last executing test programs:

12.520977519s ago: executing program 1 (id=50):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d)
ioctl$SIOCSIFHWADDR(r3, 0x401c5820, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x14, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x30004000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)={0x110, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x772}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e)
r7 = socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="8500000088000000040000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0xbb428eaf468c6595, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0)
ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x2)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0)
ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000380))

11.669994572s ago: executing program 1 (id=53):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r0, 0xff, 0x2, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28)
unshare(0x40020000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r1, 0x0, 0x2}, 0x18)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/21], 0x50)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340))
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

8.640246191s ago: executing program 4 (id=55):
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0))
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x8000)
r1 = epoll_create1(0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
socket(0x2, 0x6, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000080)={0xa002a008})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

8.268373113s ago: executing program 0 (id=57):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xad356f19b320d40b)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000c40)="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")
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xffeff010}, {0x6, 0x7, 0xfe, 0x6}]}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="0000886400110000080000000060ec970000282c00fe8000000000000000000000000000aaff0200000000000000000000000000018902907800000000fc000000000000000000000000000000fe8000000000000000000000000000bb00"], 0x5e)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001500)={r8}, 0x8)

7.511552979s ago: executing program 4 (id=60):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0xffffffffffffffe2}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0xfffd, @none}, 0xe)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000500000000260004001818fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8057a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38c72b4e3860f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000180b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107f5fe0000000000000000000200000000000000000000000000008879e66485201a0015ca8374000000000000000000000000000000000000145e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d983cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c0305d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed0000"], 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r5, @ANYBLOB="036beb0baa"], 0x1c}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28150000020000000c001aab0600058004c601"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x6c3, 0x9}, 0x8)
unshare(0x24020400)
pipe(0x0)
r8 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24)
sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r8, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x800)

7.075712618s ago: executing program 0 (id=62):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
close(0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r2, 0x0, 0x40002102)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000280)={'vlan1\x00', 0xe1be43a5aa8331c2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000108fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="fe000000000000001c00240017d7d613b0fae72cff49034379c9505aa32c8ac1d0b990c508001b"], 0x44}}, 0x14)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close(r0)

6.891449322s ago: executing program 1 (id=64):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r2=>0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

6.497305927s ago: executing program 4 (id=65):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x9, 0xbd, "fd30214fdbc562ac8d02474bf93b9c6d23d76bbbe3927da2320df6c19496d6935725b2290f7c83cf5b5ff87f3ad2280caa316e3c8110aa067482a09aefdf8bae5553553ac1a9cd030355f436ec26badecbd0c113449f94848fabb26a3922dc6f7da9bf0296cdba5043c7f6294ade73c48c88fda9f0e5474ed310d327080e7407b3ea9dfa87f34790ad8db8eb463657a3c91b30fc4c2238cfe1927fae3979d2a2c551f923f511f276a26632bc034aab6ee17e69d785aa53d606cc3ec957"}, 0xc5)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0)
socket$netlink(0x10, 0x3, 0x12)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
close(0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c0000001c0a010400000000000000000700000008000a40000000000900020073797a31000000000900"], 0x364}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4020, r5}, 0x18)

5.928728787s ago: executing program 1 (id=66):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea616f", 0x3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8)
sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r9, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14)

5.760067394s ago: executing program 3 (id=67):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240)="29b0", 0x2000cc0, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0)
close(r1)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0xffffffff, 0x1}, 0x20)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89fd, &(0x7f0000000040)={'bond0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x24000810)
sendfile(r3, r2, 0x0, 0xf03a0005)
recvmmsg(r2, &(0x7f0000000a40), 0x0, 0x40010002, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x58}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)

5.579373428s ago: executing program 4 (id=68):
socket$inet6(0xa, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)}], 0x1}}], 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000738000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0xe7, 0x0, 0x0}, &(0x7f00000064c0)=0x40)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
close(r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @remote}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

4.581301913s ago: executing program 3 (id=69):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002d000100000000000000000005000080050011802e"], 0x1c}], 0x1}, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x2010, r1, 0x47e1b000)
write$bt_hci(r3, 0x0, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='bic\x00', 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10)

4.267712311s ago: executing program 3 (id=70):
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x5, 0x0)
r0 = socket(0x2b, 0x1, 0x0)
listen(r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x4b7e37a4efecf7e0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
mmap(&(0x7f000020f000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x2ba22000)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x0, 0xf8, 0xfeffffff, 0x0, 0x2f0, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e24, 0x4e22], 0x2}}, @common=@inet=@tcp={{0x30}, {[], [0x0, 0x4e24], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vlan0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x423, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x12, 0x0, 0x7ffff7ff, 0x3}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.045612644s ago: executing program 3 (id=71):
r0 = socket$inet6(0x10, 0x2, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10)
sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80300001600010000000100fcffffff0a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080201d000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x3c8}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x100000000000014f, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRESOCT=r1], 0x558}, 0x40)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x894b, 0x0)
syz_emit_ethernet(0x1e, &(0x7f00000003c0)={@random="51f26f316171", @broadcast, @void, {@can={0xc, {{0x2, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "d92783f228132282"}}}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r5], 0x1c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08000f"], 0x2c}, 0x1, 0x0, 0x0, 0x448c4}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.639401343s ago: executing program 3 (id=72):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
socket(0x11, 0xa, 0x2)
unshare(0x62040200)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x20000400)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bind$802154_raw(r2, &(0x7f0000000000)={0x24, @long}, 0x8)
unshare(0x20000400)
vmsplice(0xffffffffffffffff, 0x0, 0x34, 0x2)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008044}, 0x4c000)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, 0x0, &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

2.594385304s ago: executing program 2 (id=73):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$kcm(0x21, 0x2, 0x2)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4)
close(r5)
recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000da0000f8ff00000000bfa2009b1eae8e5aa4860100f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095396dd4fafe5d5b166a8a015dbc3e6cc507b5963121b709b3dd96311754058b89aca27cfb31b4aa490981b102e9388512afd3ce8c3a3eccf2d83b0a9a50ea076bc654476e6aedd6be"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x40, 0x9, 0xffffffff, 0x0, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x63}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000000)={r9, 0xe0}, 0x8)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0)

2.420215203s ago: executing program 0 (id=74):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}}, 0x1c}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fff, @remote, 0x9}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
shutdown(r2, 0x1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"})
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x8, 0xffffffff, 0x9, 0x1008, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0xd, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f0000000440), &(0x7f0000000300)=""/156}, 0x20)
close(0x3)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

2.250403856s ago: executing program 4 (id=75):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

1.900433484s ago: executing program 2 (id=76):
socket$kcm(0x2, 0x3, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket(0x28, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$rds(0x15, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$unix(0x1, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRESOCT=r1], 0x20)

1.685246004s ago: executing program 2 (id=77):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
unshare(0x20000400)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="eead6730a0d049c9fe8b2c9769ba45cf14000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x80c4}, 0x80)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x4)
ioctl$TUNSETOFFLOAD(r1, 0x8008743f, 0xf0ff1f00000000)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1, 0x0, 0x0, 0x4, 0x1, 0x5}]}, {0x0, [0x61]}}, &(0x7f0000000f40)=""/4089, 0x27, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
accept4(r7, &(0x7f00000000c0)=@x25, &(0x7f0000000180)=0x80, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x40000b9}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0)

1.361492842s ago: executing program 0 (id=78):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000006f40)=[{{&(0x7f0000005640)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000007000000860800000003"], 0x18}}], 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="c8f493925ea435fe84ceeaf0ce7f4a2c892196547538a23cc80e07b1686284066becd7159c570e1ad0fc4f", @ANYRES16=r6, @ANYBLOB="100025bd7000fddbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4080885)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x10000000)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0200, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0xfffffffd)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[], 0x1c}], 0x1}, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r8, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
openat$cgroup_subtree(r8, &(0x7f0000000000), 0x2, 0x0)

1.206630417s ago: executing program 1 (id=79):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20048000)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}], 0x2}}], 0x1, 0x2040000, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x3, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x9, [{@multicast1, 0xb932}, {@private=0xa010101, 0x4000}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'veth0_vlan\x00', {0x2, 0x4e24, @broadcast}})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38)

1.098911227s ago: executing program 4 (id=80):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffff3, 0x61a, 0xc8a1, 0x7, 0x5010000000000000, 0x20000000000005, 0x6, 0xff9}, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r2)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000800)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4084)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x4, 0x1}]}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

720.352282ms ago: executing program 2 (id=81):
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006"], 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
r1 = accept4(r0, &(0x7f0000000500)=@qipcrtr, &(0x7f0000000580)=0x80, 0x800)
write$bt_hci(r1, &(0x7f00000005c0)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@none, 0x6}}}, 0xb)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x24)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e1c}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0x58}, 0x1, 0x7}, 0x20040080)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1f8, 0x940c, 0x3002, 0x1f8, 0x2c0, 0x2e8, 0x3d8, 0x3d8, 0x2e8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xc58, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x2800000, 0xffffff05, 0x1}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1410, 0x4, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x6}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004)
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1f, {[0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe3, 0x3]}}, 0x5c)
socketpair(0xf, 0xa, 0x0, &(0x7f00000002c0))
r7 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x83, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0x12}, 0x40, 0x40, 0x6, 0x41}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

616.032098ms ago: executing program 0 (id=82):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r1, 0x29, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="d02fc9"], 0x48)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x24, 0xd, 0x200, 0x0, 0x1000, 0x1ff}}, {0x4}}]}]}, 0x48}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0)
sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x40000043, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000040))
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
tee(r0, r4, 0x7, 0xb)
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r6, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0)

516.395513ms ago: executing program 1 (id=83):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000506010300000000000012000a00000905000100"], 0x1c}}, 0x404c894)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff})
readv(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
write$cgroup_int(r6, &(0x7f00000000c0)=0x3, 0x12)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c00028008000440000000060800014000000013080002401000ffff0900010073797a30000000000900020073797a3200000000140100001100010000000000000000000000000a"], 0x84}}, 0x0)

325.440316ms ago: executing program 2 (id=84):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)={0x7f, <r8=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r8, 0xd8b8, 0x8}, 0xc)

320.325668ms ago: executing program 0 (id=85):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080)
socket$kcm(0x29, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r7=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x800000)
sendfile(r8, r1, 0x0, 0x10000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r9)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20)
sendmsg$nl_netfilter(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x18, 0x4, 0x5, 0x101, 0x1, 0x25dfdbfc, {}, [@generic='}']}, 0x18}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

86.368221ms ago: executing program 2 (id=86):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r3, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x24}}, 0x8000)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, r3, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x85, 0x2a, [@ibss={0x6, 0x2}, @prep={0x83, 0x1f, {{}, 0x1, 0xb, @device_b, 0x101, @void, 0x6, 0xbe, @device_a, 0x8}}, @measure_req={0x26, 0x52, {0x3, 0xeb, 0x50, "e94127915f89381a13904495e501968433f0599d41d615bde300922497c64549849cdc2a3161b44a260a8adc7a0ac2d591d7d5cf43192288982395bc4714c1ee9fccd6fb8f739d56a49048ca528220"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, [{0x30, 0x1}, {0x12}, {0x48}, {0x1b, 0x1}, {0x6c, 0x1}, {0xb}, {0x4, 0x1}, {0x16, 0x1}, {0x9, 0x1}, {0x2}, {0x1}, {0x12}, {0x325214739e26cf35}, {0x6}, {0x2, 0x1}, {0x60}, {0xb}, {0x18, 0x1}, {0x3, 0x1}, {0x30, 0x1}, {0x2}, {0xc}, {0x12, 0x1}, {0x6c}, {0x24, 0x1}, {0x6, 0x1}, {0x1b}, {0x18}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x891)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c681650fe57c0495317b950040a62a6e475d505e071acf187553e54337d680dc4699745b70ee517f6cb7ef9d333a28d9160a41043a2e13b98126628ab9b0a4b9309ea5bef2d673efbc2779d60210599d91", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
syz_emit_ethernet(0x72, &(0x7f0000000380)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @mcast1, [@routing={0x2c, 0x0, 0x2, 0xa3}]}}}}}}}, 0x0)
getpid()
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}]}, 0x3c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r10, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}}, 0x0)
sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r10, 0x10, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8014)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

0s ago: executing program 3 (id=87):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f0000000280)=[{0x5, 0x9, 0x3, 0x6}, {0x5be, 0x81, 0x6, 0x80000000}, {0x4, 0xa5, 0x62, 0x8}, {0x5, 0x7, 0x3, 0x54d1}, {0x8, 0x4, 0x5}, {0xf, 0x4, 0xd0, 0x3}, {0x2, 0x9, 0x7, 0x401}]})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random})
ppoll(&(0x7f0000000700)=[{r2, 0xa00}], 0x1, 0x0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)="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", 0x3e8}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="5197d3e195e4", 0x6}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000640)}, {&(0x7f0000002b80)}], 0x2}}], 0x3, 0x4048040)
close(0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts.
[   71.186220][ T5820] cgroup: Unknown subsys name 'net'
[   71.321299][ T5820] cgroup: Unknown subsys name 'cpuset'
[   71.330907][ T5820] cgroup: Unknown subsys name 'rlimit'
[   71.524002][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[   71.530759][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
Setting up swapspace version 1, size = 127995904 bytes
[   72.794495][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   75.317042][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.326113][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.339878][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.358744][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.366805][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.388609][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.409003][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.431488][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   75.437021][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.441571][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.446260][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.454518][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   75.468496][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.469138][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   75.475616][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.485917][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.490237][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   75.498272][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.506826][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.519525][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.527070][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.538695][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.547195][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.558418][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.582095][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.137342][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   76.191754][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   76.389337][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   76.435701][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   76.477041][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.489212][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.497176][ T5837] bridge_slave_0: entered allmulticast mode
[   76.504455][ T5837] bridge_slave_0: entered promiscuous mode
[   76.529330][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.536544][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.545126][ T5834] bridge_slave_0: entered allmulticast mode
[   76.552549][ T5834] bridge_slave_0: entered promiscuous mode
[   76.565862][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.573883][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.583601][ T5837] bridge_slave_1: entered allmulticast mode
[   76.595303][ T5837] bridge_slave_1: entered promiscuous mode
[   76.626974][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.634393][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.641778][ T5834] bridge_slave_1: entered allmulticast mode
[   76.649500][ T5834] bridge_slave_1: entered promiscuous mode
[   76.723954][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.750918][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   76.783923][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.807111][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.861966][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.892797][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.900955][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.908361][ T5838] bridge_slave_0: entered allmulticast mode
[   76.915263][ T5838] bridge_slave_0: entered promiscuous mode
[   76.925913][ T5834] team0: Port device team_slave_0 added
[   76.934857][ T5834] team0: Port device team_slave_1 added
[   76.981454][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.988833][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.996005][ T5838] bridge_slave_1: entered allmulticast mode
[   77.003958][ T5838] bridge_slave_1: entered promiscuous mode
[   77.037402][ T5837] team0: Port device team_slave_0 added
[   77.093446][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.100766][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.128337][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.142229][ T5837] team0: Port device team_slave_1 added
[   77.149595][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.157351][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.164736][ T5830] bridge_slave_0: entered allmulticast mode
[   77.172279][ T5830] bridge_slave_0: entered promiscuous mode
[   77.194714][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.206483][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.214051][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.240461][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.272090][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.280254][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.288889][ T5830] bridge_slave_1: entered allmulticast mode
[   77.295999][ T5830] bridge_slave_1: entered promiscuous mode
[   77.318722][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.360163][ T5838] team0: Port device team_slave_0 added
[   77.391229][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.398876][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.406685][ T5832] bridge_slave_0: entered allmulticast mode
[   77.414769][ T5832] bridge_slave_0: entered promiscuous mode
[   77.423559][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.430878][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.438281][ T5832] bridge_slave_1: entered allmulticast mode
[   77.451990][ T5832] bridge_slave_1: entered promiscuous mode
[   77.460825][ T5838] team0: Port device team_slave_1 added
[   77.467357][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.474409][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.500796][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.514562][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.521901][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.548221][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.598319][ T5850] Bluetooth: hci3: command tx timeout
[   77.604079][   T51] Bluetooth: hci4: command tx timeout
[   77.610099][ T5841] Bluetooth: hci0: command tx timeout
[   77.610327][ T5850] Bluetooth: hci2: command tx timeout
[   77.656385][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.678015][ T5850] Bluetooth: hci1: command tx timeout
[   77.685402][ T5834] hsr_slave_0: entered promiscuous mode
[   77.692007][ T5834] hsr_slave_1: entered promiscuous mode
[   77.735564][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.761909][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.771949][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.779528][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.806127][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.819304][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.826257][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.852491][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.869094][ T5837] hsr_slave_0: entered promiscuous mode
[   77.875287][ T5837] hsr_slave_1: entered promiscuous mode
[   77.881779][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.889536][ T5837] Cannot create hsr debugfs directory
[   77.910294][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.961861][ T5830] team0: Port device team_slave_0 added
[   77.971985][ T5830] team0: Port device team_slave_1 added
[   77.996108][ T5832] team0: Port device team_slave_0 added
[   78.041400][ T5832] team0: Port device team_slave_1 added
[   78.125595][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.132802][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.159499][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.172507][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.179662][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.206212][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.235029][ T5838] hsr_slave_0: entered promiscuous mode
[   78.242770][ T5838] hsr_slave_1: entered promiscuous mode
[   78.249170][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.256957][ T5838] Cannot create hsr debugfs directory
[   78.296471][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.304930][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.334201][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.366876][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.374298][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.400989][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.512715][ T5830] hsr_slave_0: entered promiscuous mode
[   78.520019][ T5830] hsr_slave_1: entered promiscuous mode
[   78.526293][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.534281][ T5830] Cannot create hsr debugfs directory
[   78.648571][ T5832] hsr_slave_0: entered promiscuous mode
[   78.654787][ T5832] hsr_slave_1: entered promiscuous mode
[   78.662000][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.669731][ T5832] Cannot create hsr debugfs directory
[   78.931609][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   78.957845][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   78.970003][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   78.993249][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.092665][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.103957][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.130703][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.152548][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.219244][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.251901][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.262615][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.274185][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.386676][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   79.412189][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   79.426414][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   79.437337][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.516739][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.555396][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.568657][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.592143][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.605509][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.665729][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   79.678109][ T5850] Bluetooth: hci4: command tx timeout
[   79.679061][   T51] Bluetooth: hci3: command tx timeout
[   79.688123][ T5841] Bluetooth: hci0: command tx timeout
[   79.694446][ T5850] Bluetooth: hci2: command tx timeout
[   79.706190][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.713813][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.741907][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.758219][ T5850] Bluetooth: hci1: command tx timeout
[   79.776187][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.783841][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.835662][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   79.846352][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.864714][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.873160][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.913425][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.920592][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.966782][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   79.979000][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.041029][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   80.056367][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.063496][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.103340][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.110515][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.124595][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.131700][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.164703][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.172291][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.264657][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.407515][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   80.495402][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.503024][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.562370][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.569554][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.602315][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.771505][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.795065][ T5834] veth0_vlan: entered promiscuous mode
[   80.834285][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.886209][ T5834] veth1_vlan: entered promiscuous mode
[   80.976039][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.019376][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.151369][ T5834] veth0_macvtap: entered promiscuous mode
[   81.179545][ T5830] veth0_vlan: entered promiscuous mode
[   81.200705][ T5834] veth1_macvtap: entered promiscuous mode
[   81.245538][ T5830] veth1_vlan: entered promiscuous mode
[   81.274237][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.287138][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.333409][ T5838] veth0_vlan: entered promiscuous mode
[   81.346565][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.355485][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.366893][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.376563][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.385926][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.447224][ T5838] veth1_vlan: entered promiscuous mode
[   81.468441][ T5830] veth0_macvtap: entered promiscuous mode
[   81.502159][ T5830] veth1_macvtap: entered promiscuous mode
[   81.575142][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.599401][ T5837] veth0_vlan: entered promiscuous mode
[   81.606915][ T5832] veth0_vlan: entered promiscuous mode
[   81.632022][ T5838] veth0_macvtap: entered promiscuous mode
[   81.662491][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.692458][ T5838] veth1_macvtap: entered promiscuous mode
[   81.715709][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.720304][ T5832] veth1_vlan: entered promiscuous mode
[   81.740516][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.744633][ T5837] veth1_vlan: entered promiscuous mode
[   81.767465][ T5841] Bluetooth: hci2: command tx timeout
[   81.768222][   T51] Bluetooth: hci0: command tx timeout
[   81.773169][ T5846] Bluetooth: hci4: command tx timeout
[   81.784299][ T5850] Bluetooth: hci3: command tx timeout
[   81.786993][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.807325][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.816572][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.830396][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.848823][ T5850] Bluetooth: hci1: command tx timeout
[   81.964752][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.976377][  T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.992677][  T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.042593][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.107401][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.125999][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.135512][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.145552][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.167158][ T5832] veth0_macvtap: entered promiscuous mode
[   82.193197][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.228113][ T5837] veth0_macvtap: entered promiscuous mode
[   82.272488][ T5832] veth1_macvtap: entered promiscuous mode
[   82.311054][ T5837] veth1_macvtap: entered promiscuous mode
[   82.357950][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.365617][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.392227][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.419145][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.437532][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.472220][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.488625][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.498049][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.509032][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.538588][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.612073][  T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.630704][  T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.665236][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.681030][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.694399][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.705745][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.763914][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.792163][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.895309][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.905151][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.960803][ T5957] Zero length message leads to an empty skb
[   83.108556][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.145390][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.266564][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.311036][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.321112][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.346826][ T5904] hid (null): global environment stack underflow
[   83.358486][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.379624][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.426858][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.845320][ T5850] Bluetooth: hci0: command tx timeout
[   83.845343][   T51] Bluetooth: hci2: command tx timeout
[   83.851005][ T5850] Bluetooth: hci3: command tx timeout
[   83.856802][ T5841] Bluetooth: hci4: command tx timeout
[   83.918068][   T51] Bluetooth: hci1: command tx timeout
[   84.459342][ T5990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.081357][ T6001] pimreg: entered allmulticast mode
[   85.097166][ T5969] infiniband syz1: set active
[   85.107072][ T6001] warning: `syz.4.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.149591][ T5969] infiniband syz1: added macvlan1
[   85.179582][ T5969] syz1: rxe_create_cq: returned err = -12
[   85.207876][ T5969] infiniband syz1: Couldn't create ib_mad CQ
[   85.222516][ T5969] infiniband syz1: Couldn't open port 1
[   85.243202][ T6006] netlink: 'syz.4.15': attribute type 10 has an invalid length.
[   85.329098][ T5969] RDS/IB: syz1: added
[   85.349535][ T5969] smc: adding ib device syz1 with port count 1
[   85.375168][ T5969] smc:    ib device syz1 port 1 has pnetid 
[   85.376088][ T6006] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   85.751228][ T6011] netlink: 'syz.4.17': attribute type 1 has an invalid length.
[   85.931676][ T6013] tap0: tun_chr_ioctl cmd 1074025677
[   85.942664][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.958112][ T6013] tap0: linktype set to 0
[   86.234289][ T5904] hid-generic 0005:0B57:9C16.0001: unknown main item tag 0x6
[   86.243783][ T6009] netlink: 'syz.0.16': attribute type 4 has an invalid length.
[   86.243973][ T5904] hid-generic 0005:0B57:9C16.0001: global environment stack underflow
[   86.264590][ T6009] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET)
[   86.273615][ T5904] hid-generic 0005:0B57:9C16.0001: item 0 4 1 11 parsing failed
[   86.286698][ T5904] hid-generic 0005:0B57:9C16.0001: probe with driver hid-generic failed with error -22
[   86.899334][  T977] cfg80211: failed to load regulatory.db
[   87.846221][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'.
[   87.882620][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'.
[   87.923314][ T6056] netlink: 'syz.1.28': attribute type 1 has an invalid length.
[   87.985888][ T6056] netlink: 10 bytes leftover after parsing attributes in process `syz.1.28'.
[   88.028464][ T6062] netlink: 'syz.4.29': attribute type 303 has an invalid length.
[   88.099143][ T6056] nbd: socks must be embedded in a SOCK_ITEM attr
[   88.118945][ T6056] block nbd0: shutting down sockets
[   88.213495][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'.
[   88.266487][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'.
[   88.369019][ T6064] wg1: entered promiscuous mode
[   88.382003][ T6064] wg1: entered allmulticast mode
[   88.600439][ T6058] syz.4.29 (6058) used greatest stack depth: 17992 bytes left
[   88.906623][ T3079] IPVS: starting estimator thread 0...
[   89.039681][ T6083] IPVS: using max 25 ests per chain, 60000 per kthread
[   89.722422][ T6096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.865211][ T6096] af_packet: tpacket_rcv: packet too big, clamped from 3940 to 3696. macoff=96
[   89.924575][ T6096] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   90.616775][ T6115] batadv1: entered promiscuous mode
[   91.101090][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'.
[   91.110168][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'.
[   91.169042][ T6121] bridge0: entered promiscuous mode
[   91.214487][ T6121] batadv_slave_1: entered promiscuous mode
[   91.287076][ T6125] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.471589][ T6125] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.674368][ T6125] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.705223][ T6131] bridge_slave_0: left allmulticast mode
[   91.712106][ T6131] bridge_slave_0: left promiscuous mode
[   91.718501][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.740693][ T6131] bridge_slave_1: left allmulticast mode
[   91.746933][ T6131] bridge_slave_1: left promiscuous mode
[   91.757693][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.779798][ T6131] bond0: (slave bond_slave_0): Releasing backup interface
[   91.804257][ T6131] bond0: (slave bond_slave_1): Releasing backup interface
[   91.844024][ T6131] team0: Failed to send options change via netlink (err -105)
[   91.858395][ T6131] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   91.869218][ T6131] team0: Port device team_slave_0 removed
[   91.888235][ T6131] team0: Failed to send options change via netlink (err -105)
[   91.901965][ T6131] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   91.938913][ T6131] team0: Port device team_slave_1 removed
[   91.970922][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.004642][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.020441][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.029615][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.091104][ T6125] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.321228][ T6125] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.352356][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'.
[   92.390211][ T6125] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.462453][ T6125] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.584627][ T6125] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.727917][ T6152] netlink: 'syz.1.47': attribute type 1 has an invalid length.
[   92.761140][ T6152] netlink: 224 bytes leftover after parsing attributes in process `syz.1.47'.
[   93.187228][ T6160] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[   94.239493][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'.
[   94.289865][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'.
[   94.466465][ T5965] IPVS: starting estimator thread 0...
[   94.568165][ T6181] IPVS: using max 25 ests per chain, 60000 per kthread
[   95.930870][ T6191] syzkaller0: entered promiscuous mode
[   95.936469][ T6191] syzkaller0: entered allmulticast mode
[   97.594493][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'.
[   97.655175][ T6198] netlink: 'syz.3.56': attribute type 21 has an invalid length.
[   97.664165][ T6198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.56'.
[   97.695551][ T6198] netlink: 'syz.3.56': attribute type 13 has an invalid length.
[   97.759737][ T6198] netlink: 'syz.3.56': attribute type 17 has an invalid length.
[   98.187741][ T6211] tap0: tun_chr_ioctl cmd 1074025677
[   98.214968][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.59'.
[   98.218886][ T6211] tap0: linktype set to 0
[   98.223902][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.59'.
[   98.338160][ T6214] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.358455][ T6214] bridge0: port 1(bond1) entered blocking state
[   98.379148][ T6214] bridge0: port 1(bond1) entered disabled state
[   98.386253][ T6214] bond1: entered allmulticast mode
[   98.402456][ T6214] bond1: entered promiscuous mode
[   98.419471][ T6214] bridge0: port 1(bond1) entered blocking state
[   98.426057][ T6214] bridge0: port 1(bond1) entered forwarding state
[   98.453657][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'.
[   98.467045][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'.
[   98.495486][ T6215] dummy0: entered promiscuous mode
[   98.510514][ T6215] team0: entered promiscuous mode
[   98.520433][ T6215] hsr2: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[   98.535980][ T6215] bridge0: port 2(hsr2) entered blocking state
[   98.542545][ T6215] bridge0: port 2(hsr2) entered disabled state
[   98.552623][ T6215] hsr2: entered allmulticast mode
[   98.557955][ T6215] dummy0: entered allmulticast mode
[   98.563287][ T6215] team0: entered allmulticast mode
[   98.570117][ T6219] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.60'.
[   98.579445][ T6219] netlink: zone id is out of range
[   98.584542][ T6219] netlink: zone id is out of range
[   98.589740][ T6215] hsr2: entered promiscuous mode
[   98.590345][ T6219] netlink: zone id is out of range
[   98.599485][ T6215] bridge0: port 2(hsr2) entered blocking state
[   98.600100][ T6219] netlink: zone id is out of range
[   98.606604][ T6215] bridge0: port 2(hsr2) entered forwarding state
[   98.611324][ T6219] netlink: zone id is out of range
[   98.631838][ T6219] netlink: zone id is out of range
[   98.637074][ T6219] netlink: zone id is out of range
[   98.642768][ T6219] netlink: zone id is out of range
[   98.650730][ T6219] netlink: zone id is out of range
[   98.660075][ T3900] bridge0: port 1(bond1) entered disabled state
[   98.688234][ T6219] netlink: zone id is out of range
[   98.873429][ T6225] netlink: 'syz.2.61': attribute type 10 has an invalid length.
[   98.921533][ T6225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.61'.
[   99.065660][ T6232] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   99.305395][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.313530][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.636891][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.692085][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.915881][ T6227] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.937689][ T6227] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.955369][ T6227] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.964188][ T6227] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.003306][ T6225] bridge0: port 3(dummy0) entered blocking state
[  100.014351][   T30] audit: type=1800 audit(1750248861.624:2): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.65" name="cgroup.controllers" dev="tmpfs" ino=84 res=0 errno=0
[  100.037972][ T6225] bridge0: port 3(dummy0) entered disabled state
[  100.617922][ T6261] veth0: entered promiscuous mode
[  100.701996][ T6261] __nla_validate_parse: 1 callbacks suppressed
[  100.702015][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'.
[  102.975252][ T6301] netlink: 160 bytes leftover after parsing attributes in process `syz.3.71'.
[  103.024343][ T6301] netlink: 'syz.3.71': attribute type 10 has an invalid length.
[  103.123104][ T6301] Driver unsupported XDP return value 0 on prog  (id 51) dev N/A, expect packet loss!
[  104.121980][ T6338] netlink: 'syz.4.75': attribute type 16 has an invalid length.
[  104.146226][ T6338] netlink: 'syz.4.75': attribute type 17 has an invalid length.
[  104.250719][ T6338] net_ratelimit: 70 callbacks suppressed
[  104.250730][ T6338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.366389][ T6341] netlink: 'syz.2.77': attribute type 1 has an invalid length.
[  104.380832][ T6341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.77'.
[  104.668777][ T6342] macvtap1: entered promiscuous mode
[  104.676235][ T6342] vlan0: entered promiscuous mode
[  104.702101][ T6342] macvtap1: entered allmulticast mode
[  104.717790][ T6342] vlan0: entered allmulticast mode
[  104.723116][ T6342] veth0_vlan: entered allmulticast mode
[  104.810138][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'.
[  104.845250][ T6342] vlan0: left allmulticast mode
[  104.858480][ T6342] veth0_vlan: left allmulticast mode
[  104.874918][ T6342] vlan0: left promiscuous mode
[  104.898826][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'.
[  105.430554][ T6364] : entered promiscuous mode
[  105.445133][ T6364] trusted_key: syz.0.82 sent an empty control message without MSG_MORE.
[  106.077974][    C1] 
[  106.080427][    C1] ============================================
[  106.086576][    C1] WARNING: possible recursive locking detected
[  106.092734][    C1] 6.16.0-rc1-syzkaller-00413-gfc4842cd0f11 #0 Not tainted
[  106.099836][    C1] --------------------------------------------
[  106.105983][    C1] syz.2.86/6383 is trying to acquire lock:
[  106.111786][    C1] ffff88807d300f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220
[  106.120875][    C1] 
[  106.120875][    C1] but task is already holding lock:
[  106.128232][    C1] ffff8880542f0f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220
[  106.137564][    C1] 
[  106.137564][    C1] other info that might help us debug this:
[  106.145619][    C1]  Possible unsafe locking scenario:
[  106.145619][    C1] 
[  106.153164][    C1]        CPU0
[  106.156444][    C1]        ----
[  106.159724][    C1]   lock(&hsr->seqnr_lock);
[  106.164407][    C1]   lock(&hsr->seqnr_lock);
[  106.168915][    C1] 
[  106.168915][    C1]  *** DEADLOCK ***
[  106.168915][    C1] 
[  106.177081][    C1]  May be due to missing lock nesting notation
[  106.177081][    C1] 
[  106.186090][    C1] 9 locks held by syz.2.86/6383:
[  106.191023][    C1]  #0: ffffc9000fc07b20 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0
[  106.200666][    C1]  #1: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x208/0x1400
[  106.210470][    C1]  #2: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0
[  106.220294][    C1]  #3: ffffffff8e13ee00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  106.230194][    C1]  #4: ffff8880542f0f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220
[  106.239653][    C1]  #5: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860
[  106.249113][    C1]  #6: ffffffff8e13ee00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  106.259009][    C1]  #7: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840
[  106.268561][    C1]  #8: ffffffff8e13ee00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  106.278553][    C1] 
[  106.278553][    C1] stack backtrace:
[  106.285040][    C1] CPU: 1 UID: 0 PID: 6383 Comm: syz.2.86 Not tainted 6.16.0-rc1-syzkaller-00413-gfc4842cd0f11 #0 PREEMPT(full) 
[  106.285057][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  106.285069][    C1] Call Trace:
[  106.285075][    C1]  <TASK>
[  106.285080][    C1]  dump_stack_lvl+0x189/0x250
[  106.285099][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.285113][    C1]  ? __pfx__printk+0x10/0x10
[  106.285125][    C1]  ? print_lock_name+0xde/0x100
[  106.285135][    C1]  print_deadlock_bug+0x28b/0x2a0
[  106.285146][    C1]  validate_chain+0x1a3f/0x2140
[  106.285160][    C1]  __lock_acquire+0xab9/0xd20
[  106.285175][    C1]  ? hsr_dev_xmit+0x19a/0x220
[  106.285187][    C1]  lock_acquire+0x120/0x360
[  106.285199][    C1]  ? hsr_dev_xmit+0x19a/0x220
[  106.285212][    C1]  ? hsr_dev_xmit+0x19a/0x220
[  106.285223][    C1]  _raw_spin_lock_bh+0x36/0x50
[  106.285237][    C1]  ? hsr_dev_xmit+0x19a/0x220
[  106.285248][    C1]  hsr_dev_xmit+0x19a/0x220
[  106.285260][    C1]  dev_hard_start_xmit+0x2d4/0x830
[  106.285279][    C1]  __dev_queue_xmit+0x1adf/0x3a70
[  106.285296][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  106.285310][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  106.285326][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.285340][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  106.285355][    C1]  ? do_raw_read_unlock+0x3d/0x80
[  106.285367][    C1]  ? ebt_do_table+0x265b/0x2820
[  106.285379][    C1]  ? __lock_acquire+0xab9/0xd20
[  106.285397][    C1]  br_dev_queue_push_xmit+0x6c5/0x890
[  106.285409][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  106.285419][    C1]  ? NF_HOOK+0x9e/0x3c0
[  106.285427][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  106.285436][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  106.285445][    C1]  NF_HOOK+0x31d/0x3c0
[  106.285454][    C1]  ? NF_HOOK+0x9e/0x3c0
[  106.285462][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  106.285471][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  106.285483][    C1]  br_forward_finish+0xd3/0x130
[  106.285491][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  106.285501][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  106.285509][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  106.285518][    C1]  NF_HOOK+0x31d/0x3c0
[  106.285527][    C1]  ? NF_HOOK+0x9e/0x3c0
[  106.285535][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  106.285543][    C1]  ? br_multicast_count+0xf2/0xdc0
[  106.285554][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  106.285565][    C1]  __br_forward+0x41e/0x600
[  106.285573][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  106.285582][    C1]  ? maybe_deliver+0xc6/0x160
[  106.285591][    C1]  ? __pfx___br_forward+0x10/0x10
[  106.285602][    C1]  ? br_dev_xmit+0x185/0x1840
[  106.285613][    C1]  br_dev_xmit+0x11b3/0x1840
[  106.285626][    C1]  ? br_dev_xmit+0x185/0x1840
[  106.285638][    C1]  ? __pfx_br_dev_xmit+0x10/0x10
[  106.285649][    C1]  ? validate_xmit_xfrm+0xbf/0x1130
[  106.285663][    C1]  ? __pfx_skb_network_protocol+0x10/0x10
[  106.285677][    C1]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  106.285692][    C1]  ? __pfx_passthru_features_check+0x10/0x10
[  106.285712][    C1]  dev_hard_start_xmit+0x2d4/0x830
[  106.285728][    C1]  __dev_queue_xmit+0x1adf/0x3a70
[  106.285744][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  106.285759][    C1]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  106.285775][    C1]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  106.285785][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  106.285801][    C1]  ? __copy_skb_header+0xa7/0x550
[  106.285816][    C1]  ? __asan_memcpy+0x40/0x70
[  106.285830][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  106.285844][    C1]  ? __asan_memcpy+0x40/0x70
[  106.285856][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  106.285871][    C1]  ? hsr_create_tagged_frame+0x449/0xc30
[  106.285884][    C1]  ? __asan_memmove+0x40/0x70
[  106.285896][    C1]  ? hsr_addr_subst_dest+0x307/0xac0
[  106.285910][    C1]  hsr_forward_skb+0x158b/0x2860
[  106.285926][    C1]  ? hsr_forward_skb+0x9e/0x2860
[  106.285940][    C1]  ? __pfx_hsr_forward_skb+0x10/0x10
[  106.285952][    C1]  ? do_raw_spin_lock+0x121/0x290
[  106.285963][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  106.285974][    C1]  ? hsr_dev_xmit+0x19a/0x220
[  106.285985][    C1]  hsr_dev_xmit+0x1a5/0x220
[  106.285997][    C1]  dev_hard_start_xmit+0x2d4/0x830
[  106.286016][    C1]  __dev_queue_xmit+0x1adf/0x3a70
[  106.286032][    C1]  ? __dev_queue_xmit+0x27e/0x3a70
[  106.286051][    C1]  ? neigh_connected_output+0x1ea/0x460
[  106.286063][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  106.286077][    C1]  ? read_seqbegin+0x122/0x250
[  106.286086][    C1]  ? neigh_connected_output+0x1ea/0x460
[  106.286096][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.286110][    C1]  ? read_seqbegin+0x1ac/0x250
[  106.286119][    C1]  ? __pfx_read_seqbegin+0x10/0x10
[  106.286129][    C1]  ? eth_header+0x11b/0x200
[  106.286141][    C1]  ? __asan_memcpy+0x40/0x70
[  106.286154][    C1]  ? eth_header+0x11b/0x200
[  106.286165][    C1]  ? __pfx_eth_header+0x10/0x10
[  106.286177][    C1]  ? neigh_connected_output+0x3b6/0x460
[  106.286191][    C1]  ip6_finish_output2+0x11fb/0x16a0
[  106.286206][    C1]  ? ip6_finish_output2+0x701/0x16a0
[  106.286219][    C1]  ? __pfx_ip6_finish_output2+0x10/0x10
[  106.286232][    C1]  ? ip6_mtu+0x7d/0x3f0
[  106.286243][    C1]  ? ip6_mtu+0x7d/0x3f0
[  106.286254][    C1]  ip6_finish_output+0x234/0x7d0
[  106.286266][    C1]  ndisc_send_skb+0xb47/0x1400
[  106.286275][    C1]  ? ndisc_send_skb+0x208/0x1400
[  106.286285][    C1]  ? __pfx_ndisc_send_skb+0x10/0x10
[  106.286294][    C1]  ? __pfx_dst_output+0x10/0x10
[  106.286306][    C1]  addrconf_rs_timer+0x369/0x670
[  106.286321][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  106.286335][    C1]  call_timer_fn+0x17e/0x5f0
[  106.286348][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  106.286360][    C1]  ? call_timer_fn+0xbe/0x5f0
[  106.286372][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  106.286386][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  106.286398][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.286410][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[  106.286423][    C1]  __run_timer_base+0x61a/0x860
[  106.286434][    C1]  ? ktime_get+0x3e/0x1f0
[  106.286445][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  106.286459][    C1]  run_timer_softirq+0xb7/0x180
[  106.286470][    C1]  handle_softirqs+0x286/0x870
[  106.286485][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  106.286499][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  106.286514][    C1]  __irq_exit_rcu+0xca/0x1f0
[  106.286528][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  106.286542][    C1]  irq_exit_rcu+0x9/0x30
[  106.286555][    C1]  sysvec_apic_timer_interrupt+0x57/0xc0
[  106.286569][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  106.286580][    C1] RIP: 0033:0x7f780b067d74
[  106.286594][    C1] Code: 84 00 00 00 00 00 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 <48> 83 e8 08 48 39 f2 72 f3 48 39 c3 73 3e 48 89 33 48 83 c3 08 48
[  106.286602][    C1] RSP: 002b:00007ffed74bfbc0 EFLAGS: 00000293
[  106.286612][    C1] RAX: 00007f780a90f2e0 RBX: 00007f780a83c760 RCX: ffffffff898d3a58
[  106.286619][    C1] RDX: ffffffff898d371a RSI: ffffffff898d3f21 RDI: 00007f780a94b5e8
[  106.286626][    C1] RBP: 00007f780a8091f8 R08: 00007f780a8aa3e8 R09: 00007f780b3a2000
[  106.286633][    C1] R10: 00007f780a7ff008 R11: 0000000000000011 R12: 00007f780a8091f0
[  106.286639][    C1] R13: 000000000000001f R14: 00007ffed74bfd18 R15: 00007f780a7ff008
[  106.286647][    C1]  ? add_policy+0x28/0x6d0
[  106.286662][    C1]  ? netlink_policy_dump_add_policy+0x20a/0x510
[  106.286676][    C1]  ? add_policy+0x4f1/0x6d0
[  106.286689][    C1]  </TASK>