last executing test programs:

970.326346ms ago: executing program 0 (id=627):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x3c}, @in=@broadcast, {}, {0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@loopback}]}, 0x104}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000010c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x917f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044800}, 0x50)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x158, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20000}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9fc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff801}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x36}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf47}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4f}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00'}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7ee2c78dad9b4b473fec988cadb", 0xf}], 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)

909.548756ms ago: executing program 2 (id=628):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a68000000070a01040000000000000000020000003c000480d4380001800e000100627974656f726465720000002400028008000140000000010800024000000000080004400000000208000540000000090900010073797a3000000000090002737e26398e0073797a3200000000140000001100010000000000000000fa3e3e3af0d2a31bc98cacd976b9acd6ee278a5b066dcb043cf7dd891695624e", @ANYRESDEC=r0, @ANYBLOB="982b5cf76c319e46e213f87f5bd3dd212b14505f30bd60b2641bafe84c7ca494101a0d37c56651a800b3561f18de49a566f507c95a9c264f185183e39a18302465c52640591b54df7e8d78e4b81b22b9b5d47de2a3f5129667a7e6954070eb2f940ed0c96a04bfdcc059f1bef4671f553c53664cd4e9c6440d4c8dc0302f485f26e16b928deb0b38f0123afe54df4fc3b14a451e8db4e39f2e4dba7f"], 0x90}, 0x1, 0x0, 0x0, 0x20040054}, 0x0)

909.325381ms ago: executing program 2 (id=629):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local}, {@in=@loopback, 0x0, 0x3c}, @in=@loopback, {}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ctr-camellia-aesni\x00'}}}]}, 0x138}}, 0x80)
r1 = socket(0x6, 0x6, 0xf)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1830000000000000000050000000800030053c75f1d"], 0x6c}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x808)

840.258054ms ago: executing program 2 (id=630):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x80000000000000a, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000470000850600"/20, @ANYRES32=r5, @ANYRESOCT=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) (async)
r9 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000070000000100010009"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x18)
gettid() (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40)

838.861459ms ago: executing program 0 (id=631):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000380)=0x16f16885, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @remote, 0x2c0}, 0x1c)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c00ca002d0a0000030000000c000200160000001700000014000300766c616e30", @ANYRESHEX=r2, @ANYRES64=r2, @ANYRESDEC=r2], 0x68}}, 0x0)

766.081495ms ago: executing program 0 (id=632):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r2, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffe5c, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@float={0xf, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x61, 0x0, 0x30, 0x0, 0x2e, 0xd, 0x2e, 0x61, 0x5f]}}, &(0x7f00000002c0)=""/120, 0x30, 0x78, 0x1, 0x9, 0x10000}, 0x28)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00'})
listen(r3, 0x6)
syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000000000000000bb048000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
syz_emit_ethernet(0x4c, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x16, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}, {"90a0"}}}}}}}, 0x0)

764.320921ms ago: executing program 2 (id=633):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00f000000880803fb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\"\b\x00\x00', @ANYRES16=r4, @ANYBLOB="100428bd7000fddbdf2511000000050033000000000005002e000000000008000b000300000008003a000500000008002b0000800000050037000000000008002b00010000000800310005000000"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09042dbd7000fbdbdf25870000000c00990009000000520000000b0006"], 0x2c}, 0x1, 0x0, 0x0, 0x4020090}, 0x80)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="98d5", 0x2}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x9, @remote, 0x2}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

762.97145ms ago: executing program 2 (id=634):
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000fddbdf250c00000005002f0001", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff023c00000000000000000000000001"], 0xfdef)

762.604456ms ago: executing program 0 (id=635):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080"], 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xf07, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

660.384009ms ago: executing program 0 (id=636):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000008000000000010000000c00020000000000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x40050) (async)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) (async)
shutdown(r4, 0x1) (async)
setsockopt(r4, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket(0x8000000010, 0x2, 0x0)
write(r5, &(0x7f00000002c0)="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", 0xfc) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) (rerun: 64)
sendmsg$inet(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841)
recvmsg(r6, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async)
sendmsg$inet(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) (async, rerun: 64)
recvmsg(r6, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x60002060) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x803, 0x0) (async, rerun: 64)
r8 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) (async, rerun: 32)
setsockopt$IP_VS_SO_SET_EDITDEST(r8, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) (async, rerun: 32)
r9 = socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000540)={@remote, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x700, 0x800, 0x0, 0x6}) (async)
sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (async)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r11, 0x8953, &(0x7f0000000180)={{0x2, 0x4, @multicast1}, {0x0, @multicast}, 0x0, {0x2, 0x0, @empty}, 'bond_slave_0\x00'})

600.003573ms ago: executing program 2 (id=637):
socket$key(0xf, 0x3, 0x2)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
socket(0x1e, 0x4, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write(r0, &(0x7f0000000040)="05000000010000", 0x7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000e80b00000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300190000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0)

599.036318ms ago: executing program 0 (id=638):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x439, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x33220, 0x12200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x36}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x8}]}}}]}, 0x48}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="20fa0000000000008400000002000000000013020000ea3ea101c3200a1f1d7b8633a0d0c33d19045e0c30ffa991504e65e5379e827fd3bd27d24315a361b2b3e739c43836408d1daf6fb62d6736b57c10030c0d829693a9c5f0615e755286751e58ce6bc2ccc2c2da16431bae92f3022ffdceedc8166774e967f240", @ANYRES32=0x0], 0x20}, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x4e21, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="20000000000000108400000002000000000041020000000000000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)={'wlan1\x00', @broadcast})
ioctl(r0, 0x8b32, &(0x7f0000000040))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r6, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0)
r7 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r7, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10)
listen(r7, 0x0)
r8 = socket(0x28, 0x3, 0x0)
connect$vsock_stream(r8, &(0x7f0000000080), 0x10)
sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="ba", 0x1}], 0x1}}], 0x1, 0x80d4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
accept4$unix(r7, 0x0, 0x0, 0x0)
recvfrom$unix(r7, &(0x7f0000000580)=""/277, 0x115, 0x40000000, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="280000003d00007fb3243183bd9468848934e566d600dcee7b832a3fdbeb12eb348500000000"], 0x28}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={<r11=>0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010301}}}, &(0x7f0000000340)=0x84)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000380)={r11, 0xb9, 0x20, 0x3, 0x9}, &(0x7f00000003c0)=0x18)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="58928eefda193b2b71f6d2ff865e2ee434f259768df9b4722e6e08ab1fef167bad007604e2c5fbac79db9b1c9acf3c2f60d561ac6fe4093b", @ANYRES16=r12, @ANYBLOB="33030000000004000000150000000c0001800800030007000000"], 0x20}}, 0x0)

248.130632ms ago: executing program 1 (id=641):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00f000000880803fb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\"\b\x00\x00', @ANYRES16=r4, @ANYBLOB="100428bd7000fddbdf2511000000050033000000000005002e000000000008000b000300000008003a000500000008002b0000800000050037000000000008002b00010000000800310005000000"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09042dbd7000fbdbdf25870000000c00990009000000520000000b0006"], 0x2c}, 0x1, 0x0, 0x0, 0x4020090}, 0x80)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="98d5", 0x2}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x9, @remote, 0x2}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

247.13258ms ago: executing program 1 (id=642):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xb0c, 0x30, 0x871a15abc695fa3d, 0xfffffffc, 0x0, {}, [{0x4}, {0x8a0, 0x1, [@m_police={0x89c, 0x13, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0x3, 0x1000, 0x7, 0x3, 0x81, 0x5, 0x8, 0x600000, 0x400, 0x7fffffff, 0x1, 0x36, 0x3, 0x3, 0x2, 0xc89aa903, 0x7ff, 0x3, 0x4, 0x3, 0x76, 0x7fff, 0x5ba, 0x5, 0x88d7, 0x4c7, 0x5, 0x8001, 0x1, 0x3e1, 0x6, 0xc673, 0x0, 0x1, 0x7c91, 0x2, 0x0, 0xfffffffa, 0x6, 0xffffffff, 0x6, 0xd626, 0xfffff901, 0x0, 0x2, 0xf, 0x80000000, 0xffff, 0x35ec, 0x6, 0x80000001, 0xf, 0x5, 0x3, 0x6, 0x1, 0x0, 0x1, 0x8001, 0x9, 0xfff, 0xfffffff4, 0x3, 0x4, 0x81, 0x1ff, 0x1, 0x4aa6376, 0x37d, 0xb74, 0x5, 0x7, 0x2, 0x80, 0x0, 0x200, 0x3, 0x1, 0x6, 0x6, 0xff, 0x2, 0x7fff, 0x3bc4, 0x7, 0xd0, 0x0, 0xb35, 0x94, 0x100, 0x401, 0x9, 0x4, 0x3, 0x2, 0x400, 0x9, 0x4, 0x5, 0x6, 0x6, 0xfffffffd, 0x2, 0x0, 0xa3c0, 0x5, 0xfffffeff, 0x9, 0x7, 0xeb, 0x10001, 0x400, 0xfffffe00, 0x60e, 0x318a, 0x0, 0x6, 0x5, 0x1, 0x6, 0x1ea, 0x7f, 0x6, 0x5, 0x9, 0x2, 0xcd, 0xff, 0x8, 0xfffffff9, 0x101, 0xa, 0x3, 0x2, 0x104, 0x7c2, 0x0, 0xffffffff, 0x8, 0xf, 0x68, 0x3, 0x8, 0x8, 0x9, 0x1, 0x401, 0xd, 0x0, 0x47, 0xc53, 0x3, 0x80000001, 0x2, 0x3, 0x7, 0x1ff, 0x9, 0x5, 0x453, 0x2, 0x3, 0x10001, 0xad0, 0x0, 0x1, 0x7f, 0xf5f1, 0xfffff000, 0x0, 0x8, 0xfffff800, 0xff, 0x0, 0x609, 0xe7b, 0x6, 0x7, 0xffffffff, 0x5, 0x4, 0x7f, 0xd039, 0x7, 0x6, 0xff, 0x6, 0x401, 0x5d53, 0x4, 0x80, 0xfffffffa, 0x9, 0x1d7, 0x2, 0x97c9, 0x1, 0xb34f, 0x9, 0x3, 0x1ff, 0x7, 0x3, 0xffffffff, 0x2, 0x4, 0x6, 0x2, 0x5, 0xbcf, 0x80000001, 0x3, 0x7fffffff, 0xb6a3, 0x2, 0x3, 0x5a8, 0x8001, 0x0, 0x5a14, 0x8, 0x180000, 0xfffffff4, 0x0, 0x9, 0x7a5, 0x6, 0x8, 0x4, 0x7, 0x6, 0x3, 0x6, 0x3, 0x3, 0x7, 0x10000, 0x3, 0x7, 0x1, 0x401, 0x8, 0x9, 0xffff, 0x9, 0x7, 0xbc, 0x43, 0x0, 0xffffffff, 0x1, 0xfffffff9, 0x6, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7cc, 0x1, 0x80000001, 0x4, 0x0, 0x8, 0x7, 0x0, 0x0, 0x8, 0x5, 0x6e6, 0xc, 0x4, 0x7fff, 0x0, 0x80a, 0x7fff, 0x8000, 0xfffffffd, 0xfffffffb, 0x10001, 0x8, 0x6, 0x0, 0x7, 0x7, 0x27, 0x1, 0x10000, 0x4, 0x6, 0x8f, 0xd, 0xdfe, 0x9, 0x9, 0x100, 0x8, 0x8, 0x2, 0x8000, 0x33, 0x2, 0x5, 0x9, 0x0, 0xfffffff8, 0x2, 0x3ff, 0x8a, 0x4, 0xc6, 0x7, 0x1, 0x5, 0x4, 0x40, 0x7, 0x100, 0x5, 0xfff, 0xff7, 0x6081, 0x1, 0x0, 0xcae, 0x9, 0x7, 0x9, 0x6, 0x87da, 0x1000, 0x6, 0x1, 0x3d, 0x1000, 0x3, 0x7, 0x2, 0x0, 0x3, 0xfff, 0x1, 0x4, 0x2, 0x1, 0x8, 0x5, 0x4, 0x3, 0x1, 0x7c, 0xf, 0x8000, 0x2, 0xfffffff8, 0x8, 0x4dd, 0x8001, 0x4, 0xdea, 0xe4fe, 0x4, 0x7ff, 0x4, 0xe, 0xa89, 0xff, 0x9, 0x21cf62d, 0x0, 0x4, 0xee, 0x101, 0x5, 0x8, 0x80000000, 0x1, 0xf, 0x9, 0x43f, 0x9, 0x3, 0x5, 0x1, 0x4, 0x7, 0x1, 0x1, 0x6, 0xc82, 0x5, 0x3, 0x80000000, 0x2, 0x3, 0x3, 0x4, 0x0, 0x5, 0x1, 0xffff, 0xb66b, 0x4847, 0xd7, 0x7fff, 0x800, 0x4, 0x10000, 0x4, 0x3e9f, 0xffffffff, 0x8, 0x4, 0x9, 0x7fff, 0x0, 0x210a, 0x0, 0x8, 0x4, 0xdd, 0x8, 0x4, 0x5, 0x4, 0x2, 0x7, 0x0, 0x1000, 0x6, 0x4, 0x7ff, 0xf, 0x8000, 0x7, 0x6, 0x7fffffff, 0x401, 0x5, 0xb, 0x6, 0x7f, 0x9, 0xd05a, 0x7, 0x8, 0x8, 0x64, 0x6, 0x2, 0xfffffff9, 0x5, 0xfffffffe, 0x1, 0x8001, 0x4, 0x5, 0x4f, 0x800, 0x4, 0x10001, 0x9d6, 0x7ff000, 0xff, 0x3b4, 0x9, 0x4, 0x7, 0xf, 0xcdc, 0xb95, 0x1, 0x2, 0x800, 0x10001, 0x8001, 0x7, 0x7, 0x4, 0x2, 0x400, 0x7f, 0x3, 0x34c6d49, 0x0, 0x1, 0x10000, 0x1000, 0xa10f, 0x2, 0xaa, 0x2, 0x466, 0x7, 0x40, 0x8, 0x8, 0x3, 0x9, 0x7fffffff, 0x3, 0x5, 0x3ff, 0x0, 0x100, 0xffffffff, 0x4, 0x6, 0x0, 0x3, 0x6, 0x0, 0x2, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfff}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]]}, {0x44, 0x6, "15db6511d51fe7303ee9bbb959dd648a0d4abbfe516f91f4d26561ce421e85110e4d5be70f6ad0d8168648433f295df088cd0f61f3e373310abd7cd81e9ae7e8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x254, 0x1, [@m_nat={0x140, 0x4, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xa8a0fb00, 0x2, 0x9, 0x8}, @broadcast, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2e, 0x4, 0x6, 0x4}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10000000, 0x4, 0x2}, @remote, @multicast2, 0x54a58cbf8edf5957}}]}, {0x9f, 0x6, "6f0cd23ad91000c513c9cb39165cf279899d228d54f9391bcd6a13d4878d5630b016be022620cfe3e25e6005fa3177bcb48a6efeb87de7b0f254a828719b22671e7090da23449f5c2bb6fc11acbbb9ba3e4d8c016eab0558fbf7ac00ce1e3a382275cbc8e720e7ffe5894ff6904e26a1460bf27559dfee1956a915714d2d4dcf1f75109cdba7103183eb4243c09bac50789c1fd52f95633fb61834"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x110, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xf}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xd}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8914}]}, {0xc2, 0x6, "2fc34ee9bd0991ad29a66069325ce5318a03a5748988fbd10e827a11b2eeb1d0fae3a597f09b480aa6a428883a6c0b53d2acf289cd8577e70638104c2bfa5c86de89c3e6e590023ecd584dc1c7739058b084dd20774ef464308f5b5a7d268e057e211b88806c11127df8613f0a627cd9e5a4837c619f28b870eef660d86cc3279a0ca27a65a6da5d7b0d46747ea1a3cc0a0d556b8f24e30a3b72fc9aa54dc931606e9add6a5f110a065a45732f1fe68669807693baf44ae56f363ec2dede"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xb0c}, 0x1, 0x0, 0x0, 0x4040044}, 0x0)
r1 = socket(0x2a, 0x80000, 0x5)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000f00), &(0x7f0000000f40)=0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@dev, 0xffffffff}]}]}, 0x17c}}, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYBLOB="00000000000000feffffff0000000000040002005c00010007"], 0xac}}, 0x4000)
write$tun(r5, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x1dc, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x1dc, 0x0, @opaque="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"}}}}, 0x204)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000ec0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x1)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xb9}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xfff6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

246.575628ms ago: executing program 1 (id=643):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010008105000000fcdbdf2500000000c323c0a37c2c78930ecc9dcbc46c2a6f76d33ac4aef11c5912b690f9c695a65ade63a3eeff3bfc3fdcb456b6dbf52b92e50410b4ad1a8817e461925c5f1caa6b96593690bfbbe01b4bc944c2df80501b618c775987448b07e84f4c17b1c789d994f6cc8c7dae98525ffb2c1efeca677d74dd6b7cb7d10a57c0d857f6f220a7666d3a7208bfc9e0d40bf5440e5114cd727ead928ab79ebeb2fba0fb1b1c", @ANYRES64=r0, @ANYBLOB="14d00400000000002400128009c6df1139ba062391da98eb09006f6e64000000001404028008001f00ec818444158d51654e530fa3ca04e23abba3e3c2c79b0604f2270e7be3344fb1224021516337e9f6a0cfa917372c5f3534f046bf369904c7ff2abdd8d2150b04b9adfca32c50f0f628dcff55eb3695377f"], 0x44}, 0x1, 0x0, 0x0, 0x4004012}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
unshare(0x400)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c2}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'aegis128l-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
bind$can_j1939(r1, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000d009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = accept(r0, &(0x7f0000000100)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x80)
accept4$unix(r7, 0x0, &(0x7f00000001c0), 0x80800)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010008105000000fcdbdf2500000000c323c0a37c2c78930ecc9dcbc46c2a6f76d33ac4aef11c5912b690f9c695a65ade63a3eeff3bfc3fdcb456b6dbf52b92e50410b4ad1a8817e461925c5f1caa6b96593690bfbbe01b4bc944c2df80501b618c775987448b07e84f4c17b1c789d994f6cc8c7dae98525ffb2c1efeca677d74dd6b7cb7d10a57c0d857f6f220a7666d3a7208bfc9e0d40bf5440e5114cd727ead928ab79ebeb2fba0fb1b1c", @ANYRES64=r0, @ANYBLOB="14d00400000000002400128009c6df1139ba062391da98eb09006f6e64000000001404028008001f00ec818444158d51654e530fa3ca04e23abba3e3c2c79b0604f2270e7be3344fb1224021516337e9f6a0cfa917372c5f3534f046bf369904c7ff2abdd8d2150b04b9adfca32c50f0f628dcff55eb3695377f"], 0x44}, 0x1, 0x0, 0x0, 0x4004012}, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
unshare(0x400) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c2}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'aegis128l-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async)
bind$can_j1939(r1, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000d009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
accept(r0, &(0x7f0000000100)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x80) (async)
accept4$unix(r7, 0x0, &(0x7f00000001c0), 0x80800) (async)

190.166182ms ago: executing program 1 (id=644):
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000fddbdf250c00000005002f0001", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff028500000000000000000000000001"], 0xfdef)

70.195976ms ago: executing program 1 (id=645):
r0 = socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x80002, 0x0)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000040)="10030600e0ff020004004788aa96a13bb100009c9f8e4285bc1100007fca1a002f74771a53bd121983e241a7ca4413de07cce177deba7506df16d1be307e757e0da47f626e1c5da5dcb933f1febce2a467440e75a9b2c3b0bdf3047ea413", 0x5e, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x8, 0x6, @local}, 0xfffffffffffffd6c)
socket$packet(0x11, 0x2, 0x300) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x2b1, 0x4) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) (async)
sendto$packet(r2, &(0x7f0000000040)="10030600e0ff020004004788aa96a13bb100009c9f8e4285bc1100007fca1a002f74771a53bd121983e241a7ca4413de07cce177deba7506df16d1be307e757e0da47f626e1c5da5dcb933f1febce2a467440e75a9b2c3b0bdf3047ea413", 0x5e, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x8, 0x6, @local}, 0xfffffffffffffd6c) (async)

0s ago: executing program 1 (id=646):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x18, 0x30, 0x400, 0x5, 0x400000, {}, [{0x4}]}, 0x1e}, 0x1, 0x0, 0x0, 0x8890}, 0x24008040)
r1 = socket$inet6(0xa, 0x4, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000000)=0x81fffffd, 0x4)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r3, 0x0, 0x6, &(0x7f00000000c0), 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='napi_poll\x00', r6, 0x0, 0x1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000040), 0x8)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000", 0x48}], 0x1)
socket$netlink(0x10, 0x3, 0x14)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="00000000258e506bdb5edd24783711ffb0cd5a41a7c1306f55936b76c1acc0faf8d489a185532c04726794c1081fd380288b70b4b24bc311330c6e4551a8b347215ed189da2e46b510170b62559a0518499fc40fd5321e8b1e26a2b421f52a5f53cd7f4ca8e56f12cfeda0fe25eed9bed0633b657eceb0aa9cc77c7cd0ffcb77be7ea218d6d1616b6cb6ff49b9c24881850e4d0f9c862d244e3d8fe3d489acffbc2cb5877b99e9ea3e8ff0d7c102e945031c7c", @ANYRES16, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464e57673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000180)=0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58392' (ED25519) to the list of known hosts.
syzkaller login: [   40.704797][ T5791] cgroup: Unknown subsys name 'net'
[   40.799911][ T5791] cgroup: Unknown subsys name 'cpuset'
[   40.802863][ T5791] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.121285][ T5791] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.001636][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.004244][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.006789][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.020889][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.023697][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.026834][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.030477][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.035701][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.038375][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.041154][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.043247][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.046001][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.048301][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.051412][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.054088][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.138130][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   45.208907][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.211433][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.214180][ T5835] bridge_slave_0: entered allmulticast mode
[   45.217886][ T5835] bridge_slave_0: entered promiscuous mode
[   45.223727][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.226674][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.238244][ T5835] bridge_slave_1: entered allmulticast mode
[   45.240729][ T5835] bridge_slave_1: entered promiscuous mode
[   45.256158][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   45.263946][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.276710][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.294219][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   45.299554][ T5835] team0: Port device team_slave_0 added
[   45.306498][ T5835] team0: Port device team_slave_1 added
[   45.337488][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.340168][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.350767][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.354996][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.358128][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.361880][ T5843] bridge_slave_0: entered allmulticast mode
[   45.365106][ T5843] bridge_slave_0: entered promiscuous mode
[   45.372159][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.375016][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.386149][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.394284][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.397222][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.400642][ T5843] bridge_slave_1: entered allmulticast mode
[   45.403831][ T5843] bridge_slave_1: entered promiscuous mode
[   45.425119][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.440028][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.450660][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.453027][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.455353][ T5839] bridge_slave_0: entered allmulticast mode
[   45.457677][ T5839] bridge_slave_0: entered promiscuous mode
[   45.466235][ T5835] hsr_slave_0: entered promiscuous mode
[   45.469155][ T5835] hsr_slave_1: entered promiscuous mode
[   45.472095][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.474796][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.477126][ T5839] bridge_slave_1: entered allmulticast mode
[   45.479998][ T5839] bridge_slave_1: entered promiscuous mode
[   45.486716][ T5843] team0: Port device team_slave_0 added
[   45.493194][ T5843] team0: Port device team_slave_1 added
[   45.506475][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.518269][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.532422][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.535057][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.544655][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.554686][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.557179][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.566367][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.582136][ T5839] team0: Port device team_slave_0 added
[   45.588934][ T5839] team0: Port device team_slave_1 added
[   45.602610][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.605324][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.614622][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.627608][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.631443][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.640525][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.656347][ T5843] hsr_slave_0: entered promiscuous mode
[   45.659437][ T5843] hsr_slave_1: entered promiscuous mode
[   45.662280][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   45.664673][ T5843] Cannot create hsr debugfs directory
[   45.685831][ T5839] hsr_slave_0: entered promiscuous mode
[   45.688015][ T5839] hsr_slave_1: entered promiscuous mode
[   45.690391][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   45.692394][ T5839] Cannot create hsr debugfs directory
[   45.728351][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.732611][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.746931][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.759433][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.814638][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.817309][ T5835] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.820334][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.823178][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.838187][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.843296][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.847154][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.854719][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.884737][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.890207][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.897574][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.903133][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.914371][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.917350][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.920600][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.923601][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.937480][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.964683][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   45.969520][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.972307][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.978236][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.982231][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.997619][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.000146][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.015692][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.018306][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.055685][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.060003][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.072491][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   46.081842][ T2422] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.084742][ T2422] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.087859][ T2422] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.090568][ T2422] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.109751][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.121833][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   46.136052][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.141477][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.144111][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.151378][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.153773][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.167749][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.172956][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.195254][ T5835] veth0_vlan: entered promiscuous mode
[   46.199635][ T5835] veth1_vlan: entered promiscuous mode
[   46.212219][ T5835] veth0_macvtap: entered promiscuous mode
[   46.215540][ T5835] veth1_macvtap: entered promiscuous mode
[   46.225240][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.231153][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.242023][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.245084][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.247970][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.256179][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.266127][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.276081][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.309859][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.313956][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.329406][ T5843] veth0_vlan: entered promiscuous mode
[   46.336981][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.337797][ T5839] veth0_vlan: entered promiscuous mode
[   46.341885][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.350773][ T5839] veth1_vlan: entered promiscuous mode
[   46.357559][ T5843] veth1_vlan: entered promiscuous mode
[   46.365656][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.382718][ T5839] veth0_macvtap: entered promiscuous mode
[   46.396685][ T5843] veth0_macvtap: entered promiscuous mode
[   46.406901][ T5839] veth1_macvtap: entered promiscuous mode
[   46.421244][ T5843] veth1_macvtap: entered promiscuous mode
[   46.431217][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.439321][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.449996][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.461311][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.465789][ T5883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.473341][ T5883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.487712][ T5883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.502606][ T5883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.506276][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.520618][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.530844][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.544024][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.592085][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[   46.599302][ T5915] netlink: 'syz.2.5': attribute type 10 has an invalid length.
[   46.604389][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[   46.607695][ T5915] bond0: (slave team0): Enslaving as an active interface with an up link
[   46.622857][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.625720][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.642122][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.644939][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.650995][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.656430][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.670053][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.674474][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.725875][ T5926] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   46.737306][ T5928] bridge_slave_0: left allmulticast mode
[   46.742983][ T5928] bridge_slave_0: left promiscuous mode
[   46.745498][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.752743][ T5928] bridge_slave_1: left allmulticast mode
[   46.755378][ T5928] bridge_slave_1: left promiscuous mode
[   46.757984][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.767810][ T5928] bond0: (slave bond_slave_0): Releasing backup interface
[   46.773153][ T5928] bond0: (slave bond_slave_1): Releasing backup interface
[   46.780913][ T5928] team0: Port device team_slave_0 removed
[   46.787263][ T5928] team0: Port device team_slave_1 removed
[   46.791222][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   46.794379][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_0
[   46.798350][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   46.802877][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_1
[   46.817480][ T5930] team0: Mode changed to "broadcast"
[   46.821225][ T5929] syzkaller1: entered promiscuous mode
[   46.823304][ T5929] syzkaller1: entered allmulticast mode
[   46.853875][ T5928] vlan0: entered promiscuous mode
[   46.858810][ T5928] team0: Port device vlan0 added
[   46.867220][ T5928] tipc: Started in network mode
[   46.870719][ T5928] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   46.873813][ T5928] tipc: Enabled bearer <eth:team0>, priority 0
[   47.011846][ T5936] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9'.
[   47.078737][ T5243] Bluetooth: hci2: command tx timeout
[   47.080925][ T5243] Bluetooth: hci0: command tx timeout
[   47.082962][ T5243] Bluetooth: hci1: command tx timeout
[   47.153251][ T5946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'.
[   47.185536][ T5948] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.988747][ T5919] tipc: Node number set to 11578026
[   48.299311][ T5956] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.329881][ T5958] vcan0: tx drop: invalid da for name 0x0000000000000003
[   48.372284][ T5963] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.558987][ T5970] tipc: Started in network mode
[   48.561108][ T5970] tipc: Node identity 8626b3f48728, cluster identity 4711
[   48.564247][ T5970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.567980][ T5969] syzkaller0: entered promiscuous mode
[   48.578239][ T5969] syzkaller0: entered allmulticast mode
[   48.584127][ T5969] tipc: Resetting bearer <eth:syzkaller0>
[   48.586777][ T5968] tipc: Resetting bearer <eth:syzkaller0>
[   48.591476][ T5968] tipc: Disabling bearer <eth:syzkaller0>
[   48.679151][ T5973] netlink: 5 bytes leftover after parsing attributes in process `syz.2.22'.
[   48.705835][ T5975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23'.
[   48.780463][ T5977] syzkaller1: entered promiscuous mode
[   48.782369][ T5977] syzkaller1: entered allmulticast mode
[   49.158654][ T5243] Bluetooth: hci1: command tx timeout
[   49.159198][ T5841] Bluetooth: hci0: command tx timeout
[   49.161142][ T5844] Bluetooth: hci2: command tx timeout
[   49.608865][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'.
[   49.618975][ T5979] bridge1: entered allmulticast mode
[   49.669085][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'.
[   49.679103][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'.
[   49.719139][ T5988] bond0: (slave bond_slave_0): Releasing backup interface
[   49.821953][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.852568][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1
[   49.862986][ T5963] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.875298][ T5997] netlink: 'syz.2.30': attribute type 12 has an invalid length.
[   49.973927][ T5963] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.085774][ T5963] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.165699][ T5854] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.171157][ T5854] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.181306][ T5854] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.184863][ T5854] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.204258][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'.
[   50.207902][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'.
[   50.217568][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'.
[   50.249222][ T6008] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.299443][ T6010] bond0: (slave team0): Releasing backup interface
[   50.306144][ T6010] bridge_slave_0: left allmulticast mode
[   50.308719][ T6010] bridge_slave_0: left promiscuous mode
[   50.311100][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.332894][ T6010] bridge_slave_1: left allmulticast mode
[   50.337374][ T6010] bridge_slave_1: left promiscuous mode
[   50.345291][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.371611][ T6010] bond0: (slave bond_slave_1): Releasing backup interface
[   50.394967][ T6010] team0: Port device team_slave_0 removed
[   50.412286][ T6010] team0: Port device team_slave_1 removed
[   50.415359][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.418985][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.493143][ T6013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   50.557957][ T6016] netlink: 'syz.2.35': attribute type 1 has an invalid length.
[   50.622589][ T6020] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   50.635033][ T6020] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.643411][ T6020] Zero length message leads to an empty skb
[   50.675702][ T5985] Set syz1 is full, maxelem 65536 reached
[   50.750558][ T6030] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   51.042217][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.046360][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.238955][ T5844] Bluetooth: hci2: command tx timeout
[   51.239337][ T5841] Bluetooth: hci0: command tx timeout
[   51.241886][ T5243] Bluetooth: hci1: command tx timeout
[   51.654370][ T6063] syzkaller1: entered promiscuous mode
[   51.656915][ T6063] syzkaller1: entered allmulticast mode
[   51.703899][ T6069] tunl0: entered promiscuous mode
[   51.705872][ T6069] tunl0: entered allmulticast mode
[   51.737374][ T6071] sctp: [Deprecated]: syz.2.50 (pid 6071) Use of int in max_burst socket option deprecated.
[   51.737374][ T6071] Use struct sctp_assoc_value instead
[   51.982491][   T33] audit: type=1800 audit(1756444299.910:2): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.55" name="memory.events" dev="tmpfs" ino=150 res=0 errno=0
[   52.042378][ T6096] __nla_validate_parse: 140 callbacks suppressed
[   52.042393][ T6096] netlink: 48 bytes leftover after parsing attributes in process `syz.2.57'.
[   52.182971][ T6104] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[   52.183054][ T6100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   52.242271][ T6111] netlink: 44 bytes leftover after parsing attributes in process `syz.2.60'.
[   52.264598][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'.
[   52.450895][ T6117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.62'.
[   52.454718][ T6118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.62'.
[   52.503670][ T6121] netlink: 'syz.0.63': attribute type 1 has an invalid length.
[   52.574467][ T6123] xt_policy: neither incoming nor outgoing policy selected
[   52.578059][ T6123] netlink: 'syz.0.64': attribute type 1 has an invalid length.
[   52.649008][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'.
[   52.652888][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'.
[   52.810918][ T6131] netlink: 'syz.0.67': attribute type 13 has an invalid length.
[   52.813938][ T6131] netlink: 'syz.0.67': attribute type 17 has an invalid length.
[   52.817595][ T6131] tunl0: left promiscuous mode
[   52.819711][ T6131] tunl0: left allmulticast mode
[   52.864846][ T6131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   53.111266][ T6144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.70'.
[   53.118364][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'.
[   53.129863][ T6144] hsr_slave_1 (unregistering): left promiscuous mode
[   53.134473][ T6146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'.
[   53.319125][ T5841] Bluetooth: hci0: command tx timeout
[   53.319272][ T5243] Bluetooth: hci1: command tx timeout
[   53.321396][ T5841] Bluetooth: hci2: command tx timeout
[   53.407640][ T6169] netlink: 'syz.2.77': attribute type 1 has an invalid length.
[   53.420527][ T6169] 8021q: adding VLAN 0 to HW filter on device bond2
[   53.552553][ T6173] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   53.627383][ T6177] geneve2: entered promiscuous mode
[   53.696842][ T6179] netlink: 'syz.2.79': attribute type 5 has an invalid length.
[   53.699895][ T6179] netlink: 'syz.2.79': attribute type 7 has an invalid length.
[   53.705827][ T6179] : entered promiscuous mode
[   53.932671][ T6184] Bluetooth: MGMT ver 1.23
[   54.202151][ T6187] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   54.262674][ T6191] syzkaller0: entered promiscuous mode
[   54.265131][ T6191] syzkaller0: entered allmulticast mode
[   54.367413][ T6197] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   54.382663][ T6197] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   54.485524][ T6211] netlink: 'syz.0.88': attribute type 3 has an invalid length.
[   54.499524][ T6213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.504662][ T6213] netlink: 'syz.1.89': attribute type 1 has an invalid length.
[   54.523900][ T6213] veth3: entered promiscuous mode
[   54.531327][ T6215] netlink: 'syz.0.90': attribute type 5 has an invalid length.
[   54.924412][ T6265] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.940262][ T6265] bond1: (slave veth3): Enslaving as an active interface with a down link
[   54.961265][ T6265] gretap1: entered promiscuous mode
[   54.965366][ T6265] bond1: (slave gretap1): making interface the new active one
[   54.982883][ T6265] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   54.996552][ T6265] macvlan2: entered promiscuous mode
[   55.001469][ T6265] macvlan2: entered allmulticast mode
[   55.003626][ T6265] bond1: entered promiscuous mode
[   55.005557][ T6265] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   55.008164][ T6265] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   55.014452][ T6265] bond1: left promiscuous mode
[   55.095067][ T6293] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   55.142432][ T6300] vxcan1: entered allmulticast mode
[   55.146836][ T6299] vxcan1: left allmulticast mode
[   55.152738][ T6293] IPv6: Can't replace route, no match found
[   55.235573][ T6299] raw_sendmsg: syz.0.113 forgot to set AF_INET. Fix it!
[   55.290617][ T6317] bridge0: port 3(erspan0) entered blocking state
[   55.293060][ T6317] bridge0: port 3(erspan0) entered disabled state
[   55.295418][ T6317] erspan0: entered allmulticast mode
[   55.297849][ T6317] erspan0: entered promiscuous mode
[   55.300362][ T6317] bridge0: port 3(erspan0) entered blocking state
[   55.302625][ T6317] bridge0: port 3(erspan0) entered forwarding state
[   55.364054][ T6325] IPv6: sit1: Disabled Multicast RS
[   55.366045][ T6325] sit1: entered allmulticast mode
[   55.869921][ T6393] syzkaller0: entered promiscuous mode
[   55.872572][ T6393] syzkaller0: entered allmulticast mode
[   55.876664][ T6393] tipc: Started in network mode
[   55.888603][ T6393] tipc: Node identity d6d91ed6b892, cluster identity 4711
[   55.891782][ T6393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.905846][ T6393] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   55.911348][ T6394] tipc: Resetting bearer <eth:syzkaller0>
[   55.914894][ T6392] tipc: Resetting bearer <eth:syzkaller0>
[   55.917856][ T6392] tipc: Disabling bearer <eth:syzkaller0>
[   55.979443][ T6407] bridge0: port 3(erspan0) entered disabled state
[   55.998164][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.000772][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.026224][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.033924][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.081308][ T6407] sit1: left allmulticast mode
[   56.088435][ T5867] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.107380][ T5867] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.116306][ T5867] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.120562][ T5867] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.221631][ T6431] team0: entered promiscuous mode
[   56.223792][ T6431] team_slave_0: entered promiscuous mode
[   56.226127][ T6431] team_slave_1: entered promiscuous mode
[   56.232997][ T6431] 8021q: adding VLAN 0 to HW filter on device team0
[   56.235446][ T6431] bridge0: port 4(team0) entered blocking state
[   56.237901][ T6431] bridge0: port 4(team0) entered disabled state
[   56.241615][ T6431] team0: entered allmulticast mode
[   56.243685][ T6431] team_slave_0: entered allmulticast mode
[   56.246020][ T6431] team_slave_1: entered allmulticast mode
[   56.252243][ T6436] netlink: 'syz.2.148': attribute type 11 has an invalid length.
[   56.514338][ T6470] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   56.623629][ T6489] nftables ruleset with unbound set
[   56.650656][ T6491] 8021q: adding VLAN 0 to HW filter on device bond3
[   56.655545][ T6491] bond3: (slave wlan0): Enslaving as an active interface with a down link
[   56.930077][ T6518] Bluetooth: MGMT ver 1.23
[   57.810755][ T6551] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[   58.036326][ T6575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.077804][ T6575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.152730][ T6575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.186823][ T6575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.248342][ T5854] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.257678][ T5854] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.260882][ T5854] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.266479][ T5854] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.344505][ T6588] validate_nla: 8 callbacks suppressed
[   58.344519][ T6588] netlink: 'syz.0.184': attribute type 12 has an invalid length.
[   58.350359][ T6588] __nla_validate_parse: 60 callbacks suppressed
[   58.350370][ T6588] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.184'.
[   58.405787][ T6590] netlink: 'syz.2.183': attribute type 1 has an invalid length.
[   58.426365][ T6590] bond0: (slave bridge0): making interface the new active one
[   58.432036][ T6590] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   58.437675][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'.
[   58.443912][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'.
[   58.446887][ T6590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.183'.
[   58.502038][   T12] bond0 (unregistering): (slave bridge0): Releasing active interface
[   58.567066][   T12] bond0 (unregistering): Released all slaves
[   58.575846][ T6616] netlink: 'syz.0.189': attribute type 11 has an invalid length.
[   58.630827][ T6626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.659494][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.191'.
[   58.686832][ T6636] netlink: 'syz.0.192': attribute type 5 has an invalid length.
[   58.693374][ T6636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'.
[   58.715716][ T6640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.193'.
[   59.140544][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'.
[   59.167083][ T6674] netlink: 11 bytes leftover after parsing attributes in process `syz.0.200'.
[   59.175338][ T6674] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[   59.216490][ T6678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.274842][ T6682] Illegal XDP return value 16128 on prog  (id 130) dev syz_tun, expect packet loss!
[   59.326205][ T6688] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[   59.330779][ T6688] netlink: 'syz.0.205': attribute type 2 has an invalid length.
[   59.334458][ T6690] netlink: 'syz.0.205': attribute type 1 has an invalid length.
[   59.337389][ T6690] netlink: 'syz.0.205': attribute type 2 has an invalid length.
[   59.381514][   T28] tipc: Resetting bearer <eth:team0>
[   59.503617][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.209'.
[   59.562504][ T6699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.570999][ T6699] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   59.652029][ T6712] netlink: 'syz.1.212': attribute type 1 has an invalid length.
[   59.664954][ T6712] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.680854][ T6715] syzkaller0: entered promiscuous mode
[   59.682749][ T6715] syzkaller0: entered allmulticast mode
[   59.729101][ T6717] bond1: (slave geneve2): making interface the new active one
[   59.732225][ T6717] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   59.735354][ T5883] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.739742][ T5883] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.743861][ T5883] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.747143][ T5883] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.988961][ T6738] block nbd0: server does not support multiple connections per device.
[   59.993860][ T6738] block nbd0: shutting down sockets
[   60.085859][ T6749] bridge2: port 1(veth3) entered blocking state
[   60.089887][ T6749] bridge2: port 1(veth3) entered disabled state
[   60.092783][ T6749] veth3: entered allmulticast mode
[   60.096042][ T6749] veth3: entered promiscuous mode
[   60.130985][ T6751] netlink: 'syz.0.223': attribute type 2 has an invalid length.
[   60.134212][ T6751] netlink: 'syz.0.223': attribute type 2 has an invalid length.
[   60.329061][ T5854] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   60.340357][ T6778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   60.485896][ T6793] netlink: zone id is out of range
[   60.488253][ T6793] netlink: zone id is out of range
[   60.499008][ T6793] netlink: zone id is out of range
[   60.501868][ T6793] netlink: zone id is out of range
[   60.511483][ T6793] netlink: zone id is out of range
[   60.513766][ T6793] netlink: zone id is out of range
[   60.522905][ T6798] bridge_slave_0: entered promiscuous mode
[   60.531169][ T6793] netlink: zone id is out of range
[   60.579945][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.583009][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.591341][ T6812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.707424][ T6833] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   60.985719][ T6858] wireguard1: entered promiscuous mode
[   60.987561][ T6858] wireguard1: entered allmulticast mode
[   61.003651][ T6861] syzkaller1: entered promiscuous mode
[   61.005698][ T6861] syzkaller1: entered allmulticast mode
[   61.271821][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.274503][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.282210][ T6883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.333869][ T6885] batman_adv: batadv0: Adding interface: gretap1
[   61.336215][ T6885] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.345087][ T6885] batman_adv: batadv0: Interface activated: gretap1
[   62.080404][ T5854] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   62.912573][ T6958] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   62.915261][ T6958] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   62.923014][ T5854] net_ratelimit: 51 callbacks suppressed
[   62.923027][ T5854] bond3: (slave wlan0): failed to get link speed/duplex
[   63.028668][ T5867] bond3: (slave wlan0): failed to get link speed/duplex
[   63.066796][ T6982] 8021q: VLANs not supported on ipvlan1
[   63.071585][ T6982] macsec1: entered promiscuous mode
[   63.073423][ T6982] macsec1: entered allmulticast mode
[   63.127017][ T6991] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   63.134323][ T6991] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   63.138177][ T6991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.158729][ T5867] bond3: (slave wlan0): failed to get link speed/duplex
[   63.270116][ T5883] bond3: (slave wlan0): failed to get link speed/duplex
[   63.320761][ T7014] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20003
[   63.326948][ T7014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.378791][ T5854] bond3: (slave wlan0): failed to get link speed/duplex
[   63.488658][ T5883] bond3: (slave wlan0): failed to get link speed/duplex
[   63.598602][ T5867] bond3: (slave wlan0): failed to get link speed/duplex
[   63.708861][ T5854] bond3: (slave wlan0): failed to get link speed/duplex
[   63.818765][ T5854] bond3: (slave wlan0): failed to get link speed/duplex
[   63.921940][ T7041] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   63.924458][ T7041] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   63.938701][ T5867] bond3: (slave wlan0): failed to get link speed/duplex
[   63.943844][ T7041] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   64.128626][ T2275] tipc: Node number set to 1850416854
[   65.360562][ T7050] tipc: Resetting bearer <eth:syzkaller0>
[   65.558668][   T28] wlan0: Trigger new scan to find an IBSS to join
[   66.480493][ T7061] __nla_validate_parse: 115 callbacks suppressed
[   66.480502][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'.
[   66.490354][ T5867] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.494563][ T5867] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.506784][ T5867] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.518000][ T5867] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.526044][ T7053] tap0: tun_chr_ioctl cmd 1074025677
[   66.527944][ T7053] tap0: linktype set to 805
[   66.530015][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'.
[   66.557716][ T7072] macsec1: entered allmulticast mode
[   66.560049][ T7072] macvlan1: entered allmulticast mode
[   66.562602][ T7072] macvlan1: left allmulticast mode
[   66.712695][ T7086] validate_nla: 37 callbacks suppressed
[   66.712713][ T7086] netlink: 'syz.2.319': attribute type 6 has an invalid length.
[   66.719229][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'.
[   66.756737][ T7089] batadv_slave_0: entered promiscuous mode
[   66.765600][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'.
[   66.834475][ T7091] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   66.869282][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.325'.
[   66.871306][ T7102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.320'.
[   66.876145][ T7105] tc_dump_action: action bad kind
[   66.938076][ T7120] netlink: 'syz.0.327': attribute type 1 has an invalid length.
[   66.965158][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'.
[   66.976214][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   67.066402][ T7147] netlink: 'syz.0.334': attribute type 1 has an invalid length.
[   67.097651][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'.
[   67.344188][ T7177] netlink: 'syz.0.337': attribute type 1 has an invalid length.
[   67.349134][ T7179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'.
[   67.352307][ T7177] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.364633][ T7179] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.367747][ T7179] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[   67.373401][ T7179] bond2: (slave vcan1): Error -95 calling set_mac_address
[   67.386031][ T7180] gretap2: entered promiscuous mode
[   67.390592][ T7180] bond2: (slave gretap2): making interface the new active one
[   67.393532][ T7180] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   67.545921][ T7185] netlink: 700 bytes leftover after parsing attributes in process `syz.2.339'.
[   67.754266][ T7198] IPVS: Scheduler module ip_vs_sip not found
[   67.793290][ T7206] erspan0: left allmulticast mode
[   67.795069][ T7206] erspan0: left promiscuous mode
[   67.796902][ T7206] bridge0: port 3(erspan0) entered disabled state
[   67.801104][ T7206] team0: left allmulticast mode
[   67.802827][ T7206] team_slave_0: left allmulticast mode
[   67.804728][ T7206] team_slave_1: left allmulticast mode
[   67.806719][ T7206] bridge0: port 4(team0) entered disabled state
[   67.811337][ T7206] bridge_slave_0: left allmulticast mode
[   67.813246][ T7206] bridge_slave_0: left promiscuous mode
[   67.815164][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.818702][ T7206] bridge_slave_1: left allmulticast mode
[   67.820769][ T7206] bridge_slave_1: left promiscuous mode
[   67.822774][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.826375][ T7206] bond0: (slave bond_slave_0): Releasing backup interface
[   67.829740][ T7206] bond0: (slave bond_slave_1): Releasing backup interface
[   67.832561][ T7206] team_slave_0: left promiscuous mode
[   67.835196][ T7206] team0: Port device team_slave_0 removed
[   67.837437][ T7206] team_slave_1: left promiscuous mode
[   67.840285][ T7206] team0: Port device team_slave_1 removed
[   67.842575][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.845215][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.848639][ T7206] bond0: (slave wlan1): Releasing backup interface
[   67.853318][ T7206] bond1: (slave geneve2): Releasing active interface
[   67.861027][ T7207] team0: Mode changed to "broadcast"
[   67.864096][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.877691][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.883719][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.892404][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.895602][ T7204] tipc: Resetting bearer <eth:syzkaller0>
[   67.913248][ T7206] vlan0: entered promiscuous mode
[   67.924131][ T7206] tipc: Enabled bearer <eth:team0>, priority 0
[   68.536983][ T7262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.545062][ T7262] netlink: 'syz.0.350': attribute type 4 has an invalid length.
[   68.554630][ T7262] syzkaller0: entered promiscuous mode
[   68.556513][ T7262] syzkaller0: entered allmulticast mode
[   68.563657][ T7262] tipc: Resetting bearer <eth:syzkaller0>
[   68.566674][ T7261] tipc: Resetting bearer <eth:syzkaller0>
[   68.570744][ T7261] tipc: Disabling bearer <eth:syzkaller0>
[   68.719237][ T7282] netlink: 'syz.0.356': attribute type 13 has an invalid length.
[   68.722767][ T7282] netlink: 'syz.0.356': attribute type 17 has an invalid length.
[   68.737402][ T7282] tipc: Resetting bearer <eth:team0>
[   68.740460][ T7282] tipc: Resetting bearer <eth:team0>
[   68.744221][ T7282] net_ratelimit: 12 callbacks suppressed
[   68.744228][ T7282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.814399][ T7282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.828380][ T7289] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   68.870035][ T7289] batadv_slave_0: entered promiscuous mode
[   69.103048][ T7293] netlink: 'syz.1.360': attribute type 27 has an invalid length.
[   69.127298][ T7296] netlink: 'syz.1.361': attribute type 5 has an invalid length.
[   69.389316][ T7318] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   69.393036][ T7318] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   69.399908][ T7318] rose1: entered promiscuous mode
[   69.446769][ T7323] 8021q: adding VLAN 0 to HW filter on device bond4
[   69.539100][ T7331] bond3: (slave wlan0): Releasing active interface
[   69.544060][ T7331] veth3: left allmulticast mode
[   69.546271][ T7331] veth3: left promiscuous mode
[   69.550981][ T7331] bridge2: port 1(veth3) entered disabled state
[   69.554967][ T7331] batman_adv: batadv0: Interface deactivated: gretap1
[   69.557962][ T7331] batman_adv: batadv0: Removing interface: gretap1
[   69.675345][ T7334] netlink: 'syz.1.371': attribute type 13 has an invalid length.
[   69.680329][ T7334] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   69.686325][ T7334] syz.1.371 (7334) used greatest stack depth: 19760 bytes left
[   69.778060][ T7357] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   69.781391][ T7357] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   69.827021][ T7361] sctp: [Deprecated]: syz.0.380 (pid 7361) Use of int in max_burst socket option.
[   69.827021][ T7361] Use struct sctp_assoc_value instead
[   69.964286][ T5867] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.968964][ T5867] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.977443][ T5867] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.987134][ T5867] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.099729][ T7398] bridge3: port 1(veth5) entered blocking state
[   70.102240][ T7398] bridge3: port 1(veth5) entered disabled state
[   70.104442][ T7398] veth5: entered allmulticast mode
[   70.106689][ T7398] veth5: entered promiscuous mode
[   70.157784][ T7398] vlan3: entered allmulticast mode
[   70.160257][ T7398] veth1: entered allmulticast mode
[   70.162498][ T7398] bridge3: port 2(vlan3) entered blocking state
[   70.164614][ T7398] bridge3: port 2(vlan3) entered disabled state
[   70.169115][ T7398] vlan3: entered promiscuous mode
[   70.178105][ T7398] veth1: entered promiscuous mode
[   70.294452][ T7417] 8021q: VLANs not supported on ipvlan1
[   70.493964][ T7443] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   70.777794][ T7470] Unsupported ieee802154 address type: 0
[   70.964608][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.967334][ T7472] team0: left promiscuous mode
[   70.971164][ T7472] tipc: Resetting bearer <eth:team0>
[   70.973953][ T7472] tipc: Resetting bearer <eth:team0>
[   70.981257][ T7472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.080789][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.466212][ T7484] gretap2: entered promiscuous mode
[   71.520920][ T7490] syzkaller0: entered promiscuous mode
[   71.522918][ T7490] syzkaller0: entered allmulticast mode
[   71.547279][ T7497] __nla_validate_parse: 41 callbacks suppressed
[   71.547288][ T7497] netlink: 104 bytes leftover after parsing attributes in process `syz.1.416'.
[   71.570556][ T7493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.579334][ T7493] syzkaller0: entered promiscuous mode
[   71.581587][ T7493] syzkaller0: entered allmulticast mode
[   71.637392][ T7503] tipc: Resetting bearer <eth:syzkaller0>
[   71.662944][ T7506] vxcan1: entered allmulticast mode
[   71.665038][ T7506] vxcan1: left allmulticast mode
[   71.810339][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'.
[   71.891156][ T7521] trusted_key: syz.0.426 sent an empty control message without MSG_MORE.
[   71.921638][ T7525] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.427'.
[   71.924908][ T7526] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.427'.
[   72.017326][ T7531] netlink: 360 bytes leftover after parsing attributes in process `syz.0.429'.
[   72.101186][ T7493] tipc: Resetting bearer <eth:syzkaller0>
[   72.104767][ T7493] tipc: Disabling bearer <eth:syzkaller0>
[   72.426692][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'.
[   72.435128][ T7550] validate_nla: 5 callbacks suppressed
[   72.435137][ T7550] netlink: 'syz.2.435': attribute type 1 has an invalid length.
[   72.443655][ T7550] gretap3: entered allmulticast mode
[   72.539063][ T7552] bridge4: the hash_elasticity option has been deprecated and is always 16
[   72.571755][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'.
[   72.579991][ T7554] bond0 (unregistering): Released all slaves
[   72.719057][ T7560] netlink: 180 bytes leftover after parsing attributes in process `syz.2.438'.
[   72.722284][ T7560] NCSI netlink: No device for ifindex 0
[   72.743264][ T7563] vlan0: entered promiscuous mode
[   72.806644][ T7575] openvswitch: netlink: Missing valid actions attribute.
[   72.810255][ T7575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.834254][ T7577] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.443'.
[   72.890856][ T7586] !: renamed from dummy0 (while UP)
[   72.978888][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'.
[   72.982516][ T7595] netlink: 'syz.2.448': attribute type 13 has an invalid length.
[   73.209484][ T7627] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.410466][ T7674] netlink: 'syz.0.460': attribute type 30 has an invalid length.
[   73.413395][ T7674] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   73.416973][ T7674] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   73.422746][ T7674] netlink: 'syz.0.460': attribute type 4 has an invalid length.
[   73.425681][ T7673] netlink: 'syz.0.460': attribute type 4 has an invalid length.
[   73.843597][ T7730] tipc: Resetting bearer <eth:team0>
[   73.865864][ T7730] team0: Port device vlan0 removed
[   73.872161][ T7730] bond1: (slave veth3): Releasing active interface
[   73.875025][ T7730] bond1: (slave veth3): the permanent HWaddr of slave - 6a:4c:f9:13:6c:2d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   73.882137][ T7730] bond1: (slave gretap1): Releasing active interface
[   73.886386][ T7730] bond2: (slave gretap2): Releasing active interface
[   74.657310][ T7747] IPVS: persistence engine module ip_vs_pe_ not found
[   74.660010][ T7747] netlink: 'syz.1.469': attribute type 1 has an invalid length.
[   74.667965][ T7747] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.675891][ T7747] bond2: (slave gretap1): making interface the new active one
[   74.680457][ T7747] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   74.709650][ T7754] netlink: 'syz.0.471': attribute type 10 has an invalid length.
[   74.712764][ T7754] bond0: (slave wlan1): Opening slave failed
[   74.716952][ T7756] netlink: 'syz.1.472': attribute type 30 has an invalid length.
[   74.755741][ T7766] netlink: 'syz.1.473': attribute type 11 has an invalid length.
[   74.845676][ T7779] netlink: 'syz.0.476': attribute type 2 has an invalid length.
[   74.948143][ T7784] tipc: Resetting bearer <eth:team0>
[   75.036789][ T7790] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   75.154414][ T7806] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.168337][ T7806] team0: Port device bond0 added
[   75.703645][ T7817] 8021q: adding VLAN 0 to HW filter on device bond3
[   75.714252][ T7817] 8021q: adding VLAN 0 to HW filter on device bond3
[   75.717586][ T7817] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   75.724855][ T7817] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   75.762528][ T7819] bond3: (slave bridge2): Enslaving as an active interface with a down link
[   75.959622][ T7833] vlan4: entered promiscuous mode
[   75.961580][ T7833] ip6gretap0: entered promiscuous mode
[   76.168416][ T7851] batadv0: entered promiscuous mode
[   76.173018][ T7851] batadv0: entered allmulticast mode
[   76.203374][ T7855] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.209643][ T5841] Bluetooth: hci2: command tx timeout
[   76.270366][ T7855] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.330097][ T7855] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.383253][ T7855] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.436449][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.444102][ T5883] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.451346][ T5883] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.459699][ T5883] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.615152][ T7901] gtp0: entered promiscuous mode
[   76.619230][ T7901] __nla_validate_parse: 20 callbacks suppressed
[   76.619240][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'.
[   76.652705][ T7903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'.
[   76.722236][ T7913] netlink: 76 bytes leftover after parsing attributes in process `syz.0.516'.
[   76.750360][ T7913] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.754772][ T7913] bond0: (slave bond3): Enslaving as an active interface with a down link
[   76.762961][ T7915] tipc: Resetting bearer <eth:team0>
[   76.766347][ T7915] bond2: (slave gretap1): Releasing active interface
[   76.773065][ T7915] bond3: (slave bridge2): Releasing active interface
[   76.798069][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'.
[   76.976145][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'.
[   77.116282][ T7936] netlink: 48 bytes leftover after parsing attributes in process `syz.0.521'.
[   77.216957][ T7940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.524'.
[   77.788213][ T7952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.528'.
[   77.832516][ T7958] vlan2: entered allmulticast mode
[   77.834472][ T7958] veth1: entered allmulticast mode
[   77.924883][ T7971] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   77.927226][ T7971] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   78.010636][ T7986] netlink: 830 bytes leftover after parsing attributes in process `syz.1.532'.
[   78.015870][ T7986] netlink: 'syz.1.532': attribute type 11 has an invalid length.
[   78.041135][ T7990] vlan2: entered promiscuous mode
[   78.042954][ T7990] bridge0: entered promiscuous mode
[   78.045386][ T7990] netlink: 19 bytes leftover after parsing attributes in process `syz.1.533'.
[   78.131863][ T8006] netlink: 'syz.1.539': attribute type 11 has an invalid length.
[   78.135737][ T8000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.138802][ T8000] IPv6: NLM_F_CREATE should be set when creating new route
[   78.177874][ T8014] syz_tun: entered allmulticast mode
[   78.187459][ T8014] dvmrp8: entered allmulticast mode
[   78.191963][ T8014] syz_tun: left allmulticast mode
[   78.199553][ T8014] dvmrp8: left allmulticast mode
[   78.281169][ T8026] netlink: 'syz.0.548': attribute type 11 has an invalid length.
[   78.281903][ T8025] validate_nla: 8 callbacks suppressed
[   78.281914][ T8025] netlink: 'syz.1.547': attribute type 101 has an invalid length.
[   78.290020][ T8025] netlink: 'syz.1.547': attribute type 7 has an invalid length.
[   78.409664][ T8042] openvswitch: netlink: Message has 68 unknown bytes.
[   78.415552][ T8044] netlink: 'syz.0.554': attribute type 1 has an invalid length.
[   78.427221][ T8044] 8021q: adding VLAN 0 to HW filter on device bond4
[   78.814757][ T8097] : renamed from wg2
[   78.822987][ T8096] delete_channel: no stack
[   78.852195][ T8088] netlink: 'syz.0.569': attribute type 1 has an invalid length.
[   79.233023][ T8116] netlink: 'syz.1.578': attribute type 5 has an invalid length.
[   79.236983][ T8116] tc_dump_action: action bad kind
[   79.327619][ T8119] netlink: 'syz.1.579': attribute type 11 has an invalid length.
[   79.564486][ T8126] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   79.703188][ T8138] netlink: 'syz.0.586': attribute type 11 has an invalid length.
[   79.891590][ T8159] netlink: 'syz.2.593': attribute type 11 has an invalid length.
[   79.923904][ T8163] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   80.502056][ T8171] tc_dump_action: action bad kind
[   80.673893][ T8180] netlink: 'syz.1.601': attribute type 11 has an invalid length.
[   80.815805][ T8204] netlink: 'syz.2.608': attribute type 11 has an invalid length.
[   80.965919][ T8242] netlink: zone id is out of range
[   80.968145][ T8242] netlink: zone id is out of range
[   80.970162][ T8242] netlink: zone id is out of range
[   80.972343][ T8242] netlink: zone id is out of range
[   80.974296][ T8242] netlink: zone id is out of range
[   80.976211][ T8242] netlink: zone id is out of range
[   80.976369][ T8239] tipc: Resetting bearer <eth:team0>
[   80.977915][ T8242] netlink: zone id is out of range
[   80.977920][ T8242] netlink: zone id is out of range
[   80.985512][ T8239] batadv_slave_0: left promiscuous mode
[   80.987913][ T8239] vlan0: left promiscuous mode
[   80.990474][ T8239] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   80.992948][ T8239] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   80.995431][ T8239] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   81.006825][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.010296][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.024497][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.027439][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.215442][ T8268] netlink: 'syz.0.626': attribute type 11 has an invalid length.
[   81.295875][ T8272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.302652][ T8271] tipc: Resetting bearer <eth:syzkaller0>
[   81.319800][   T47] cfg80211: failed to load regulatory.db
[   81.367177][ T8271] tipc: Disabling bearer <eth:syzkaller0>
[   81.385398][ T8280] netlink: 'syz.2.630': attribute type 1 has an invalid length.
[   81.388062][ T8280] netlink: 'syz.2.630': attribute type 2 has an invalid length.
[   81.456956][ T8289] netlink: 'syz.2.633': attribute type 11 has an invalid length.
[   81.501373][ T8294] policy can only be matched on NF_INET_PRE_ROUTING
[   81.501386][ T8294] unable to load match
[   81.618704][ T8297] nbd: socks must be embedded in a SOCK_ITEM attr
[   81.621145][ T8297] block nbd0: shutting down sockets
[   81.940149][ T8309] __nla_validate_parse: 28 callbacks suppressed
[   81.940159][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'.
[   81.945687][ T8309] netlink: 'syz.1.640': attribute type 1 has an invalid length.
[   81.948331][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'.
[   81.969003][ T8312] netlink: 830 bytes leftover after parsing attributes in process `syz.1.641'.
[   82.007079][ T8316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.643'.
[   82.016420][ T8317] netlink: 36 bytes leftover after parsing attributes in process `syz.1.643'.
SYZFAIL: SIGBUS
pc-offset:0xffffffffffec1af0 pc:0x7f96a038d660 addr:(nil) code=128 (errno 11: Resource temporarily unavailable)
Connection to localhost closed by remote host.
[   82.785116][   T13] vlan3: left promiscuous mode
[   82.787268][   T13] veth1: left promiscuous mode
[   82.789793][   T13] bridge3: port 2(vlan3) entered disabled state
[   82.793511][   T13] veth5: left allmulticast mode
[   82.795613][   T13] veth5: left promiscuous mode
[   82.797828][   T13] bridge3: port 1(veth5) entered disabled state
[   83.083127][   T13] bond1 (unregistering): Released all slaves
[   83.088998][   T13] bond2 (unregistering): Released all slaves
[   83.094358][   T13] bond3 (unregistering): Released all slaves
[   83.100397][   T13] bond4 (unregistering): Released all slaves
[   83.104291][   T13] bond0 (unregistering): Released all slaves
[   83.161659][   T13] : left promiscuous mode
[   83.197242][   T13] tipc: Left network mode
[   83.308359][   T13] hsr_slave_0: left promiscuous mode
[   83.950616][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.994418][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.033038][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.080615][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.461214][   T13] bond0 (unregistering): Released all slaves
[   84.467410][   T13] bond1 (unregistering): Released all slaves
[   84.473776][   T13] bond2 (unregistering): Released all slaves
[   84.480532][   T13] bond3 (unregistering): Released all slaves
[   84.766136][   T13] team0: Port device bond0 removed
[   84.771191][   T13] bond0 (unregistering): (slave bond3): Releasing backup interface
[   84.774994][   T13] bond0 (unregistering): Released all slaves
[   84.782009][   T13] bond1 (unregistering): Released all slaves
[   84.787338][   T13] bond2 (unregistering): Released all slaves
[   84.794101][   T13] bond3 (unregistering): Released all slaves
[   84.802207][   T13] bond4 (unregistering): Released all slaves
[   84.881505][   T13] tipc: Disabling bearer <eth:syzkaller0>
[   84.883791][   T13] tipc: Disabling bearer <eth:team0>
[   84.885765][   T13] tipc: Left network mode
[   84.887681][   T13] tipc: Disabling bearer <eth:team0>
[   84.894098][   T13] tipc: Left network mode
[   85.293390][   T13] hsr_slave_0: left promiscuous mode
[   85.295783][   T13] hsr_slave_1: left promiscuous mode
[   85.302442][   T13] hsr_slave_0: left promiscuous mode
[   85.305005][   T13] hsr_slave_1: left promiscuous mode
[   85.309707][   T13] veth1_macvtap: left promiscuous mode
[   85.312055][   T13] veth0_macvtap: left promiscuous mode
[   85.314382][   T13] veth1_vlan: left promiscuous mode

VM DIAGNOSIS:
05:12:10  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffd400089ab01 RBX=ffffffffffffffff RCX=ffffffff821579d2 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffea00044d5980 RBP=dffffc0000000000 RSP=ffffc9000307f508
R8 =ffffea00044d5987 R9 =1ffffd400089ab30 R10=dffffc0000000000 R11=fffff9400089ab30
R12=0000000000000001 R13=ffffc9000307f768 R14=fffff9400089ab31 R15=1ffffd400089ab30
RIP=ffffffff8222ff0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555781d4500 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f96a10e7d60 CR3=000000003d2dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000002 RBX=ffffffff822e5d7a RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e139fa0 RBP=ffffc90002f7f650 RSP=ffffc90002f7f2f0
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff940009b3bf9
R12=dffffc0000000000 R13=1ffffd40009b3bfb R14=000000000013677f R15=ffff88805fffa8c0
RIP=ffffffff819d5a69 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffa4adefd8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
