last executing test programs:

2.882402435s ago: executing program 2 (id=695):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfb, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@remote}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x44040)

2.819975274s ago: executing program 2 (id=699):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000080000000000000800000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
readv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1)

1.721934718s ago: executing program 2 (id=734):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x1, 0x4)

1.660955109s ago: executing program 2 (id=738):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba149", 0x28}, {&(0x7f0000000a80)="ab46ea2932ec4132920dff096aab059a689f3e0d92ebba921b371651385ee20efb193378bd50894f2dcc58ae4754c66875beecf54d4b52d9611da7625f8363ced48ee76ff9479a05c2ec858de658d2b65962e9289f9209c1b3762cdde2c09adbbed5039474c0dcc7f47cdb503bda3b7c", 0x70}, {&(0x7f0000000840)="46cd295fd96f14db34f889b7869a76599ee0efd82be83f7eddf6dc5d18b3143263795768d16fd13b49349db80d67d2af536840be41ac1b65eca25d70afc8c39ceec320080f79f8405065d343dee61b1965b3e93d9155dd24a7f67d5ae608c4650afcbd1a940b95aa54078771f2a0feda6768", 0x72}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b40)="f2fe84e07da72d5be0eee26e6693cc950e7080ba2900a53b969dc13369b90492865a9fb8d25a00b9c2d8e52e23e3267d15c4aeea5918", 0x36}, {&(0x7f0000000180)="a1e27575d35fd4f38d622e5938b301a28a4c21084fa1f95f8e2343cff8831a5a663f3fac3d082e19b04d59a071c5599a98b7bc07bf2bf94767fec2908755f9457d14e4a56c806a99ad5997ed03c31d3b697cc7d7b273b24ab57450b6cf2ae9fe34fd081ec9a1976930c46fe7f8b0359df677515075e570877f626b3ec05c9f7de06f04e10ca1f4b1009f161e2fab", 0x8e}], 0x2}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

719.338283ms ago: executing program 2 (id=760):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

586.470536ms ago: executing program 2 (id=765):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
accept(r0, 0x0, 0x0)

540.24863ms ago: executing program 0 (id=766):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

451.870348ms ago: executing program 0 (id=768):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x40, 0x19, 0x15, 0x0, 0xfffffffc, "", [@typed={0x2d, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\xc3\xe6S\xc6jO\x7f\x03\x00\x00f\x02\xf4\xed\x16\xeb$s,\xba\xa7\x88\xdbBj*?\x9b\x97\xf0\xd7\xd7\xaf\xfb\r'}]}, 0x40}], 0x1, 0x0, 0x0, 0x20048001}, 0x0)

451.180136ms ago: executing program 0 (id=769):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37)

380.532295ms ago: executing program 0 (id=770):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

379.929334ms ago: executing program 0 (id=772):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x131}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff85}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8094)

309.443292ms ago: executing program 0 (id=774):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xf, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@local}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)={0xf0, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xa8, 0x51, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xd, 0x4, "147a3a26423bfae265"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x4}]}]}, 0xf0}}, 0x0)

251.196703ms ago: executing program 1 (id=777):
r0 = socket$unix(0x1, 0x1, 0x0)
recvmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0)

176.795798ms ago: executing program 1 (id=778):
syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}}}}}}, 0x0)

176.436243ms ago: executing program 1 (id=779):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x5c8, 0x5c8, 0x5c8, 0x1d0, 0x3d8, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00', {}, {}, 0x62}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @dev={0xfe, 0x80, '\x00', 0x2}, [0xffffffff], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x32}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @empty, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x40}, @loopback, @mcast2, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x6c, 0x10, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x96}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x7fff, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)

66.793769ms ago: executing program 1 (id=780):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x0, 0xfd}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)

66.551759ms ago: executing program 1 (id=781):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

0s ago: executing program 1 (id=782):
socket$inet(0x2, 0x2, 0x4)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0xf}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES16=r5, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r6}, 0x10)
sendmsg$can_raw(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xa32e}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x4c}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}, 0x7}, 0x1c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x88, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4f1f, 0x6, @empty, 0x9}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:63052' (ED25519) to the list of known hosts.
syzkaller login: [   48.444430][ T5818] cgroup: Unknown subsys name 'net'
[   48.564915][ T5818] cgroup: Unknown subsys name 'cpuset'
[   48.568835][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.262498][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.649264][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.657143][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.660133][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.663299][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.666142][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.709320][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.713084][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.715840][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.718802][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.721428][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.743373][ T5223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.746289][ T5223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.751853][ T5223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.757803][ T5223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.760724][ T5223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.000167][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   62.086004][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   62.091465][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.094655][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.096902][ T5851] bridge_slave_0: entered allmulticast mode
[   62.099684][ T5851] bridge_slave_0: entered promiscuous mode
[   62.122344][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.124666][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.127139][ T5851] bridge_slave_1: entered allmulticast mode
[   62.129854][ T5851] bridge_slave_1: entered promiscuous mode
[   62.197238][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.203198][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.213937][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   62.252064][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.254291][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.256433][ T5855] bridge_slave_0: entered allmulticast mode
[   62.259284][ T5855] bridge_slave_0: entered promiscuous mode
[   62.264674][ T5851] team0: Port device team_slave_0 added
[   62.266668][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.268786][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.270943][ T5855] bridge_slave_1: entered allmulticast mode
[   62.274131][ T5855] bridge_slave_1: entered promiscuous mode
[   62.291727][ T5851] team0: Port device team_slave_1 added
[   62.329984][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.351388][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.363583][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.366125][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.369140][ T5857] bridge_slave_0: entered allmulticast mode
[   62.372263][ T5857] bridge_slave_0: entered promiscuous mode
[   62.376366][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.378649][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.387726][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.408825][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.410953][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.414326][ T5857] bridge_slave_1: entered allmulticast mode
[   62.416966][ T5857] bridge_slave_1: entered promiscuous mode
[   62.419982][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.423269][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.430690][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.440395][ T5855] team0: Port device team_slave_0 added
[   62.463634][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.467439][ T5855] team0: Port device team_slave_1 added
[   62.471355][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.513161][ T5851] hsr_slave_0: entered promiscuous mode
[   62.515608][ T5851] hsr_slave_1: entered promiscuous mode
[   62.538689][ T5857] team0: Port device team_slave_0 added
[   62.549887][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.552286][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.559650][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.565827][ T5857] team0: Port device team_slave_1 added
[   62.568269][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.570329][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.577894][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.640557][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.643687][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.651019][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.667941][ T5855] hsr_slave_0: entered promiscuous mode
[   62.670521][ T5855] hsr_slave_1: entered promiscuous mode
[   62.674027][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.676418][ T5855] Cannot create hsr debugfs directory
[   62.678485][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.680586][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.688565][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.776271][ T5857] hsr_slave_0: entered promiscuous mode
[   62.778515][ T5857] hsr_slave_1: entered promiscuous mode
[   62.780859][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.785179][ T5857] Cannot create hsr debugfs directory
[   62.911518][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.929708][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.945986][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.956037][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.997511][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.024554][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.029906][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.041519][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.083520][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.088825][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.094436][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.105555][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.159376][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.194510][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   63.210380][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.212878][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.222344][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.225460][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.227903][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.277047][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.284492][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   63.307327][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   63.323871][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.326097][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.329440][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.331739][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.337135][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.339273][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.352551][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.354763][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.470460][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.514525][ T5851] veth0_vlan: entered promiscuous mode
[   63.520270][ T5851] veth1_vlan: entered promiscuous mode
[   63.549924][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.559523][ T5851] veth0_macvtap: entered promiscuous mode
[   63.571088][ T5851] veth1_macvtap: entered promiscuous mode
[   63.581379][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.598091][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.616315][ T5857] veth0_vlan: entered promiscuous mode
[   63.619886][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.625339][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.628052][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.630596][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.634076][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.649410][ T5857] veth1_vlan: entered promiscuous mode
[   63.680408][ T5855] veth0_vlan: entered promiscuous mode
[   63.709496][ T5855] veth1_vlan: entered promiscuous mode
[   63.712769][ T5223] Bluetooth: hci0: command tx timeout
[   63.725894][ T5857] veth0_macvtap: entered promiscuous mode
[   63.744946][ T5857] veth1_macvtap: entered promiscuous mode
[   63.756547][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.763945][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.778047][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.794209][ T5853] Bluetooth: hci2: command tx timeout
[   63.796656][ T5223] Bluetooth: hci1: command tx timeout
[   63.803517][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.810635][ T5855] veth0_macvtap: entered promiscuous mode
[   63.811039][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.816911][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.821493][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.825279][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.827958][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.830545][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.838215][ T5855] veth1_macvtap: entered promiscuous mode
[   63.871227][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.881363][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.910321][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.945288][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.947922][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.950469][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.956962][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.965452][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.972605][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.006041][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.008569][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.066628][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.070315][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.074583][ T5918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14'.
[   64.107168][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.119413][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.278149][ T5936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.287456][ T5936] Bluetooth: MGMT ver 1.23
[   65.421153][ T5990] netlink: 164 bytes leftover after parsing attributes in process `syz.1.45'.
[   65.500716][ T5996] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[   65.609760][ T6005] netlink: 56 bytes leftover after parsing attributes in process `syz.1.52'.
[   65.616078][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'.
[   65.801986][ T5853] Bluetooth: hci0: command tx timeout
[   65.871927][ T5853] Bluetooth: hci1: command tx timeout
[   65.873602][ T5853] Bluetooth: hci2: command tx timeout
[   66.186975][ T6048] netlink: 'syz.1.70': attribute type 10 has an invalid length.
[   66.204152][ T6048] batman_adv: batadv0: Adding interface: netdevsim0
[   66.206165][ T6048] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.215100][ T6048] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   66.285836][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.73'.
[   66.297716][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   66.353115][ T5223] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   66.403236][ T6062] Zero length message leads to an empty skb
[   66.490749][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.81'.
[   66.496764][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'.
[   66.720218][ T6086] netlink: 44 bytes leftover after parsing attributes in process `syz.2.89'.
[   66.724615][ T6086] netlink: 43 bytes leftover after parsing attributes in process `syz.2.89'.
[   66.727430][ T6086] netlink: 'syz.2.89': attribute type 5 has an invalid length.
[   67.883040][ T5223] Bluetooth: hci0: command 0x040f tx timeout
[   67.939636][ T6160] warning: `syz.2.121' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.962210][   T54] Bluetooth: hci1: command tx timeout
[   67.963968][ T5223] Bluetooth: hci2: command tx timeout
[   68.026521][ T6167] netlink: 'syz.1.123': attribute type 15 has an invalid length.
[   68.028999][ T6167] netlink: 'syz.1.123': attribute type 18 has an invalid length.
[   68.436550][ T6202] Set syz0 is full, maxelem 0 reached
[   68.501378][ T6207] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.650725][ T6215] syz.1.142 uses obsolete (PF_INET,SOCK_PACKET)
[   68.653293][ T6215] syzkaller1: entered promiscuous mode
[   68.655144][ T6215] syzkaller1: entered allmulticast mode
[   68.659006][ T6215] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[   69.475412][ T6282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.562936][ T6292] __nla_validate_parse: 11 callbacks suppressed
[   69.562948][ T6292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'.
[   69.710502][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.182'.
[   69.718997][ T6308] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   69.785776][ T6310] tipc: Started in network mode
[   69.787456][ T6310] tipc: Node identity ee108d15ecc, cluster identity 4711
[   69.787658][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'.
[   69.790372][ T6310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.819667][ T6310] syzkaller0: entered promiscuous mode
[   69.821506][ T6310] syzkaller0: entered allmulticast mode
[   69.843014][ T6310] tipc: Resetting bearer <eth:syzkaller0>
[   69.847432][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'.
[   69.850370][ T6309] tipc: Resetting bearer <eth:syzkaller0>
[   69.863542][ T6309] tipc: Disabling bearer <eth:syzkaller0>
[   69.946953][ T6314] netlink: 'syz.0.185': attribute type 10 has an invalid length.
[   69.949426][ T6314] netlink: 'syz.0.185': attribute type 49 has an invalid length.
[   69.952559][ T5223] Bluetooth: hci0: command 0x040f tx timeout
[   69.981148][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'.
[   70.028968][ T6321] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   70.032921][   T54] Bluetooth: hci1: command tx timeout
[   70.034622][ T5223] Bluetooth: hci2: command tx timeout
[   70.038079][ T6321] netlink: 172 bytes leftover after parsing attributes in process `syz.0.188'.
[   70.356703][    T9] IPVS: starting estimator thread 0...
[   70.472460][ T6340] IPVS: using max 62 ests per chain, 148800 per kthread
[   70.490208][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[   71.078762][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.080753][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.151333][ T6372] netlink: 1360 bytes leftover after parsing attributes in process `syz.1.208'.
[   71.161684][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'.
[   71.185812][ T6375] syz.2.210 uses old SIOCAX25GETINFO
[   71.201403][ T6377] lo speed is unknown, defaulting to 1000
[   71.207494][ T6377] lo speed is unknown, defaulting to 1000
[   71.211436][ T6377] lo speed is unknown, defaulting to 1000
[   71.225110][ T6377] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.247178][ T6377] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   71.276483][ T6377] lo speed is unknown, defaulting to 1000
[   71.279757][ T6377] lo speed is unknown, defaulting to 1000
[   71.283243][ T6377] lo speed is unknown, defaulting to 1000
[   71.768229][ T6417] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   71.848653][ T6419] lo speed is unknown, defaulting to 1000
[   71.977136][ T6412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.041926][ T5223] Bluetooth: hci0: command 0x040f tx timeout
[   72.570115][ T6466] netlink: 'syz.2.252': attribute type 1 has an invalid length.
[   72.707894][ T6480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.257'.
[   73.117518][ T6523] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[   73.136460][ T6523] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.166403][ T6523] bond1: (slave veth3): Enslaving as an active interface with a down link
[   73.196254][ T6523] vlan2: entered allmulticast mode
[   73.197908][ T6523] veth1: entered allmulticast mode
[   73.200053][ T6523] veth1: entered promiscuous mode
[   73.204365][ T6523] veth1: left promiscuous mode
[   73.207353][ T6523] bond1: (slave vlan2): making interface the new active one
[   73.210190][ T6523] veth1: entered promiscuous mode
[   73.215276][ T6523] vlan2: entered promiscuous mode
[   73.217306][ T6523] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   73.295550][ T6530] lo speed is unknown, defaulting to 1000
[   73.888928][ T6569] Illegal XDP return value 118478400 on prog  (id 46) dev N/A, expect packet loss!
[   74.116178][ T6579] syzkaller0: entered promiscuous mode
[   74.116609][ T6583] tipc: Failed to remove unknown binding: 66,3,3/0:977495404/977495405
[   74.118010][ T6579] syzkaller0: entered allmulticast mode
[   74.303682][   T33] audit: type=1800 audit(1753197225.776:2): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.307" name=33FFFF dev="tmpfs" ino=518 res=0 errno=0
[   75.078978][ T6596] dvmrp1: tun_chr_ioctl cmd 1074025677
[   75.080934][ T6596] dvmrp1: linktype set to 773
[   75.339241][ T6628] __nla_validate_parse: 3 callbacks suppressed
[   75.339252][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'.
[   75.356647][ T6623] lo speed is unknown, defaulting to 1000
[   75.366859][ T6628] lo speed is unknown, defaulting to 1000
[   75.368666][ T6628] lo speed is unknown, defaulting to 1000
[   75.370769][ T6628] lo speed is unknown, defaulting to 1000
[   75.388476][ T6628] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   75.420899][ T6630] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.325'.
[   75.427631][ T6628] lo speed is unknown, defaulting to 1000
[   75.453122][ T6628] lo speed is unknown, defaulting to 1000
[   75.459895][ T6628] lo speed is unknown, defaulting to 1000
[   75.470777][ T6628] lo speed is unknown, defaulting to 1000
[   75.518156][ T6623] syz.1.322 (6623) used greatest stack depth: 19848 bytes left
[   75.986110][ T6681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.347'.
[   76.104148][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'.
[   76.174527][ T6699] netlink: 72 bytes leftover after parsing attributes in process `syz.1.356'.
[   76.285721][ T6707] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   76.340782][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[   76.390870][ T6717] syz.0.365 (6717) used greatest stack depth: 19144 bytes left
[   76.412921][ T6721] pim6reg1: entered promiscuous mode
[   76.414643][ T6721] pim6reg1: entered allmulticast mode
[   76.464498][ T6723] lo speed is unknown, defaulting to 1000
[   76.467105][ T6723] lo speed is unknown, defaulting to 1000
[   76.612502][ T6734] ipvlan2: entered promiscuous mode
[   76.709554][ T6742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.376'.
[   76.945857][ T6762] netlink: 164 bytes leftover after parsing attributes in process `syz.0.385'.
[   76.984976][ T6766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.343474][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.349642][ T6779] bond0: (slave rose0): Enslaving as an active interface with an up link
[   77.485280][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'.
[   77.547913][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[   77.837098][ T6817] lo speed is unknown, defaulting to 1000
[   77.840199][ T6817] lo speed is unknown, defaulting to 1000
[   77.931482][ T6838] ip6tnl1: entered promiscuous mode
[   78.275932][ T6864] netlink: 'syz.0.425': attribute type 1 has an invalid length.
[   78.278315][ T6864] netlink: 'syz.0.425': attribute type 3 has an invalid length.
[   78.336416][ T6868] netlink: 'syz.0.428': attribute type 2 has an invalid length.
[   78.400149][ T6872] netlink: 'syz.2.430': attribute type 2 has an invalid length.
[   79.239485][ T6904] veth0_to_bridge: entered promiscuous mode
[   79.252953][ T6903] veth0_to_bridge: left promiscuous mode
[   79.367666][ T6919] netlink: 'syz.2.451': attribute type 1 has an invalid length.
[   79.419910][ T6926] netlink: 'syz.0.455': attribute type 32 has an invalid length.
[   79.428138][ T6926] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   79.471847][ T5223] Bluetooth: hci2: command tx timeout
[   79.556088][ T6938] netlink: 'syz.1.460': attribute type 5 has an invalid length.
[   79.656067][ T6944] netlink: 'syz.1.463': attribute type 1 has an invalid length.
[   79.757548][ T6948] lo speed is unknown, defaulting to 1000
[   79.763473][ T6948] lo speed is unknown, defaulting to 1000
[   79.890681][ T6947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.936767][ T6960] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   80.376003][ T6978] __nla_validate_parse: 8 callbacks suppressed
[   80.376017][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'.
[   80.380949][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.476'.
[   80.403885][ T6978] gtp0: entered promiscuous mode
[   80.410978][ T6978] gtp0: entered allmulticast mode
[   80.483537][ T6980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.477'.
[   80.651285][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'.
[   80.661690][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'.
[   80.673422][ T6992] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[   80.683266][ T6992] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   80.759087][ T7002] netlink: 'syz.1.488': attribute type 4 has an invalid length.
[   81.021847][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'.
[   81.325908][   T24] cfg80211: failed to load regulatory.db
[   81.880972][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'.
[   81.883871][ T7041] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.887083][ T7041] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.890256][ T7041] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.893653][ T7041] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.926434][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.509'.
[   81.956594][ T7051] netlink: 'syz.1.510': attribute type 1 has an invalid length.
[   81.959678][ T7051] netlink: 244 bytes leftover after parsing attributes in process `syz.1.510'.
[   82.138387][ T7069] lo speed is unknown, defaulting to 1000
[   82.141069][ T7069] lo speed is unknown, defaulting to 1000
[   82.239021][ T7076] netlink: 168 bytes leftover after parsing attributes in process `syz.1.521'.
[   82.295555][ T7080] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   82.411284][ T7088] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   82.569423][ T7103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.805393][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.808483][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.875979][ T7120] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   82.898087][    T9] lo speed is unknown, defaulting to 1000
[   82.909582][    T9] syz2: Port: 1 Link ACTIVE
[   82.944241][ T5850] bond1: (slave vlan2): link status definitely down, disabling slave
[   82.969525][ T5850] vlan2: left promiscuous mode
[   82.972711][ T5850] bond1: now running without any active interface!
[   83.027559][ T7143] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   83.041193][ T7143] macvtap1: entered allmulticast mode
[   83.051263][ T7143] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   83.057589][ T7143] batman_adv: batadv0: Adding interface: macvtap1
[   83.061935][ T7143] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.073284][ T7143] batman_adv: batadv0: Interface activated: macvtap1
[   83.122928][ T7149] hsr_slave_0: left promiscuous mode
[   83.125517][ T7149] hsr_slave_1: left promiscuous mode
[   83.190987][ T7155] lo speed is unknown, defaulting to 1000
[   83.202892][ T7155] lo speed is unknown, defaulting to 1000
[   83.327868][ T7159] macsec1: entered promiscuous mode
[   83.329524][ T7159] macsec1: entered allmulticast mode
[   83.560205][ T7175] ip6t_srh: unknown srh invflags 4449
[   84.056790][ T7214] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   84.683732][ T7262] xt_hashlimit: size too large, truncated to 1048576
[   84.927762][ T7273] validate_nla: 3 callbacks suppressed
[   84.927790][ T7273] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[   85.466738][ T7295] __nla_validate_parse: 10 callbacks suppressed
[   85.466750][ T7295] netlink: 36 bytes leftover after parsing attributes in process `syz.1.614'.
[   85.773980][ T7330] bridge_slave_0: left allmulticast mode
[   85.776435][ T7330] bridge_slave_0: left promiscuous mode
[   85.778949][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.797853][ T7330] bridge_slave_1: left allmulticast mode
[   85.800292][ T7330] bridge_slave_1: left promiscuous mode
[   85.804403][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.810500][ T7330] bond0: (slave bond_slave_0): Releasing backup interface
[   85.817996][ T7330] bond0: (slave bond_slave_1): Releasing backup interface
[   85.833294][ T7330] team0: Port device team_slave_0 removed
[   85.838839][ T7330] team0: Port device team_slave_1 removed
[   85.841366][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.844782][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.848023][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.850371][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.859288][ T7330] batman_adv: batadv0: Removing interface: netdevsim0
[   85.865208][ T7330] batman_adv: batadv0: Interface deactivated: macvtap1
[   85.867485][ T7330] batman_adv: batadv0: Removing interface: macvtap1
[   86.045161][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'.
[   86.299164][ T7350] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.303514][ T7350] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.306897][ T7350] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.310314][ T7350] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.390587][ T7350] gtp0: left promiscuous mode
[   86.392759][ T7350] gtp0: left allmulticast mode
[   86.396122][ T7350] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   86.399645][ T7350] macvtap1: left allmulticast mode
[   86.404208][ T2384] lo speed is unknown, defaulting to 1000
[   86.408703][ T2384] syz2: Port: 1 Link DOWN
[   86.503774][ T7367] macvlan2: entered allmulticast mode
[   86.505549][ T7367] veth1_vlan: entered allmulticast mode
[   86.519241][ T7367] veth1_vlan: left allmulticast mode
[   86.708475][ T7382] lo speed is unknown, defaulting to 1000
[   86.711108][ T7382] lo speed is unknown, defaulting to 1000
[   86.798855][ T5898] lo speed is unknown, defaulting to 1000
[   87.238220][ T7424] lo speed is unknown, defaulting to 1000
[   87.240933][ T7424] lo speed is unknown, defaulting to 1000
[   87.362969][   T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   87.650259][ T7457] lo speed is unknown, defaulting to 1000
[   87.656179][ T7457] lo speed is unknown, defaulting to 1000
[   87.971825][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   88.036233][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.039558][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.341539][ T7472] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.350708][ T7472] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.354511][ T7472] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.357327][ T7472] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.384562][ T7472] ipvlan2: left promiscuous mode
[   88.387442][ T7472] ip6tnl1: left promiscuous mode
[   88.389074][ T7472] macsec1: left promiscuous mode
[   88.390642][ T7472] macsec1: left allmulticast mode
[   88.393107][   T24] lo speed is unknown, defaulting to 1000
[   88.402245][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   88.407070][   T24] syz1: Port: 1 Link DOWN
[   88.475518][ T7487] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   88.591407][ T7496] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[   88.730982][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'.
[   88.769061][ T7516] xfrm1: entered promiscuous mode
[   88.773878][ T7516] xfrm1: entered allmulticast mode
[   88.807423][ T7516] xt_hashlimit: size too large, truncated to 1048576
[   89.458223][ T7561] netlink: 'syz.0.725': attribute type 10 has an invalid length.
[   89.470691][ T7561] team0: Port device dummy0 added
[   89.475146][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   89.478251][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   89.498086][ T7563] netlink: 'syz.0.726': attribute type 3 has an invalid length.
[   89.500699][ T7563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.726'.
[   89.613171][   T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   89.688250][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'.
[   89.923605][ T7593] lo speed is unknown, defaulting to 1000
[   89.926490][ T7593] lo speed is unknown, defaulting to 1000
[   90.217517][ T7606] IPv6: sit1: Disabled Multicast RS
[   90.582828][ T7631] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   90.736598][ T7636] lo speed is unknown, defaulting to 1000
[   90.747784][ T7636] lo speed is unknown, defaulting to 1000
[   90.894539][   T55] block nbd0: Receive control failed (result -32)
[   90.956776][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.767'.
[   90.972264][ T7657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.768'.
[   91.251485][ T7680] netlink: 'syz.0.774': attribute type 13 has an invalid length.
[   91.255819][ T7680] netlink: 'syz.0.774': attribute type 17 has an invalid length.
[   91.380949][ T7697] xt_ecn: cannot match TCP bits for non-tcp packets
[   91.449371][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.452342][ T7680] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.460338][ T7680] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.470173][ T7680] 8021q: adding VLAN 0 to HW filter on device team0
[   91.475163][ T7680] 
[   91.476158][ T7680] ======================================================
[   91.478795][ T7680] WARNING: possible circular locking dependency detected
[   91.481488][ T7680] 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 Not tainted
[   91.485783][ T7680] ------------------------------------------------------
[   91.488490][ T7680] syz.0.774/7680 is trying to acquire lock:
[   91.490788][ T7680] ffff88802d1c8e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x544/0xa20
[   91.494736][ T7680] 
[   91.494736][ T7680] but task is already holding lock:
[   91.497675][ T7680] ffff88802d2a0d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   91.501556][ T7680] 
[   91.501556][ T7680] which lock already depends on the new lock.
[   91.501556][ T7680] 
[   91.505599][ T7680] 
[   91.505599][ T7680] the existing dependency chain (in reverse order) is:
[   91.509063][ T7680] 
[   91.509063][ T7680] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[   91.512128][ T7680]        lock_acquire+0x120/0x360
[   91.513801][ T7680]        __mutex_lock+0x182/0xe80
[   91.515482][ T7680]        dev_set_mtu+0x10e/0x260
[   91.517161][ T7680]        team_add_slave+0x8b8/0x2840
[   91.518817][ T7680]        do_set_master+0x533/0x6d0
[   91.520359][ T7680]        do_setlink+0xcf0/0x41c0
[   91.521861][ T7680]        rtnl_newlink+0x160b/0x1c70
[   91.523454][ T7680]        rtnetlink_rcv_msg+0x7cf/0xb70
[   91.525117][ T7680]        netlink_rcv_skb+0x208/0x470
[   91.526998][ T7680]        netlink_unicast+0x75c/0x8e0
[   91.529105][ T7680]        netlink_sendmsg+0x805/0xb30
[   91.531090][ T7680]        __sock_sendmsg+0x21c/0x270
[   91.532954][ T7680]        ____sys_sendmsg+0x505/0x830
[   91.534821][ T7680]        ___sys_sendmsg+0x21f/0x2a0
[   91.536393][ T7680]        __x64_sys_sendmsg+0x19b/0x260
[   91.538331][ T7680]        do_syscall_64+0xfa/0x3b0
[   91.539914][ T7680]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.541806][ T7680] 
[   91.541806][ T7680] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[   91.544255][ T7680]        validate_chain+0xb9b/0x2140
[   91.545790][ T7680]        __lock_acquire+0xab9/0xd20
[   91.547484][ T7680]        lock_acquire+0x120/0x360
[   91.549659][ T7680]        __mutex_lock+0x182/0xe80
[   91.551137][ T7680]        team_device_event+0x544/0xa20
[   91.552759][ T7680]        notifier_call_chain+0x1b6/0x3e0
[   91.554464][ T7680]        __dev_notify_flags+0x21b/0x2e0
[   91.556603][ T7680]        netif_change_flags+0xe8/0x1a0
[   91.558693][ T7680]        do_setlink+0xc55/0x41c0
[   91.560636][ T7680]        rtnl_newlink+0x149f/0x1c70
[   91.562632][ T7680]        rtnetlink_rcv_msg+0x7cf/0xb70
[   91.564718][ T7680]        netlink_rcv_skb+0x208/0x470
[   91.566358][ T7680]        netlink_unicast+0x75c/0x8e0
[   91.568008][ T7680]        netlink_sendmsg+0x805/0xb30
[   91.569660][ T7680]        __sock_sendmsg+0x21c/0x270
[   91.571210][ T7680]        ____sys_sendmsg+0x505/0x830
[   91.572841][ T7680]        ___sys_sendmsg+0x21f/0x2a0
[   91.574471][ T7680]        __x64_sys_sendmsg+0x19b/0x260
[   91.576160][ T7680]        do_syscall_64+0xfa/0x3b0
[   91.577705][ T7680]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.579705][ T7680] 
[   91.579705][ T7680] other info that might help us debug this:
[   91.579705][ T7680] 
[   91.582846][ T7680]  Possible unsafe locking scenario:
[   91.582846][ T7680] 
[   91.585139][ T7680]        CPU0                    CPU1
[   91.586762][ T7680]        ----                    ----
[   91.588385][ T7680]   lock(&dev_instance_lock_key#3);
[   91.589952][ T7680]                                lock(team->team_lock_key#2);
[   91.592239][ T7680]                                lock(&dev_instance_lock_key#3);
[   91.594575][ T7680]   lock(team->team_lock_key#2);
[   91.596134][ T7680] 
[   91.596134][ T7680]  *** DEADLOCK ***
[   91.596134][ T7680] 
[   91.598591][ T7680] 2 locks held by syz.0.774/7680:
[   91.600249][ T7680]  #0: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[   91.602984][ T7680]  #1: ffff88802d2a0d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[   91.605912][ T7680] 
[   91.605912][ T7680] stack backtrace:
[   91.607724][ T7680] CPU: 0 UID: 0 PID: 7680 Comm: syz.0.774 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[   91.607740][ T7680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.607750][ T7680] Call Trace:
[   91.607758][ T7680]  <TASK>
[   91.607776][ T7680]  dump_stack_lvl+0x189/0x250
[   91.607791][ T7680]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.607800][ T7680]  ? __pfx__printk+0x10/0x10
[   91.607812][ T7680]  ? print_lock_name+0xde/0x100
[   91.607822][ T7680]  print_circular_bug+0x2ee/0x310
[   91.607834][ T7680]  check_noncircular+0x134/0x160
[   91.607846][ T7680]  validate_chain+0xb9b/0x2140
[   91.607859][ T7680]  __lock_acquire+0xab9/0xd20
[   91.607868][ T7680]  ? team_device_event+0x544/0xa20
[   91.607877][ T7680]  lock_acquire+0x120/0x360
[   91.607884][ T7680]  ? team_device_event+0x544/0xa20
[   91.607893][ T7680]  __mutex_lock+0x182/0xe80
[   91.607904][ T7680]  ? team_device_event+0x544/0xa20
[   91.607912][ T7680]  ? __lock_acquire+0xab9/0xd20
[   91.607920][ T7680]  ? team_device_event+0x544/0xa20
[   91.607926][ T7680]  ? fib_rebalance+0x8e/0x9a0
[   91.607937][ T7680]  ? __pfx___mutex_lock+0x10/0x10
[   91.607947][ T7680]  ? fib_sync_up+0x76d/0x7b0
[   91.607979][ T7680]  team_device_event+0x544/0xa20
[   91.607988][ T7680]  notifier_call_chain+0x1b6/0x3e0
[   91.608002][ T7680]  __dev_notify_flags+0x21b/0x2e0
[   91.608021][ T7680]  ? __pfx___dev_notify_flags+0x10/0x10
[   91.608031][ T7680]  ? __dev_change_flags+0x4cc/0x6d0
[   91.608043][ T7680]  ? netif_state_change+0x29e/0x3a0
[   91.608056][ T7680]  netif_change_flags+0xe8/0x1a0
[   91.608068][ T7680]  do_setlink+0xc55/0x41c0
[   91.608083][ T7680]  ? __pfx_do_setlink+0x10/0x10
[   91.608093][ T7680]  ? _printk+0xcf/0x120
[   91.608102][ T7680]  ? __pfx____ratelimit+0x10/0x10
[   91.608113][ T7680]  ? __lock_acquire+0xab9/0xd20
[   91.608122][ T7680]  ? __mutex_trylock_common+0x153/0x260
[   91.608133][ T7680]  ? __pfx___mutex_trylock_common+0x10/0x10
[   91.608144][ T7680]  ? rcu_is_watching+0x15/0xb0
[   91.608154][ T7680]  ? trace_contention_end+0x39/0x120
[   91.608164][ T7680]  ? __mutex_lock+0x330/0xe80
[   91.608172][ T7680]  ? __pfx_aa_get_newest_label+0x10/0x10
[   91.608183][ T7680]  ? rtnl_newlink+0x8db/0x1c70
[   91.608191][ T7680]  ? rcu_is_watching+0x15/0xb0
[   91.608200][ T7680]  ? __pfx___mutex_lock+0x10/0x10
[   91.608210][ T7680]  ? ns_capable+0x8a/0xf0
[   91.608219][ T7680]  ? rtnl_link_get_net_capable+0x16a/0x350
[   91.608231][ T7680]  rtnl_newlink+0x149f/0x1c70
[   91.608243][ T7680]  ? __pfx_rtnl_newlink+0x10/0x10
[   91.608254][ T7680]  ? __lock_acquire+0xab9/0xd20
[   91.608263][ T7680]  ? __lock_acquire+0xab9/0xd20
[   91.608276][ T7680]  ? is_bpf_text_address+0x26/0x2b0
[   91.608287][ T7680]  ? is_bpf_text_address+0x292/0x2b0
[   91.608294][ T7680]  ? is_bpf_text_address+0x26/0x2b0
[   91.608303][ T7680]  ? kernel_text_address+0xa5/0xe0
[   91.608313][ T7680]  ? __lock_acquire+0xab9/0xd20
[   91.608325][ T7680]  ? __pfx_rtnl_newlink+0x10/0x10
[   91.608334][ T7680]  rtnetlink_rcv_msg+0x7cf/0xb70
[   91.608344][ T7680]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   91.608353][ T7680]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   91.608366][ T7680]  netlink_rcv_skb+0x208/0x470
[   91.608378][ T7680]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   91.608387][ T7680]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   91.608399][ T7680]  ? netlink_deliver_tap+0x2e/0x1b0
[   91.608409][ T7680]  ? netlink_deliver_tap+0x2e/0x1b0
[   91.608420][ T7680]  netlink_unicast+0x75c/0x8e0
[   91.608431][ T7680]  netlink_sendmsg+0x805/0xb30
[   91.608443][ T7680]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.608454][ T7680]  ? aa_sock_msg_perm+0x94/0x160
[   91.608462][ T7680]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   91.608471][ T7680]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.608481][ T7680]  __sock_sendmsg+0x21c/0x270
[   91.608491][ T7680]  ____sys_sendmsg+0x505/0x830
[   91.608504][ T7680]  ? __pfx_____sys_sendmsg+0x10/0x10
[   91.608517][ T7680]  ? import_iovec+0x74/0xa0
[   91.608528][ T7680]  ___sys_sendmsg+0x21f/0x2a0
[   91.608540][ T7680]  ? __pfx____sys_sendmsg+0x10/0x10
[   91.608558][ T7680]  ? __fget_files+0x2a/0x420
[   91.608565][ T7680]  ? __fget_files+0x3a0/0x420
[   91.608574][ T7680]  __x64_sys_sendmsg+0x19b/0x260
[   91.608586][ T7680]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   91.608599][ T7680]  ? do_user_addr_fault+0xc8a/0x1390
[   91.608607][ T7680]  ? do_syscall_64+0xbe/0x3b0
[   91.608617][ T7680]  do_syscall_64+0xfa/0x3b0
[   91.608625][ T7680]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.608634][ T7680]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.608642][ T7680]  ? exc_page_fault+0x9f/0xf0
[   91.608649][ T7680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.608658][ T7680] RIP: 0033:0x7fe9e018e9a9
[   91.608667][ T7680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.608675][ T7680] RSP: 002b:00007fe9e1095038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.608684][ T7680] RAX: ffffffffffffffda RBX: 00007fe9e03b6160 RCX: 00007fe9e018e9a9
[   91.608690][ T7680] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007
[   91.608695][ T7680] RBP: 00007fe9e0210d69 R08: 0000000000000000 R09: 0000000000000000
[   91.608700][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.608705][ T7680] R13: 0000000000000001 R14: 00007fe9e03b6160 R15: 00007fffde78c6f8
[   91.608713][ T7680]  </TASK>
[   91.775866][ T7680] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19
[   91.785210][ T7680] caif:caif_disconnect_client(): nothing to disconnect
[   91.787732][ T7680] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT
[   91.790410][ T7680] chnl_net:chnl_net_open(): state disconnected
[   91.793283][ T7680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.871782][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!

VM DIAGNOSIS:
15:14:03  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000007ffff RDI=0000000000080000 RBP=00000000000003f8 RSP=ffffc90003165f10
R8 =ffff888107750237 R9 =1ffff11020eea046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18a8 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe9e10956c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5ee030d440 CR3=0000000109f58000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000ff000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=000000ffff000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000ff000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00007fe9df612ad0 RBX=00007fe9df604460 RCX=ffffffff8488b415 RDX=ffffffff8488b415
RSI=ffffffff8488b415 RDI=00007fe9df613ac0 RBP=00007fe9df603470 RSP=00007fffde78c690
R8 =00007fe9df60b790 R9 =00007fe9e03a2000 R10=00007fe9df3fd008 R11=000000000000000f
R12=00007fe9df603468 R13=000000000000001d R14=00007fffde78c818 R15=00007fe9df3fd008
RIP=00007fe9e0067dfd RFL=00000216 [----AP-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556f658500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ba4a5bf7e8 CR3=0000000109f59000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff8488b415 ffffffff8488b415 XMM01=ffffffff8488b415 ffffffff8488b415
XMM02=00007fe9e0386478 ffffffff8488b415 XMM03=00007fe9e0386488 00007fe9e0386480
XMM04=00007fe9e0eed100 00007fe9e0386440 XMM05=00007fe9e0386458 00007fe9e03864a0
XMM06=00007fe9e0386498 00007fe9e0386490 XMM07=00007fe9e0386488 00007fe9e0386480
XMM08=1403091234025662 4a03a776ceb3be50 XMM09=0000000000000000 00007fe9e0211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
