last executing test programs:

11.460075824s ago: executing program 0 (id=529):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3930, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xfff1}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x3900, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x1284, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x127c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR="3fbe9744d7", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="cf12cc86c8a59d1e24", @TCF_META_TYPE_VAR="7fce7a03aaee", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="2ecbc1f88c814e", @TCF_META_TYPE_VAR="b558"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x5}, {0xfffc, 0x21, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x2}, {0x40, 0xf, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x1, 0x2}, {0x1, 0x98, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x13, 0x4, 0x1}, {0xe, 0xff, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="08bd696551", @TCF_META_TYPE_VAR="7ddbb7", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_IPT={0xc8, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0x6c, 0x5, "cb4dcc63043416386765c7b553387b2e36d5032deb2aac9456a6a1fc6332f518ad174b0af8ac515cd9a2ac7f2030350d274461a31839f995f07af281c233e93532d806df17665ac06011feb55ef1d3274fe85f77fb8d54a5d0a5f773afdc8ca73aacc67e775a5336"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x25, 0x5, "b54c85b9d1770597c1eba56bd62512eeb3dbace067ff596fb63c8101434b0960ac"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0x30, 0x3, 0x0, 0x0, {{0x8001, 0x0, 0x81}, "8410c5f65cb70bf14590e23b6bfa1076536b41fcac6db948f790e36d35ff4eca5070892c"}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x5094}, "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"}}, @TCF_EM_IPT={0x5c, 0x1, 0x0, 0x0, {{0xa7, 0x9, 0xfff8}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "7a9f"}, @TCA_EM_IPT_MATCH_DATA={0x21, 0x5, "a43ed8651ece4a1cc43476f3fa436a58ef3e601d5fdc80a6409af82372"}]}}, @TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="54ded7", @TCF_META_TYPE_VAR="3691", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_VAR="05fa38d148ef1e6c247d", @TCF_META_TYPE_VAR="ff4b0c84c1353a5c9f52", @TCF_META_TYPE_VAR="66cebd", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="01720877"]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xc6dd, 0x1, 0xf131}, {0x8001, 0x3a7, 0x5, 0xf322d44dd769609, 0xa, 0x1, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x553}, {{0x0, 0x0, 0x1}, {0x2}}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x88, 0x2, 0x1}, {0x4, 0x8, 0x2, "87213c56a9c607e2"}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_DIVISOR={0x8}, @TCA_FLOW_POLICE={0x144c, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7, 0x4, 0x9d7, 0xa, 0x6b, 0x5, 0x1, 0x1, 0x8, 0x57fa, 0x2680000, 0x0, 0x1, 0x7, 0x90000000, 0x5, 0x7ffffffe, 0x6, 0x1c0, 0x6, 0x8c4c, 0xfffff1c1, 0xd, 0x36, 0x4, 0x400, 0xef1, 0xf, 0x0, 0xfffffff8, 0xa49, 0xffffff01, 0x5, 0x7ff, 0x5, 0xbad, 0x9, 0xfffffff8, 0x10001, 0x8f9b, 0x3, 0x6, 0x0, 0x0, 0x8, 0x0, 0xdad, 0x4, 0xf, 0x354, 0x7, 0x1, 0x3ff, 0x5, 0xe9, 0x7, 0x8, 0x0, 0x1, 0x6, 0x0, 0x7, 0x6, 0x400, 0x5, 0xd6, 0x3, 0x7, 0xfbbb, 0x9, 0x9, 0x1, 0xaf9, 0x5, 0x9, 0x0, 0x3a1, 0xbaf, 0x1, 0x2, 0x8, 0x4, 0x1, 0x1, 0x9307, 0x9, 0x6, 0x18, 0xfffffffa, 0x8, 0x9b, 0x8001, 0x3ff, 0x2, 0x1, 0x9, 0xb7df, 0x2, 0x5, 0x6, 0x1205fb02, 0x3, 0xdd, 0x4000002, 0x3, 0x9, 0x8, 0x7, 0x7ff, 0xfffffd4e, 0xb7ec, 0x9, 0x80000001, 0x65, 0x55, 0x1, 0xfffffff9, 0xd7be, 0x7fff, 0x80000000, 0x5, 0x0, 0x3, 0xffffffff, 0x1, 0x0, 0x9, 0x5, 0x8, 0xfff, 0x9, 0x3ff, 0x7a, 0x2, 0x8cfa, 0x480, 0x5, 0x1, 0x3, 0x7, 0x4, 0xfffffe01, 0x9e89, 0xffffffff, 0xf, 0x7, 0x3, 0x4, 0x4, 0x9, 0x80, 0xb, 0x6, 0x5, 0x7a, 0x1, 0x5b0, 0x1, 0xf, 0x7, 0x1, 0xffffff6c, 0xc2, 0x9, 0x39, 0x3, 0xbc2, 0x1, 0x6, 0x3ff, 0x4fb, 0x101, 0x0, 0x9, 0x4, 0x7, 0x5, 0x1ff, 0x3, 0x1, 0xfffff099, 0x0, 0x4, 0x0, 0x8, 0x6558, 0x3, 0x44fb6170, 0x7, 0x2, 0x3, 0x8, 0xffffffff, 0x5, 0x4, 0x100, 0x7ff, 0x0, 0x1000, 0x9, 0x0, 0x400, 0x0, 0x3, 0x3, 0x5000000, 0xa87, 0x4, 0x1, 0x5, 0x46c4, 0x3, 0x9, 0x3, 0x1, 0xffff0a5a, 0x95, 0x100, 0x9, 0x0, 0x6, 0x101, 0x9, 0x2d00, 0x5, 0x5, 0x9, 0x594, 0x9, 0x0, 0x400, 0x9, 0x5, 0x9, 0x4, 0xc, 0xfffffffd, 0x62b5, 0x7e, 0x4, 0x5, 0x7fffffff, 0x4, 0x6, 0x7fff, 0x137, 0x7, 0x7fffffff, 0x9, 0x1d8, 0x8, 0x2, 0x81, 0x0, 0x7ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xb, 0x312, 0x100, 0xfffffff8, 0x80, 0x1, 0x9, 0x656ad375, 0x5, 0x81, 0x0, 0xc72, 0x2, 0xdcb, 0x8, 0x5, 0x5, 0x1, 0x1, 0xfffffe27, 0xfffff749, 0x5, 0x3, 0x7, 0xffffffff, 0x0, 0x800, 0x4, 0x9, 0x1, 0x1, 0x6, 0x8, 0x81, 0x200, 0x3774, 0x7fffffff, 0x2, 0x8, 0x8, 0x4f687077, 0x1, 0x2, 0x40, 0x1, 0x80, 0x8b, 0x4, 0x5, 0x7, 0x8, 0x3, 0xff, 0x6, 0x4, 0xb7, 0xf7, 0x7fff, 0x52d, 0x0, 0xffff, 0x7, 0x1, 0xffffffff, 0x7, 0x800, 0x1, 0x10000, 0xffffffff, 0x4, 0x6, 0x3, 0x3, 0x7, 0x7f, 0x4, 0x4, 0x4, 0x80000001, 0x2, 0x4, 0x7, 0x80, 0x3ff, 0x4, 0x2d5, 0x145a, 0x2, 0x0, 0xf5c, 0x12, 0x2, 0x3e66, 0x7, 0x3ff, 0x5, 0x7, 0x6, 0xfffffffa, 0xc1, 0x8, 0x5, 0x7, 0xa9, 0x101, 0x110, 0x0, 0xffff, 0x2, 0x81, 0x7, 0x4, 0xc, 0x3, 0x6, 0xc31, 0x2, 0x7, 0x7f2, 0x8, 0x1, 0x4, 0x9, 0x2, 0x8, 0xfff, 0x2, 0x4, 0x9, 0x1e, 0x800, 0x2, 0x100, 0x9, 0x7, 0x2, 0x4, 0x8, 0x10000, 0x1000, 0x7, 0x80000000, 0xffffffff, 0x9, 0x9, 0x6, 0x3, 0xfffffff7, 0x24, 0xb6, 0xff, 0x1, 0x6, 0x4, 0x81, 0x7, 0x9, 0x7, 0x0, 0x100, 0xffff, 0x5, 0x7f, 0x4, 0x0, 0xe0000000, 0x40, 0x0, 0xded9, 0x9, 0x8fbb, 0xff, 0x0, 0x7, 0x9, 0x4, 0x1, 0xffff2f9c, 0xff, 0x1, 0x4e, 0x6, 0x70000, 0x7, 0x7, 0x7f, 0x7, 0x3, 0x775, 0x0, 0x5, 0x3, 0x5, 0x4, 0x4, 0x8, 0x6, 0x9, 0xcf7f, 0xfffffffd, 0x357, 0x7, 0x8, 0x3, 0x8, 0x4, 0x4, 0x1, 0x836, 0xa00000, 0x7ff, 0x2, 0x9, 0x3, 0x800, 0x400, 0x10, 0x5, 0x3, 0x2, 0x5, 0x9, 0x74, 0x2, 0xaa, 0xfffffff8, 0xfffffffa, 0x800, 0x1ff, 0x8, 0x9, 0x5, 0xfff, 0x5, 0x2, 0x1, 0xfffffff4, 0x0, 0x8, 0x7, 0x0, 0x3ff, 0xa, 0xb7c, 0x1000, 0x322, 0x3bdd, 0x5, 0x6, 0xff, 0x28, 0x401, 0x5, 0x800, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x1, 0x3, 0x1ff, 0x6, 0x9e02, 0xa8c0, 0x573, 0x8001, 0x80, 0x4, 0x1, 0x1, 0x81, 0xfffffffb, 0x4, 0xe, 0x8, 0x5, 0xfffff1b0, 0xd, 0x3, 0x3, 0x8, 0x2, 0x5, 0x10000, 0x3, 0x2a, 0x0, 0x3, 0x7, 0xff, 0x8, 0x935, 0x5, 0x4, 0xda72, 0x800, 0x7, 0xfffffff8, 0x0, 0x5, 0xf423, 0x5, 0x6, 0x7, 0x8, 0x1, 0x9, 0x1000000, 0x9, 0xec65, 0x100, 0x1, 0x1, 0x7, 0xf6, 0xfffffffa, 0xc, 0xffffffff, 0x8001, 0x200, 0x1, 0x3, 0x0, 0x200, 0x3ff, 0x1ff, 0xb0, 0x9, 0x5, 0x52, 0x8, 0xe6, 0x400, 0xfffffffa, 0x8000, 0x8, 0x8, 0x4, 0xfffffffd, 0x9, 0x4, 0x1, 0x3, 0x0, 0x4, 0x6, 0x8, 0x7, 0x7, 0xfb06, 0x3, 0xf0, 0xb, 0x9359, 0x40, 0x4, 0x2, 0x7, 0x3, 0x8, 0x7, 0x3, 0x81, 0x6, 0x1, 0x4, 0xffffffff, 0x8, 0x6, 0x6, 0x0, 0x81, 0x8c4, 0xb, 0x1000, 0x5, 0xfffffffe, 0x10, 0x4, 0x3, 0x6, 0xa, 0x7, 0x2, 0xfffffff8, 0xd, 0x9, 0x4, 0x2, 0x7b0a, 0x4, 0x0, 0x5, 0x91e, 0x3, 0x7, 0x2, 0xb, 0x4, 0x6, 0xbbb8, 0x1, 0x80000001, 0x0, 0x80000000, 0x2, 0x7fffffff, 0x8, 0x10, 0xca92, 0x2fe9, 0x10, 0xfff, 0xa, 0x0, 0x2, 0x7, 0xac8f, 0x8, 0x6, 0x6, 0x7fffffff, 0xe, 0x8000, 0x5, 0x4, 0x7fffffff, 0x2, 0xfffff10b, 0x583d, 0x0, 0xcc49da, 0x4, 0x0, 0x8, 0x4cb, 0xfffffff7, 0xffffffff, 0x6, 0x1, 0xd52e, 0x4c000000, 0xe, 0x0, 0x800, 0x9, 0x580, 0x5, 0x2, 0x5, 0x1000, 0x5, 0x3, 0x3, 0xec, 0x4, 0x3, 0xfff, 0x1, 0xdf, 0x9, 0x7, 0x9, 0x0, 0x1, 0x2, 0x4, 0x62, 0x7, 0x6, 0x6ca, 0xc475, 0x4, 0x7ff, 0x7ff, 0xf, 0x82, 0x6, 0x6, 0xf, 0x1, 0xff, 0x5, 0x6, 0x80000001, 0x9, 0x5, 0x0, 0x0, 0x401, 0x6, 0x1, 0x1, 0x3, 0x7, 0xfffffffe, 0x2, 0x2, 0x4, 0xffffffff, 0x4, 0xdd6, 0xf3, 0x5, 0xffffffff, 0x10001, 0x465c, 0x2, 0x8, 0x2, 0x4, 0x1f, 0x400]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x1ba, 0x7, 0x4, 0x8, 0xe, 0x1, 0x2, 0x200, 0x1, 0xffff, 0x4, 0x4, 0x0, 0xac4, 0x5516, 0x80000000, 0x1, 0x6, 0xb22, 0x5, 0x7, 0x7, 0x1ff, 0x0, 0x100, 0x6, 0x9, 0x8, 0x9, 0x5c, 0x5, 0x9, 0x3ff, 0x2, 0x0, 0xfffff623, 0x7, 0x5, 0x10001, 0xffffffff, 0x6b28, 0x8, 0x1, 0x3ff, 0x9, 0x8000, 0x6, 0x2, 0x2, 0x8, 0x6, 0x2e3, 0x1, 0x7, 0x2, 0x7, 0x1, 0x9, 0x7, 0x9, 0x225b, 0x0, 0x7fff, 0x1, 0x3, 0x87, 0x678, 0x3, 0x8, 0x3, 0x7, 0xff800000, 0x5, 0x8, 0x7, 0xee, 0x0, 0x2, 0x2, 0x10000, 0xae91, 0x3, 0x10, 0xf, 0xfffffff4, 0xfffffbff, 0x1, 0x10, 0x6, 0x4059, 0xfffffffe, 0xd, 0x9, 0x3, 0x9, 0x6, 0x2, 0xcf6, 0x1ff, 0xfffffffc, 0x0, 0x3, 0x2, 0x4f04, 0x3, 0x6, 0x9, 0x9, 0x719, 0x8, 0x0, 0x8000000, 0x3, 0xf, 0x2, 0x5, 0x1, 0x1, 0x3ff, 0xa0000000, 0x5, 0x7, 0xffff8000, 0x6, 0x6, 0x4, 0xffff5257, 0x4, 0x0, 0x7, 0x6, 0x993, 0x7ff, 0x400, 0xda3, 0x2e0a, 0x3, 0xc, 0x3, 0x1, 0x401, 0x4, 0x0, 0x0, 0x2, 0x1, 0x7, 0x10000, 0x8, 0x0, 0x4, 0x2, 0x5d, 0x6, 0x80000000, 0x5, 0xc, 0x1, 0x2, 0x5da7, 0x4, 0x6, 0x7, 0x856, 0x52, 0x80, 0x3, 0x4, 0x4, 0x7, 0x9, 0x1, 0x860c, 0x2, 0xc0, 0x10, 0x1000, 0xc, 0x4, 0x400, 0x84, 0x5, 0x800, 0x1, 0xfffff397, 0x0, 0x6, 0x5df, 0xa, 0x7, 0x9, 0xffff, 0x2, 0x8a4, 0x2, 0xffffff7f, 0x1, 0x5, 0x7, 0x2, 0x7, 0x7, 0xfffff6c2, 0xf, 0x10000, 0x5, 0x5d52, 0xc, 0x6, 0x8, 0x80000000, 0x2a, 0x8, 0xfae, 0x7, 0x1, 0x3, 0x0, 0x7, 0x347, 0xfffffffb, 0x8, 0x3, 0x5, 0x1, 0x8001, 0x80000001, 0xfffff638, 0x7, 0x5, 0x8, 0xffffffff, 0x400, 0x3, 0x4, 0x7f, 0xffffffff, 0x3, 0x2, 0xf, 0x8, 0x3, 0x0, 0x1, 0x9, 0x401, 0x1, 0x2, 0xffffffff, 0xffff0001, 0x8, 0x10, 0x2b, 0x7, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x50000, 0xfffffff9, 0x7, 0x400, 0x3, 0x151e, 0x9, 0x5, 0x7, 0x7, 0x1, 0x7, 0x52, 0x26, 0x0, 0x5, 0x3, 0xffffffff, 0x6, 0x7fff, 0x2, 0x7, 0xb9, 0x1, 0x3, 0x69, 0x4a, 0x3, 0xb0000000, 0x6, 0x4, 0x5, 0x0, 0xfffff801, 0x9, 0x8, 0x7, 0x4, 0x5, 0xe, 0x6, 0x2, 0x2, 0xfffffffd, 0x7, 0x4, 0x9, 0x7, 0x0, 0x1, 0x9e2, 0x9, 0x0, 0x6, 0x1, 0xff, 0x6, 0x4, 0x7, 0xfffffff9, 0x7, 0xffffffff, 0xd, 0x9, 0x7, 0x40000, 0x3, 0x3, 0x5, 0x4, 0x7d3, 0x3, 0x4, 0xffff, 0x7f, 0xc6db, 0xffff7cb3, 0x4, 0x2, 0xfffffffb, 0x5, 0x1, 0x0, 0x5, 0x446c, 0x8, 0x5, 0x0, 0x0, 0x2e, 0x6, 0x2, 0x6, 0x80000000, 0x1, 0x27, 0x0, 0x99, 0x7, 0x9, 0x9, 0x2, 0x9, 0x1, 0x10, 0x40, 0x68, 0x4, 0x80000001, 0x1, 0x7f, 0x6, 0x8, 0xd, 0x6, 0x7, 0x3, 0x6, 0x4, 0x4, 0x10000, 0xf, 0x8, 0x6, 0x0, 0x4d9, 0x80000000, 0x7, 0x9, 0x3, 0x2, 0x21, 0x6, 0x4, 0x3, 0x9, 0x101, 0x7fffffff, 0xffffffff, 0x1, 0x2000, 0x0, 0x6, 0x3, 0x4e7, 0x1, 0x0, 0x2, 0x6, 0x8000, 0xffff4f9c, 0x1, 0xd, 0x7, 0xfffffff9, 0x2, 0x1, 0x8, 0x0, 0x9, 0xfffffffb, 0xffffffff, 0x378, 0x3, 0x800, 0x80000001, 0x3, 0xb62, 0xf, 0x7, 0x9, 0x0, 0x0, 0x9, 0x40, 0x3a23, 0x5, 0xfffffff7, 0x3, 0x3, 0x5, 0x7f, 0xcc4, 0x0, 0x4, 0x3ff, 0x6, 0x66ce0, 0x8, 0x0, 0x99a2, 0x0, 0x6, 0x3ff, 0x1000, 0x200, 0xfffffffa, 0xa5a, 0x2, 0xa2, 0xe000, 0x10, 0x0, 0x0, 0xd0000000, 0x81, 0x9, 0x79d9a12e, 0xfffff800, 0x9, 0xc, 0x8, 0x9, 0x7fffffff, 0x200, 0x7, 0x5, 0x3, 0x6, 0x8, 0xa, 0x6, 0x6, 0x7, 0x5a, 0x5, 0x2, 0x2, 0x0, 0x8, 0x7fff, 0x5, 0x0, 0x9, 0x5, 0x1, 0x3, 0x6c7fd818, 0x5, 0x8, 0x4, 0x3ff, 0x7, 0x7ff, 0x401, 0x7, 0x4, 0xbadb, 0xff, 0x101, 0x1baa545e, 0xffff, 0xbc9, 0x9, 0x7]}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xfffffff9}, @TCA_FLOW_ACT={0x120c, 0x9, 0x0, 0x1, [@m_police={0x1208, 0x1e, 0x0, 0x0, {{0xb}, {0x1118, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x6, 0x3, 0xa, 0x8, 0x7, 0xed, 0x9, 0x4, 0xfffff876, 0x0, 0x6, 0x81, 0xc, 0x6, 0xb6, 0x5, 0x7, 0x2, 0xaf, 0xf, 0x1, 0xff, 0x7fffffff, 0x46, 0x7, 0x1, 0xd2e, 0x0, 0x2, 0x7, 0xd, 0x0, 0x6, 0x3ff, 0x0, 0x5, 0x13, 0x5000, 0x7, 0x9, 0xba3e, 0x5, 0xb5, 0x3, 0x6, 0xd, 0x7, 0x9, 0x2, 0xffff, 0x0, 0x1cf7bc26, 0x6, 0x5, 0x6291a600, 0x10000, 0x10, 0xdae, 0x9, 0xffff, 0x0, 0x4, 0xee8, 0x9, 0xffffffbd, 0x9, 0x8, 0xff, 0x74, 0x5, 0x92a, 0x3, 0xe, 0x1ff, 0xfffffff7, 0xdf, 0x4, 0xffff, 0x3, 0xb7, 0x8, 0x400, 0x6, 0x6, 0x7f, 0x0, 0xff, 0x401, 0x1, 0x400, 0x81, 0x7, 0x2, 0x5, 0x1, 0xf, 0xa, 0x7, 0x4, 0xe5, 0x9, 0x1, 0x5, 0x29ce4000, 0x8, 0x1, 0x4, 0x9, 0x7, 0x7, 0x401, 0x1ff, 0x4, 0x1, 0x3857, 0x4, 0x32f, 0xffffff00, 0x10000, 0x17800000, 0xffffffff, 0x7fffffff, 0x8, 0x9, 0x3ff, 0x7, 0x7c4, 0x4, 0xe, 0x5, 0xc, 0xb7ec, 0x3, 0x2, 0x3, 0x7, 0x5a, 0x7, 0x8000, 0x81, 0x3, 0x9, 0x1, 0x80, 0x2, 0x5, 0xb53, 0x9, 0x6, 0x5, 0x0, 0x8, 0x7fffffff, 0x6, 0x6, 0x80000000, 0x6, 0x6, 0x48000, 0x7, 0xff, 0xfb, 0x1ff, 0xfffffffd, 0x8, 0x1000, 0x8, 0x5, 0x8, 0x0, 0x3, 0xa3e3, 0x6, 0x0, 0x6, 0xfff, 0x9, 0x8, 0x5, 0x3, 0x5, 0x1000, 0xffffffff, 0x0, 0x2, 0x1, 0x2, 0x6, 0x8, 0xf, 0x701, 0xfffffff9, 0x5, 0x71c, 0x1, 0x5, 0x4, 0x5, 0xd2, 0x6, 0xfff, 0x2, 0x1, 0x7f, 0x6, 0x7, 0x1, 0x3, 0xffffffff, 0xfffffffb, 0x2, 0x3, 0x5, 0x100, 0x63c1, 0x0, 0x8, 0x0, 0x7fff, 0x7b, 0xff, 0x0, 0x81, 0x101, 0x0, 0x4, 0x7fff, 0x1, 0x4, 0x3, 0x0, 0x2, 0x800, 0x80, 0x5, 0x0, 0x4, 0x2, 0x6, 0x0, 0x6, 0x2, 0x5e0d, 0x4, 0x80, 0x9, 0x58, 0xa, 0x7, 0x0, 0xc, 0x3, 0x4, 0x7fff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x8, 0xffff0dcf, 0x2, 0x6000, 0x800000, 0x80, 0x2, 0x829b, 0x5, 0xffff, 0x10001, 0x0, 0x8, 0x7, 0x1000, 0x0, 0x3, 0x8, 0x8c, 0x4, 0x5, 0x5, 0x800, 0xd, 0x4, 0x6, 0x1, 0x7f, 0x8, 0x9, 0x9, 0xfffffff9, 0x4, 0xc9, 0x0, 0x29f9c558, 0xd, 0xbc5, 0xc, 0x0, 0x6, 0x200, 0x0, 0x0, 0x2, 0xa, 0xff, 0xb3db, 0xbc82, 0x800, 0x8, 0x3, 0x9, 0x5426, 0xffff, 0xa42d, 0xf, 0xe, 0x5, 0xea0, 0x7, 0x16c, 0x6, 0x0, 0x3, 0x6, 0xfffffff3, 0xfffff801, 0x6, 0x81, 0xfffffe00, 0x9, 0x800, 0xba, 0x2, 0x8, 0x4, 0x400, 0xf, 0x3, 0x9, 0x3, 0x0, 0x8, 0x4d8d, 0x3ff, 0x3, 0xcd8, 0x10000, 0x3, 0x500000, 0x8000, 0xfffffffd, 0x2235, 0xf5, 0x2, 0x5, 0x8, 0xfffffe00, 0xe, 0x4, 0x5, 0x2, 0x5, 0x7, 0x8, 0x4, 0x5, 0xffffffff, 0x10001, 0xfffffff9, 0x0, 0xe, 0xee4, 0xc02a, 0xfffffffd, 0x2, 0x7fffffff, 0xa1f, 0x800, 0xae, 0x749, 0xfffffff9, 0x3, 0x3, 0x2d2, 0x5, 0x4f, 0xb69, 0xe, 0x4, 0x8, 0x4, 0x2, 0x9, 0x2, 0x3, 0x2, 0x0, 0x6, 0x6, 0x5, 0xc6, 0xf, 0xfff, 0xfffffff8, 0x0, 0x8, 0x7, 0x8, 0x0, 0x3, 0x7, 0x4, 0x1, 0x519, 0x7, 0x200, 0x4, 0x4, 0x1, 0x7aa, 0x100, 0x1ff, 0x7, 0xba1e, 0x6, 0x0, 0x20000000, 0x6, 0x400, 0x9, 0x2, 0xe, 0x0, 0x800, 0x1ff, 0xa5f, 0x22e, 0x5, 0x2f65, 0x0, 0x2, 0x2, 0x5b, 0x40, 0xfff, 0x401, 0x0, 0xd, 0x7, 0xffffffff, 0x10000, 0x1000, 0x8b, 0x0, 0xeb38, 0x6f81, 0x52, 0x8, 0x3, 0x4, 0xffffff01, 0xfffffffa, 0x5, 0x2, 0x2, 0x6, 0xfffffffb, 0x0, 0xc, 0xffff104d, 0x7f, 0x401, 0x0, 0x9, 0x0, 0x800, 0x2, 0x0, 0x7, 0xc, 0x0, 0x0, 0x3, 0x5, 0x5, 0x0, 0x400, 0x8, 0xfffffff0, 0x10001, 0x1, 0xa153, 0x9, 0x0, 0x8, 0x4, 0x9, 0x80000000, 0x0, 0x1, 0x4, 0x5, 0x1, 0x9, 0x1, 0x5, 0x69e6, 0xf895, 0x0, 0x4, 0x8, 0x1962, 0x8c4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0xb, 0x140d, 0x0, 0x8, 0x95, 0x5, 0x6, 0x3b, 0x3000000, 0x5, 0x2, 0x6, 0x4, 0x9, 0x0, 0x10000, 0x8000, 0x1, 0x2, 0x6, 0x9, 0x5, 0x80, 0x1, 0x7, 0x7, 0x4, 0x342, 0x37a, 0x0, 0x80, 0x8001, 0x4, 0x1, 0xf751, 0x80000001, 0x0, 0xc, 0x7, 0xffffffff, 0x1, 0x1, 0x7fffffff, 0x80000001, 0x9, 0x1ff, 0x3, 0x8, 0x400, 0x1, 0x5, 0x9, 0x8, 0x1eab, 0x6, 0xe80, 0x5, 0x1ff, 0x81, 0x81, 0x2, 0x1, 0x2, 0x8001, 0x6, 0x101, 0xff, 0x2, 0x8, 0x200, 0x3, 0x6, 0x9, 0x0, 0x1, 0x1, 0xffff, 0xffffffc0, 0x3, 0x9, 0x9, 0xfffff001, 0x7ff, 0x3, 0x100, 0x6, 0xffffffff, 0x1, 0xfff, 0xe, 0xffffffff, 0x4, 0x0, 0xfd, 0x2, 0x8, 0x9, 0x72, 0x8, 0x2, 0x1a, 0x1, 0x3, 0x6ea7, 0x7fff, 0x9, 0x7, 0x0, 0xf525, 0x3, 0x6, 0x6, 0x7ff, 0x8000, 0xa55, 0x1, 0x5, 0xe58, 0x9, 0x0, 0x7, 0x4, 0x100, 0x2, 0x4, 0xe, 0x7, 0x9, 0xff, 0x0, 0x10001, 0x5, 0xe, 0x9, 0x8b, 0x6, 0x0, 0xffff, 0x0, 0x8000, 0x1, 0xe, 0xfffff800, 0xd, 0x7, 0x7, 0x8, 0xc, 0x0, 0x9, 0x5, 0x8, 0x7, 0xf, 0x6, 0xbab1, 0xb3, 0x0, 0x5, 0x1ff, 0x1ff, 0x9, 0x1ff, 0x800, 0x800, 0x4, 0x9, 0x9, 0x0, 0x4, 0xf, 0x7, 0x2, 0x400, 0x9, 0x3ff, 0x9, 0x0, 0x6, 0x7f, 0x0, 0x32, 0x7, 0x3, 0x3, 0x74c, 0x8000, 0x3, 0x10, 0x0, 0x7, 0x4, 0x2, 0xfff, 0x4, 0x6, 0x7, 0x10, 0x2, 0x8000, 0x7, 0x4, 0x7, 0x9, 0x0, 0x8, 0x7, 0xc, 0x4, 0x7, 0x4, 0x5, 0xfffffffa, 0x4, 0x4e25a437, 0x7, 0x9, 0x8040, 0xd, 0x800, 0x6, 0xfffffff0, 0x100, 0x6, 0xffffffff, 0x7fff, 0x9, 0x10001, 0x1, 0x2, 0x800, 0x0, 0x5, 0x5, 0xa, 0x4, 0x6, 0x5, 0x7, 0x5, 0x1, 0x3, 0xb2a, 0xfffffffa, 0x6, 0x10, 0x1, 0x2, 0x3, 0xbdab, 0x4, 0x9, 0xe1, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0xffff, 0x4, 0x2, 0x7, 0x6, 0x2000, 0x9, 0x8, 0x6, 0x4, 0x100, 0x33200654, 0x7, 0x9, 0x2, 0x7fffffff, 0x56d2ad94, 0xffff0001, 0x4, 0x5, 0x1, 0xd599, 0x400, 0x7, 0x4, 0xfffffff8, 0xb4, 0x80, 0x0, 0x7, 0xffffff01, 0xf, 0x6, 0x3, 0x4bca481, 0x4, 0x6, 0x790f, 0x9, 0x0, 0x5, 0x30, 0x7fffffff, 0x1, 0x0, 0x19, 0xfffffff7, 0x7, 0x7, 0x101, 0x8000, 0x3, 0xfff, 0xd, 0xa, 0x8, 0x5, 0xfff, 0x3, 0xd, 0x4d, 0xa68, 0xcc3, 0xff, 0x1, 0x5, 0x8, 0x441, 0x539, 0x80000000, 0xffffe5d2, 0x9, 0x4, 0x1, 0x1, 0x10001, 0x1, 0xfffffffa, 0x5, 0x9ed, 0x6, 0xfffff800, 0x24000000, 0x7, 0x3, 0x5, 0x1000, 0x7, 0x2d, 0x101, 0x80000000, 0x8, 0xb, 0x400, 0x1, 0x7, 0x1, 0x5, 0x0, 0x7, 0x4, 0x9, 0x90, 0xce0, 0x315945b0, 0x1ff, 0x8, 0x5, 0x4, 0xffffffc5, 0x0, 0x1, 0x10, 0x3, 0x168, 0x5, 0x7f, 0x53cb, 0x7, 0x5, 0x9, 0xea8, 0xfffffffd, 0xd, 0xb, 0x82, 0x6, 0x4, 0x0, 0x6, 0x6ee, 0x4, 0x0, 0x2267, 0x3, 0x5, 0x1ff, 0x400, 0x14b, 0x1, 0x50b4, 0x1, 0x0, 0x7, 0x5, 0x4, 0x7f, 0x7, 0x2, 0x2, 0x7ff, 0x38, 0x3, 0x4, 0x8, 0xcc, 0x2, 0xdf2, 0xfffffff8, 0x7, 0x3, 0x1, 0x9, 0x2, 0x0, 0x90, 0x5, 0x3, 0x2, 0x80, 0x0, 0x9, 0x9, 0x7, 0xfe, 0x83f, 0x9, 0xcc9, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd, 0x0, 0x7e57, 0x0, 0x80000001, 0x3, 0xfffffff7, 0x3ff, 0x3b7, 0x5, 0xa21a, 0x4, 0x4, 0x3, 0xffffffff, 0xfff, 0x9, 0x2, 0xffff, 0x5, 0x5, 0x8, 0x7, 0xb, 0xfffffff8, 0x5, 0x5, 0x1, 0x6, 0x6, 0xffff, 0x1, 0x10000, 0x7, 0x10001, 0x3, 0x1, 0x4, 0x6, 0x1, 0x6f2, 0x100, 0x1, 0x400000, 0xf86c, 0x101, 0x3, 0x5, 0x1, 0x40, 0x10000, 0x6, 0x0, 0x4, 0xff, 0xeaaf, 0xffffffff, 0x0, 0x0, 0x2, 0x3, 0x14000, 0xfffff55a, 0x8, 0x0, 0xe, 0xff, 0x7, 0x5, 0xd6, 0x8, 0xc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x87, 0x4, 0x81, {0xc, 0x0, 0x42e, 0x10, 0x400, 0x1}, {0x7f, 0x2, 0x8, 0x982, 0x7, 0xe0d}, 0x5, 0x50, 0x1}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x6, 0x7, 0x6, {0x6, 0x0, 0x3, 0x7, 0xfffd, 0x4}, {0x1, 0x2, 0x1000, 0x3, 0xfffb, 0x6}, 0x80000001, 0x6, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x253c, 0x9, 0xa5d, {0x80, 0x2, 0x1, 0x2, 0x100, 0x1ff}, {0x1, 0x1, 0x5, 0x3c, 0x2, 0xfff}, 0x9, 0x9, 0x7}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0xc6, 0x6, "67256671836eaaf003d5c1710f53326ebf2e0dc36eb7f5a0a0f60467abe816fd5480b620d0c59dbb66b1871b8fbca690008352de5053f61635fcfedb6b2bf808eb94cf0c5f24ef3e12c303be4fe2dbbfab62c95a39053589cca0313a8e5de5fb5aed77762053d81a878b9a7813d3713b01245fd0667e2f7ee9b30856365ceaf17a3d44c895bc6f8ccb7f20bbfdb48a83c8928b51c6731fcea1781d6765612586702ac000916fc50b5854392fe8b74a30a39a4aced7c858483c68e402f89a397dce8e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x3930}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

11.3461258s ago: executing program 0 (id=532):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2114, 0xe)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000340)={0x5, 0x8, 0xc, 0x43, 0x8, 0x5, 0x7, 0xfe1}, 0x20)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
write(r1, 0x0, 0x0)
r9 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000304000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r10], 0x40}}, 0x0)
ioctl$PPPIOCGFLAGS1(r10, 0x8004745a, &(0x7f0000000040))

11.169518152s ago: executing program 0 (id=536):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0x64}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x4}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0xffffffffffffff8f}}, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x18)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
close(r8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="0200000002"], 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="0200000006"], 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="ddd8057dc3000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005b979e01d2038d84"], 0x48}}, 0x0)
sendmsg$can_bcm(r4, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

11.162775953s ago: executing program 0 (id=538):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001cc0))
r2 = socket(0x11, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1)
pipe(&(0x7f0000000480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000340), 0x11000)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)
connect$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10)
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0)
recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8851}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000035d13257328d9e4a5ec27ffaf0d019a250c20b89d1ac70028a171d99a04cd0f6de47c1a4550e8b7dbb2359b71c3883375c692dff243760819e321b0882168750062116927fed407e921db5d0694cc10c959f83f3f727c5aa7230f03840d3a7bb69b97a95eee1e6643218634423aacce5b45f7ec2309f0d33", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000003000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r10, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa}, 0x94)

10.68787746s ago: executing program 0 (id=549):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x76, &(0x7f00000005c0)=ANY=[@ANYBLOB="243a94dfb5bc793f50909674e0403a288f684c57384714f10227ef5caa86731cf7311a545edd263ea5233aa1a7d4cd38c1814b330129622e8a7fc07780508a2124c808894d362e68f66845f28df46813a2dbd14fad2bc1a7c53c395192fec9ed6f5f2388b313f54a2a2705000000e9ebdd0e179b0d1a200bf62027d42521730369312f5f2ff73ac6d35b39de772db2", @ANYRES8=r0], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10) (async)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f00000000c0), 0x10)
writev(r3, &(0x7f00000002c0), 0x1)
sendmmsg(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="c2e3d51de325eccb2c719a07d3c33abc068948e9561e0ad6fe8f10aecda7a80fa7c716073bafca442fa6f3029695c30104afec02ffb5148a2f686a741fba", 0x3e}, {&(0x7f0000000700)="174886c844b12fd56ecda852682cda6394c392093b21704d52f73a849fb1b81aae14d56872f76be222c0affc5941d4f5aa49d16e6906f1bef539849d337302691fa39191ff25a425ab5397049ef5d1665b", 0x51}, {&(0x7f0000000240)="7e7d9cc5024fbe4a7421007d", 0xc}], 0x3}}], 0x1, 0x4000010)
accept4$vsock_stream(r2, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) (async)
accept4$vsock_stream(r2, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000)
bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x80, 0x1c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x3c, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x9, 0x6, "13885b9622"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000000000010000000000000000000000000a6c000000060a0b040000000000000000020000044000048014000180090001006d6574610000000004000280280001800b0001006f626a7265660000180002800900020073797a310000000008000140000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) (async)
bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
socket$vsock_stream(0x28, 0x1, 0x0)

4.315126477s ago: executing program 0 (id=549):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x76, &(0x7f00000005c0)=ANY=[@ANYBLOB="243a94dfb5bc793f50909674e0403a288f684c57384714f10227ef5caa86731cf7311a545edd263ea5233aa1a7d4cd38c1814b330129622e8a7fc07780508a2124c808894d362e68f66845f28df46813a2dbd14fad2bc1a7c53c395192fec9ed6f5f2388b313f54a2a2705000000e9ebdd0e179b0d1a200bf62027d42521730369312f5f2ff73ac6d35b39de772db2", @ANYRES8=r0], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10) (async)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f00000000c0), 0x10)
writev(r3, &(0x7f00000002c0), 0x1)
sendmmsg(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="c2e3d51de325eccb2c719a07d3c33abc068948e9561e0ad6fe8f10aecda7a80fa7c716073bafca442fa6f3029695c30104afec02ffb5148a2f686a741fba", 0x3e}, {&(0x7f0000000700)="174886c844b12fd56ecda852682cda6394c392093b21704d52f73a849fb1b81aae14d56872f76be222c0affc5941d4f5aa49d16e6906f1bef539849d337302691fa39191ff25a425ab5397049ef5d1665b", 0x51}, {&(0x7f0000000240)="7e7d9cc5024fbe4a7421007d", 0xc}], 0x3}}], 0x1, 0x4000010)
accept4$vsock_stream(r2, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) (async)
accept4$vsock_stream(r2, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000)
bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x80, 0x1c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x3c, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x9, 0x6, "13885b9622"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000000000010000000000000000000000000a6c000000060a0b040000000000000000020000044000048014000180090001006d6574610000000004000280280001800b0001006f626a7265660000180002800900020073797a310000000008000140000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) (async)
bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
socket$vsock_stream(0x28, 0x1, 0x0)

3.440016353s ago: executing program 2 (id=594):
r0 = socket$inet6(0xa, 0x4, 0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x35b}]}, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r2, 0x0, 0x6, &(0x7f00000000c0), 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000", 0x48}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40, 0x0, 0x8}, {0x6}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
sendfile(r9, r9, &(0x7f00000001c0)=0x1000000000e17, 0x400000000004)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

2.53016638s ago: executing program 1 (id=603):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f0000000e00)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000b9}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r2, &(0x7f0000000480), 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0xb4, 0x10, 0x800, 0x0, 0x25dfdbfd, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0xe}, {0xe, 0xd}}, [@TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0xa, 0x400, 0x1, 0x4, 0x2, 0x3}}, {0xa, 0x2, [0x7, 0x0, 0x1ff]}}, {{0x1c, 0x1, {0x30, 0xff, 0x5, 0x0, 0x1, 0x0, 0x312e, 0x7}}, {0x12, 0x2, [0x6, 0x9, 0x2, 0x1000, 0x2, 0xfff8, 0x1]}}, {{0x1c, 0x1, {0xc, 0x4a, 0x1000, 0x25, 0x4, 0x5e, 0x401, 0x6}}, {0x10, 0x2, [0x2, 0x6, 0x0, 0x6, 0x7, 0x3b]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x406}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) (async)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="24330a90380b793d8ed71b1a835e000000", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="24330a90380b793d8ed71b1a835e000000", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28)

1.850337789s ago: executing program 1 (id=604):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket(0x26, 0x5, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0xffffffffffffff3b, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xc, @mcast2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0xfffffffc}, 0x8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x4, &(0x7f0000000f40)=ANY=[@ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000f00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c081}, 0x14)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1)
sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000001040)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000001080)=ANY=[@ANYBLOB="bb4cf60000", @ANYRES16=r9, @ANYBLOB="00082abd7000ffdbdf255e0000000800a00002000000050019010a000000050018010f00000008009f0000000000080026006c09000005001801240000000500180129000000"], 0x4c}, 0x1, 0x0, 0x0, 0x404c000}, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
recvmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1, &(0x7f0000000440)=""/38, 0x26}, 0xc}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000800)=""/221, 0xdd}], 0x2, &(0x7f0000000580)=""/75, 0x4b}, 0x200}, {{&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/149, 0x95}, {0xfffffffffffffffd}, {&(0x7f0000000a40)=""/163, 0xa3}, {&(0x7f0000000b00)=""/112, 0x70}, {&(0x7f0000000b80)=""/78, 0x4e}], 0x5, &(0x7f0000000c80)=""/192, 0xc0}, 0x2}], 0x3, 0x40000121, 0x0)
write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="6d1b4769820c62a36d00"], 0xa)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x98, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040)
sendto$netrom(r3, 0x0, 0x0, 0x40, &(0x7f0000000e00)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, '\x00', "a5fdeb69a751e94df53ad7e900de4c164e071a0000000000007b443803cf578f", '\x00', "066580001e00"}, 0x38)
close(0x3)

1.499517204s ago: executing program 1 (id=605):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x20, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="620ac4ff00000000711047000000000000000000b7ed17647efc7779a78ec7c65072330000"], &(0x7f0000000480)='GPL\x00'}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
socket$netlink(0x10, 0x3, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d0021"], 0x1c}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "1c1f15f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}]}}]}, 0x154}}, 0x0)
recvfrom(r3, &(0x7f0000000880)=""/4096, 0x1000, 0x20000141, &(0x7f0000000400)=@vsock={0x28, 0x0, 0x2711}, 0x80)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x80, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x2205, 0x8000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x10001}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x80}, 0x1, 0xba01}, 0x0)

1.327823833s ago: executing program 2 (id=606):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095921f81d21865bf17dcd51756fdcb5faf6069af92e485a877265479c60840fda307265df22e42dd81b99599304b3f5188f66ff2bd5272fb608ab1630e399b208f762c6669855f940dd722a6a6316eb61357aded22d4564a062218965d3a401ba6347789a85074bfb1c37221fb92272626e4b3e851d9ca271b69c12f4c86ec5d1886d059de4232d0f9e6c5a19d132044bb340000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7473}, 0x94)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0], 0x18}, 0x1, 0x0, 0x0, 0x24040804}, 0x24048010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8a"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2001, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r5 = epoll_create(0x62)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000240)={0x20000008}) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a00010000000500040002"], 0x88}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c41640e64e5a1cec4951b000800000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012b2ae0001006970366572737061313d0000180002800400120006001800090000000500160002000000"], 0x4c}}, 0x0) (async)
socket(0x10, 0x2, 0x0) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r10, 0x11c, 0x2, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
shutdown(r2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r11)
sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r12, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1.15028287s ago: executing program 2 (id=607):
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc79, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pi6   \x00'}, 0x20)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.numa_stat\x00', 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
close(0x3)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$inet6(0xa, 0xa, 0xb0cd)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3])

1.149727326s ago: executing program 1 (id=608):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {0x0, 0x2}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x5c}}, 0x24040084)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x2}, @union={0x10, 0x1, 0x0, 0x5, 0x1, 0x2, [{0xb, 0x2, 0x8}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x30, 0x0]}}, &(0x7f0000000900)=""/78, 0x43, 0x4e, 0x0, 0x3a0cd7e9, 0x10000}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x5, 0x200, 0x40, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r5}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r5, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
splice(r6, 0x0, r7, 0x0, 0x10500, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0xffffffffffffffff, 0x400, 0x8}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x1, 0x10, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x9}]}, &(0x7f0000000600)='syzkaller\x00', 0x323, 0xdc, &(0x7f00000007c0)=""/220, 0x40f00, 0x21, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000980)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x4, 0x4, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000c80)=[r5, r0, r8, r9, 0xffffffffffffffff, r10, r11], &(0x7f0000000cc0)=[{0x1, 0x2, 0xb, 0x9}, {0x2, 0x3, 0xe, 0x2}, {0x5, 0x5, 0x7, 0xa}, {0x0, 0x4, 0x4, 0x1}, {0x3, 0x2, 0x5, 0x9}, {0x5, 0x2, 0xc, 0x7}, {0x3, 0x4, 0xd}], 0x10, 0xf}, 0x94)
sendmmsg$inet6(r2, &(0x7f0000001500)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000008c0), 0x4)
r12 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$sock_buf(r12, 0x1, 0x1c, &(0x7f0000000ec0)=""/59, &(0x7f0000000f00)=0x3b)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r13 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8)
socket$key(0xf, 0x3, 0x2)

448.963793ms ago: executing program 2 (id=609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x2, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x80d5) (async)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000180)) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'team0\x00', @local}) (async)
write(r1, &(0x7f0000000200)="c8403d9c9b08cdc9735b71f2674b56003a36f948ef502f7eec5a07edde61d9938f07db511be95ea0cf1156d6c16ce7829f8ea36f82159e812da3be033a6b25a44e332561cf1981e6bf8d04a2f9e1b2468676226afdd0c3c7bbab633e4c0b07663696ad421797f2c9844cbb395f3d3ef4a8740f1f8e7047e72db2ae69d4e427b7d15d95bbf03e955f2777daf5efbc5b2b6f51eb2ff54f11a1ba2631144c9a81c4ad55608a7b48d99a405f969b0194b7f99cf0a4142fb6a4e74f8ee1991df5d2adfb5213ee143f97e727f8a43fc8fd7bd76ced18e4378c61f9de415c21", 0xdc)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$x25(r5, &(0x7f0000000300)={0x9, @remote}, &(0x7f0000000340)=0x12, 0x800) (async)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8)
r7 = openat$cgroup_ro(r6, &(0x7f00000003c0)='memory.stat\x00', 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000400)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x0, 0x1, 0x0, r6}, @ldst={0x3, 0x3, 0x0, 0x0, 0x6, 0xffffffffffffffe0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @exit, @map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x6a}]}, &(0x7f0000000500)='syzkaller\x00', 0x3, 0xe0, &(0x7f0000000540)=""/224, 0x100, 0x4, '\x00', r2, 0x0, r6, 0x8, &(0x7f0000000640)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x6, 0x6, 0x101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000051}, 0x4012) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000880)={'caif0\x00', 0x200}) (async)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f00000008c0)=@gcm_256={{0x303}, "233696605e58317d", "00528c2e3db38e88fae4b463b7025e5de679e5398070acc3994bbe39d0650c83", "ea4ee4cc", "4716cc83181a32b6"}, 0x38)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1e, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff9}, [@generic={0xf, 0xa, 0x2, 0x0, 0xfffffffc}, @jmp={0x5, 0x1, 0x3, 0x5, 0x9, 0x18, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x7, 0xb, 0x1, 0x40, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ldst={0x2, 0x0, 0x1, 0xb, 0x7, 0x4, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x0, 0x7, 0x4, 0xc, 0x10}]}, &(0x7f0000000a00)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x4, '\x00', r2, 0x25, r6, 0x8, &(0x7f0000000a40)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0xe, 0x7ff, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000ac0)=[r6, r6, r7, r6], &(0x7f0000000b00)=[{0x1, 0x1, 0x10, 0x4}, {0x5, 0x4, 0xb, 0x7}, {0x3, 0x4, 0xb}, {0x5, 0x4, 0x10, 0x1}], 0x10, 0xe6}, 0x94)
ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000c00)=r9) (async)
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000c40)=0x5, 0x4) (async)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000c80))
sendmsg$nl_route_sched(r4, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)=@delqdisc={0x108, 0x25, 0x800, 0x70bd25, 0xf2cd, {0x0, 0x0, 0x0, r2, {0x97a481c4e17ee98, 0x5}, {0xffe0, 0x5}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x800}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_RATE={0x6, 0x5, {0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x1, 0x101, 0xf, 0x0, 0x2, 0x2, 0x3}}, {0xa, 0x2, [0x56, 0x7, 0xfff7]}}, {{0x1c, 0x1, {0x10, 0x0, 0x80, 0x7, 0x0, 0x7, 0x2, 0x3}}, {0xa, 0x2, [0x5, 0x7ff, 0x80]}}, {{0x1c, 0x1, {0xc5, 0xe7, 0x1, 0x0, 0x1, 0x401, 0x4, 0x5}}, {0xe, 0x2, [0xfff, 0x0, 0x4, 0xa5, 0x1ff]}}, {{0x1c, 0x1, {0x4, 0x71, 0x40, 0x1ff, 0x0, 0x4, 0x3, 0x8}}, {0x14, 0x2, [0x2, 0x5, 0x4, 0x0, 0x5, 0x9, 0x7, 0x4]}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000ec0)={@multicast1, @dev}, &(0x7f0000000f00)=0xc) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'ip6erspan0\x00'}) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)

330.162404ms ago: executing program 2 (id=610):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x5, &(0x7f00000001c0)) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) (async)
sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000800)={0x5, 0x3, 0x4, 0xb, 0x3, 0x3ff, 0xc1, 0x7}, 0x20) (async)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200001008f34880003c0000000000069078ac141400ac1e00018307d27f00000197040000440400000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600000009078000022020000"], 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r5], 0x40}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)

227.346753ms ago: executing program 1 (id=611):
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={0x0}}, 0x20000040)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000000))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000640)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="38a5c0a0c25ece1a703d45d83f6241ec"]}]}, 0x38}], 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private0, @in=@rand_addr=0x64010100, 0x4e23, 0x6fd, 0x4e20, 0x1, 0xa, 0x80, 0x80, 0x8, r5, r7}, {0xf, 0x5, 0x80000001, 0x2, 0xe, 0x30, 0xd, 0x6}, {0x1400000000000000, 0xb, 0x8, 0x9a37}, 0x7, 0x6e6bbf, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x2b}, 0x2, @in=@broadcast, 0x0, 0x3, 0x0, 0x40, 0x0, 0x40, 0x5}}, 0xe8)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x1)

57.670388ms ago: executing program 2 (id=612):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1) (async)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x6, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x36) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x6, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28)

0s ago: executing program 1 (id=613):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6040480)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r4=>0x0})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r6=>0x0})
bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000005d40)={0x20, r10, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8004)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:39572' (ED25519) to the list of known hosts.
syzkaller login: [   48.050363][ T5782] cgroup: Unknown subsys name 'net'
[   48.182315][ T5782] cgroup: Unknown subsys name 'cpuset'
[   48.187157][ T5782] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.793091][ T5782] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.098148][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.101088][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.103840][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.106649][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.109387][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.136555][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.139420][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.142043][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.145055][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.147872][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.210893][ T5201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.214227][ T5201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.218143][ T5201] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.222548][ T5201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.225192][ T5201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.351843][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   54.370606][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   54.493146][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.495612][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.499422][ T5808] bridge_slave_0: entered allmulticast mode
[   54.502590][ T5808] bridge_slave_0: entered promiscuous mode
[   54.524154][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.527171][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.529942][ T5808] bridge_slave_1: entered allmulticast mode
[   54.533196][ T5808] bridge_slave_1: entered promiscuous mode
[   54.539622][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.542852][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.545136][ T5814] bridge_slave_0: entered allmulticast mode
[   54.548805][ T5814] bridge_slave_0: entered promiscuous mode
[   54.570074][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.572463][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.574970][ T5814] bridge_slave_1: entered allmulticast mode
[   54.579129][ T5814] bridge_slave_1: entered promiscuous mode
[   54.584169][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.597112][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.610936][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.645894][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.695730][ T5808] team0: Port device team_slave_0 added
[   54.700994][ T5808] team0: Port device team_slave_1 added
[   54.712914][ T5814] team0: Port device team_slave_0 added
[   54.726049][ T5814] team0: Port device team_slave_1 added
[   54.739202][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   54.744521][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.747501][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.759624][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.786332][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.789617][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.802376][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.811657][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.813985][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.824608][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.840198][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.842540][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.852936][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.887548][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.890095][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.892484][ T5817] bridge_slave_0: entered allmulticast mode
[   54.895515][ T5817] bridge_slave_0: entered promiscuous mode
[   54.899011][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.901324][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.903668][ T5817] bridge_slave_1: entered allmulticast mode
[   54.906463][ T5817] bridge_slave_1: entered promiscuous mode
[   54.942251][ T5814] hsr_slave_0: entered promiscuous mode
[   54.944658][ T5814] hsr_slave_1: entered promiscuous mode
[   54.953786][ T5808] hsr_slave_0: entered promiscuous mode
[   54.957394][ T5808] hsr_slave_1: entered promiscuous mode
[   54.960278][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.963002][ T5808] Cannot create hsr debugfs directory
[   54.991466][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.998217][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.067577][ T5817] team0: Port device team_slave_0 added
[   55.098654][ T5817] team0: Port device team_slave_1 added
[   55.158644][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.161583][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.172213][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.196017][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.199584][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.210390][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.323697][ T5817] hsr_slave_0: entered promiscuous mode
[   55.326286][ T5817] hsr_slave_1: entered promiscuous mode
[   55.329535][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.332292][ T5817] Cannot create hsr debugfs directory
[   55.416171][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.438859][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.461337][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.488935][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.542112][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.550243][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.559830][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.574979][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.613982][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.630879][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.641556][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.649819][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.685928][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.729075][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   55.752069][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.754520][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.760239][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.762917][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.768501][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.805544][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   55.818553][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.821308][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.835181][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.845178][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.847505][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.870716][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.936413][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   55.947494][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.950643][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.974231][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.977316][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.071298][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.099029][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.148990][ T5201] Bluetooth: hci0: command tx timeout
[   56.166196][ T5808] veth0_vlan: entered promiscuous mode
[   56.189536][ T5808] veth1_vlan: entered promiscuous mode
[   56.194756][ T5814] veth0_vlan: entered promiscuous mode
[   56.216017][ T5814] veth1_vlan: entered promiscuous mode
[   56.221546][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.228358][ T5201] Bluetooth: hci1: command tx timeout
[   56.243755][ T5808] veth0_macvtap: entered promiscuous mode
[   56.250893][ T5808] veth1_macvtap: entered promiscuous mode
[   56.275482][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.280381][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.285908][ T5814] veth0_macvtap: entered promiscuous mode
[   56.307857][ T5201] Bluetooth: hci2: command tx timeout
[   56.312991][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.316140][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.322375][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.325316][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.331655][ T5814] veth1_macvtap: entered promiscuous mode
[   56.345443][ T5817] veth0_vlan: entered promiscuous mode
[   56.365261][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.379778][ T5817] veth1_vlan: entered promiscuous mode
[   56.383925][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.417430][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.422805][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.426409][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.432470][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.472711][ T5817] veth0_macvtap: entered promiscuous mode
[   56.496771][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.506347][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.506365][ T5817] veth1_macvtap: entered promiscuous mode
[   56.570225][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.576940][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.579099][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.582024][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.607301][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.611231][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.614830][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.618809][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.631679][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.635044][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.647436][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.709204][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.718797][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.752948][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.755979][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.810155][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.815286][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.931410][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.934797][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.938874][ T5889] netlink: 'syz.2.3': attribute type 13 has an invalid length.
[   56.943294][ T5889] netlink: 'syz.2.3': attribute type 12 has an invalid length.
[   57.015311][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'.
[   57.036815][ T5893] Bluetooth: MGMT ver 1.23
[   57.042758][ T5885] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   57.045961][ T5885] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   57.050692][ T5885] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   57.054536][ T5885] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   57.073900][ T5885] geneve2: entered promiscuous mode
[   57.126940][ T5907] Zero length message leads to an empty skb
[   57.150988][ T5910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'.
[   57.158462][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'.
[   57.161760][ T5912] netlink: 'syz.0.10': attribute type 5 has an invalid length.
[   57.164454][ T5913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.164534][ T5912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10'.
[   57.169335][ T5913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.176440][ T5912] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   57.176473][ T5912] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   57.176484][ T5912] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   57.176494][ T5912] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   57.176535][ T5912] geneve2: entered promiscuous mode
[   57.191303][ T5912] geneve2: entered allmulticast mode
[   57.244503][ T5913] wireguard0: entered promiscuous mode
[   57.246543][ T5913] wireguard0: entered allmulticast mode
[   57.265987][ T5920] vlan2: entered promiscuous mode
[   57.268747][ T5920] bond0: entered promiscuous mode
[   57.270416][ T5920] bond_slave_0: entered promiscuous mode
[   57.272400][ T5920] bond_slave_1: entered promiscuous mode
[   57.474658][ T5928] netlink: 'syz.0.15': attribute type 2 has an invalid length.
[   57.478761][ T5928] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   57.483480][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'.
[   57.489459][ T5928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'.
[   57.536044][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.539484][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.603094][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.615222][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.702544][ T5927] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.706371][ T5927] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.710795][ T5927] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.714498][ T5927] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.770660][ T5927] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   57.774619][ T5927] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   57.780988][ T5927] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   57.784431][ T5927] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   58.085020][ T5857] IPVS: starting estimator thread 0...
[   58.177915][ T5950] IPVS: using max 52 ests per chain, 124800 per kthread
[   58.210949][ T5956] netlink: 136 bytes leftover after parsing attributes in process `syz.1.19'.
[   58.214439][ T5956] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[   58.240031][ T5201] Bluetooth: hci0: command tx timeout
[   58.308021][ T5201] Bluetooth: hci1: command tx timeout
[   58.392320][ T5201] Bluetooth: hci2: command tx timeout
[   58.696604][ T5980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.707554][ T5980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   58.906386][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   58.955925][ T5990] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[   59.520371][ T6010] tipc: Started in network mode
[   59.522760][ T6010] tipc: Node identity 4a6f80bda93c, cluster identity 4711
[   59.526178][ T6010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.541083][ T6010] syzkaller0: entered promiscuous mode
[   59.543040][ T6010] syzkaller0: entered allmulticast mode
[   59.561383][ T6013] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET)
[   59.596763][ T6009] tipc: Resetting bearer <eth:syzkaller0>
[   59.605119][ T6009] tipc: Disabling bearer <eth:syzkaller0>
[   59.785516][ T5980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.793395][ T5980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   59.861193][ T5980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.864615][ T5980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   59.954293][ T5980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.961818][ T5980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   60.050621][ T5980] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   60.054127][ T5980] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   60.069418][ T5980] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   60.072853][ T5980] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   60.085357][ T5980] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   60.090339][ T5980] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   60.117024][ T5980] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   60.121299][ T5980] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   60.217496][ T6037] bridge_slave_1: left allmulticast mode
[   60.220285][ T6037] bridge_slave_1: left promiscuous mode
[   60.222817][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.229830][ T6037] bridge_slave_0: left allmulticast mode
[   60.231996][ T6037] bridge_slave_0: left promiscuous mode
[   60.233973][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.318767][ T5201] Bluetooth: hci0: command tx timeout
[   60.385601][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv1
[   60.394285][ T6046] team0: Port device batadv1 added
[   60.398452][ T5201] Bluetooth: hci1: command tx timeout
[   60.478769][ T5201] Bluetooth: hci2: command tx timeout
[   60.918319][ T6068] batadv1: entered allmulticast mode
[   60.920870][ T6068] 8021q: adding VLAN 0 to HW filter on device batadv1
[   60.928656][ T6070] netlink: 'syz.1.49': attribute type 10 has an invalid length.
[   60.931341][ T6070] dummy0: entered promiscuous mode
[   60.935002][ T6070] bridge0: port 3(dummy0) entered blocking state
[   60.937443][ T6070] bridge0: port 3(dummy0) entered disabled state
[   60.945536][ T6070] dummy0: entered allmulticast mode
[   61.789439][ T6089] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   61.860267][ T6097] netlink: 'syz.1.54': attribute type 1 has an invalid length.
[   62.030101][ T6109] __nla_validate_parse: 12 callbacks suppressed
[   62.030203][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'.
[   62.241189][ T6117] netlink: 'syz.2.61': attribute type 1 has an invalid length.
[   62.302518][ T6119] lo speed is unknown, defaulting to 1000
[   62.305117][ T6119] lo speed is unknown, defaulting to 1000
[   62.312497][ T6119] lo speed is unknown, defaulting to 1000
[   62.321927][ T6119] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   62.334550][ T6119] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   62.362829][ T6119] lo speed is unknown, defaulting to 1000
[   62.388339][ T5201] Bluetooth: hci0: command tx timeout
[   62.400126][ T6120] gretap1: entered promiscuous mode
[   62.403258][ T6119] lo speed is unknown, defaulting to 1000
[   62.407521][ T6119] lo speed is unknown, defaulting to 1000
[   62.467934][ T5201] Bluetooth: hci1: command tx timeout
[   62.551196][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'.
[   62.557950][ T5201] Bluetooth: hci2: command tx timeout
[   62.565718][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'.
[   62.601349][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   62.604616][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   62.638338][ T5875] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   62.685839][ T6141] batadv2: entered allmulticast mode
[   62.693598][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv2
[   62.701596][ T6141] sctp: [Deprecated]: syz.2.67 (pid 6141) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.701596][ T6141] Use struct sctp_sack_info instead
[   62.708587][ T6141] netlink: 'syz.2.67': attribute type 16 has an invalid length.
[   62.711766][ T6141] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.67'.
[   62.762055][ T6144] pim6reg1: entered allmulticast mode
[   62.764837][ T6144] pim6reg1: left allmulticast mode
[   62.825992][ T6151] netlink: 'syz.2.70': attribute type 1 has an invalid length.
[   62.990946][ T5875] IPVS: starting estimator thread 0...
[   62.999899][ T6156] netlink: 'syz.2.72': attribute type 4 has an invalid length.
[   63.078808][ T6157] IPVS: using max 43 ests per chain, 103200 per kthread
[   63.171396][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.174272][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.228824][ T5809] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   63.249150][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.257596][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.326551][ T6156] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.330619][ T6156] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.334190][ T6156] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.339240][ T6156] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.539384][ T6161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.579026][ T6143] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   63.619081][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'.
[   63.648494][ T6162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.73'.
[   63.653132][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'.
[   63.656763][ T6166] bridge0: port 3(dummy0) entered blocking state
[   63.659225][ T6166] bridge0: port 3(dummy0) entered forwarding state
[   63.663699][ T6166] bridge0: entered promiscuous mode
[   63.722835][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.726290][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.832205][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'.
[   63.861604][ T6176] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.879571][ T6176] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.882529][ T6176] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[   63.887343][ T6176] bond1: (slave vti0): Error -95 calling set_mac_address
[   63.941687][ T6178] netlink: 136 bytes leftover after parsing attributes in process `syz.1.77'.
[   63.945533][ T6178] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[   64.080611][ T6187] netem: change failed
[   64.090025][ T6187] pim6reg1: entered promiscuous mode
[   64.095971][ T6187] pim6reg1: entered allmulticast mode
[   64.115503][ T6189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.81'.
[   64.134273][ T6193] netlink: 'syz.2.82': attribute type 3 has an invalid length.
[   64.134526][ T6189] netlink: 'syz.0.81': attribute type 25 has an invalid length.
[   64.362523][ T6207] veth0: entered promiscuous mode
[   64.410861][ T6215] veth0: left promiscuous mode
[   64.479642][ T6218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.483309][ T6218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.486426][ T6218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.517853][ T6218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.520946][ T6218] geneve1: entered promiscuous mode
[   64.522873][ T6218] geneve1: entered allmulticast mode
[   64.642590][ T6229] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   64.646529][ T6229] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   64.747094][ T6229] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   64.765172][ T6229] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   64.788005][ T5201] Bluetooth: hci0: command 0x0c1a tx timeout
[   64.832234][ T6229] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   64.835530][ T6229] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   64.928582][ T6229] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   64.933768][ T6229] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   64.955578][ T6251] bridge3: port 1(ip6gretap1) entered blocking state
[   64.959089][ T6251] bridge3: port 1(ip6gretap1) entered disabled state
[   64.962120][ T6251] ip6gretap1: entered allmulticast mode
[   64.966030][ T6251] ip6gretap1: entered promiscuous mode
[   64.986093][ T6251] IPv6: sit1: Disabled Multicast RS
[   64.992302][ T6251] sit1: entered allmulticast mode
[   65.071819][ T6229] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   65.078900][ T6229] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   65.085386][ T6256] bridge_slave_0: left allmulticast mode
[   65.087503][ T6256] bridge_slave_0: left promiscuous mode
[   65.090795][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.108164][ T6256] bridge_slave_1: left allmulticast mode
[   65.111830][ T6256] bridge_slave_1: left promiscuous mode
[   65.113914][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.122347][ T6256] bond0: (slave bond_slave_0): Releasing backup interface
[   65.126679][ T6256] bond0: (slave bond_slave_1): Releasing backup interface
[   65.136708][ T6257] netlink: 'syz.2.96': attribute type 10 has an invalid length.
[   65.144127][ T6256] team0: Port device team_slave_0 removed
[   65.150116][ T6256] team0: Port device team_slave_1 removed
[   65.155583][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.164222][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.177558][ T6229] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   65.184552][ T6229] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   65.192289][ T6257] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   65.206089][ T6229] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   65.211979][ T6229] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   65.237150][ T6229] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   65.245137][ T6229] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   65.624986][ T6298] netlink: 'syz.2.102': attribute type 7 has an invalid length.
[   65.687181][ T6304] netlink: 'syz.1.104': attribute type 12 has an invalid length.
[   65.706398][ T6304] netlink: 'syz.1.104': attribute type 11 has an invalid length.
[   65.756578][ T6299] warning: `syz.1.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.782456][ T6298] : entered promiscuous mode
[   65.908989][ T6308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.950233][ T6311] lo speed is unknown, defaulting to 1000
[   66.093006][ T6300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.230777][ T6327] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.311157][ T6327] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.349431][ T6327] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.408577][ T6327] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.472874][ T6327] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.484500][ T6327] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.496161][ T6327] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.507860][ T6327] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.909057][ T6355] bridge0: the hash_elasticity option has been deprecated and is always 16
[   66.914488][ T6355] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   67.052806][ T6361] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.056396][ T6361] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.063237][ T6361] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.066674][ T6361] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.092482][ T6364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.143721][ T6359] lo speed is unknown, defaulting to 1000
[   67.199249][ T6372] __nla_validate_parse: 12 callbacks suppressed
[   67.199259][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'.
[   67.232143][ T6364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.280822][ T6376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'.
[   67.293131][ T6359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.335523][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'.
[   67.339376][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'.
[   67.350250][ T6359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.386115][ T6381] validate_nla: 4 callbacks suppressed
[   67.386130][ T6381] netlink: 'syz.1.122': attribute type 13 has an invalid length.
[   67.392840][ T6381] netlink: 'syz.1.122': attribute type 17 has an invalid length.
[   67.443479][ T6381] bridge0: left promiscuous mode
[   67.449125][ T6381] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.453604][ T6381] 8021q: adding VLAN 0 to HW filter on device team0
[   67.458748][ T6381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.463959][   T47] lo speed is unknown, defaulting to 1000
[   67.466435][ T5837] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   67.466957][   T47] syz1: Port: 1 Link ACTIVE
[   67.471127][ T5837] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   67.482254][ T6381] syz.1.122 (6381) used greatest stack depth: 19672 bytes left
[   67.488033][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   67.555370][ T6390] netlink: 'syz.1.124': attribute type 32 has an invalid length.
[   67.768998][ T6399] macsec1: entered promiscuous mode
[   67.770850][ T6399] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   67.773202][ T6399] macsec1: entered allmulticast mode
[   67.774946][ T6399] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   67.932809][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   68.100979][ T6421] pimreg3: entered allmulticast mode
[   68.239224][ T5809] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   68.365143][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'.
[   68.371521][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.374666][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.403332][ T6440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'.
[   68.430548][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'.
[   68.615867][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'.
[   68.810329][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'.
[   68.944855][ T6465] netlink: 'syz.0.144': attribute type 32 has an invalid length.
[   69.105847][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'.
[   69.263044][ T6494] netlink: 'syz.2.150': attribute type 9 has an invalid length.
[   69.327422][ T6498] xt_hashlimit: size too large, truncated to 1048576
[   69.445562][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.453881][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.458130][ T6487] bond0 (unregistering): Released all slaves
[   69.615883][ T6506] netlink: 'syz.2.153': attribute type 1 has an invalid length.
[   70.181477][ T6527] netlink: 'syz.0.158': attribute type 21 has an invalid length.
[   70.219570][ T6527] vxcan1: tx address claim with different name
[   70.227249][ T6527] netlink: 'syz.0.158': attribute type 2 has an invalid length.
[   70.240550][ T6527] : entered promiscuous mode
[   70.304873][ T6532] xt_hashlimit: size too large, truncated to 1048576
[   70.367592][ T6533] : renamed from bridge_slave_0 (while UP)
[   70.614333][ T6557] netlink: 'syz.0.169': attribute type 12 has an invalid length.
[   70.624222][ T6557] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[   70.626887][ T6557] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[   70.630694][ T6557] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[   70.633628][ T6557] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[   70.844306][ T6576] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   70.871521][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   70.933960][ T6579] netlink: 'syz.0.175': attribute type 2 has an invalid length.
[   70.957374][ T6580] lo speed is unknown, defaulting to 1000
[   71.513688][ T6595] gretap0: entered promiscuous mode
[   71.515494][ T6595] macsec1: entered promiscuous mode
[   71.517187][ T6595] macsec1: entered allmulticast mode
[   71.522370][ T6595] gretap0: entered allmulticast mode
[   71.642651][ T6607] sctp: [Deprecated]: syz.2.183 (pid 6607) Use of int in maxseg socket option.
[   71.642651][ T6607] Use struct sctp_assoc_value instead
[   71.667780][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   71.829263][ T6624] hsr_slave_0: left promiscuous mode
[   71.832797][ T6624] hsr_slave_1: left promiscuous mode
[   71.894965][ T6625] lo speed is unknown, defaulting to 1000
[   72.122242][ T6633] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   72.131527][ T6632] sctp: [Deprecated]: syz.1.191 (pid 6632) Use of int in max_burst socket option.
[   72.131527][ T6632] Use struct sctp_assoc_value instead
[   72.168921][ T6635] tipc: Started in network mode
[   72.170697][ T6635] tipc: Node identity 9a3b099c5f3b, cluster identity 4711
[   72.174187][ T6635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.179050][ T6635] syzkaller0: entered promiscuous mode
[   72.181321][ T6635] syzkaller0: entered allmulticast mode
[   72.192253][ T6635] tipc: Resetting bearer <eth:syzkaller0>
[   72.195190][ T6634] tipc: Resetting bearer <eth:syzkaller0>
[   72.203871][ T6634] tipc: Disabling bearer <eth:syzkaller0>
[   72.411726][ T6640] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.471040][ T6640] bond0: (slave veth3): Enslaving as an active interface with a down link
[   72.483621][ T6639] vlan2: entered allmulticast mode
[   72.485337][ T6639] bond0: entered allmulticast mode
[   72.488371][ T6639] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   72.542864][ T6644] __nla_validate_parse: 20 callbacks suppressed
[   72.542874][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.195'.
[   72.604946][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.197'.
[   72.711824][ T6656] validate_nla: 3 callbacks suppressed
[   72.711835][ T6656] netlink: 'syz.0.201': attribute type 10 has an invalid length.
[   72.790181][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'.
[   72.903149][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.205'.
[   74.027108][ T6697] syz_tun: entered promiscuous mode
[   74.039785][ T6697] batadv_slave_0: entered promiscuous mode
[   74.053296][ T6697] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[   74.056604][ T6697] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.060382][ T6697] hsr1: entered allmulticast mode
[   74.062612][ T6697] syz_tun: entered allmulticast mode
[   74.064543][ T6697] batadv_slave_0: entered allmulticast mode
[   74.068960][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'.
[   74.159898][ T6707] geneve1: left promiscuous mode
[   74.169728][ T6707] geneve1: left allmulticast mode
[   74.173829][ T6707] batadv1: left allmulticast mode
[   74.177498][ T6707] gretap1: left promiscuous mode
[   74.181964][ T6709] netlink: 'syz.0.215': attribute type 1 has an invalid length.
[   74.185295][ T6707] batadv2: left allmulticast mode
[   74.194013][ T6707] hsr1: left allmulticast mode
[   74.196087][ T6707] syz_tun: left allmulticast mode
[   74.198545][ T6707] batadv_slave_0: left allmulticast mode
[   74.241467][ T6709] bond2: (slave gretap1): making interface the new active one
[   74.245384][ T6709] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   74.316819][ T6718] xt_bpf: check failed: parse error
[   74.590270][ T6727] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   74.626306][ T6731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.674291][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'.
[   74.687775][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.690421][ T6731] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.694295][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.701667][ T6731] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.823959][ T6734] netlink: 'syz.0.223': attribute type 1 has an invalid length.
[   74.842402][ T6734] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.860409][ T6734] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.862979][ T6734] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   74.867798][ T6734] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   74.918039][ T6736] veth3: entered promiscuous mode
[   74.924546][ T6736] bond3: (slave veth3): Enslaving as an active interface with a down link
[   74.932131][ T6734] erspan0: entered allmulticast mode
[   74.942624][ T6734] bond3: (slave erspan0): making interface the new active one
[   74.946529][ T6734] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   75.383851][ T6761] netlink: 'syz.2.230': attribute type 13 has an invalid length.
[   75.386589][ T6761] netlink: 'syz.2.230': attribute type 17 has an invalid length.
[   75.432543][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.436921][ T6761] 8021q: adding VLAN 0 to HW filter on device team0
[   75.449649][ T6761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.502324][ T6761] lo speed is unknown, defaulting to 1000
[   75.558045][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.634622][ T6761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.691786][ T6761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.737058][ T6775] pimreg: entered allmulticast mode
[   75.749875][ T6775] pimreg: left allmulticast mode
[   75.800542][ T6774] openvswitch: netlink: IP tunnel dst address not specified
[   76.283538][ T6791] netlink: 'syz.0.235': attribute type 1 has an invalid length.
[   76.296570][ T6791] bond4: entered promiscuous mode
[   76.300024][ T6791] bond4: entered allmulticast mode
[   76.828945][ T6812] syzkaller0: entered allmulticast mode
[   76.919388][ T6815] netlink: 176 bytes leftover after parsing attributes in process `syz.1.241'.
[   76.957929][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.243'.
[   77.024635][ T6840] netlink: 'syz.1.244': attribute type 1 has an invalid length.
[   77.062661][ T6840] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.077260][ T6838] erspan0: entered allmulticast mode
[   77.126014][ T6846] netlink: 108 bytes leftover after parsing attributes in process `syz.1.246'.
[   77.130090][ T6847] netlink: 108 bytes leftover after parsing attributes in process `syz.1.246'.
[   77.274498][ T6854] xt_CT: No such helper "syz0"
[   77.299693][ T6859] veth5: entered promiscuous mode
[   77.503284][ T6872] gtp0: entered promiscuous mode
[   77.505460][ T6872] gtp0: entered allmulticast mode
[   77.514740][ T6872] netlink: 'syz.1.248': attribute type 11 has an invalid length.
[   77.553948][ T6874] netlink: 'syz.1.249': attribute type 4 has an invalid length.
[   77.562174][   T47] lo speed is unknown, defaulting to 1000
[   77.564943][   T47] syz1: Port: 1 Link DOWN
[   77.622354][ T6876] __nla_validate_parse: 6 callbacks suppressed
[   77.622368][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'.
[   77.729982][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'.
[   77.736280][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'.
[   77.874575][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'.
[   77.901698][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'.
[   77.902945][ T6886] netlink: 'syz.1.254': attribute type 32 has an invalid length.
[   77.905874][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'.
[   77.912779][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'.
[   77.916998][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'.
[   77.922233][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'.
[   77.926304][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'.
[   78.311855][ T6918] netlink: 'syz.2.262': attribute type 32 has an invalid length.
[   78.445455][ T6928] Bluetooth: MGMT ver 1.23
[   78.517236][ T6936] tipc: Started in network mode
[   78.524060][ T6936] tipc: Node identity f2e719765736, cluster identity 4711
[   78.532465][ T6936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.540565][ T6934] syzkaller0: entered promiscuous mode
[   78.546107][ T6934] syzkaller0: entered allmulticast mode
[   78.696094][ T6933] tipc: Resetting bearer <eth:syzkaller0>
[   78.718883][ T6933] tipc: Disabling bearer <eth:syzkaller0>
[   78.741923][ T6947] @: renamed from bond_slave_0
[   79.046472][ T6961] xt_hashlimit: size too large, truncated to 1048576
[   79.099985][ T6967] : renamed from bridge_slave_0
[   79.114031][ T6970] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[   79.502335][ T6997] netlink: 'syz.1.277': attribute type 1 has an invalid length.
[   79.509197][ T6997] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   79.576866][ T7007] syzkaller1: entered promiscuous mode
[   79.585972][ T7007] syzkaller1: entered allmulticast mode
[   79.600436][ T7007] netlink: 'syz.0.279': attribute type 12 has an invalid length.
[   79.601743][ T7009] lo speed is unknown, defaulting to 1000
[   79.606219][ T7007] netlink: 'syz.0.279': attribute type 11 has an invalid length.
[   79.803339][ T7024] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   79.818422][ T7024] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   80.173390][ T7057] netlink: 'syz.0.292': attribute type 1 has an invalid length.
[   80.224634][ T7057] 8021q: adding VLAN 0 to HW filter on device bond5
[   80.230279][ T7057] netlink: 'syz.0.292': attribute type 1 has an invalid length.
[   80.234071][ T7057] netlink: 'syz.0.292': attribute type 1 has an invalid length.
[   80.241144][ T7057] netlink: 'syz.0.292': attribute type 1 has an invalid length.
[   80.248078][ T7057] netlink: 'syz.0.292': attribute type 1 has an invalid length.
[   80.294916][ T7063] bond3: entered promiscuous mode
[   80.296736][ T7063] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.381354][ T7073] Bluetooth: MGMT ver 1.23
[   80.391113][ T7072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.474898][ T7083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.537596][ T7091] bridge0: port 3(dummy0) entered disabled state
[   80.614624][ T7094] ipvlan2: entered promiscuous mode
[   80.617237][ T7094] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   80.621120][ T7094] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   80.793638][ T7099] lo speed is unknown, defaulting to 1000
[   81.057136][ T7119] x_tables: duplicate underflow at hook 3
[   81.105309][ T7121] ipvlan2: entered promiscuous mode
[   81.109677][   T10] cfg80211: failed to load regulatory.db
[   81.113818][ T7121] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   81.116287][ T7121] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   81.252583][ T7132] bridge_slave_1: left allmulticast mode
[   81.254877][ T7132] bridge_slave_1: left promiscuous mode
[   81.260129][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.460165][ T7154] bond2: entered promiscuous mode
[   81.462339][ T7154] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.484670][ T7158] bond6: entered promiscuous mode
[   81.488960][ T7158] 8021q: adding VLAN 0 to HW filter on device bond6
[   81.515442][ T7154] bond3: entered promiscuous mode
[   81.518163][ T7154] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.531494][ T7158] 8021q: adding VLAN 0 to HW filter on device bond6
[   81.534752][ T7158] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[   81.541785][ T7158] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   81.549686][ T7158] bond6: (slave vcan1): making interface the new active one
[   81.553037][ T7158] vcan1: entered promiscuous mode
[   81.556853][ T7158] bond6: (slave vcan1): Enslaving as an active interface with an up link
[   81.574474][ T7165] bridge0: entered promiscuous mode
[   81.830434][ T7187] pim6reg1: entered promiscuous mode
[   81.832727][ T7187] pim6reg1: entered allmulticast mode
[   82.002829][ T7199] ipt_ECN: cannot use operation on non-tcp rule
[   82.743623][ T7208] __nla_validate_parse: 112 callbacks suppressed
[   82.743637][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'.
[   82.909711][ T7225] netlink: 60 bytes leftover after parsing attributes in process `syz.2.336'.
[   82.913121][ T7225] netlink: 37 bytes leftover after parsing attributes in process `syz.2.336'.
[   82.916348][ T7225] netlink: 37 bytes leftover after parsing attributes in process `syz.2.336'.
[   82.931803][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'.
[   83.049520][ T7227] team0 (unregistering): Port device team_slave_0 removed
[   83.060911][ T7227] team0 (unregistering): Port device team_slave_1 removed
[   83.190016][ T7242] validate_nla: 35 callbacks suppressed
[   83.190033][ T7242] netlink: 'syz.1.340': attribute type 10 has an invalid length.
[   83.260980][ T7249] netlink: 48 bytes leftover after parsing attributes in process `syz.0.341'.
[   83.467225][ T7256] netlink: 'syz.0.344': attribute type 32 has an invalid length.
[   83.722214][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'.
[   83.858025][  T793] IPVS: starting estimator thread 0...
[   83.879161][ T7282] lo speed is unknown, defaulting to 1000
[   83.957802][ T7283] IPVS: using max 80 ests per chain, 192000 per kthread
[   84.020561][ T7288] syzkaller0: entered promiscuous mode
[   84.027632][ T7288] syzkaller0: entered allmulticast mode
[   84.046260][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'.
[   84.112699][ T7285] xt_TPROXY: Can be used only with -p tcp or -p udp
[   84.672881][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.353'.
[   85.274700][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'.
[   85.279154][ T7321] netlink: 'syz.1.356': attribute type 5 has an invalid length.
[   85.302651][ T7324] netlink: 'syz.2.355': attribute type 1 has an invalid length.
[   85.309800][ T7324] Cannot find set identified by id 0 to match
[   85.364802][ T7323] netlink: 'syz.1.357': attribute type 1 has an invalid length.
[   85.433268][ T7332] bridge0: left promiscuous mode
[   85.459638][ T7332] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   85.542575][ T7337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.545142][ T7337] syzkaller0: entered promiscuous mode
[   85.547031][ T7337] syzkaller0: entered allmulticast mode
[   85.658803][ T7341] tipc: Resetting bearer <eth:syzkaller0>
[   85.693953][ T7336] tipc: Resetting bearer <eth:syzkaller0>
[   85.701151][ T7336] tipc: Disabling bearer <eth:syzkaller0>
[   86.099778][ T7368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.115941][ T7368] raw_sendmsg: syz.2.370 forgot to set AF_INET. Fix it!
[   86.140275][ T7375] netlink: 'syz.0.371': attribute type 32 has an invalid length.
[   86.486149][ T7405] syzkaller1: entered promiscuous mode
[   86.488310][ T7405] syzkaller1: entered allmulticast mode
[   86.520858][ T7407] IPVS: set_ctl: invalid protocol: 205 224.0.0.2:20000
[   86.635690][ T7420] netlink: 'syz.1.384': attribute type 32 has an invalid length.
[   86.721814][ T7409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.725496][ T7409] bond_slave_0: left promiscuous mode
[   86.731546][ T7409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.737201][ T7409] bond_slave_1: left promiscuous mode
[   86.742397][ T7409] bond0 (unregistering): Released all slaves
[   86.776066][ T7431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.793077][ T7418] syzkaller0: entered promiscuous mode
[   86.799842][ T7418] syzkaller0: entered allmulticast mode
[   86.892191][ T7427] tipc: Resetting bearer <eth:syzkaller0>
[   87.113350][ T7416] tipc: Resetting bearer <eth:syzkaller0>
[   87.133646][ T7416] tipc: Disabling bearer <eth:syzkaller0>
[   87.227017][ T7484] netlink: 'syz.1.392': attribute type 32 has an invalid length.
[   87.562076][ T7528] netlink: 'syz.2.400': attribute type 32 has an invalid length.
[   87.700706][ T7538] netlink: 'syz.2.404': attribute type 32 has an invalid length.
[   87.902939][ T7553] __nla_validate_parse: 13 callbacks suppressed
[   87.902950][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'.
[   87.952850][ T7553] macvlan1: entered promiscuous mode
[   87.955088][ T7553] ipvlan0: entered promiscuous mode
[   87.957353][ T7553] ipvlan0: left promiscuous mode
[   87.981831][ T7553] macvlan1: left promiscuous mode
[   88.067126][ T7569] lo speed is unknown, defaulting to 1000
[   88.134790][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'.
[   88.208686][ T7580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.413'.
[   88.216917][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'.
[   88.297077][ T7592] netlink: 72 bytes leftover after parsing attributes in process `syz.1.415'.
[   88.312700][ T7594] netlink: 'syz.0.416': attribute type 1 has an invalid length.
[   88.353939][ T7594] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.373778][ T7605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.417'.
[   88.377302][ T7606] netlink: 48 bytes leftover after parsing attributes in process `syz.2.417'.
[   88.569921][ T7624] netlink: 96 bytes leftover after parsing attributes in process `syz.2.421'.
[   88.578008][ T7610] syz.1.418: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   88.583873][ T7610] CPU: 0 UID: 0 PID: 7610 Comm: syz.1.418 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   88.583884][ T7610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.583889][ T7610] Call Trace:
[   88.583892][ T7610]  <TASK>
[   88.583896][ T7610]  dump_stack_lvl+0x189/0x250
[   88.583911][ T7610]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.583923][ T7610]  ? __pfx__printk+0x10/0x10
[   88.583931][ T7610]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.583939][ T7610]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.583947][ T7610]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   88.583955][ T7610]  warn_alloc+0x214/0x310
[   88.583966][ T7610]  ? __pfx_warn_alloc+0x10/0x10
[   88.583977][ T7610]  ? __get_vm_area_node+0x28f/0x300
[   88.583985][ T7610]  ? hash_ipmac_create+0x358/0xfe0
[   88.583996][ T7610]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   88.584003][ T7610]  ? do_syscall_64+0xfa/0x3b0
[   88.584020][ T7610]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   88.584029][ T7610]  ? rcu_is_watching+0x15/0xb0
[   88.584041][ T7610]  ? hash_ipmac_create+0x358/0xfe0
[   88.584050][ T7610]  ? hash_ipmac_create+0x358/0xfe0
[   88.584058][ T7610]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   88.584065][ T7610]  ? hash_ipmac_create+0x358/0xfe0
[   88.584075][ T7610]  ? hash_ipmac_create+0x2fe/0xfe0
[   88.584085][ T7610]  hash_ipmac_create+0x358/0xfe0
[   88.584098][ T7610]  ? __nla_parse+0x40/0x60
[   88.584108][ T7610]  ? __pfx_hash_ipmac_create+0x10/0x10
[   88.584118][ T7610]  ip_set_create+0xa97/0x1940
[   88.584128][ T7610]  ? ip_set_create+0x4a2/0x1940
[   88.584142][ T7610]  ? __pfx_ip_set_create+0x10/0x10
[   88.584165][ T7610]  nfnetlink_rcv_msg+0xb4d/0x1130
[   88.584176][ T7610]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   88.584193][ T7610]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   88.584202][ T7610]  ? kasan_save_free_info+0x46/0x50
[   88.584229][ T7610]  netlink_rcv_skb+0x208/0x470
[   88.584238][ T7610]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   88.584248][ T7610]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   88.584260][ T7610]  ? bpf_lsm_capable+0x9/0x20
[   88.584267][ T7610]  ? security_capable+0x7e/0x2e0
[   88.584279][ T7610]  nfnetlink_rcv+0x26a/0x2520
[   88.584290][ T7610]  ? __dev_queue_xmit+0x1cd7/0x3a70
[   88.584301][ T7610]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[   88.584314][ T7610]  ? __dev_queue_xmit+0x27e/0x3a70
[   88.584323][ T7610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.584334][ T7610]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   88.584344][ T7610]  ? __pfx___dev_queue_xmit+0x10/0x10
[   88.584358][ T7610]  ? ref_tracker_free+0x63a/0x7d0
[   88.584366][ T7610]  ? __copy_skb_header+0xa7/0x550
[   88.584376][ T7610]  ? __pfx_ref_tracker_free+0x10/0x10
[   88.584391][ T7610]  ? skb_clone+0x246/0x3a0
[   88.584401][ T7610]  ? __netlink_deliver_tap+0x807/0x850
[   88.584409][ T7610]  ? netlink_deliver_tap+0x2e/0x1b0
[   88.584419][ T7610]  ? netlink_deliver_tap+0x2e/0x1b0
[   88.584426][ T7610]  ? netlink_deliver_tap+0x2e/0x1b0
[   88.584436][ T7610]  netlink_unicast+0x75b/0x8d0
[   88.584466][ T7610]  netlink_sendmsg+0x805/0xb30
[   88.584480][ T7610]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.584489][ T7610]  ? aa_sock_msg_perm+0x94/0x160
[   88.584499][ T7610]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   88.584508][ T7610]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.584516][ T7610]  __sock_sendmsg+0x21c/0x270
[   88.584527][ T7610]  ____sys_sendmsg+0x505/0x830
[   88.584538][ T7610]  ? __pfx_____sys_sendmsg+0x10/0x10
[   88.584551][ T7610]  ? import_iovec+0x74/0xa0
[   88.584559][ T7610]  ___sys_sendmsg+0x21f/0x2a0
[   88.584568][ T7610]  ? __pfx____sys_sendmsg+0x10/0x10
[   88.584590][ T7610]  ? __fget_files+0x2a/0x420
[   88.584598][ T7610]  ? __fget_files+0x3a0/0x420
[   88.584609][ T7610]  __x64_sys_sendmsg+0x19b/0x260
[   88.584619][ T7610]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   88.584634][ T7610]  ? do_syscall_64+0xbe/0x3b0
[   88.584641][ T7610]  do_syscall_64+0xfa/0x3b0
[   88.584647][ T7610]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.584657][ T7610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.584663][ T7610]  ? exc_page_fault+0x9f/0xf0
[   88.584674][ T7610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.584680][ T7610] RIP: 0033:0x7f4e4618e929
[   88.584688][ T7610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.584694][ T7610] RSP: 002b:00007f4e470a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   88.584702][ T7610] RAX: ffffffffffffffda RBX: 00007f4e463b6160 RCX: 00007f4e4618e929
[   88.584707][ T7610] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[   88.584711][ T7610] RBP: 00007f4e46210b39 R08: 0000000000000000 R09: 0000000000000000
[   88.584715][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.584719][ T7610] R13: 0000000000000000 R14: 00007f4e463b6160 R15: 00007ffd82cf39f8
[   88.584730][ T7610]  </TASK>
[   88.584733][ T7610] Mem-Info:
[   88.618431][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'.
[   88.621702][ T7610] active_anon:5562 inactive_anon:0 isolated_anon:0
[   88.621702][ T7610]  active_file:957 inactive_file:38215 isolated_file:0
[   88.621702][ T7610]  unevictable:1768 dirty:67 writeback:0
[   88.621702][ T7610]  slab_reclaimable:9356 slab_unreclaimable:95546
[   88.621702][ T7610]  mapped:18262 shmem:2464 pagetables:942
[   88.621702][ T7610]  sec_pagetables:0 bounce:0
[   88.621702][ T7610]  kernel_misc_reclaimable:0
[   88.621702][ T7610]  free:252004 free_pcp:24420 free_cma:0
[   88.622627][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.421'.
[   88.623992][ T7610] Node 0 active_anon:14228kB inactive_anon:0kB active_file:3052kB inactive_file:24940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31592kB dirty:112kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5212kB pagetables:2008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.798607][ T7610] Node 1 active_anon:8156kB inactive_anon:0kB active_file:776kB inactive_file:127920kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41456kB dirty:156kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6588kB pagetables:1964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.809105][ T7610] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.819364][ T7610] lowmem_reserve[]: 0 815 815 815 815
[   88.821203][ T7610] Node 0 DMA32 free:257088kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14228kB inactive_anon:0kB active_file:3052kB inactive_file:24940kB unevictable:3536kB writepending:112kB present:1556484kB managed:834728kB mlocked:0kB bounce:0kB free_pcp:43132kB local_pcp:28372kB free_cma:0kB
[   88.833700][ T7610] lowmem_reserve[]: 0 0 0 0 0
[   88.835767][ T7610] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   88.846966][ T7630] tap0: tun_chr_ioctl cmd 1074025677
[   88.849385][ T7630] tap0: linktype set to 0
[   88.851383][ T7610] lowmem_reserve[]: 0 0 854 854 854
[   88.852285][ T7628] tap0: tun_chr_ioctl cmd 1074025675
[   88.853367][ T7610] Node 1 Normal free:276968kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8156kB inactive_anon:0kB active_file:776kB inactive_file:127920kB unevictable:3536kB writepending:156kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:54616kB local_pcp:21208kB free_cma:0kB
[   88.855186][ T7628] tap0: persist disabled
[   88.865733][ T7610] lowmem_reserve[]: 0 0 0 0 0
[   88.865757][ T7610] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   88.872767][ T7610] Node 0 DMA32: 740*4kB (UME) 386*8kB (UME) 130*16kB (UME) 376*32kB (UME) 76*64kB (UME) 19*128kB (UM) 3*256kB (ME) 1*512kB (M) 7*1024kB (UME) 0*2048kB 54*4096kB (M) = 257088kB
[   88.878768][ T7610] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   88.885075][ T7610] Node 1 Normal: 126*4kB (UME) 42*8kB (UME) 564*16kB (UME) 11*32kB (UME) 11*64kB (UME) 24*128kB (ME) 18*256kB (UME) 13*512kB (UM) 8*1024kB (UME) 5*2048kB (ME) 57*4096kB (M) = 277160kB
[   88.903439][ T7610] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.906548][ T7610] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.909574][ T7610] 41636 total pagecache pages
[   88.911081][ T7610] 0 pages in swap cache
[   88.912432][ T7610] Free swap  = 124996kB
[   88.913929][ T7610] Total swap = 124996kB
[   88.915251][ T7610] 786301 pages RAM
[   88.916494][ T7610] 0 pages HighMem/MovableOnly
[   88.920575][ T7610] 240371 pages reserved
[   88.921991][ T7610] 0 pages cma reserved
[   89.131434][ T7653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.140177][  T793] lo speed is unknown, defaulting to 1000
[   89.144605][  T793] syz1: Port: 1 Link ACTIVE
[   89.153247][ T7660] netlink: 'syz.2.433': attribute type 15 has an invalid length.
[   89.210406][ T7667] netlink: 'syz.1.435': attribute type 8 has an invalid length.
[   89.251931][ T7671] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.259609][ T7671] team0: Failed to send port change of device batadv0 via netlink (err -105)
[   89.264871][ T7671] team0: Failed to send options change via netlink (err -105)
[   89.282660][ T7671] team0: Port device batadv0 added
[   89.639843][ T7713] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   89.956119][ T7737] netlink: 'syz.2.447': attribute type 10 has an invalid length.
[   89.965367][ T7737] dummy0: entered promiscuous mode
[   89.970051][ T7737] bridge0: port 1(dummy0) entered blocking state
[   89.977106][ T7737] bridge0: port 1(dummy0) entered disabled state
[   89.985379][ T7737] dummy0: entered allmulticast mode
[   90.200810][ T7754] xt_hashlimit: size too large, truncated to 1048576
[   90.277348][ T7762] xt_bpf: check failed: parse error
[   90.483528][ T7779] : entered promiscuous mode
[   90.492902][ T7779] trusted_key: syz.1.453 sent an empty control message without MSG_MORE.
[   90.513533][ T7780] vlan2: entered promiscuous mode
[   90.517248][ T7780] bridge0: entered promiscuous mode
[   90.519753][ T7780] vlan2: entered allmulticast mode
[   90.521463][ T7780] bridge0: entered allmulticast mode
[   90.621265][ T7787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.623813][ T7787] syzkaller0: entered promiscuous mode
[   90.625743][ T7787] syzkaller0: entered allmulticast mode
[   90.706262][ T7787] tipc: Resetting bearer <eth:syzkaller0>
[   90.710591][ T7786] tipc: Resetting bearer <eth:syzkaller0>
[   90.722338][ T7786] tipc: Disabling bearer <eth:syzkaller0>
[   90.913144][ T7808] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   90.935477][ T7815] lo speed is unknown, defaulting to 1000
[   90.968106][ T7818] netlink: 'syz.0.460': attribute type 1 has an invalid length.
[   90.986332][ T7818] 8021q: adding VLAN 0 to HW filter on device bond7
[   91.017381][ T7818] bond7: (slave gretap2): making interface the new active one
[   91.026639][ T7818] bond7: (slave gretap2): Enslaving as an active interface with an up link
[   91.146188][ T7815] SET target dimension over the limit!
[   91.362193][ T7839] geneve4: entered allmulticast mode
[   91.503976][ T7861] SET target dimension over the limit!
[   91.514861][ T7861] team0: Device gtp0 is of different type
[   91.573985][ T7865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.604554][ T7870] netlink: 'syz.1.472': attribute type 11 has an invalid length.
[   91.708374][ T7880] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   91.716209][ T7880] Cannot find set identified by id 0 to match
[   91.781837][ T7889] SET target dimension over the limit!
[   91.815023][ T7886] lo speed is unknown, defaulting to 1000
[   92.010165][ T7904] netlink: 'syz.2.479': attribute type 4 has an invalid length.
[   92.012672][ T7904] netlink: 'syz.2.479': attribute type 17 has an invalid length.
[   92.019713][ T7904] macsec0: entered promiscuous mode
[   92.025484][ T7904] macsec0: left promiscuous mode
[   92.084522][ T7907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.097065][ T7913] IPv6: sit1: Disabled Multicast RS
[   92.107537][ T7913] sit1: entered allmulticast mode
[   92.224313][ T7926] netlink: 'syz.0.484': attribute type 30 has an invalid length.
[   92.232661][ T7927] netlink: 'syz.0.484': attribute type 30 has an invalid length.
[   92.242676][ T7926] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.245953][ T7926] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.248916][ T7926] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.252029][ T7926] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.460083][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.462666][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.537450][ T7950] syzkaller0: entered promiscuous mode
[   92.540329][ T7950] syzkaller0: entered allmulticast mode
[   92.611501][ T7956] netlink: 'syz.0.490': attribute type 1 has an invalid length.
[   93.343926][ T7956] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[   93.374616][ T7971] x_tables: duplicate underflow at hook 3
[   93.426459][ T7975] pim6reg1: entered promiscuous mode
[   93.429453][ T7975] pim6reg1: entered allmulticast mode
[   93.485370][ T7987] __nla_validate_parse: 25 callbacks suppressed
[   93.485385][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'.
[   93.581708][ T7991] netlink: 'syz.1.499': attribute type 11 has an invalid length.
[   93.630944][ T7993] lo speed is unknown, defaulting to 1000
[   93.653227][ T8000] validate_nla: 1 callbacks suppressed
[   93.653241][ T8000] netlink: 'syz.2.500': attribute type 13 has an invalid length.
[   93.660151][ T8000] netlink: 'syz.2.500': attribute type 17 has an invalid length.
[   93.673362][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.503'.
[   93.783157][ T8012] syz_tun: entered allmulticast mode
[   93.848095][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'.
[   93.851809][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'.
[   93.855546][ T8016] netlink: 'syz.2.507': attribute type 18 has an invalid length.
[   93.901160][ T8010] syz_tun: left allmulticast mode
[   93.958100][ T8017] nbd1: detected capacity change from 0 to 63
[   93.968183][ T8020] block nbd1: NBD_DISCONNECT
[   93.972563][ T8020] block nbd1: Disconnected due to user request.
[   93.987442][ T8020] block nbd1: shutting down sockets
[   94.007128][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   94.011039][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[   94.014298][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   94.018125][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[   94.021365][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   94.025062][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[   94.028670][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   94.032502][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[   94.039069][ T7434] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   94.041977][ T8017] netlink: 'syz.1.506': attribute type 30 has an invalid length.
[   94.044297][ T7434] Buffer I/O error on dev nbd1, logical block 0, async page read
[   94.060938][ T7434] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   94.064724][ T7434] Buffer I/O error on dev nbd1, logical block 1, async page read
[   94.076934][ T7434] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   94.083843][ T7434] Buffer I/O error on dev nbd1, logical block 2, async page read
[   94.087922][ T7434] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   94.091663][ T7434] Buffer I/O error on dev nbd1, logical block 3, async page read
[   94.095001][ T7434] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   94.099869][ T7434] Buffer I/O error on dev nbd1, logical block 0, async page read
[   94.113908][ T7434] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   94.120340][ T7434] Buffer I/O error on dev nbd1, logical block 1, async page read
[   94.127103][ T7434] ldm_validate_partition_table(): Disk read failed.
[   94.138692][ T7434] Dev nbd1: unable to read RDB block 0
[   94.141333][ T7434]  nbd1: unable to read partition table
[   94.161307][ T8038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.173270][ T7434] ldm_validate_partition_table(): Disk read failed.
[   94.177391][ T7434] Dev nbd1: unable to read RDB block 0
[   94.180380][   T47] lo speed is unknown, defaulting to 1000
[   94.182761][   T47] syz1: Port: 1 Link DOWN
[   94.189266][ T7434]  nbd1: unable to read partition table
[   94.313739][ T8051] netlink: 'syz.2.514': attribute type 16 has an invalid length.
[   94.316978][ T8051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.514'.
[   94.351276][ T8052] netlink: 'syz.1.513': attribute type 16 has an invalid length.
[   94.354602][ T8052] netlink: 'syz.1.513': attribute type 17 has an invalid length.
[   94.500501][ T8046] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[   94.503903][ T8046] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[   94.507253][ T8046] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[   94.511385][ T8046] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[   94.521787][ T8046] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[   94.525180][ T8046] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[   94.530212][ T8046] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[   94.533724][ T8046] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[   94.542786][ T8046] gretap0: left allmulticast mode
[   94.604644][ T8046] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[   94.608599][ T8046] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[   94.612142][ T8046] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[   94.615706][ T8046] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[   94.625048][ T8046] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.628677][ T8046] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.631452][ T8046] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.634737][ T8046] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.663083][ T8052] bridge0: port 3(dummy0) entered blocking state
[   94.665765][ T8052] bridge0: port 3(dummy0) entered forwarding state
[   94.675110][ T8052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.681016][ T8053] lo speed is unknown, defaulting to 1000
[   94.683833][ T8053] syz1: Port: 1 Link ACTIVE
[   94.850908][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'.
[   94.854643][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'.
[   94.955374][ T8063] lo speed is unknown, defaulting to 1000
[   95.048688][ T8063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.519'.
[   95.141315][ T8063] netlink: 'syz.0.519': attribute type 12 has an invalid length.
[   95.217768][ T8076] netlink: 'syz.2.523': attribute type 32 has an invalid length.
[   95.418889][ T8089] netlink: 'syz.1.524': attribute type 10 has an invalid length.
[   95.425259][ T8089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.524'.
[   95.519666][ T8100] ieee802154 phy1 wpan1: encryption failed: -22
[   95.550291][ T8100] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   95.555817][ T8100] mac80211_hwsim hwsim6 ": renamed from wlan0
[   95.616051][ T8108] netlink: 348 bytes leftover after parsing attributes in process `syz.1.531'.
[   95.641208][ T8108] dvmrp0: entered allmulticast mode
[   96.068288][ T8153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.071299][ T8153] IPv6: NLM_F_CREATE should be set when creating new route
[   96.646020][ T8197] team0: Cannot enslave team device to itself
[   96.785565][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.791615][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.797027][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.809994][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.812652][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.831855][ T5837] bond3 (unregistering): (slave erspan0): Releasing active interface
[   96.870510][ T5837] bond2 (unregistering): (slave gretap1): Releasing active interface
[   96.885599][ T5837] bond7 (unregistering): (slave gretap2): Releasing active interface
[   97.180794][ T5837] bond1 (unregistering): Released all slaves
[   97.191015][ T5837] bond2 (unregistering): Released all slaves
[   97.254809][ T5837] bond3 (unregistering): (slave veth3): Releasing active interface
[   97.258872][ T5837] bond3 (unregistering): Released all slaves
[   97.270794][ T5837] bond4 (unregistering): Released all slaves
[   97.352126][ T5837] bond5 (unregistering): Released all slaves
[   97.427407][ T5837] bond6 (unregistering): (slave vcan1): Releasing backup interface
[   97.431946][ T5837] vcan1: left promiscuous mode
[   97.434448][ T5837] bond6 (unregistering): Released all slaves
[   97.507604][ T5837] bond0 (unregistering): Released all slaves
[   97.580648][ T5837] bond7 (unregistering): Released all slaves
[   97.600924][ T8204] gtp0: entered promiscuous mode
[   97.613275][ T8204] gtp0: entered allmulticast mode
[   97.691605][ T5837] : left promiscuous mode
[   97.816539][ T5837] tipc: Left network mode
[   98.027098][ T8233] dummy0: left allmulticast mode
[   98.045907][ T8233] dummy0: left promiscuous mode
[   98.052271][ T8233] bridge0: port 3(dummy0) entered disabled state
[   98.061910][ T8233] : left allmulticast mode
[   98.064845][ T8233] : left promiscuous mode
[   98.067126][ T8233] bridge0: port 1() entered disabled state
[   98.086522][ T8233] team0: Port device team_slave_0 removed
[   98.095756][ T8233] team0: Port device team_slave_1 removed
[   98.112802][ T8233] team0: Port device batadv1 removed
[   98.116009][ T8233] ip6gretap1: left allmulticast mode
[   98.118858][ T8233] ip6gretap1: left promiscuous mode
[   98.121157][ T8233] bridge3: port 1(ip6gretap1) entered disabled state
[   98.129248][ T8233] bond0: (slave veth3): Releasing active interface
[   98.209634][ T8210] chnl_net:caif_netlink_parms(): no params data found
[   98.256355][ T8241] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   98.313480][ T5837] hsr_slave_0: left promiscuous mode
[   98.316421][ T5837] hsr_slave_1: left promiscuous mode
[   98.394919][ T5837] pimreg3 (unregistering): left allmulticast mode
[   98.864507][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.868129][   T54] Bluetooth: hci1: command tx timeout
[   98.870389][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.877271][ T8210] bridge_slave_0: entered allmulticast mode
[   98.881644][ T8210] bridge_slave_0: entered promiscuous mode
[   98.890228][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.892902][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.897602][ T8210] bridge_slave_1: entered allmulticast mode
[   98.903191][ T8210] bridge_slave_1: entered promiscuous mode
[   98.990535][ T8267] validate_nla: 6 callbacks suppressed
[   98.990552][ T8267] netlink: 'syz.1.564': attribute type 32 has an invalid length.
[   99.004798][ T8210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.019425][ T8210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.089725][ T8210] team0: Port device team_slave_0 added
[   99.093557][ T8210] team0: Port device team_slave_1 added
[   99.198103][ T8210] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.200975][ T8210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.214870][ T8210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.222697][ T8281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.235761][ T8210] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.241407][ T8210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.250633][ T8210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.292772][ T8285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.322087][ T5837] IPVS: stop unused estimator thread 0...
[   99.324297][ T8210] hsr_slave_0: entered promiscuous mode
[   99.330498][ T8210] hsr_slave_1: entered promiscuous mode
[   99.354560][ T8287] bond5: entered promiscuous mode
[   99.356841][ T8287] 8021q: adding VLAN 0 to HW filter on device bond5
[   99.590534][ T8302] netlink: 'syz.1.569': attribute type 10 has an invalid length.
[   99.593227][ T8302] __nla_validate_parse: 12 callbacks suppressed
[   99.593234][ T8302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.569'.
[   99.619119][ T8302] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.623301][ T8302] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.626545][ T8302] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.634092][ T8302] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.642540][ T8302] team0: Port device geneve0 added
[   99.723595][ T8305] batadv0: entered allmulticast mode
[   99.726244][ T8305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.731047][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'.
[   99.889250][ T8210] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   99.894097][ T8210] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   99.901223][ T8210] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   99.905714][ T8210] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   99.947974][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'.
[   99.974080][ T8318] 8021q: adding VLAN 0 to HW filter on device bond6
[  100.053251][ T8318] 8021q: adding VLAN 0 to HW filter on device bond6
[  100.056097][ T8318] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  100.083792][ T8318] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  100.173049][ T8328] macvlan2: entered promiscuous mode
[  100.180057][ T8318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'.
[  100.180940][ T8328] macvlan2: entered allmulticast mode
[  100.186282][ T8328] bond6: (slave macvlan2): Error -98 calling set_mac_address
[  100.192529][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'.
[  100.210939][ T8336] dummy0: Device is already in use.
[  100.260017][ T8210] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.291631][ T8210] 8021q: adding VLAN 0 to HW filter on device team0
[  100.305167][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.307724][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.312021][ T8346] netlink: 'syz.2.574': attribute type 32 has an invalid length.
[  100.328843][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.331579][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.514055][ T8210] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.590411][ T8210] veth0_vlan: entered promiscuous mode
[  100.605945][ T8210] veth1_vlan: entered promiscuous mode
[  100.671412][ T8210] veth0_macvtap: entered promiscuous mode
[  100.693931][ T8210] veth1_macvtap: entered promiscuous mode
[  100.736313][ T8210] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.755617][ T8210] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.766843][ T8210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.775386][ T8210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.779457][ T8210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.783020][ T8210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.826138][ T8368] syzkaller0: entered promiscuous mode
[  100.837966][ T8368] syzkaller0: entered allmulticast mode
[  100.950512][   T54] Bluetooth: hci1: command tx timeout
[  101.834127][ T8375] batadv2: entered allmulticast mode
[  101.837124][ T8375] 8021q: adding VLAN 0 to HW filter on device batadv2
[  101.840578][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[  101.935981][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.940213][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.964626][  T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.964705][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'.
[  101.971392][  T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.976818][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'.
[  101.980442][ T8384] netlink: 48 bytes leftover after parsing attributes in process `syz.2.579'.
[  102.071247][ T8389] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[  102.074660][ T8389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.580'.
[  102.147555][ T8398] netlink: 'syz.2.582': attribute type 13 has an invalid length.
[  102.154016][ T8398] netlink: 'syz.2.582': attribute type 17 has an invalid length.
[  102.163121][ T8398] 8021q: adding VLAN 0 to HW filter on device team0
[  102.166596][ T8400] netlink: 'syz.1.583': attribute type 21 has an invalid length.
[  102.171815][ T8398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.178749][ T8400] netlink: 'syz.1.583': attribute type 4 has an invalid length.
[  102.262151][ T8405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.325430][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.382366][ T8398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.812845][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.864117][ T8427] netlink: 'syz.1.588': attribute type 10 has an invalid length.
[  102.918855][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.984262][ T5201] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  102.991898][ T8433] netlink: 'syz.2.589': attribute type 32 has an invalid length.
[  102.995984][ T5201] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  103.000014][ T5201] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  103.004864][ T5201] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  103.019833][ T5201] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  103.332485][ T8452] syz.1.591 (8452) used greatest stack depth: 19608 bytes left
[  103.340869][ T8431] chnl_net:caif_netlink_parms(): no params data found
[  103.367233][ T8455] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  103.393231][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.473051][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.477918][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.480932][ T8431] bridge_slave_0: entered allmulticast mode
[  103.484938][ T8431] bridge_slave_0: entered promiscuous mode
[  103.492728][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.495702][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.507072][ T8431] bridge_slave_1: entered allmulticast mode
[  103.510977][ T8431] bridge_slave_1: entered promiscuous mode
[  103.553942][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.564274][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.635217][ T8431] team0: Port device team_slave_0 added
[  103.641135][ T8431] team0: Port device team_slave_1 added
[  103.701801][ T8468] syzkaller1: entered promiscuous mode
[  103.704018][ T8468] syzkaller1: entered allmulticast mode
[  103.712348][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.715138][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.725840][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.732189][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.735704][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.746801][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.816860][ T8431] hsr_slave_0: entered promiscuous mode
[  103.821504][ T8431] hsr_slave_1: entered promiscuous mode
[  103.824014][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.827428][ T8431] Cannot create hsr debugfs directory
[  103.877222][ T8477] vlan0: entered promiscuous mode
[  103.953255][ T8480] bridge0: entered promiscuous mode
[  103.955836][ T8480] ip6gretap0: entered promiscuous mode
[  103.961018][ T8480] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  103.963554][ T8480] Cannot create hsr debugfs directory
[  103.965491][ T8480] hsr0: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  104.092605][ T8491] validate_nla: 4 callbacks suppressed
[  104.092615][ T8491] netlink: 'syz.1.600': attribute type 4 has an invalid length.
[  104.101120][ T8491] netlink: 'syz.1.600': attribute type 4 has an invalid length.
[  104.166769][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.384392][   T13] bridge_slave_1: left allmulticast mode
[  104.387361][   T13] bridge_slave_1: left promiscuous mode
[  104.391741][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.404200][   T13] bridge_slave_0: left allmulticast mode
[  104.406608][   T13] bridge_slave_0: left promiscuous mode
[  104.409548][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.729092][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.733156][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.737263][   T13] bond0 (unregistering): Released all slaves
[  105.074892][   T13] hsr_slave_0: left promiscuous mode
[  105.085733][ T8501] syz.1.603 (8501) used greatest stack depth: 18600 bytes left
[  105.089610][   T13] hsr_slave_1: left promiscuous mode
[  105.091682][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.094480][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.107996][ T5201] Bluetooth: hci1: command tx timeout
[  105.110982][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.113457][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.114675][ T8516] __nla_validate_parse: 9 callbacks suppressed
[  105.114683][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'.
[  105.149474][   T13] veth1_macvtap: left promiscuous mode
[  105.151746][   T13] veth0_macvtap: left promiscuous mode
[  105.153873][   T13] veth1_vlan: left promiscuous mode
[  105.156030][   T13] veth0_vlan: left promiscuous mode
[  105.459887][   T13] team0 (unregistering): Port device team_slave_1 removed
[  105.484795][   T13] team0 (unregistering): Port device team_slave_0 removed
[  105.502378][ T8522] netlink: 'syz.1.605': attribute type 10 has an invalid length.
[  105.504773][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.605'.
[  105.691652][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'.
[  105.695990][ T8527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.606'.
[  105.745517][ T8522] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.749315][ T8522] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.752115][ T8522] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.754869][ T8522] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.764000][ T8526] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  105.806231][ T8431] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  105.824233][ T8431] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  105.835965][ T8431] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  105.843924][ T8431] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  106.069201][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.104189][ T8431] 8021q: adding VLAN 0 to HW filter on device team0
[  106.111016][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.113498][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.146891][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.149752][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.171624][ T8431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  106.174887][ T8431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  106.276194][ T8532] netlink: 'syz.2.607': attribute type 4 has an invalid length.
[  106.374831][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.472527][ T8431] veth0_vlan: entered promiscuous mode
[  106.525497][ T8431] veth1_vlan: entered promiscuous mode
[  106.603981][ T8431] veth0_macvtap: entered promiscuous mode
[  106.652705][ T8431] veth1_macvtap: entered promiscuous mode
[  106.687554][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.740727][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.768030][ T8431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.771696][ T8431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.775318][ T8431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.780880][ T8431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.814941][ T8576] team0: Port device geneve0 removed
[  106.901384][  T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.904699][  T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.926991][ T8582] netlink: 'syz.2.612': attribute type 13 has an invalid length.
[  106.935027][ T8582] netlink: 'syz.2.612': attribute type 17 has an invalid length.
[  106.972651][ T8582] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.975592][ T8582] 8021q: adding VLAN 0 to HW filter on device team0
[  106.989511][ T8582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.012692][  T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.015328][  T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.093336][ T8583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.127071][ T8431] 
[  107.128142][ T8431] ======================================================
[  107.131003][ T8431] WARNING: possible circular locking dependency detected
[  107.133875][ T8431] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  107.137806][ T8431] ------------------------------------------------------
[  107.140603][ T8431] syz-executor/8431 is trying to acquire lock:
[  107.143066][ T8431] ffff8881119eb840 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[  107.147355][ T8431] 
[  107.147355][ T8431] but task is already holding lock:
[  107.150315][ T8431] ffff8881119ebb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  107.153373][ T8584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.153882][ T8431] 
[  107.153882][ T8431] which lock already depends on the new lock.
[  107.153882][ T8431] 
[  107.161087][ T8431] 
[  107.161087][ T8431] the existing dependency chain (in reverse order) is:
[  107.164619][ T8431] 
[  107.164619][ T8431] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[  107.167583][ T8431]        lock_acquire+0x120/0x360
[  107.169619][ T8431]        __mutex_lock+0x182/0xe80
[  107.171596][ T8431]        l2cap_info_timeout+0x60/0xa0
[  107.173735][ T8431]        process_scheduled_works+0xae1/0x17b0
[  107.176114][ T8431]        worker_thread+0x8a0/0xda0
[  107.178175][ T8431]        kthread+0x711/0x8a0
[  107.180125][ T8431]        ret_from_fork+0x3fc/0x770
[  107.182164][ T8431]        ret_from_fork_asm+0x1a/0x30
[  107.183823][ T8431] 
[  107.183823][ T8431] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[  107.187703][ T8431]        validate_chain+0xb9b/0x2140
[  107.189956][ T8431]        __lock_acquire+0xab9/0xd20
[  107.192185][ T8431]        lock_acquire+0x120/0x360
[  107.194376][ T8431]        __flush_work+0x6b8/0xbc0
[  107.196479][ T8431]        __cancel_work_sync+0xbe/0x110
[  107.198765][ T8431]        l2cap_conn_del+0x4f0/0x680
[  107.200780][ T8431]        hci_conn_hash_flush+0x10d/0x230
[  107.202870][ T8431]        hci_dev_close_sync+0xaef/0x1330
[  107.205101][ T8431]        hci_unregister_dev+0x21a/0x510
[  107.207445][ T8431]        vhci_release+0x80/0xd0
[  107.209339][ T8583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.209419][ T8431]        __fput+0x44c/0xa70
[  107.214044][ T8431]        task_work_run+0x1d4/0x260
[  107.216088][ T8431]        do_exit+0x6b5/0x22e0
[  107.218036][ T8431]        do_group_exit+0x21c/0x2d0
[  107.220127][ T8431]        __x64_sys_exit_group+0x3f/0x40
[  107.222371][ T8431]        x64_sys_call+0x21ba/0x21c0
[  107.224168][ T8431]        do_syscall_64+0xfa/0x3b0
[  107.226157][ T8431]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.228822][ T8431] 
[  107.228822][ T8431] other info that might help us debug this:
[  107.228822][ T8431] 
[  107.232951][ T8431]  Possible unsafe locking scenario:
[  107.232951][ T8431] 
[  107.235898][ T8431]        CPU0                    CPU1
[  107.238113][ T8431]        ----                    ----
[  107.240267][ T8431]   lock(&conn->lock#2);
[  107.241987][ T8431]                                lock((work_completion)(&(&conn->info_timer)->work));
[  107.245522][ T8431]                                lock(&conn->lock#2);
[  107.248261][ T8431]   lock((work_completion)(&(&conn->info_timer)->work));
[  107.251158][ T8431] 
[  107.251158][ T8431]  *** DEADLOCK ***
[  107.251158][ T8431] 
[  107.254404][ T8431] 5 locks held by syz-executor/8431:
[  107.256401][ T8431]  #0: ffff888124568dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  107.260120][ T8431]  #1: ffff8881245680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  107.263118][ T8431]  #2: ffffffff8f679388 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  107.266690][ T8431]  #3: ffff8881119ebb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  107.270039][ T8431]  #4: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[  107.272919][ T8431] 
[  107.272919][ T8431] stack backtrace:
[  107.274755][ T8431] CPU: 1 UID: 0 PID: 8431 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  107.274765][ T8431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.274770][ T8431] Call Trace:
[  107.274774][ T8431]  <TASK>
[  107.274778][ T8431]  dump_stack_lvl+0x189/0x250
[  107.274791][ T8431]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.274801][ T8431]  ? __pfx__printk+0x10/0x10
[  107.274809][ T8431]  ? print_lock_name+0xde/0x100
[  107.274816][ T8431]  print_circular_bug+0x2ee/0x310
[  107.274824][ T8431]  check_noncircular+0x134/0x160
[  107.274832][ T8431]  validate_chain+0xb9b/0x2140
[  107.274838][ T8431]  ? do_raw_spin_lock+0x121/0x290
[  107.274846][ T8431]  ? look_up_lock_class+0x74/0x170
[  107.274857][ T8431]  ? register_lock_class+0x51/0x320
[  107.274871][ T8431]  __lock_acquire+0xab9/0xd20
[  107.274886][ T8431]  ? __flush_work+0xd2/0xbc0
[  107.274896][ T8431]  lock_acquire+0x120/0x360
[  107.274909][ T8431]  ? __flush_work+0xd2/0xbc0
[  107.274921][ T8431]  ? __flush_work+0xd2/0xbc0
[  107.274930][ T8431]  __flush_work+0x6b8/0xbc0
[  107.274939][ T8431]  ? __flush_work+0xd2/0xbc0
[  107.274950][ T8431]  ? __flush_work+0xd2/0xbc0
[  107.274961][ T8431]  ? __pfx___flush_work+0x10/0x10
[  107.274971][ T8431]  ? __pfx_wq_barrier_func+0x10/0x10
[  107.274990][ T8431]  ? __pfx___cancel_work+0x10/0x10
[  107.275001][ T8431]  ? hci_conn_drop+0x14d/0x280
[  107.275018][ T8431]  __cancel_work_sync+0xbe/0x110
[  107.275030][ T8431]  l2cap_conn_del+0x4f0/0x680
[  107.275045][ T8431]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  107.275058][ T8431]  hci_conn_hash_flush+0x10d/0x230
[  107.275073][ T8431]  hci_dev_close_sync+0xaef/0x1330
[  107.275086][ T8431]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  107.275098][ T8431]  ? up_write+0x1c4/0x420
[  107.275110][ T8431]  hci_unregister_dev+0x21a/0x510
[  107.275128][ T8431]  vhci_release+0x80/0xd0
[  107.275143][ T8431]  ? __pfx_vhci_release+0x10/0x10
[  107.275156][ T8431]  __fput+0x44c/0xa70
[  107.275174][ T8431]  task_work_run+0x1d4/0x260
[  107.275188][ T8431]  ? __pfx_task_work_run+0x10/0x10
[  107.275201][ T8431]  ? kmem_cache_free+0x18f/0x400
[  107.275213][ T8431]  do_exit+0x6b5/0x22e0
[  107.275228][ T8431]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  107.275240][ T8431]  ? __pfx_do_exit+0x10/0x10
[  107.275255][ T8431]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.275269][ T8431]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.275312][ T8431]  do_group_exit+0x21c/0x2d0
[  107.275327][ T8431]  __x64_sys_exit_group+0x3f/0x40
[  107.275340][ T8431]  x64_sys_call+0x21ba/0x21c0
[  107.275351][ T8431]  do_syscall_64+0xfa/0x3b0
[  107.275361][ T8431]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.275375][ T8431]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.275386][ T8431]  ? exc_page_fault+0x9f/0xf0
[  107.275400][ T8431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.275411][ T8431] RIP: 0033:0x7f9d3d38e929
[  107.275421][ T8431] Code: Unable to access opcode bytes at 0x7f9d3d38e8ff.
[  107.275426][ T8431] RSP: 002b:00007ffdcb14be78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  107.275438][ T8431] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9d3d38e929
[  107.275445][ T8431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  107.275452][ T8431] RBP: 00007f9d3d3ee8f0 R08: 00007ffdcb149c17 R09: 0000000000000003
[  107.275459][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.275465][ T8431] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffdcb14c030
[  107.275477][ T8431]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  107.401028][ T5201] Bluetooth: hci1: command tx timeout
[  107.485176][ T8588] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  109.339469][ T8212] ip6gretap0 (unregistering): left promiscuous mode
[  109.415223][ T8212] dvmrp0 (unregistering): left allmulticast mode
[  109.456504][ T8212] bridge0 (unregistering): left promiscuous mode
[  110.133488][ T8212] bond1 (unregistering): Released all slaves
[  110.198761][ T8212] bond0 (unregistering): Released all slaves
[  110.264244][ T8212] bond2 (unregistering): Released all slaves
[  110.327210][ T8212] bond3 (unregistering): Released all slaves
[  110.331329][ T8212] bond4 (unregistering): Released all slaves
[  110.397065][ T8212] bond5 (unregistering): Released all slaves
[  110.459835][ T8212] bond6 (unregistering): Released all slaves
[  110.530875][ T8212] : left promiscuous mode
[  110.570594][ T8212] tipc: Left network mode
[  110.682782][ T8212] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode
[  110.685702][ T8212] mac80211_hwsim hwsim2 wlan0 (unregistering): left promiscuous mode
[  111.352351][ T8212] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
03:23:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888103497970 RBP=ffffffff8214b08f RSP=ffffc90003b4f2a0
R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90003b4f4c0 R11=fffff52000769ea1
R12=0000000000000000 R13=ffff888103497970 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff81a71329 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b864e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f93fff9a3b0 CR3=0000000023b96000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffff0000000000
XMM02=ffff0000ff000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004c86e30
R8 =ffff8881085d0237 R9 =1ffff110210ba046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac68f1 R14=ffffffff99dcb760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557d251500 ffffffff 00c00000
GS =0000 ffff8881a3c4e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056416faa2950 CR3=00000001097e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
