.61': attribute type 10 has an invalid length.
[   85.975055][ T6132] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   86.072472][ T6136] wg1: entered promiscuous mode
[   86.074063][ T6136] wg1: entered allmulticast mode
[   86.136513][ T6139] netlink: 108 bytes leftover after parsing attributes in process `syz.2.63'.
[   86.233317][ T6142] netlink: 'syz.1.64': attribute type 1 has an invalid length.
[   86.238576][ T6142] netlink: 'syz.1.64': attribute type 1 has an invalid length.
[   86.367203][ T6148] netlink: 'syz.1.65': attribute type 10 has an invalid length.
[   86.377236][ T6148] netlink: 'syz.1.65': attribute type 10 has an invalid length.
[   86.382731][ T6148] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   86.636641][   T24] cfg80211: failed to load regulatory.db
[   86.792371][ T6150] wg1: left promiscuous mode
[   86.793868][ T6150] wg1: left allmulticast mode
[   86.975463][ T6152] netlink: 'syz.0.67': attribute type 1 has an invalid length.
[   87.022353][ T6152] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.164585][ T6156] bond0: (slave wlan1): Releasing backup interface
[   87.225696][ T6162] netlink: 32 bytes leftover after parsing attributes in process `syz.0.69'.
[   87.262626][ T6167] netlink: 'syz.2.71': attribute type 1 has an invalid length.
[   87.266950][ T6167] netlink: 'syz.2.71': attribute type 1 has an invalid length.
[   87.304841][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.70'.
[   87.315031][ T6170] bond0: (slave dummy0): Releasing backup interface
[   87.321148][ T6171] netlink: 'syz.0.72': attribute type 1 has an invalid length.
[   87.321363][ T6170] bridge_slave_0: left allmulticast mode
[   87.327344][ T6170] bridge_slave_0: left promiscuous mode
[   87.329743][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.336452][ T6170] bridge_slave_1: left allmulticast mode
[   87.339915][ T6170] bridge_slave_1: left promiscuous mode
[   87.342112][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.350532][ T6170] bond0: (slave bond_slave_0): Releasing backup interface
[   87.358829][ T6170] bond0: (slave bond_slave_1): Releasing backup interface
[   87.366373][ T6170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.366612][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.70'.
[   87.369203][ T6170] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.380809][ T6170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.383011][ T6170] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.391922][ T6170] bond0: (slave bond1): Releasing backup interface
[   87.398633][ T6170] batadv1: left allmulticast mode
[   87.400647][ T6170] batadv1: left promiscuous mode
[   87.402791][ T6170] bridge0: port 3(batadv1) entered disabled state
[   87.422455][ T6167] bond1: (slave gretap1): making interface the new active one
[   87.427943][ T6167] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   87.443265][ T6167] syz.2.71 (6167) used greatest stack depth: 19848 bytes left
[   87.455862][ T5869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.459491][ T5869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.462693][ T5869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.467300][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'.
[   87.476358][ T5869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.805585][ T6198] bond1: (slave gretap1): Releasing active interface
[   87.834626][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout
[   87.859665][ T6198] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   87.870261][ T6201] pim6reg1: entered promiscuous mode
[   87.872263][ T6201] pim6reg1: entered allmulticast mode
[   87.873851][ T6198] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   87.878890][ T6198] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   87.993815][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.109265][ T6209] bond1: (slave ip6gretap1): making interface the new active one
[   88.113277][ T6209] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   88.141875][ T6209] veth3: entered promiscuous mode
[   88.147975][ T6209] bond1: (slave veth3): Enslaving as an active interface with a down link
[   88.153074][ T6209] team0: Port device dummy0 removed
[   88.155693][ T5850] Bluetooth: hci2: command tx timeout
[   88.159455][ T6209] bridge_slave_0: left allmulticast mode
[   88.162219][ T6209] bridge_slave_0: left promiscuous mode
[   88.164862][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.169939][ T6209] bridge_slave_1: left allmulticast mode
[   88.172193][ T6209] bridge_slave_1: left promiscuous mode
[   88.175168][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.182478][ T6209] bond0: (slave bond_slave_0): Releasing backup interface
[   88.187886][ T6209] bond0: (slave bond_slave_1): Releasing backup interface
[   88.192859][ T6209] team0: Port device team_slave_0 removed
[   88.197858][ T6209] team0: Port device team_slave_1 removed
[   88.200417][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.206385][ T6209] bond0: (slave wlan1): Releasing backup interface
[   88.211656][ T6209] team0: Port device vlan2 removed
[   88.217924][ T6209] bond1: (slave ip6gretap1): Releasing active interface
[   88.220794][ T6209] bond1: (slave ip6gretap1): the permanent HWaddr of slave - a2:6d:b8:52:6a:3a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   88.232097][ T6209] bond1: (slave veth3): Releasing active interface
[   88.316563][ T6217] 8021q: adding VLAN 0 to HW filter on device team0
[   88.320447][ T6217] bond0: (slave team0): Enslaving as an active interface with an up link
[   88.390704][ T6220] trusted_key: syz.0.87 sent an empty control message without MSG_MORE.
[   88.411055][ T6220] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   88.590523][ T6224] veth3: left promiscuous mode
[   88.592672][ T5869] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.609175][ T5854] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.610869][ T6226] ieee802154 phy0 wpan0: encryption failed: -22
[   88.612644][ T5854] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.632179][ T5854] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.123153][ T6254] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   89.345600][ T6270] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.350140][ T6270] bond0: (slave bond2): Enslaving as an active interface with an up link
[   89.452369][ T6274] warning: `syz.2.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   89.479246][ T6274] bond0: (slave wlan1): Releasing backup interface
[   89.541558][ T6276] bond2: entered promiscuous mode
[   89.544092][ T6276] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.565222][ T6276] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.568256][ T6276] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[   89.572652][ T6276] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   89.586579][ T6276] bond2: (slave wireguard0): making interface the new active one
[   89.590043][ T6276] wireguard0: entered promiscuous mode
[   89.593652][ T6276] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[   89.609991][ T6277] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   89.610635][ T6276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   89.616136][ T6276] IPv6: NLM_F_CREATE should be set when creating new route
[   89.618859][ T6276] IPv6: NLM_F_CREATE should be set when creating new route
[   89.638877][ T6276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   89.643077][ T6277] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.654465][ T6277] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.727627][ T6286] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   89.939432][ T6293] team0: Device bond0 is already an upper device of the team interface
[   90.029845][ T6304] tipc: Started in network mode
[   90.032181][ T6304] tipc: Node identity 080211000001, cluster identity 4711
[   90.035400][ T6304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.039523][ T6304] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   90.042694][ T6304] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   90.058557][ T6304] tipc: Resetting bearer <eth:syzkaller0>
[   90.345920][ T6316] bond3: (slave bridge1): making interface the new active one
[   90.349427][ T6316] bond3: (slave bridge1): Enslaving as an active interface with an up link
[   90.602628][ T6345] __nla_validate_parse: 13 callbacks suppressed
[   90.602646][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.122'.
[   90.633800][ T6339] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.647509][ T6339] bond2: (slave geneve2): making interface the new active one
[   90.651936][ T6339] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   90.661749][ T6339] bond2: entered promiscuous mode
[   90.664057][ T6339] geneve2: entered promiscuous mode
[   90.675010][ T6350] team0: Port device dummy0 added
[   90.761252][ T6357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.124'.
[   90.796680][ T6349] validate_nla: 15 callbacks suppressed
[   90.796702][ T6349] netlink: 'syz.1.123': attribute type 1 has an invalid length.
[   90.811621][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'.
[   90.900852][ T6364] netlink: 'syz.0.125': attribute type 1 has an invalid length.
[   90.936825][ T6367] bridge0: port 1(macsec1) entered blocking state
[   90.939061][ T6367] bridge0: port 1(macsec1) entered disabled state
[   90.941200][ T6367] macsec1: entered allmulticast mode
[   90.944135][ T6367] macsec1: left allmulticast mode
[   90.962899][ T6364] bond4: (slave veth5): Enslaving as an active interface with a down link
[   90.968113][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'.
[   90.972547][ T6364] 8021q: adding VLAN 0 to HW filter on device bond4
[   91.039932][   T24] tipc: Node number set to 134418688
[   91.046241][ T6370] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[   91.093854][ T6370] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.136308][ T6378] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.139239][ T6378] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   91.146846][ T6378] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   91.151588][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[   91.151886][ T6380] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[   91.242332][ T6380] 8021q: adding VLAN 0 to HW filter on device bond5
Connection to localhost closed by remote host.
[   91.274640][ T6370] bond3: (slave bridge1): Enslaving as an active interface with a down link
[   91.292180][ T6384] bond5: (slave ip6gretap2): making interface the new active one
[   91.302980][ T6384] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link
[   92.091790][   T12] bond5 (unregistering): (slave ip6gretap2): Releasing active interface
[   92.253613][   T12] bond3 (unregistering): (slave bridge1): Releasing active interface
[   92.362915][   T12] bond0 (unregistering): (slave team0): Releasing backup interface
[   92.366950][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   92.378836][   T12] bond0 (unregistering): Released all slaves
[   92.437052][   T12] bond1 (unregistering): Released all slaves
[   92.491171][   T12] bond2 (unregistering): (slave wireguard0): Releasing backup interface
[   92.494080][   T12] wireguard0: left promiscuous mode
[   92.496966][   T12] bond2 (unregistering): Released all slaves
[   92.504769][   T12] bond3 (unregistering): Released all slaves
[   92.563595][   T12] bond4 (unregistering): (slave veth5): Releasing active interface
[   92.567646][   T12] bond4 (unregistering): Released all slaves
[   92.622069][   T12] bond5 (unregistering): Released all slaves
[   92.721135][   T12] tipc: Disabling bearer <eth:syzkaller0>
[   92.731561][   T12] tipc: Left network mode
[   92.921420][   T12] hsr_slave_0: left promiscuous mode
[   92.927139][   T12] hsr_slave_1: left promiscuous mode
[   93.414678][   T12] team0 (unregistering): Port device dummy0 removed
[   93.956500][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.012019][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.084944][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.135078][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.285491][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.351651][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.443248][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.521218][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.842652][   T12] bond3 (unregistering): (slave bridge1): Releasing active interface
[   94.908867][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   94.918265][   T12] bond0 (unregistering): (slave bond2): Releasing backup interface
[   94.922120][   T12] bond0 (unregistering): Released all slaves
[   95.001837][   T12] bond1 (unregistering): Released all slaves
[   95.081019][   T12] bond2 (unregistering): Released all slaves
[   95.159054][   T12] bond3 (unregistering): Released all slaves
[   95.294551][   T12] bond2 (unregistering): (slave geneve2): Releasing active interface
[   95.297653][   T12] geneve2 (unregistering): left promiscuous mode
[   95.427779][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   95.439362][   T12] bond0 (unregistering): Released all slaves
[   95.448374][   T12] bond1 (unregistering): Released all slaves
[   95.513410][   T12] bond2 (unregistering): Released all slaves
[   95.806441][   T12] ------------[ cut here ]------------
[   95.808270][   T12] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[   95.810742][   T12] WARNING: CPU: 0 PID: 12 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[   95.814120][   T12] Modules linked in:
[   95.815677][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[   95.820976][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.823973][   T12] Workqueue: netns cleanup_net
[   95.826141][   T12] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[   95.828603][   T12] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 28 b0 8c e8 16 92 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 67 f3 d7 f6 90 0f 0b 90 42 80 7c 3d
[   95.836338][   T12] RSP: 0000:ffffc900000f72a0 EFLAGS: 00010246
[   95.838743][   T12] RAX: 34da20bd09910c00 RBX: 0000000000000000 RCX: ffff88801c2f5640
[   95.841742][   T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[   95.845212][   T12] RBP: ffff888029c3d728 R08: 0000000000000003 R09: 0000000000000004
[   95.848285][   T12] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888029c3e9d0
[   95.851317][   T12] R13: ffff888029c3cd80 R14: 1ffff11005387ae5 R15: dffffc0000000000
[   95.854826][   T12] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[   95.858236][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   95.860748][   T12] CR2: 00007f07134efff8 CR3: 0000000028f70000 CR4: 00000000000006f0
[   95.863772][   T12] Call Trace:
[   95.865401][   T12]  <TASK>
[   95.866768][   T12]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[   95.869127][   T12]  __ieee80211_link_release_channel+0x33b/0x4a0
[   95.871525][   T12]  ? __pfx_ieee80211_uninit+0x10/0x10
[   95.873529][   T12]  unregister_netdevice_many_notify+0x1953/0x1ff0
[   95.876382][   T12]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[   95.878866][   T12]  ? __pfx_call_rcu+0x10/0x10
[   95.880745][   T12]  unregister_netdevice_queue+0x33c/0x380
[   95.882937][   T12]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[   95.885713][   T12]  _cfg80211_unregister_wdev+0x165/0x590
[   95.887917][   T12]  ieee80211_remove_interfaces+0x49a/0x6e0
[   95.890160][   T12]  ? __pfx_synchronize_rcu+0x10/0x10
[   95.892239][   T12]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[   95.895042][   T12]  ? rcu_is_watching+0x15/0xb0
[   95.896901][   T12]  ieee80211_unregister_hw+0x5d/0x2c0
[   95.898890][   T12]  mac80211_hwsim_del_radio+0x275/0x460
[   95.901038][   T12]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[   95.903333][   T12]  hwsim_exit_net+0x584/0x640
[   95.905561][   T12]  ? __pfx_hwsim_exit_net+0x10/0x10
[   95.907580][   T12]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[   95.909807][   T12]  ops_undo_list+0x49a/0x990
[   95.911613][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[   95.913596][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[   95.915821][   T12]  cleanup_net+0x4c5/0x800
[   95.917806][   T12]  ? __pfx_cleanup_net+0x10/0x10
[   95.919731][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.921844][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   95.923783][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   95.925697][   T12]  process_scheduled_works+0xae1/0x17b0
[   95.927384][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[   95.929270][   T12]  worker_thread+0x8a0/0xda0
[   95.930823][   T12]  kthread+0x711/0x8a0
[   95.932183][   T12]  ? __pfx_worker_thread+0x10/0x10
[   95.933962][   T12]  ? __pfx_kthread+0x10/0x10
[   95.935803][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.937601][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.939275][   T12]  ? __pfx_kthread+0x10/0x10
[   95.940837][   T12]  ret_from_fork+0x3fc/0x770
[   95.942333][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[   95.943932][   T12]  ? __switch_to_asm+0x39/0x70
[   95.945786][   T12]  ? __switch_to_asm+0x33/0x70
[   95.947271][   T12]  ? __pfx_kthread+0x10/0x10
[   95.948887][   T12]  ret_from_fork_asm+0x1a/0x30
[   95.950577][   T12]  </TASK>
[   95.951777][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   95.954332][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[   95.958387][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.961506][   T12] Workqueue: netns cleanup_net
[   95.962955][   T12] Call Trace:
[   95.964104][   T12]  <TASK>
[   95.965189][   T12]  dump_stack_lvl+0x99/0x250
[   95.966959][   T12]  ? __asan_memcpy+0x40/0x70
[   95.968653][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.970451][   T12]  ? __pfx__printk+0x10/0x10
[   95.972097][   T12]  vpanic+0x281/0x750
[   95.973458][   T12]  ? __pfx__printk+0x10/0x10
[   95.975040][   T12]  ? __pfx_vpanic+0x10/0x10
[   95.976672][   T12]  ? is_bpf_text_address+0x26/0x2b0
[   95.978438][   T12]  panic+0xb9/0xc0
[   95.979747][   T12]  ? __pfx_panic+0x10/0x10
[   95.981289][   T12]  __warn+0x31b/0x4b0
[   95.982672][   T12]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[   95.984668][   T12]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[   95.986349][   T12]  report_bug+0x2be/0x4f0
[   95.987676][   T12]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[   95.989398][   T12]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[   95.991121][   T12]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[   95.992845][   T12]  handle_bug+0x84/0x160
[   95.994216][   T12]  exc_invalid_op+0x1a/0x50
[   95.995934][   T12]  asm_exc_invalid_op+0x1a/0x20
[   95.997540][   T12] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[   95.999702][   T12] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 28 b0 8c e8 16 92 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 67 f3 d7 f6 90 0f 0b 90 42 80 7c 3d
[   96.006783][   T12] RSP: 0000:ffffc900000f72a0 EFLAGS: 00010246
[   96.008934][   T12] RAX: 34da20bd09910c00 RBX: 0000000000000000 RCX: ffff88801c2f5640
[   96.011295][   T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[   96.013660][   T12] RBP: ffff888029c3d728 R08: 0000000000000003 R09: 0000000000000004
[   96.016186][   T12] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888029c3e9d0
[   96.018899][   T12] R13: ffff888029c3cd80 R14: 1ffff11005387ae5 R15: dffffc0000000000
[   96.021675][   T12]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[   96.023611][   T12]  __ieee80211_link_release_channel+0x33b/0x4a0
[   96.025845][   T12]  ? __pfx_ieee80211_uninit+0x10/0x10
[   96.027677][   T12]  unregister_netdevice_many_notify+0x1953/0x1ff0
[   96.029764][   T12]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[   96.032073][   T12]  ? __pfx_call_rcu+0x10/0x10
[   96.033632][   T12]  unregister_netdevice_queue+0x33c/0x380
[   96.035488][   T12]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[   96.037485][   T12]  _cfg80211_unregister_wdev+0x165/0x590
[   96.039270][   T12]  ieee80211_remove_interfaces+0x49a/0x6e0
[   96.041161][   T12]  ? __pfx_synchronize_rcu+0x10/0x10
[   96.042836][   T12]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[   96.044927][   T12]  ? rcu_is_watching+0x15/0xb0
[   96.046769][   T12]  ieee80211_unregister_hw+0x5d/0x2c0
[   96.048572][   T12]  mac80211_hwsim_del_radio+0x275/0x460
[   96.050300][   T12]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[   96.052248][   T12]  hwsim_exit_net+0x584/0x640
[   96.053918][   T12]  ? __pfx_hwsim_exit_net+0x10/0x10
[   96.055718][   T12]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[   96.057819][   T12]  ops_undo_list+0x49a/0x990
[   96.059437][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[   96.061209][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[   96.062958][   T12]  cleanup_net+0x4c5/0x800
[   96.064500][   T12]  ? __pfx_cleanup_net+0x10/0x10
[   96.066215][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   96.067983][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   96.069909][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[   96.071874][   T12]  process_scheduled_works+0xae1/0x17b0
[   96.073758][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[   96.075804][   T12]  worker_thread+0x8a0/0xda0
[   96.077398][   T12]  kthread+0x711/0x8a0
[   96.078812][   T12]  ? __pfx_worker_thread+0x10/0x10
[   96.080546][   T12]  ? __pfx_kthread+0x10/0x10
[   96.082105][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[   96.083836][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[   96.085567][   T12]  ? __pfx_kthread+0x10/0x10
[   96.087111][   T12]  ret_from_fork+0x3fc/0x770
[   96.088675][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[   96.090409][   T12]  ? __switch_to_asm+0x39/0x70
[   96.092036][   T12]  ? __switch_to_asm+0x33/0x70
[   96.093671][   T12]  ? __pfx_kthread+0x10/0x10
[   96.095266][   T12]  ret_from_fork_asm+0x1a/0x30
[   96.096937][   T12]  </TASK>
[   96.098623][   T12] Kernel Offset: disabled
[   96.099922][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:41:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000044 RBX=0000000000000044 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f6a50
R8 =ffff888021768237 R9 =1ffff110042ed046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99afa8e8 R14=ffffffff99def3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f07134efff8 CR3=0000000028f70000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=70692f74656e2f73 79732f636f72702f XMM03=000000ffffffff00 ff00ff00ff00ff00
XMM04=ff00ff00ffffff00 00ff000000000000 XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b70c4a5 RBX=0000000000000001 RCX=ffffffff8b70c48a RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000002 RBP=ffffc900043ff810 RSP=ffffc900043ff6c0
R8 =ffffffff8fa38237 R9 =1ffffffff1f47046 R10=dffffc0000000000 R11=fffffbfff1f47047
R12=ffffffff8da3162a R13=dffffc0000000000 R14=0000000000000001 R15=ffffc900043ff920
RIP=ffffffff81bfae98 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa5b7978380 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc764c2f80 CR3=000000010ea30000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffff000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
