last executing test programs:

8.678223281s ago: executing program 2 (id=178):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000580)={{0x3, @null}, [@remote, @netrom, @null, @null, @netrom, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48, 0x100000)
ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000780))
socket$unix(0x1, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000880)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f00000004c0)="06", 0x1}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x880)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x2, 0xfffbf010}, {0x25, 0x0, 0x0, 0x7ffff021}, {0x6}]}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)

8.605350015s ago: executing program 2 (id=180):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'nicvf0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

8.395074692s ago: executing program 2 (id=185):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f64650000000000000000000000000000000000000000020000000000000005000300050000001100040061637469636b75700000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)

8.329915056s ago: executing program 2 (id=186):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, 0x0, 0x0, 0x200000}, 0x1f01) (async)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c19", 0x32}], 0x1}, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000540)=[@in6={0xa, 0x4e22, 0x8, @private2, 0xffffff81}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x6}]}, &(0x7f0000000080)=0x10) (async)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f00000000c0)=0x7a, 0x4) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x84) (async)
recvmmsg(r4, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) (async)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) (async)
sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x1c3, 0x0, 0x32) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bridge0\x00', 0x1000})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
r7 = socket(0x1e, 0x1, 0xfff)
getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000000008c5d673ef776aaaaaaaaaaaa08004519001c00e40000ee119078ac1414297f000001c74675ea5f954511c4fa2d38ff5d16a163f3ded5cc779d0934bf12711c8c1dbc844df030df31ccd95c6d8781354df9ee5a882c69ab7194"], 0x2e) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='9\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)

1.126951575s ago: executing program 0 (id=307):
ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000080)={@bcast, @default})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @mcast2, 0x2}}}, 0x108)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_fadd={0x58, 0x118, 0x8, {{}, 0x0, 0x0, 0x5c, 0x8, 0x1, 0x0, 0x0, 0x20}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x1}}], 0x70, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000400d9634df8096000000007910480000000000630000000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0xf0b, 0xffffffff, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x4, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10)
close(r4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], &(0x7f00000005c0)=""/222, 0x1a, 0xde, 0xa}, 0x28)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'dummy0\x00'})
sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)

1.029874054s ago: executing program 1 (id=309):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socket(0x11, 0x4, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r2, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)
syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0)
r3 = socket(0x11, 0x80a, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x4}, 0x6)
recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000040))
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x3a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r5, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000100010000080002000311ea00f80000"], 0x24}}, 0x0)
socket$kcm(0x2, 0x3, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)

970.438142ms ago: executing program 0 (id=310):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0x5, 0xf84}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000000020000080004000a000000", 0x24)

969.663554ms ago: executing program 0 (id=311):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001380)={'syztnl0\x00', 0x0})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x1, [{0xe, 0xc8}, {0x9, 0xff, 0x3}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f, 0x2e, 0x0, 0x61, 0x0, 0x30]}}, &(0x7f0000001440)=""/96, 0x47, 0x60, 0x0, 0x2}, 0x28)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@o_path={&(0x7f0000001540)='./file0\x00', 0x0, 0x8, r0}, 0x18)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="050000000000000000000000ff7f000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000010000000300"/28], 0x50)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x5, 0x5, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x0, &(0x7f0000001240), &(0x7f0000001140)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001500)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001800)=[r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5], &(0x7f0000001840)=[{0x5, 0x5, 0xf, 0xc}, {0x2, 0x5, 0xf, 0xa}, {0x4, 0x2, 0xf}, {0x0, 0x3, 0x5, 0x5}], 0x10, 0x3}, 0x94)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001180)="c4a59fed76bd6df11829587b6c54d544a56d91e66d320359618142b879c24e44f281cd37376542a13c23f2ebd5fa360fd6deb6b9e90b10539344c0d739f59a49887384b3420679d4626738f0e52070699e4ee3086c60fb6240045f3e0a03125aba319503b0bac946330ebb8feb3f2a8ac1ee8b8f8561413da49b6b43ac4829896ad76e16c7d7f18ac34514aa71abae91a1508e49232bba6d0546", &(0x7f0000001080)="305bc6ee18904c0da3729da471e5af6801f5529076dab8480cb91b829d74ccd02d53a709783b3f264b17679c979408deaa6c6cc06af4afd1355d40701c6c43f567f75c5572b1d141df27e6b594ede45fcf5d9a2dec8a02d870b2eba0c4126245a923d723e1f9bc2f201741adcbceb8773fb8095f2486e1c067396ce30036a56472fcfe4c575d3c3fa101430b4773f083eb47714ee92404f9", 0xa7c, r6}, 0x38)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r9, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)
socket$nl_crypto(0x10, 0x3, 0x15)
socket$inet(0x2, 0x800, 0x3)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r11 = accept(r10, 0x0, 0x0)
sendmmsg$alg(r11, &(0x7f0000005f40)=[{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000005240)="16345de08029397f88749e879e6b45be1131b0747c22c18f0d774bc63823b92aab0faa654530932968426555b0b050ccc23ede3be455a39f29547db89864a70d7f1ef5de7e82ea416fefc1768a620182d2132bd8e78d9f652868751876f5e3c9a4f58d14ceafe388f984ed9a67d2fd198787e8419fa5b25cdb0ae12826dfc841c179fef216d2fd8584", 0x89}, {&(0x7f0000005300)="145637c4e3c5cf83761fdcebaa8ebcc4ea37f119bd7beafc5d6a3b259e461dad2179b4a61cad9fe2ec4cd369091617deca7075fc925f86d8fae6c0471f391c995aaa5d175625f7f5557cc049c4a65db6807db39cd0a5564bba6d7066dee46651d82050f6e8cc96451213aeb7385331cc7c63ec326d536fe04aff57c23df16e95b097bbc54fb6ccf58906ccbcf8042ff191b3", 0x92}, {0x0}], 0x3}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {0x0}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4a}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff31}, 0x48}, {{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0)

770.695528ms ago: executing program 1 (id=312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c1401030000000000000000040001"], 0x18}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x2, 0xc040)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x40)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000808)
unshare(0x10000100)

770.449092ms ago: executing program 1 (id=313):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000), 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b04000000000000000002000000580004802400076e3cc2186cc67f636b65740001140002800800024000000003080001400000000230000180080001006e61740024000280084eba424e4a4ffa8700024000000002080001400000000108000740000000580900010073797a30cc396dbc4b64efd9000000000900020073797a3200000000140000001100010000000000000000000000000acc36a6601dd484fe33115b445015e6e6508e9d43746918e6e809000000000000006743e6"], 0xac}}, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000000)={0x7, &(0x7f0000000300)=[{}, {}, {@none}, {}, {}, {@fixed}, {@fixed}]})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x8040)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000000d14040029bd0100fcefdf56a9533429841e5897fe0fd389941225"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'veth0_to_bridge\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0xe7, &(0x7f0000000a00)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x1, 0x0, 0x7a1}}, {@ipv4={0x6000, @icmp={{0x1d, 0x4, 0x0, 0x29, 0xd1, 0x68, 0x0, 0xd5, 0x1, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0xf9, 0x1, 0x9, [{@rand_addr=0x64010100, 0x200}]}, @timestamp_addr={0x44, 0x24, 0xc3, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@private=0xa010102, 0x94d}]}, @ra={0x94, 0x4}, @generic={0x44, 0x8, "29d324d85ad9"}, @cipso={0x86, 0x22, 0x0, [{0x0, 0x4, "da17"}, {0x5, 0x3, 'C'}, {0x0, 0x7, "9fc6a67c4c"}, {0x5, 0xe, "d1b23d8f0c3f80976f56af24"}]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x45a9, "63b600333985ba778dbffad265d1c4830ee136f62efec7f50dfd48953b20e3962ad12c53cfa34cc76c9f9930df5094324f29a3a527c7b3e1dcf47ecfcf0ae09d16531d3d9e758351c303dd52142cf279482e39981c"}}}}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80001, {0x0, 0x0, 0x0, r12, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x703}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)

680.383439ms ago: executing program 1 (id=314):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xf, 0x10}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

570.073582ms ago: executing program 1 (id=315):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4800028044000100240001006d6f64650000000000000000000000000000000000000000030000000000000005000300050000001100040061637469636b75700000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)

569.173423ms ago: executing program 1 (id=316):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000007f0000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000018010000202064250000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
listen(r0, 0x8)
accept$ax25(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0xb}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x81}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10)
r11 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0)

89.248984ms ago: executing program 0 (id=317):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0x5, 0xf84}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000000020000080004000a000000", 0x24)

88.972139ms ago: executing program 2 (id=318):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000000000000)

88.592463ms ago: executing program 0 (id=319):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60)
close(r1)
bind(r1, &(0x7f0000000200)=@ll={0x11, 0x3, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x9, 0x6, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x140, r0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = epoll_create1(0x80000)
r5 = socket$phonet(0x23, 0x2, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000500)={0x40000000})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000580)={0x7, 'ip6tnl0\x00', {0xfffff746}, 0x421})
openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f5, 0x288, 0x70bd27, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
socketpair(0x23, 0x5, 0x0, &(0x7f0000000700)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x3fb, 0x4, 0x70bd2d, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x200, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000880)=""/161, &(0x7f0000000940)=0xa1)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0xc0)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000b00), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000b40)={'team0\x00', <r9=>0x0})
getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000b80)={@multicast1, @empty, <r10=>0x0}, &(0x7f0000000bc0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'ip6tnl0\x00', <r11=>0x0, 0x2f, 0xe, 0xf7, 0x0, 0x8, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x7, 0x9, 0x1}})
getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000cc0)={@broadcast, @remote, <r12=>0x0}, &(0x7f0000000d00)=0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000d80)=[0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0], 0x0, 0x62, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000001300)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001040)={0x24c, r8, 0x20, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1ac, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1000, 0x0, 0x4, 0xf}, {0x7f, 0x4, 0xa2, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4}, 0x24000004)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000001340)=0x108440, 0x4)

221.5µs ago: executing program 0 (id=320):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "4172ea2979c1aa18", "1facff3fb36d6415e915b9813f425001b43dc847667e4ed085ed6866a6c1b783", "03e20bf4", "13fa739e473cc809"}, 0x38)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

0s ago: executing program 2 (id=321):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001555498a37a6085ca54a812be8a896f9a0002000000060001000000"], 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r5)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000140)={@local, @loopback, <r12=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$FOU_CMD_ADD(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r11, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000944}, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40733' (ED25519) to the list of known hosts.
syzkaller login: [   49.392043][ T5833] cgroup: Unknown subsys name 'net'
[   49.534805][ T5833] cgroup: Unknown subsys name 'cpuset'
[   49.539202][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.877107][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.993216][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.996730][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.999625][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.003147][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.006041][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.020597][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.025415][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.029212][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.033930][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.039001][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.098447][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.101606][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.104903][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.108186][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.111665][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.303228][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   55.403972][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   55.462474][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.464738][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.467120][ T5850] bridge_slave_0: entered allmulticast mode
[   55.470217][ T5850] bridge_slave_0: entered promiscuous mode
[   55.482945][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.485780][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.488315][ T5850] bridge_slave_1: entered allmulticast mode
[   55.491148][ T5850] bridge_slave_1: entered promiscuous mode
[   55.517077][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   55.544210][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.557219][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.610815][ T5850] team0: Port device team_slave_0 added
[   55.618996][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.622172][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.625078][ T5846] bridge_slave_0: entered allmulticast mode
[   55.628741][ T5846] bridge_slave_0: entered promiscuous mode
[   55.633186][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.635543][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.638012][ T5846] bridge_slave_1: entered allmulticast mode
[   55.641141][ T5846] bridge_slave_1: entered promiscuous mode
[   55.645188][ T5850] team0: Port device team_slave_1 added
[   55.696010][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.698674][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.707754][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.713674][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.716679][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.719250][ T5855] bridge_slave_0: entered allmulticast mode
[   55.722519][ T5855] bridge_slave_0: entered promiscuous mode
[   55.729468][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.734185][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.737099][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.748469][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.774297][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.777282][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.780227][ T5855] bridge_slave_1: entered allmulticast mode
[   55.785140][ T5855] bridge_slave_1: entered promiscuous mode
[   55.791045][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.819906][ T5850] hsr_slave_0: entered promiscuous mode
[   55.823111][ T5850] hsr_slave_1: entered promiscuous mode
[   55.848818][ T5846] team0: Port device team_slave_0 added
[   55.871770][ T5846] team0: Port device team_slave_1 added
[   55.882039][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.916252][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.958167][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.961089][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.970865][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.976965][ T5855] team0: Port device team_slave_0 added
[   55.983073][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.985840][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.996443][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.006928][ T5855] team0: Port device team_slave_1 added
[   56.100405][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.104176][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.115139][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.124001][ T5846] hsr_slave_0: entered promiscuous mode
[   56.126383][ T5846] hsr_slave_1: entered promiscuous mode
[   56.128623][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   56.130722][ T5846] Cannot create hsr debugfs directory
[   56.137876][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.140590][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.150896][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.232752][ T5855] hsr_slave_0: entered promiscuous mode
[   56.235972][ T5855] hsr_slave_1: entered promiscuous mode
[   56.238973][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   56.241440][ T5855] Cannot create hsr debugfs directory
[   56.309091][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.335101][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.352314][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.356858][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.430043][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.447830][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.460877][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.474020][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.515917][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.522613][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.527620][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.543975][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.588688][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.617478][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   56.639534][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.644706][ T3865] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.647506][ T3865] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.674208][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.679259][ T3865] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.681728][ T3865] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.693989][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.696364][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.712845][ T3865] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.715204][ T3865] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.753456][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.791311][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   56.803214][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.806493][ T3868] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.829890][ T3868] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.833010][ T3868] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.966402][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.988511][ T5850] veth0_vlan: entered promiscuous mode
[   57.001789][ T5850] veth1_vlan: entered promiscuous mode
[   57.033765][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.037421][ T5850] veth0_macvtap: entered promiscuous mode
[   57.050706][ T5850] veth1_macvtap: entered promiscuous mode
[   57.064724][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.077128][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.093878][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.100920][ T5846] veth0_vlan: entered promiscuous mode
[   57.103955][ T5851] Bluetooth: hci0: command tx timeout
[   57.109851][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.114662][ T5851] Bluetooth: hci1: command tx timeout
[   57.121499][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.131124][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.137922][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.148400][ T5846] veth1_vlan: entered promiscuous mode
[   57.182026][ T5851] Bluetooth: hci2: command tx timeout
[   57.207613][ T5855] veth0_vlan: entered promiscuous mode
[   57.227439][ T5855] veth1_vlan: entered promiscuous mode
[   57.236550][ T5846] veth0_macvtap: entered promiscuous mode
[   57.253337][ T5846] veth1_macvtap: entered promiscuous mode
[   57.275318][ T3868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.276856][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.278721][ T3868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.306123][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.324901][ T5855] veth0_macvtap: entered promiscuous mode
[   57.330711][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.331362][ T3865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.337402][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.340861][ T3865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.349812][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.361715][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.372708][ T5855] veth1_macvtap: entered promiscuous mode
[   57.413784][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.421063][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.429323][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.434282][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.438934][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.454325][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.478977][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.483213][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.486412][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.489794][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.495148][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.563540][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.569546][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.677942][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.681212][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.756389][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.764868][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.864237][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.867442][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.874785][ T5872] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.460110][ T5872] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.464545][ T5872] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.485432][ T5872] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.511667][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.517124][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.577008][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.609737][ T5930] pimreg: entered allmulticast mode
[   58.619663][ T5930] pimreg: left allmulticast mode
[   58.629264][ T5929] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   58.636490][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.640162][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.192142][   T54] Bluetooth: hci0: command tx timeout
[   59.194500][ T5851] Bluetooth: hci1: command tx timeout
[   59.262096][ T5851] Bluetooth: hci2: command tx timeout
[   59.573664][ T5939] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9'.
[   59.599784][ T5941] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET)
[   59.606336][ T5941] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.664528][ T5941] Zero length message leads to an empty skb
[   59.705643][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.708995][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.762548][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.768316][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.845955][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.849680][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.860236][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.864877][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.967271][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'.
[   60.784290][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21'.
[   60.842187][ T5976] sctp: [Deprecated]: syz.1.21 (pid 5976) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.842187][ T5976] Use struct sctp_sack_info instead
[   60.846963][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'.
[   61.040731][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.049726][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.084650][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'.
[   61.130123][ T5984] hsr_slave_0: left promiscuous mode
[   61.134828][ T5984] hsr_slave_1: left promiscuous mode
[   61.143700][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.147771][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.153408][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.156401][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.261992][ T5851] Bluetooth: hci1: command tx timeout
[   61.262339][   T54] Bluetooth: hci0: command tx timeout
[   61.342045][   T54] Bluetooth: hci2: command tx timeout
[   62.327312][ T5998] netlink: 'syz.0.27': attribute type 10 has an invalid length.
[   62.330039][ T5998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'.
[   62.335433][ T5998] veth0_vlan: left promiscuous mode
[   62.337627][ T5998] veth0_vlan: entered promiscuous mode
[   62.339890][ T5998] veth0_vlan: entered allmulticast mode
[   62.344298][ T5998] bridge0: port 3(veth0_vlan) entered blocking state
[   62.346893][ T5998] bridge0: port 3(veth0_vlan) entered disabled state
[   62.352962][ T5998] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   62.363131][ T5945] syz.2.11 (5945) used greatest stack depth: 19864 bytes left
[   62.390766][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.28'.
[   62.626026][ T6021] syzkaller0: entered promiscuous mode
[   62.627945][ T6021] syzkaller0: entered allmulticast mode
[   62.685013][ T6030] __nla_validate_parse: 1 callbacks suppressed
[   62.685023][ T6030] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.36'.
[   62.714380][ T6032] netlink: 40 bytes leftover after parsing attributes in process `syz.0.37'.
[   62.733708][ T6032] tc_dump_action: action bad kind
[   62.993381][ T6046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.344159][   T54] Bluetooth: hci1: command tx timeout
[   63.344197][ T5851] Bluetooth: hci0: command tx timeout
[   63.432069][ T5851] Bluetooth: hci2: command tx timeout
[   63.593638][ T6054] bond0: entered promiscuous mode
[   63.595908][ T6054] bond_slave_0: entered promiscuous mode
[   63.598929][ T6054] bond_slave_1: entered promiscuous mode
[   63.605641][ T6054] batadv0: entered promiscuous mode
[   63.608378][ T6054] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   63.616336][ T6054] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   63.619663][ T6054] hsr1: entered allmulticast mode
[   63.621378][ T6054] bond0: entered allmulticast mode
[   63.623529][ T6054] bond_slave_0: entered allmulticast mode
[   63.625682][ T6054] bond_slave_1: entered allmulticast mode
[   63.627737][ T6054] batadv0: entered allmulticast mode
[   63.629911][ T6054] 8021q: adding VLAN 0 to HW filter on device hsr1
[   63.633351][ T6054] bond0: left promiscuous mode
[   63.635063][ T6054] bond_slave_0: left promiscuous mode
[   63.636894][ T6054] bond_slave_1: left promiscuous mode
[   63.639212][ T6054] batadv0: left promiscuous mode
[   63.872356][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'.
[   63.903100][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'.
[   63.907238][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[   63.976014][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[   63.981314][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'.
[   64.117213][ T6099] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000
[   64.219456][ T6111] Bluetooth: MGMT ver 1.23
[   64.234137][ T6111] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   64.238502][ T6111] netlink: 14 bytes leftover after parsing attributes in process `syz.2.55'.
[   64.305763][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'.
[   64.327646][ T6111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.333803][ T6111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.338229][ T6111] bond0 (unregistering): Released all slaves
[   64.462338][ T6122] netlink: 'syz.2.59': attribute type 22 has an invalid length.
[   64.469413][ T6124] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   64.480072][ T6124] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   64.483541][ T6124] netlink: 108 bytes leftover after parsing attributes in process `syz.1.60'.
[   64.601911][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.606470][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.610202][ T6134] bond0 (unregistering): Released all slaves
[   65.407737][ T6149] block nbd1: not configured, cannot reconfigure
[   65.639066][ T6164] tipc: Started in network mode
[   65.641171][ T6164] tipc: Node identity 564ba8aa6bf1, cluster identity 4711
[   65.650642][ T6164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.654389][ T6164] veth0_to_hsr: entered promiscuous mode
[   65.656650][ T6164] veth0_to_hsr: entered allmulticast mode
[   65.664492][ T6159] tipc: Disabling bearer <eth:syzkaller0>
[   65.747731][ T6180] netlink: 'syz.0.78': attribute type 39 has an invalid length.
[   65.803673][ T6185] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   65.913811][ T6190] netlink: 'syz.2.82': attribute type 4 has an invalid length.
[   65.916486][ T6191] netlink: 'syz.2.82': attribute type 4 has an invalid length.
[   66.005782][ T6198] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.014563][ T6195] team0: No ports can be present during mode change
[   66.046813][ T5872] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.065543][ T5872] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.069131][ T5872] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.082978][ T5872] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.231041][ T6221] geneve2: entered promiscuous mode
[   66.234407][ T6221] geneve2: entered allmulticast mode
[   66.238151][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.265473][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.268866][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.273475][ T6225] team0: No ports can be present during mode change
[   66.275985][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.289524][ T6226] netlink: 'syz.1.94': attribute type 1 has an invalid length.
[   66.511387][ T6250] netlink: 'syz.0.103': attribute type 10 has an invalid length.
[   66.530702][ T6250] veth1_vlan: left promiscuous mode
[   66.544023][ T6250] veth1_vlan: entered promiscuous mode
[   66.546919][ T6250] veth1_vlan: entered allmulticast mode
[   67.040424][ T6301] netlink: 'syz.1.116': attribute type 10 has an invalid length.
[   67.046649][ T6301] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   67.147867][ T6312] team0: No ports can be present during mode change
[   67.285884][ T6316] 0X: renamed from caif0
[   67.301439][ T6316] 0X: entered allmulticast mode
[   67.310103][ T6316] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   67.383956][ T6327] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.435507][ T6327] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.495963][ T6327] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.551233][ T6327] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.644660][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.657274][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.668665][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.680571][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.726396][ T6351] warning: `syz.2.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.794801][ T6352] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.838321][ T6364] __nla_validate_parse: 17 callbacks suppressed
[   67.838333][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'.
[   67.850394][ T6364] validate_nla: 3 callbacks suppressed
[   67.850402][ T6364] netlink: 'syz.2.136': attribute type 1 has an invalid length.
[   67.874489][ T6364] veth3: entered promiscuous mode
[   67.878936][ T6364] erspan0: entered allmulticast mode
[   68.076975][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'.
[   68.109604][ T6379] netlink: 'syz.2.140': attribute type 10 has an invalid length.
[   68.128974][ T6379] team0: Port device dummy0 added
[   68.135031][ T6379] netlink: 'syz.2.140': attribute type 10 has an invalid length.
[   68.140717][ T6379] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   68.159563][ T6379] team0: Failed to send options change via netlink (err -105)
[   68.163159][ T6379] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   68.168366][ T6379] team0: Port device dummy0 removed
[   68.180767][ T6383] netlink: 'syz.0.142': attribute type 13 has an invalid length.
[   68.183814][ T6383] netlink: 'syz.0.142': attribute type 17 has an invalid length.
[   68.254664][ T6383] 8021q: adding VLAN 0 to HW filter on device team0
[   68.265969][ T6383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.334183][ T6393] netlink: 'syz.1.145': attribute type 1 has an invalid length.
[   68.374973][ T6393] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   68.379497][ T5872] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   68.385194][ T6393] 8021q: adding VLAN 0 to HW filter on device bond3
[   68.397144][ T6393] veth3: entered promiscuous mode
[   68.404414][ T6393] bond3: (slave veth3): Enslaving as a backup interface with a down link
[   68.433352][ T6393] bridge_slave_0: left allmulticast mode
[   68.435797][ T6393] bridge_slave_0: left promiscuous mode
[   68.438361][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.455139][ T6393] bridge_slave_1: left allmulticast mode
[   68.456991][ T6393] bridge_slave_1: left promiscuous mode
[   68.459127][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.466768][ T6393] bond0: (slave bond_slave_0): Releasing backup interface
[   68.469362][ T6393] bond_slave_0: left allmulticast mode
[   68.472749][ T6393] bond0: (slave bond_slave_1): Releasing backup interface
[   68.475741][ T6393] bond_slave_1: left allmulticast mode
[   68.478509][ T6393] team0: Port device team_slave_0 removed
[   68.481382][ T6393] team0: Port device team_slave_1 removed
[   68.484833][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.492101][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   68.495843][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.499591][ T6393] bond3: (slave ip6gretap1): Removing an active aggregator
[   68.503205][ T6393] bond3: (slave ip6gretap1): Releasing backup interface
[   68.506082][ T6393] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 2a:46:b4:ef:a1:73 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   68.515675][ T6393] bond3: (slave veth3): Releasing backup interface
[   68.645457][ T6397] netlink: 156 bytes leftover after parsing attributes in process `syz.2.146'.
[   68.743276][ T6406] netlink: 72 bytes leftover after parsing attributes in process `syz.1.148'.
[   68.803003][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'.
[   68.808756][ T6406] macvlan3: entered promiscuous mode
[   68.810552][ T6406] bond0: entered promiscuous mode
[   68.822472][ T6406] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   68.888098][ T6411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.890437][ T6412] syzkaller0: entered promiscuous mode
[   68.893759][ T6412] syzkaller0: entered allmulticast mode
[   68.906782][ T6412] tipc: Resetting bearer <eth:syzkaller0>
[   68.916184][ T6412] tipc: Disabling bearer <eth:syzkaller0>
[   68.957354][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'.
[   68.963444][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'.
[   68.972914][ T6420] macsec1: entered promiscuous mode
[   68.974826][ T6420] batadv0: entered promiscuous mode
[   68.981516][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'.
[   68.985726][ T6420] batadv0: left promiscuous mode
[   69.177913][ T6433] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.185357][ T6433] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   69.239289][ T6433] netlink: 92 bytes leftover after parsing attributes in process `syz.1.156'.
[   69.255018][ T6445] netlink: 'syz.2.160': attribute type 11 has an invalid length.
[   69.287375][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'.
[   69.348726][ T6454] netlink: 'syz.2.161': attribute type 1 has an invalid length.
[   69.428935][ T6461] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   69.434218][ T6461] batman_adv: batadv0: Adding interface: gretap1
[   69.436346][ T6461] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.444979][ T6461] batman_adv: batadv0: Interface activated: gretap1
[   70.182245][ T6510] batadv_slave_1: entered promiscuous mode
[   70.196773][ T6513] tipc: Started in network mode
[   70.198537][ T6513] tipc: Node identity 1ee192ca244d, cluster identity 4711
[   70.201266][ T6513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.232134][ T6513] syzkaller0: entered promiscuous mode
[   70.234318][ T6513] syzkaller0: entered allmulticast mode
[   70.301615][ T6522] tipc: Resetting bearer <eth:syzkaller0>
[   70.337270][ T6512] tipc: Resetting bearer <eth:syzkaller0>
[   70.347675][ T6512] tipc: Disabling bearer <eth:syzkaller0>
[   70.356553][ T6509] batadv_slave_1: left promiscuous mode
[   70.413392][ T6526] netlink: 'syz.0.183': attribute type 10 has an invalid length.
[   70.425097][ T6526] team0: Port device dummy0 added
[   70.427407][ T6528] team0: No ports can be present during mode change
[   70.430760][ T6526] netlink: 'syz.0.183': attribute type 10 has an invalid length.
[   70.445960][ T6526] team0: Port device dummy0 removed
[   70.656361][ T6547] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   70.684687][ T6547] IPVS: Scheduler module ip_vs_sip not found
[   70.688263][ T6548] netlink: 'syz.0.190': attribute type 1 has an invalid length.
[   70.933750][ T6563] team0: No ports can be present during mode change
[   71.026796][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.029051][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.299424][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.315142][ T6585] bond0: left promiscuous mode
[   71.318156][ T6585] batman_adv: batadv0: Interface deactivated: gretap1
[   71.323520][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.326592][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.329807][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.370898][ T6589] team0: No ports can be present during mode change
[   71.710303][ T6611] bond2: (slave veth3): Enslaving as an active interface with a down link
[   71.725393][ T6611] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.743190][ T6611] macvtap1: entered promiscuous mode
[   71.745298][ T6611] vlan0: entered promiscuous mode
[   71.747221][ T6611] macvtap1: entered allmulticast mode
[   71.749029][ T6611] vlan0: entered allmulticast mode
[   71.768147][ T6614] team0: Mode "actickup" not found
[   71.860863][ T6619] wg0: entered promiscuous mode
[   71.989237][ T6627] IPv6: Can't replace route, no match found
[   72.025100][ T6631] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   72.202298][ T6640] team0: No ports can be present during mode change
[   72.314648][ T6645] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   72.318972][ T6645] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[   72.364920][ T6651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.400361][ T6650] vlan2: entered promiscuous mode
[   72.402681][ T6650] macvtap0: entered promiscuous mode
[   72.471942][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   72.605034][ T6676] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   72.608418][ T6676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.691346][ T6681] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   72.698693][ T6681] bridge_slave_0: left allmulticast mode
[   72.701128][ T6681] bridge_slave_0: left promiscuous mode
[   72.704584][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.708583][ T6681] bridge_slave_1: left allmulticast mode
[   72.710435][ T6681] bridge_slave_1: left promiscuous mode
[   72.712499][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.717027][ T6681] team0: Port device team_slave_0 removed
[   72.720201][ T6681] team0: Port device team_slave_1 removed
[   72.724202][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.726890][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.730951][ T6681] bond2: (slave veth3): Releasing active interface
[   72.743499][ T6681] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   72.839681][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   72.847866][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   72.862210][   T10] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   73.118393][ T6712] __nla_validate_parse: 14 callbacks suppressed
[   73.118402][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'.
[   73.132823][ T6713] syzkaller1: entered promiscuous mode
[   73.134973][ T6713] syzkaller1: entered allmulticast mode
[   73.276236][ T6719] netlink: 56 bytes leftover after parsing attributes in process `syz.1.236'.
[   73.279516][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.236'.
[   73.284279][ T6719] bridge0: port 1(erspan0) entered blocking state
[   73.286852][ T6719] bridge0: port 1(erspan0) entered disabled state
[   73.289221][ T6719] erspan0: entered allmulticast mode
[   73.292295][ T6719] erspan0: entered promiscuous mode
[   73.323683][ T6721] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   73.370801][ T6725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.239'.
[   73.373793][ T6725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.239'.
[   73.524243][  T974] cfg80211: failed to load regulatory.db
[   73.650128][ T6736] validate_nla: 7 callbacks suppressed
[   73.650138][ T6736] netlink: 'syz.0.243': attribute type 2 has an invalid length.
[   73.824583][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'.
[   73.885485][ T6745] syzkaller1: entered promiscuous mode
[   73.887377][ T6745] syzkaller1: entered allmulticast mode
[   73.904389][ T6745] netlink: 14 bytes leftover after parsing attributes in process `syz.0.246'.
[   74.111913][ T6750] netlink: 'syz.0.248': attribute type 2 has an invalid length.
[   74.114565][ T6750] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.248'.
[   74.365657][ T6755] netlink: 108 bytes leftover after parsing attributes in process `syz.1.250'.
[   74.398878][ T6757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.403104][ T6757] syzkaller0: entered promiscuous mode
[   74.405605][ T6757] syzkaller0: entered allmulticast mode
[   74.418756][ T6757] tipc: Resetting bearer <eth:syzkaller0>
[   74.422955][ T6756] tipc: Resetting bearer <eth:syzkaller0>
[   74.430726][ T6756] tipc: Disabling bearer <eth:syzkaller0>
[   74.528083][ T6761] syzkaller0: entered promiscuous mode
[   74.530480][ T6761] syzkaller0: entered allmulticast mode
[   74.536507][ T6761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.540106][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'.
[   74.549155][ T6761] tipc: Resetting bearer <eth:syzkaller0>
[   74.553284][ T6760] tipc: Resetting bearer <eth:syzkaller0>
[   74.561303][ T6760] tipc: Disabling bearer <eth:syzkaller0>
[   74.662006][ T6763] team0: Mode "actickup" not found
[   74.748919][ T6766] netlink: 'syz.1.255': attribute type 1 has an invalid length.
[   74.752134][ T6766] netlink: 'syz.1.255': attribute type 1 has an invalid length.
[   74.755234][ T6766] netlink: 'syz.1.255': attribute type 2 has an invalid length.
[   74.805704][ T6777] erspan0: left allmulticast mode
[   74.808072][ T6777] erspan0: left promiscuous mode
[   74.810531][ T6777] bridge0: port 1(erspan0) entered disabled state
[   74.818894][ T6777] bond0: (slave netdevsim0): Releasing backup interface
[   74.824888][ T6777] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   74.828840][ T6777] batman_adv: batadv0: Removing interface: gretap1
[   75.246887][ T6806] netlink: 'syz.0.265': attribute type 1 has an invalid length.
[   75.302980][ T6806] veth5: entered promiscuous mode
[   75.398379][ T6811] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   75.435378][ T6813] team0: Mode "actickup" not found
[   75.802972][ T6835] netlink: 'syz.1.273': attribute type 1 has an invalid length.
[   75.853317][ T6835] bond4: (slave geneve0): making interface the new active one
[   75.856345][ T6835] bond4: (slave geneve0): Enslaving as an active interface with an up link
[   75.860676][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   75.876617][ T6844] netlink: 'syz.0.274': attribute type 1 has an invalid length.
[   75.881017][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   75.927857][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   75.945237][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   75.983449][ T6839] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   75.989400][ T6847] lo speed is unknown, defaulting to 1000
[   75.991516][ T6847] lo speed is unknown, defaulting to 1000
[   75.998308][ T6847] lo speed is unknown, defaulting to 1000
[   76.004359][ T6847] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.025696][ T6847] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   76.066271][ T6847] lo speed is unknown, defaulting to 1000
[   76.074230][ T6847] lo speed is unknown, defaulting to 1000
[   76.077861][ T6847] lo speed is unknown, defaulting to 1000
[   76.080468][ T6847] lo speed is unknown, defaulting to 1000
[   76.321147][ T6885] pim6reg1: entered promiscuous mode
[   76.324161][ T6885] pim6reg1: entered allmulticast mode
[   76.351057][ T6886] netlink: 'syz.0.282': attribute type 1 has an invalid length.
[   76.354320][ T6886] netlink: 'syz.0.282': attribute type 1 has an invalid length.
[   77.159656][ T6915] macsec1: entered promiscuous mode
[   77.162119][ T6915] macsec1: entered allmulticast mode
[   77.206607][ T6917] delete_channel: no stack
[   77.494439][ T6936] team0: Mode "actickup" not found
[   77.724734][ T6955] team0: Mode "actickup" not found
[   78.064557][ T6980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.067271][ T6980] veth0_to_bridge: entered promiscuous mode
[   78.069494][ T6980] veth0_to_bridge: entered allmulticast mode
[   78.078125][ T6979] tipc: Disabling bearer <eth:syzkaller0>
[   78.116019][ T6982] veth0: entered promiscuous mode
[   78.132941][ T6983] veth0 (unregistering): left promiscuous mode
[   78.234277][ T6986] team0: Mode "actickup" not found
[   78.416692][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[   78.420235][ T6992] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   78.423834][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[   78.428950][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[   78.433504][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[   78.845508][ T7007] __nla_validate_parse: 21 callbacks suppressed
[   78.845518][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'.
[   78.853930][ T7007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'.
[   78.921223][ T7007] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   78.962613][ T7004] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[   78.995350][    C1] Illegal XDP return value 16128 on prog  (id 82) dev lo, expect packet loss!
[   79.217186][ T7021] team0: No ports can be present during mode change
[   79.220830][ T7019] bond4: (slave geneve0): Releasing active interface
[   79.268594][ T7019] vlan0: entered promiscuous mode
[   79.271631][ T7019] tipc: Enabled bearer <eth:team0>, priority 0
[   80.273483][   T10] tipc: Node number set to 1035643050
[  132.304559][ T5851] Bluetooth: hci2: link tx timeout
[  132.307118][ T5851] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  132.311551][ T5851] Bluetooth: hci2: link tx timeout
[  132.313752][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.465657][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  134.384649][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  136.461957][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  180.625235][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  180.625327][ T5853] Bluetooth: hci0: command 0x0406 tx timeout
[  193.915443][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  255.344227][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  316.785411][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  378.225278][ T1365] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
04:16:31  Registers:
info registers vcpu 0

CPU#0
RAX=71042868deb5ce00 RBX=ffffffff819683c8 RCX=71042868deb5ce00 RDX=0000000000000001
RSI=ffffffff8d9b7f8c RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555e631bf600 CR3=0000000107cc6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fcdf3da7d20
XMM02=b091f6d03c7029f5 634e365afa5508d9 XMM03=5c05b9d36eb1f61e f6c1d1bf3212a4b6
XMM04=17d6b7374e9ede3e 62a016cdebc888a8 XMM05=010fffffffffffff 044f80041eb81000
XMM06=060172dc284f9c00 0200040a4fb00339 XMM07=76d8e7a8db0d3d5e 17d6b7374e9ede3e
XMM08=62a016cdebc888a8 5c05b9d36eb1f61e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=225db6c11c6acb00 RBX=ffffffff819683c8 RCX=225db6c11c6acb00 RDX=0000000000000001
RSI=ffffffff8d9b7f8c RDI=ffffffff8be33800 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555e631c0680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000071 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00306e6170772f74 656e2f307968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
