last executing test programs:

1.132901766s ago: executing program 1 (id=742):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x3e}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020400)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000001c0), 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})

1.002994333s ago: executing program 1 (id=747):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

942.028722ms ago: executing program 1 (id=749):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x70, 0x0, &(0x7f0000000300)=0xaf00)

941.502167ms ago: executing program 1 (id=751):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f00000001c0)=0x3, 0x4)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000240))
unshare(0x24040400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000009000000000000000000000095000000000000007366c728cbd5544a6c7fb57c32b7147e875a4082675ded3834168e656950c078950f3fdf2efc"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68f"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r4 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x24004000)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000000), 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x37f09000)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9", 0x63}, {&(0x7f0000000300)="029fef6a61029aa56f32c4fd4199bbf8dcbb8a99f25a0f0a3f253da2bf19f8fc8f5f97ed0d114526d2d079077b653589fccd4955b8709d96fa63985fb4fe4d9c241cf63d4b3b3cbda2c7189e874fd109523ceb3742b3fd7503307f28a03f6c64fbae50e8153b333ebc124a18026daa24ac1daf6866a2bfa0ff0a09b2b55979c09c721d9f90e384c199de86c4e767988642840ebd68dcd73a7c1e96792fa176e8f09748693db87ed4a0df2869a9cd561126", 0xb1}, {&(0x7f00000003c0)="22b67dbfc4591c1d8e38af9a071fc7152ccbbd47e155023a8f8790b2d97bc65303186b6efa2a8764ab94673ce89aefe9141668640bd9b3883b2289a9ba8df922fec6b02b19908989bd3703d3c7bc0fbbad90a502c56da2b471292f7dc67f3b08f2f8ee3cab6866fc23f44078fdec17d94653783558e974f265cfc7d4b82b84f8d2afa7854fd686f4ca", 0x89}, {&(0x7f0000000500)="a1a0da9a23a6cf15a35da68e0deb5a94b761344d5e1875abb586d9fcb2a4ad03a2dfc966324714167bfb0f75adc964c50cd4c3608dab0f2e863d27888fa879ded24b", 0x42}, {&(0x7f00000005c0)}], 0x5}}], 0x1, 0x0)
sendto$inet(r3, &(0x7f0000000580)="17", 0xfffffffffffffe08, 0x10008095, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001fc0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c783, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

543.73522ms ago: executing program 2 (id=758):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000680)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x848000000015, 0x805, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

491.239976ms ago: executing program 2 (id=759):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd01200000200000000"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffffffc}}}, 0xb8}}, 0x0)

403.623885ms ago: executing program 2 (id=760):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="06253bfd0dc2c40a2985c92cbf021008000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x0, 0x80, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="58da402486ff3e32e31fc038b8c02de0a779db06ff7da479cd2f4527242dd7b1d211f55913d1742e58bd760c7f7d8fba35ddadd04b7aaaeef220fa36d22e54524a04f67c7001a47d5eb572fa8e6f4aef5f9303f6501d19e355afbe4cd7dc8247b56c3a1b50277dc8c5778c6b941c920b8a861fc7", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000034000480050003000100000005000300010000000500030001000000050003000200000005000300050000000500030007000000080002"], 0x58}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(r4, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_kthread_stop_ret\x00', r6, 0x0, 0x100000}, 0x18)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[], 0x100}, 0x0)
close(r7)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_extract_tcp_res(&(0x7f00000002c0)={0x41424344, <r8=>0x41424344}, 0x5, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, r8, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4}}}}}}}, 0x0)

203.176974ms ago: executing program 0 (id=761):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

173.815902ms ago: executing program 0 (id=762):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x398, 0xffffffff, 0xffffffff, 0x398, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xf, 0x300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x2, 0xb}, {0x3, 0x6, 0x1}, {0x0, 0x1, 0x1}, 0xc, 0xfffffffd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8)

147.481908ms ago: executing program 2 (id=763):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)

104.106516ms ago: executing program 0 (id=764):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000dc0))

103.909029ms ago: executing program 0 (id=765):
socket$inet6(0xa, 0x3, 0x7)
r0 = socket$netlink(0x10, 0x3, 0x4)
socket$inet6(0xa, 0x3, 0x7)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab60070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1)

103.699595ms ago: executing program 2 (id=766):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @private1}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x0, 0x3501}]}, 0xc8}}, 0x0)

67.752146ms ago: executing program 0 (id=767):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48)

57.910974ms ago: executing program 1 (id=768):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.00335ms ago: executing program 2 (id=769):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)

368.239µs ago: executing program 0 (id=770):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)

0s ago: executing program 1 (id=771):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000001}, 0x18)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57111' (ED25519) to the list of known hosts.
syzkaller login: [   48.135986][ T5817] cgroup: Unknown subsys name 'net'
[   48.217254][ T5817] cgroup: Unknown subsys name 'cpuset'
[   48.221534][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.871165][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.218852][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.644921][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.654226][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.687042][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.689483][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.709476][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   59.802032][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.804862][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.807116][ T5857] bridge_slave_0: entered allmulticast mode
[   59.809984][ T5857] bridge_slave_0: entered promiscuous mode
[   59.814063][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.819545][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.821856][ T5857] bridge_slave_1: entered allmulticast mode
[   59.824907][ T5857] bridge_slave_1: entered promiscuous mode
[   59.850455][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.855441][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.876438][ T5857] team0: Port device team_slave_0 added
[   59.879913][ T5857] team0: Port device team_slave_1 added
[   59.917584][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.919943][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.928224][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.933261][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.935529][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.943330][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.970538][ T5857] hsr_slave_0: entered promiscuous mode
[   59.972983][ T5857] hsr_slave_1: entered promiscuous mode
[   60.093775][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.100305][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.104975][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.109995][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.130404][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.132804][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.135587][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.137824][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.173279][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.183371][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.186692][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.197400][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   60.204712][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.207157][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.212878][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.215288][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.321062][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.349965][ T5857] veth0_vlan: entered promiscuous mode
[   60.357797][ T5857] veth1_vlan: entered promiscuous mode
[   60.377155][ T5857] veth0_macvtap: entered promiscuous mode
[   60.381243][ T5857] veth1_macvtap: entered promiscuous mode
[   60.392565][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.400003][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.405064][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.407855][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.410570][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.413247][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.336736][ T5857] syz-executor (5857) used greatest stack depth: 20600 bytes left
[   62.467696][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.631703][ T5896] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.635839][ T5896] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.636754][ T5894] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.638700][ T5896] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.646022][ T5896] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.649131][ T5896] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.651426][ T5896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.655162][ T5896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.657415][ T5896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.659989][ T5896] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.706665][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.709561][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.712324][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.717204][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.720104][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.899472][ T5893] chnl_net:caif_netlink_parms(): no params data found
[   62.994029][ T5892] chnl_net:caif_netlink_parms(): no params data found
[   63.043107][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.045663][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.047834][ T5893] bridge_slave_0: entered allmulticast mode
[   63.050649][ T5893] bridge_slave_0: entered promiscuous mode
[   63.071401][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.073752][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.076395][ T5893] bridge_slave_1: entered allmulticast mode
[   63.079258][ T5893] bridge_slave_1: entered promiscuous mode
[   63.114029][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.137210][ T5899] chnl_net:caif_netlink_parms(): no params data found
[   63.143758][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.148300][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.150626][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.153728][ T5892] bridge_slave_0: entered allmulticast mode
[   63.157544][ T5892] bridge_slave_0: entered promiscuous mode
[   63.160813][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.162945][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.165292][ T5892] bridge_slave_1: entered allmulticast mode
[   63.167949][ T5892] bridge_slave_1: entered promiscuous mode
[   63.219425][ T5893] team0: Port device team_slave_0 added
[   63.236972][ T5893] team0: Port device team_slave_1 added
[   63.240967][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.262481][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.312145][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.314826][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.322287][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.328414][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.330473][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.338171][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.341574][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.345899][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.348143][ T5899] bridge_slave_0: entered allmulticast mode
[   63.350821][ T5899] bridge_slave_0: entered promiscuous mode
[   63.357276][ T5892] team0: Port device team_slave_0 added
[   63.361948][ T5892] team0: Port device team_slave_1 added
[   63.368917][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.371313][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.373459][ T5899] bridge_slave_1: entered allmulticast mode
[   63.378205][ T5899] bridge_slave_1: entered promiscuous mode
[   63.407291][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.409442][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.417400][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.439702][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.441775][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.449629][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.455708][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.473880][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.486177][ T5893] hsr_slave_0: entered promiscuous mode
[   63.488660][ T5893] hsr_slave_1: entered promiscuous mode
[   63.490723][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.493134][ T5893] Cannot create hsr debugfs directory
[   63.536983][ T5899] team0: Port device team_slave_0 added
[   63.551827][ T5899] team0: Port device team_slave_1 added
[   63.581220][ T5892] hsr_slave_0: entered promiscuous mode
[   63.583525][ T5892] hsr_slave_1: entered promiscuous mode
[   63.586009][ T5892] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.588198][ T5892] Cannot create hsr debugfs directory
[   63.600862][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.603212][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.613841][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.649255][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.651589][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.660870][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.755389][ T5899] hsr_slave_0: entered promiscuous mode
[   63.757822][ T5899] hsr_slave_1: entered promiscuous mode
[   63.761062][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.763918][ T5899] Cannot create hsr debugfs directory
[   63.893203][ T5893] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.902068][ T5893] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.916396][ T5893] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.927508][ T5893] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.987943][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.026250][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.039322][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.057646][ T5893] 8021q: adding VLAN 0 to HW filter on device team0
[   64.063336][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.065989][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.083857][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.092998][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.095605][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.220454][   T12] bridge_slave_1: left allmulticast mode
[   64.222344][   T12] bridge_slave_1: left promiscuous mode
[   64.227236][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.232667][   T12] bridge_slave_0: left allmulticast mode
[   64.236200][   T12] bridge_slave_0: left promiscuous mode
[   64.238041][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.451242][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.457763][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.461451][   T12] bond0 (unregistering): Released all slaves
[   64.494958][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.537305][ T5893] veth0_vlan: entered promiscuous mode
[   64.556933][   T12] hsr_slave_0: left promiscuous mode
[   64.559867][   T12] hsr_slave_1: left promiscuous mode
[   64.562676][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.566640][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.570771][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.573607][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.591593][   T12] veth1_macvtap: left promiscuous mode
[   64.594070][   T12] veth0_macvtap: left promiscuous mode
[   64.597345][   T12] veth1_vlan: left promiscuous mode
[   64.599613][   T12] veth0_vlan: left promiscuous mode
[   64.747992][ T5896] Bluetooth: hci2: command tx timeout
[   64.749507][ T5221] Bluetooth: hci1: command tx timeout
[   64.751034][ T5896] Bluetooth: hci0: command tx timeout
[   64.937202][   T12] team0 (unregistering): Port device team_slave_1 removed
[   64.962106][   T12] team0 (unregistering): Port device team_slave_0 removed
[   65.206456][ T5893] veth1_vlan: entered promiscuous mode
[   65.343294][ T5893] veth0_macvtap: entered promiscuous mode
[   65.350288][ T5893] veth1_macvtap: entered promiscuous mode
[   65.374603][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.380667][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.421440][ T5893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.423972][ T5893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.427960][ T5893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.430615][ T5893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.482296][ T5892] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.487907][ T5892] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.497568][ T5892] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.532260][ T5892] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.555641][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.560865][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.620211][ T5899] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.626055][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.631651][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.636965][ T5899] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.649648][ T5899] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.748552][ T5899] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.813391][ T5959] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET)
[   65.881663][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.945018][ T5892] 8021q: adding VLAN 0 to HW filter on device team0
[   65.950605][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.958530][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.960740][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.975968][ T5899] 8021q: adding VLAN 0 to HW filter on device team0
[   65.985993][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.988245][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.022690][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.025180][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.049327][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.051599][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.075673][ T5963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19'.
[   66.240428][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.246099][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.320909][ T5892] veth0_vlan: entered promiscuous mode
[   66.334368][ T5899] veth0_vlan: entered promiscuous mode
[   66.339441][ T5892] veth1_vlan: entered promiscuous mode
[   66.360112][ T5899] veth1_vlan: entered promiscuous mode
[   66.378412][ T5892] veth0_macvtap: entered promiscuous mode
[   66.388784][ T5892] veth1_macvtap: entered promiscuous mode
[   66.428398][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.431154][ T5899] veth0_macvtap: entered promiscuous mode
[   66.441033][ T5899] veth1_macvtap: entered promiscuous mode
[   66.447674][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.468473][ T5892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.471704][ T5892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.485565][ T5892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.488222][ T5892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.528046][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.538482][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.568045][ T5899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.571547][ T5899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.583677][ T5899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.589511][ T5899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.702397][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.708117][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.737811][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.740365][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.780447][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.786552][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.807965][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.810390][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.824832][ T5896] Bluetooth: hci0: command tx timeout
[   66.834597][ T5896] Bluetooth: hci1: command tx timeout
[   66.836258][ T5896] Bluetooth: hci2: command tx timeout
[   67.735299][ T6012] syzkaller1: entered promiscuous mode
[   67.736938][ T6012] syzkaller1: entered allmulticast mode
[   67.922721][ T6025] netlink: 'syz.1.41': attribute type 4 has an invalid length.
[   67.929761][ T6025] netlink: 'syz.1.41': attribute type 4 has an invalid length.
[   68.042273][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'.
[   68.047998][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'.
[   68.051585][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'.
[   68.337733][ T6059] netlink: 'syz.0.57': attribute type 66 has an invalid length.
[   68.386064][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'.
[   68.904386][   T54] Bluetooth: hci0: command tx timeout
[   68.905918][ T5896] Bluetooth: hci2: command tx timeout
[   68.914321][ T5896] Bluetooth: hci1: command tx timeout
[   68.917736][ T6080] syzkaller1: entered promiscuous mode
[   68.919505][ T6080] syzkaller1: entered allmulticast mode
[   69.648903][ T6085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.754314][ T6119] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   69.808567][ T6123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.871234][ T6127] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   70.229778][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'.
[   70.291735][ T6139] Bluetooth: MGMT ver 1.23
[   70.427546][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'.
[   70.441139][ T6151] bond_slave_0: entered promiscuous mode
[   70.443430][ T6151] bond_slave_1: entered promiscuous mode
[   70.448791][ T6151] macvlan2: entered promiscuous mode
[   70.450445][ T6151] bond0: entered promiscuous mode
[   70.455870][ T6151] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   70.598773][ T6168] syzkaller1: entered promiscuous mode
[   70.600612][ T6168] syzkaller1: entered allmulticast mode
[   70.657128][ T6172] netlink: 'syz.0.103': attribute type 3 has an invalid length.
[   70.708471][ T6176] warning: `syz.0.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.749112][ T6178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.106'.
[   70.908782][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.112'.
[   70.975875][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'.
[   70.987839][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.989958][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.990639][ T5896] Bluetooth: hci1: command tx timeout
[   70.991915][   T54] Bluetooth: hci2: command tx timeout
[   71.500871][ T6251] __nla_validate_parse: 5 callbacks suppressed
[   71.500913][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'.
[   71.515671][ T6251] lo speed is unknown, defaulting to 1000
[   71.517579][ T6251] lo speed is unknown, defaulting to 1000
[   72.330221][ T6251] lo speed is unknown, defaulting to 1000
[   72.339992][ T6251] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.348335][ T6251] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   72.375018][ T6251] lo speed is unknown, defaulting to 1000
[   72.377740][ T6251] lo speed is unknown, defaulting to 1000
[   72.380323][ T6251] lo speed is unknown, defaulting to 1000
[   72.465964][ T6268] xt_hashlimit: max too large, truncated to 1048576
[   72.468140][ T6268] xt_hashlimit: overflow, rate too high: 0
[   72.569464][ T6276] lo speed is unknown, defaulting to 1000
[   72.690503][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'.
[   72.693379][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'.
[   72.831192][ T6293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.839371][ T6291] geneve2: entered promiscuous mode
[   73.089042][ T6303] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.727781][ T6366] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.740171][ T6362] lo speed is unknown, defaulting to 1000
[   73.997109][ T6380] ip6tnl1: entered promiscuous mode
[   73.998964][ T6380] ip6tnl1: entered allmulticast mode
[   74.824776][ T6413] lo speed is unknown, defaulting to 1000
[   75.213975][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'.
[   75.436747][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'.
[   75.616176][ T6482] netlink: 'syz.2.234': attribute type 142 has an invalid length.
[   75.666162][ T6486] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.950821][ T6513] netlink: 68 bytes leftover after parsing attributes in process `syz.1.247'.
[   76.058525][ T6516] Cannot find add_set index 0 as target
[   76.272399][ T6544] lo speed is unknown, defaulting to 1000
[   76.372243][ T6553] veth0: entered promiscuous mode
[   76.416012][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'.
[   76.720437][ T6581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.266'.
[   77.109414][ T6623] netlink: 'syz.0.280': attribute type 1 has an invalid length.
[   77.120057][ T6623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.458123][ T6664] Zero length message leads to an empty skb
[   77.677307][ T6693] netlink: 100 bytes leftover after parsing attributes in process `syz.0.300'.
[   77.758915][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'.
[   78.449409][ T6765] netlink: 'syz.1.321': attribute type 10 has an invalid length.
[   78.451147][ T6767] tipc: Started in network mode
[   78.452069][ T6765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.321'.
[   78.454014][ T6767] tipc: Node identity aac1f2e1b03f, cluster identity 4711
[   78.460905][ T6767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.465199][ T6765] batman_adv: batadv0: Adding interface: virt_wifi0
[   78.467460][ T6765] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.477413][ T6765] batman_adv: batadv0: Interface activated: virt_wifi0
[   78.502885][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.509735][ T6766] tipc: Disabling bearer <eth:syzkaller0>
[   78.612802][ T6775] pim6reg: entered allmulticast mode
[   78.627031][ T6775] pim6reg: left allmulticast mode
[   78.750326][ T6784] netlink: 44 bytes leftover after parsing attributes in process `syz.1.330'.
[   78.792414][ T6784] team0: Port device team_slave_0 removed
[   78.895329][ T6796] netlink: 'syz.1.335': attribute type 1 has an invalid length.
[   78.897984][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.335'.
[   79.038816][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.345'.
[   79.041604][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.345'.
[   79.258021][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'.
[   79.573558][ T6866] lo speed is unknown, defaulting to 1000
[   79.724963][ T6874] netlink: 2 bytes leftover after parsing attributes in process `syz.0.369'.
[   79.728240][ T6874] batadv_slave_1: entered promiscuous mode
[   80.240490][ T6905] netlink: 'syz.0.381': attribute type 1 has an invalid length.
[   80.280467][ T6907] netlink: 'syz.0.383': attribute type 10 has an invalid length.
[   80.289064][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.292098][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.302292][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.304642][ T6907] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.307096][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.310191][ T6907] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.316318][ T6907] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   80.544085][ T6920] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.579356][ T6920] bond_slave_0: entered promiscuous mode
[   80.581255][ T6920] bond_slave_1: entered promiscuous mode
[   80.583440][ T6920] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   80.611718][ T6920] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[   80.731563][ T6935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.889553][ T6949] syzkaller0: entered promiscuous mode
[   80.891226][ T6949] syzkaller0: entered allmulticast mode
[   80.972218][ T6959] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   81.240621][   T24] cfg80211: failed to load regulatory.db
[   81.859797][ T6956] __nla_validate_parse: 6 callbacks suppressed
[   81.859810][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'.
[   81.869350][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'.
[   81.872172][ T6956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.998806][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'.
[   82.099003][ T6988] syzkaller1: entered promiscuous mode
[   82.100802][ T6988] syzkaller1: entered allmulticast mode
[   82.230186][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'.
[   82.323670][ T7013] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[   82.403796][ T7025] netlink: 96 bytes leftover after parsing attributes in process `syz.1.439'.
[   82.748667][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'.
[   82.751357][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'.
[   83.136541][ T7110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.142927][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'.
[   83.209435][ T7116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.484'.
[   83.289520][ T7126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   83.291987][ T7126] IPv6: NLM_F_CREATE should be set when creating new route
[   83.294418][ T7126] IPv6: NLM_F_CREATE should be set when creating new route
[   83.514022][ T7149] IPv6: NLM_F_CREATE should be specified when creating new route
[   83.582768][ T7153] bridge_slave_0: left allmulticast mode
[   83.585200][ T7153] bridge_slave_0: left promiscuous mode
[   83.587296][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.593440][ T7153] bridge_slave_1: left allmulticast mode
[   83.596970][ T7153] bridge_slave_1: left promiscuous mode
[   83.598962][ T7153] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.606201][ T7153] bond0: (slave bond_slave_0): Releasing backup interface
[   83.609029][ T7153] bond_slave_0: left promiscuous mode
[   83.613889][ T7153] bond0: (slave bond_slave_1): Releasing backup interface
[   83.619328][ T7153] bond_slave_1: left promiscuous mode
[   83.633905][ T7153] team0: Port device team_slave_1 removed
[   83.637661][ T7153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.640126][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.645232][ T7153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.647512][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.651746][ T7153] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   83.654008][ T7153] batman_adv: batadv0: Removing interface: virt_wifi0
[   83.661294][ T7153] bond2: (slave macvlan2): Releasing backup interface
[   83.767056][ T7153] netlink: 14 bytes leftover after parsing attributes in process `syz.1.502'.
[   83.852080][ T7153] bond0 (unregistering): Released all slaves
[   84.500179][ T7196] netlink: 'syz.2.522': attribute type 20 has an invalid length.
[   84.506314][ T7196] netlink: 'syz.2.522': attribute type 20 has an invalid length.
[   84.557797][ T7200] geneve3: entered promiscuous mode
[   84.566661][ T7200] geneve3: entered allmulticast mode
[   84.684465][ T7211] bridge_slave_0: left allmulticast mode
[   84.686229][ T7211] bridge_slave_0: left promiscuous mode
[   84.688181][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.698023][ T7211] bridge_slave_1: left allmulticast mode
[   84.700274][ T7211] bridge_slave_1: left promiscuous mode
[   84.702264][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.713664][ T7211] bond0: (slave bond_slave_0): Releasing backup interface
[   84.718320][ T7211] bond_slave_0: left promiscuous mode
[   84.723068][ T7211] bond0: (slave bond_slave_1): Releasing backup interface
[   84.731416][ T7211] bond_slave_1: left promiscuous mode
[   84.742841][ T7211] team0: Port device team_slave_0 removed
[   84.751593][ T7211] team0: Port device team_slave_1 removed
[   84.754011][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.756497][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.760229][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.762658][ T7211] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.786947][ T7207] lo speed is unknown, defaulting to 1000
[   84.900673][ T7216] bond0 (unregistering): left promiscuous mode
[   84.904441][ T5896] Bluetooth: hci2: command 0x0405 tx timeout
[   84.928336][ T7216] bond0 (unregistering): Released all slaves
[   84.972362][ T7225] gtp0: entered promiscuous mode
[   84.975881][ T7225] gtp0: entered allmulticast mode
[   85.133370][ T7237] tun0: tun_chr_ioctl cmd 1074025675
[   85.135728][ T7237] tun0: persist enabled
[   85.138594][ T7237] tun0: tun_chr_ioctl cmd 1074025675
[   85.140271][ T7237] tun0: persist disabled
[   85.347020][ T7255] bond0: (slave bridge0): Releasing backup interface
[   85.372258][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.374743][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.383077][ T7255] bridge_slave_0: left allmulticast mode
[   85.388637][ T7255] bridge_slave_0: left promiscuous mode
[   85.390537][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.405889][ T7255] bridge_slave_1: left allmulticast mode
[   85.407642][ T7255] bridge_slave_1: left promiscuous mode
[   85.409604][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.420963][ T7255] bond0: (slave bond_slave_0): Releasing backup interface
[   85.428318][ T7255] bond0: (slave bond_slave_1): Releasing backup interface
[   85.445178][ T7255] team0: Port device team_slave_0 removed
[   85.451718][ T7255] team0: Port device team_slave_1 removed
[   85.454038][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.465146][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.477956][ T7255] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.487268][ T7255] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.501998][ T5938] lo speed is unknown, defaulting to 1000
[   85.671579][ T7255] bond0 (unregistering): Released all slaves
[   85.721495][ T7280] netlink: 'syz.1.556': attribute type 1 has an invalid length.
[   85.731657][ T7255] syz.0.544 (7255) used greatest stack depth: 20168 bytes left
[   85.767208][ T7280] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   85.791207][ T7280] bond0: (slave ip6gretap1): Releasing backup interface
[   86.428913][ T7338] netlink: 'syz.0.581': attribute type 13 has an invalid length.
[   86.435348][ T7343] netlink: 'syz.1.583': attribute type 21 has an invalid length.
[   86.435683][ T7338] netlink: 'syz.0.581': attribute type 17 has an invalid length.
[   86.533348][ T7338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.574042][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.631799][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.682603][ T7357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.696390][ T7338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.746521][    C1] Illegal XDP return value 16128 on prog  (id 80) dev lo, expect packet loss!
[   86.918176][ T7374] netlink: 'syz.1.598': attribute type 10 has an invalid length.
[   86.920546][ T7374] __nla_validate_parse: 16 callbacks suppressed
[   86.920556][ T7374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.598'.
[   86.925929][ T7374] dummy0: entered promiscuous mode
[   86.927709][ T7374] dummy0: entered allmulticast mode
[   86.930555][ T7374] bridge0: port 1(dummy0) entered blocking state
[   86.932640][ T7374] bridge0: port 1(dummy0) entered disabled state
[   86.937243][ T7374] bridge0: port 1(dummy0) entered blocking state
[   86.939272][ T7374] bridge0: port 1(dummy0) entered forwarding state
[   86.950879][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'.
[   87.145363][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.606'.
[   87.155707][ T7392] netlink: 104 bytes leftover after parsing attributes in process `syz.1.607'.
[   87.186207][ T7395] tipc: Cannot configure node identity twice
[   87.206822][ T7333] syz.0.581 (7333) used greatest stack depth: 19016 bytes left
[   87.330211][ T7403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.612'.
[   87.348754][ T7403] lo speed is unknown, defaulting to 1000
[   87.391095][ T7411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.616'.
[   87.561581][ T7430] netlink: 'syz.0.624': attribute type 5 has an invalid length.
[   87.564509][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'.
[   87.616551][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[   87.679310][ T7438] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   87.840871][ T7454] ieee802154 phy0 wpan0: encryption failed: -22
[   87.845920][ T7454] netlink: 196 bytes leftover after parsing attributes in process `syz.0.636'.
[   87.971823][ T7454] batadv_slave_1: left promiscuous mode
[   88.022490][ T7454] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.026111][ T7454] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.029026][ T7454] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.031838][ T7454] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.061689][ T7454] ip6tnl1: left promiscuous mode
[   88.065558][ T7454] gtp0: left promiscuous mode
[   88.068194][ T5296] lo speed is unknown, defaulting to 1000
[   88.075981][ T5296] syz1: Port: 1 Link DOWN
[   88.111120][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'.
[   88.151747][ T7471] bond0 (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   88.856353][ T7539] netlink: 'syz.2.676': attribute type 1 has an invalid length.
[   89.262634][ T7567] lo speed is unknown, defaulting to 1000
[   89.434069][ T7567] bridge0: port 1(dummy0) entered disabled state
[   89.443382][ T7567] bridge0: port 1(dummy0) entered disabled state
[   89.487179][ T7567] dummy0: left promiscuous mode
[   89.488890][ T7567] dummy0: left allmulticast mode
[   90.249779][ T7581] lo speed is unknown, defaulting to 1000
[   90.606155][ T7613] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   91.660153][ T7709] pim6reg1: entered promiscuous mode
[   91.661886][ T7709] pim6reg1: entered allmulticast mode
[   92.019247][ T7724] __nla_validate_parse: 9 callbacks suppressed
[   92.019260][ T7724] netlink: 56 bytes leftover after parsing attributes in process `syz.2.757'.
[   92.421279][ T7736] Cannot find add_set index 2 as target
[   92.462105][ T7740] bridge_slave_0: entered promiscuous mode
[   92.558247][ T7751] netlink: 'syz.2.769': attribute type 10 has an invalid length.
[   92.593078][ T7751] team0: Port device netdevsim0 added
[   92.596911][   T61] 
[   92.597822][   T61] ======================================================
[   92.600085][   T61] WARNING: possible circular locking dependency detected
[   92.602345][   T61] 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 Not tainted
[   92.606018][   T61] ------------------------------------------------------
[   92.608814][   T61] kworker/u10:2/61 is trying to acquire lock:
[   92.611245][   T61] ffff888109b8ce00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_device_event+0x544/0xa20
[   92.615093][   T61] 
[   92.615093][   T61] but task is already holding lock:
[   92.618052][   T61] ffff88810d16cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0
[   92.622138][   T61] 
[   92.622138][   T61] which lock already depends on the new lock.
[   92.622138][   T61] 
[   92.626145][   T61] 
[   92.626145][   T61] the existing dependency chain (in reverse order) is:
[   92.629694][   T61] 
[   92.629694][   T61] -> #1 (&dev_instance_lock_key#20){+.+.}-{4:4}:
[   92.633015][   T61]        lock_acquire+0x120/0x360
[   92.635034][   T61]        __mutex_lock+0x182/0xe80
[   92.637032][   T61]        dev_set_mtu+0x10e/0x260
[   92.639010][   T61]        team_add_slave+0x8b8/0x2840
[   92.641090][   T61]        do_set_master+0x533/0x6d0
[   92.643134][   T61]        do_setlink+0xcf0/0x41c0
[   92.645093][   T61]        rtnl_newlink+0x160b/0x1c70
[   92.647109][   T61]        rtnetlink_rcv_msg+0x7cf/0xb70
[   92.649256][   T61]        netlink_rcv_skb+0x208/0x470
[   92.651340][   T61]        netlink_unicast+0x75c/0x8e0
[   92.653432][   T61]        netlink_sendmsg+0x805/0xb30
[   92.655496][   T61]        __sock_sendmsg+0x21c/0x270
[   92.657252][   T61]        ____sys_sendmsg+0x505/0x830
[   92.658860][   T61]        ___sys_sendmsg+0x21f/0x2a0
[   92.660483][   T61]        __x64_sys_sendmsg+0x19b/0x260
[   92.662083][   T61]        do_syscall_64+0xfa/0x3b0
[   92.663613][   T61]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.666061][   T61] 
[   92.666061][   T61] -> #0 (team->team_lock_key#4){+.+.}-{4:4}:
[   92.669311][   T61]        validate_chain+0xb9b/0x2140
[   92.671487][   T61]        __lock_acquire+0xab9/0xd20
[   92.673487][   T61]        lock_acquire+0x120/0x360
[   92.675424][   T61]        __mutex_lock+0x182/0xe80
[   92.677403][   T61]        team_device_event+0x544/0xa20
[   92.679594][   T61]        notifier_call_chain+0x1b6/0x3e0
[   92.681822][   T61]        netif_state_change+0x284/0x3a0
[   92.683924][   T61]        linkwatch_do_dev+0x117/0x170
[   92.685682][   T61]        __linkwatch_run_queue+0x56d/0x7e0
[   92.688016][   T61]        linkwatch_event+0x4c/0x60
[   92.690042][   T61]        process_scheduled_works+0xae1/0x17b0
[   92.692382][   T61]        worker_thread+0x8a0/0xda0
[   92.694380][   T61]        kthread+0x711/0x8a0
[   92.696198][   T61]        ret_from_fork+0x3fc/0x770
[   92.698221][   T61]        ret_from_fork_asm+0x1a/0x30
[   92.700438][   T61] 
[   92.700438][   T61] other info that might help us debug this:
[   92.700438][   T61] 
[   92.704359][   T61]  Possible unsafe locking scenario:
[   92.704359][   T61] 
[   92.707277][   T61]        CPU0                    CPU1
[   92.709429][   T61]        ----                    ----
[   92.711507][   T61]   lock(&dev_instance_lock_key#20);
[   92.713530][   T61]                                lock(team->team_lock_key#4);
[   92.716434][   T61]                                lock(&dev_instance_lock_key#20);
[   92.719463][   T61]   lock(team->team_lock_key#4);
[   92.721419][   T61] 
[   92.721419][   T61]  *** DEADLOCK ***
[   92.721419][   T61] 
[   92.724559][   T61] 4 locks held by kworker/u10:2/61:
[   92.726592][   T61]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   92.731013][   T61]  #1: ffffc90000f8fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   92.735248][   T61]  #2: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[   92.738783][   T61]  #3: ffff88810d16cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0
[   92.742994][   T61] 
[   92.742994][   T61] stack backtrace:
[   92.745397][   T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u10:2 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[   92.745415][   T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.745425][   T61] Workqueue: events_unbound linkwatch_event
[   92.745445][   T61] Call Trace:
[   92.745454][   T61]  <TASK>
[   92.745471][   T61]  dump_stack_lvl+0x189/0x250
[   92.745491][   T61]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.745506][   T61]  ? __pfx__printk+0x10/0x10
[   92.745524][   T61]  ? print_lock_name+0xde/0x100
[   92.745543][   T61]  print_circular_bug+0x2ee/0x310
[   92.745559][   T61]  check_noncircular+0x134/0x160
[   92.745577][   T61]  validate_chain+0xb9b/0x2140
[   92.745600][   T61]  __lock_acquire+0xab9/0xd20
[   92.745616][   T61]  ? team_device_event+0x544/0xa20
[   92.745629][   T61]  lock_acquire+0x120/0x360
[   92.745641][   T61]  ? team_device_event+0x544/0xa20
[   92.745654][   T61]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   92.745676][   T61]  __mutex_lock+0x182/0xe80
[   92.745690][   T61]  ? team_device_event+0x544/0xa20
[   92.745703][   T61]  ? __try_to_del_timer_sync+0x34a/0x3a0
[   92.745721][   T61]  ? team_device_event+0x544/0xa20
[   92.745734][   T61]  ? __pfx___mutex_lock+0x10/0x10
[   92.745749][   T61]  ? fib_sync_down_dev+0x66/0x7b0
[   92.745771][   T61]  team_device_event+0x544/0xa20
[   92.745784][   T61]  notifier_call_chain+0x1b6/0x3e0
[   92.745803][   T61]  netif_state_change+0x284/0x3a0
[   92.745821][   T61]  ? __pfx_netif_state_change+0x10/0x10
[   92.745836][   T61]  ? dev_deactivate+0x129/0x1b0
[   92.745853][   T61]  ? nsim_get_iflink+0x20/0x280
[   92.745872][   T61]  ? rfc2863_policy+0x1c6/0x3e0
[   92.745892][   T61]  linkwatch_do_dev+0x117/0x170
[   92.745905][   T61]  __linkwatch_run_queue+0x56d/0x7e0
[   92.745919][   T61]  ? __pfx___linkwatch_run_queue+0x10/0x10
[   92.745932][   T61]  ? _raw_spin_unlock_irq+0x23/0x50
[   92.745951][   T61]  ? process_scheduled_works+0x9ef/0x17b0
[   92.745965][   T61]  ? process_scheduled_works+0x9ef/0x17b0
[   92.745980][   T61]  linkwatch_event+0x4c/0x60
[   92.745991][   T61]  process_scheduled_works+0xae1/0x17b0
[   92.746014][   T61]  ? __pfx_process_scheduled_works+0x10/0x10
[   92.746034][   T61]  worker_thread+0x8a0/0xda0
[   92.746057][   T61]  kthread+0x711/0x8a0
[   92.746076][   T61]  ? __pfx_worker_thread+0x10/0x10
[   92.746090][   T61]  ? __pfx_kthread+0x10/0x10
[   92.746114][   T61]  ? _raw_spin_unlock_irq+0x23/0x50
[   92.746133][   T61]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.746146][   T61]  ? __pfx_kthread+0x10/0x10
[   92.746163][   T61]  ret_from_fork+0x3fc/0x770
[   92.746178][   T61]  ? __pfx_ret_from_fork+0x10/0x10
[   92.746193][   T61]  ? __switch_to_asm+0x39/0x70
[   92.746209][   T61]  ? __switch_to_asm+0x33/0x70
[   92.746224][   T61]  ? __pfx_kthread+0x10/0x10
[   92.746241][   T61]  ret_from_fork_asm+0x1a/0x30
[   92.746264][   T61]  </TASK>

VM DIAGNOSIS:
07:22:35  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4bec0 RBX=ffff88804b03b1c0 RCX=ffff888020e40000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90003bafae0 RSP=ffffc90003baf980
R8 =ffffffff8fa1d6f7 R9 =1ffffffff1f43ade R10=dffffc0000000000 R11=fffffbfff1f43adf
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4bea9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557ffea500 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001000 CR3=0000000025eba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff405a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000a RBX=000000000000000a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000f8ecb0
R8 =ffff888021820237 R9 =1ffff11004304046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18d5 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000540 CR3=0000000025c36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007faac9786478 00007faac9786450 XMM03=00007faac9786488 00007faac9786480
XMM04=00007faaca2ed100 00007faac9786440 XMM05=00007faac9786458 00007faac97864a0
XMM06=00007faac9786498 00007faac9786490 XMM07=00007faac9786488 00007faac9786480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007faac9611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
