last executing test programs:

1.304571363s ago: executing program 0 (id=764):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}, {&(0x7f0000000d00)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='/', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="f1", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)='\x00', 0x1}, {&(0x7f0000000880)="8714", 0x2}, {&(0x7f0000000900)="11", 0x1}, {&(0x7f00000009c0)="c71924", 0x3}, {&(0x7f0000000b40)="69cd", 0x2}], 0x5}}], 0x3, 0x4000000)
sendmmsg$inet(r2, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)="056e", 0x2}], 0x1}}], 0x1, 0x80)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880)
close(0x3)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0)

1.178933198s ago: executing program 2 (id=768):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0x8, 0x10}, 0x20)
r0 = socket(0x2000000015, 0x800, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvfrom$packet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x80)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={0xffffffffffffffff, 0x0}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000500)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x140d, 0x300, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0xa9f, 0xae, &(0x7f00000001c0)=""/174, 0x40f00, 0x74, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[r2, 0xffffffffffffffff, r4], &(0x7f00000002c0)=[{0x5, 0x5, 0x2, 0xb}, {0x0, 0x4, 0x8, 0x9}, {0x2, 0x1, 0x5, 0x7}, {0x1, 0x1, 0xb, 0x1}], 0x10, 0x85}, 0x94)

1.178551487s ago: executing program 2 (id=769):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000ffff26bd7000fddbdf2700000000", @ANYRES32=0x0, @ANYBLOB="100a0500230000001c0012800b00010062000a000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084732598c)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
bind$alg(r6, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x1f0, 0x80}], 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000480)={0x2, 0x3ff, 0x6487e762e32105a2, 0xec45, 0xfffffeff, 0xfffffffa, 0x8, 0x4, <r9=>r8}, &(0x7f0000000500)=0x20)
sendmmsg$inet_sctp(r6, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}, {&(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000080)}, {&(0x7f0000000a00)="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", 0x138}, {&(0x7f0000000280)="a6d4c1c5ea5bc7bbc0b52d65db4f39f8dd658de88e414b8fd4b462de3cb6e80038a9abd854a3eed082b54319053582f3fbff2ea2953752a337524331e6190ee62210a27e66df22ca44702ba6d0bf4e64d9b9", 0x52}, {&(0x7f00000003c0)="58617c6275e9f528cc54f90ea2591133d021390ba6998a976071cd273d0a876b4900f6202d83f5731f535b89d9876f14b563864d7a86e937f599f0a18766f930394cfb7aec15af763d9a7abfc8950e5e095a83f53b0084a26c02cb04cf4d319cb1132e130c0635436965fac7dc40b3939e5123910b78f427e74ce1eb387a8dc6b1e8d14eada4b0760ad6e84446d4c1c1092a", 0x92}, {&(0x7f0000000580)="65f08cb71d5ce75249cfbace2c4473b7766f071e7d9f8a231750288567692068e2cdcab406dc548c622c704706676108e0aa5b9cc170ba05008f5459c6191456f5a018a3d1fefbec9c879df26efd7917367e84568388964886110f026e94fe068412a28e4f60dab08f0b70d69c2618de6da5328eebcd93339a51fe", 0x7b}], 0x5, &(0x7f0000000940)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @authinfo={0x18}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x0, 0x7b, 0x0, r9}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x88}], 0x2, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
unshare(0x62040200)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

980.667821ms ago: executing program 2 (id=770):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000010"], 0xb8}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000300)=0x100000001, 0x4)
recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x9, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), 0x0}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400ca028008ae0300ffffffff080002007f00005e825ea2997011cdf4d326622dad568034289e8868813dfc0e00272a8bc7fe514a814f1276984f5ea62283fae38bc12846fd793a84f55c33c9d97077462f12330b48b7126bd6abd850980dd807a2ee277bb8e31aa896027575a23ce3f67518f08e052e1c60d1f5da23036da44a451d06c1d9c9607b3d0cd68f6560dfcef299a393f9d51785c24922a947627847fa2aa4e429caf07cbde66735b8454c7d5eb84b72053da70ec1fc617ad3d59c9c0130af68d4668714c7b0b1028f7425c8d8cb06bd1ff4b2f54f6d0f2bad3f4258c9163569acabc356b7f7079ba1eb9955f8aaba4d88697771334c731428db28ea33d9b7e3f2239f519ffc13f35ce7ddc2970fed3d716c4d53b90afec1dc9b594555a6b2f560eb71758c540c723f61d45bce250d41246fc3cd2760c44c208b4c6e79ff7c57252d41f82dd788cf3842d60e2590e4c50c7cffc68ec587a5d050c7b35c8f2707c24ab7e296c9e1e411bd8463c72ad2586147835a3011999db0cb0f65f1fa91fa0fbf5d1757e1b5496f065257e4f7099a724e2adb0ac0f827e997f8b162d0e62d69bd5f6f68e18740e0ec878e47a145141992466cd41247741e027128bd494152ea148d7991dcad593cb70b79c4302ed23ddc0d01ac963b7f94d8cc6b59030f112f5a7f8ca0075fb18310bce4eb04dacf6c597cfc5c54c5970797df67a305723278bc0071fc470b7799f198ba1d20568c937f901b6b47ae96aeb4a2056429d749794096432963b4909f"], 0x40}}, 0x840d1)

980.068549ms ago: executing program 2 (id=771):
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0xfffffffc)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xe, 0x0, &(0x7f0000000300)=0xffffffffffffffa3)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x1, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r5, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc32, 0x6d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4884)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x1000}, 0x4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r8, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x4048001)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'})
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r11, 0x400448c9, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x8, r2}, 0x18)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x28}}, 0x0)

421.187783ms ago: executing program 0 (id=772):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000380)={{0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x401}, {0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, '\x00', 0x11}}, 0xffffffffffffffff, {[0x410, 0x4, 0x2, 0x0, 0x2, 0x5, 0xfffffffe, 0x6]}}, 0x5c)
close(r1) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket(0x23, 0x80805, 0x2)
listen(r8, 0x0) (async)
connect$llc(r8, &(0x7f0000000540)={0x1a, 0x205, 0x2, 0x1, 0x6, 0x0, @broadcast}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1f}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x1d}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x44}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x3941}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

361.300555ms ago: executing program 0 (id=773):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6", 0x6b}, {&(0x7f00000004c0)="846d2ad6d4ef6560542286af609ff6ca49c12d9b19e1843ce4c332e6f0932bc521d0bdcd40638430b5dbdb1a26009aaba510eb36442d9c3fb54c6b14c0e5c2867c43e8a75801149e1613c3fc8a5fd8470359795f85d3741efcbe77df1b9bfad527863f7684842cce7eeb775eda", 0x6d}], 0x2}, 0x200000d4)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

360.689976ms ago: executing program 0 (id=774):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x4000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)

358.812431ms ago: executing program 0 (id=776):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000000c0)=0x899, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0)

230.32316ms ago: executing program 1 (id=778):
socket$rds(0x15, 0x5, 0x0) (async, rerun: 64)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10, 0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x0, 0xfe, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x5b5ace103c4b045}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x900, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bde6, 0x25dfdbf9, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x3b}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x230}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xc94}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x14) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000000101040000000000000000010000001c009880075d6c7984ea99a69f9d1266601408000240012b8000040001800000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async)
r3 = socket$kcm(0x2, 0x5, 0x84) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (rerun: 64)
close(r5) (async)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000)=r6, 0x8) (async)
r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x8)
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7fffffff, 'syz1\x00', @null, 0x9, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000300))
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0)

180.417695ms ago: executing program 1 (id=779):
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg1\x00'})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x7, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @multicast2}, {0x306, @multicast}, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, 'vlan1\x00'})
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000003c0)={0x1}, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10)
write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x101002, 0x0)

175.964733ms ago: executing program 1 (id=780):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r3, 0x1, 0x47, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0803050007000000"], 0x24}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x87)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYRES16=r10, @ANYRES8=0x0, @ANYRES16=r9], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
readv(r11, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x20}, 0x8, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, 0x0, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r14, 0x3)
ioctl$sock_TIOCOUTQ(r14, 0x5411, 0x0)

79.880612ms ago: executing program 2 (id=781):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
accept4(r2, 0x0, 0x0, 0x80000) (async)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
recvmsg$can_raw(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x22)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4)

79.045707ms ago: executing program 1 (id=782):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x609, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @remote}]}}}]}, 0x4c}}, 0x20000040)

78.716206ms ago: executing program 2 (id=783):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32)
r1 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0) (async, rerun: 32)
r3 = socket(0x10, 0x803, 0x0) (rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010003704000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="830405000000000020001280080008006714bb08000700e0000001"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async, rerun: 32)
close(r3) (async, rerun: 32)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x200080d0) (async)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000340)=""/49, &(0x7f0000000440)=0x31)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x0, 0x0)

991.269µs ago: executing program 0 (id=784):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c)
socket$isdn_base(0x22, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xe)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, 0x0, 0x768, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa00"/197], 0x23c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000e90920000000000a0102000000000000000001000000090001e172797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000640000000180a0101000b7dd8bd80b1af2e60eb0d000000000000010000000900010073797a30000000000900020073797a300000000014000380085bc60001400000000008000240000000061400000010000100"], 0xc8}}, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0x3a, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r5 = socket(0x10, 0x800, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r5)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000740)={<r7=>0x0, 0xe00, "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"}, &(0x7f0000000040)=0xe08)
bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x11)
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r7, 0x1b3}, 0x8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00000000000008004509003000000000889078ac1e0001ac1414aa0c009078000b0300450000000000000000000000e0000001e0000002d0c465bdb2a300"], 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

563.666µs ago: executing program 1 (id=785):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
socket$kcm(0x21, 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}}, 0x0)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'ip6_vti0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRES16=r6, @ANYRES32=r1], 0x38}}, 0x4000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r8, @ANYBLOB="0800c300741300000800c40001000004"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x6c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d4e554db291e1aa3b454de7fce1f8f84"}, @NL80211_ATTR_PMKID={0x14, 0x55, "4862026a9cf2aaf4dd356e2d18b5e09e"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x51}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000840)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000104010100000000000042000400000606000640000100000500010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000b42beaabdd80f4b76d3070e01b44b36628820af8bf4cce710563a22fc7b07dc267726aad1a9557e4f5919bd49e74568b68c93d07aed21f7fc29afa38738ddb494409a3ef8e02e035edda2d5a9a355b424be03213684a1f828a90318668ab605d5e9093d1050000006be33fc37593c48c8685fc44c9ef45ccb4cb0f83c3ed0000", @ANYRES16=r6, @ANYBLOB="000825bd7000fddbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r12, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000101}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d0, r13, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0xdd}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe7f7c4b5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

0s ago: executing program 1 (id=786):
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000007000000008000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000200000000000000000000000346611ffb9ea89a2b41c90d8647ff34f21a40a65e8f01bacc4914ace7baceeb927b4ad911401f44624067b636053e49b54e981f8235cdf2d8664f8453547073d454e3721b6579154784c2d1c26ca5751e5a543902e0a8cd1f65d1e17683e44198a67de4b67a38d119a8b7e09f0e47bde2f4e4712e9522007bdb382fd15aa67", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="09583ade49d9", 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
listen(r2, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x800)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r3, &(0x7f0000000000)={0x0, 0x7, 0x1, 0xff}, 0x8)
syz_emit_ethernet(0x68, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}, {"83c28bcb1ad8b8d36292345e51d7592f06063c3723788e3752d56c88a684d46b5445f44c1e54"}}}}}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000300), r4)
r5 = socket(0x10, 0x80002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc0000000000000000060000000000020000000000"], 0x0, 0xfc5f}, 0x20)
listen(r6, 0xfffffffc)
recvmmsg(r5, &(0x7f0000003f40)=[{{&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000004040)=""/230, 0xe6}, {&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000680)=""/245, 0xf5}, {0x0}], 0x5, &(0x7f0000000800)=""/161, 0xa1}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/233, 0xe9}, 0x3}], 0x2, 0x100, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55555' (ED25519) to the list of known hosts.
syzkaller login: [   41.152317][ T5816] cgroup: Unknown subsys name 'net'
[   41.270416][ T5816] cgroup: Unknown subsys name 'cpuset'
[   41.274671][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.540323][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.708232][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.710787][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.713496][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.716460][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.719272][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.754106][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.757774][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.760819][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.764373][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.767890][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.771616][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.775280][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.779866][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.783647][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.787094][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.895295][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   45.948028][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.951022][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.953971][ T5840] bridge_slave_0: entered allmulticast mode
[   45.956395][ T5840] bridge_slave_0: entered promiscuous mode
[   45.961133][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.963845][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.966574][ T5840] bridge_slave_1: entered allmulticast mode
[   45.969519][ T5840] bridge_slave_1: entered promiscuous mode
[   45.993113][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.004556][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.049140][ T5840] team0: Port device team_slave_0 added
[   46.052802][ T5840] team0: Port device team_slave_1 added
[   46.066508][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.069683][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.078749][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.082883][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   46.088313][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.091267][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.101309][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.105841][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   46.154391][ T5840] hsr_slave_0: entered promiscuous mode
[   46.157770][ T5840] hsr_slave_1: entered promiscuous mode
[   46.211518][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.214425][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.219463][ T5846] bridge_slave_0: entered allmulticast mode
[   46.222554][ T5846] bridge_slave_0: entered promiscuous mode
[   46.232055][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.234926][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.238921][ T5844] bridge_slave_0: entered allmulticast mode
[   46.241979][ T5844] bridge_slave_0: entered promiscuous mode
[   46.245599][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.248662][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.251581][ T5844] bridge_slave_1: entered allmulticast mode
[   46.254682][ T5844] bridge_slave_1: entered promiscuous mode
[   46.258474][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.260886][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.263568][ T5846] bridge_slave_1: entered allmulticast mode
[   46.266388][ T5846] bridge_slave_1: entered promiscuous mode
[   46.288630][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.293858][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.310753][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.320257][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.338048][ T5846] team0: Port device team_slave_0 added
[   46.345360][ T5844] team0: Port device team_slave_0 added
[   46.351699][ T5846] team0: Port device team_slave_1 added
[   46.354770][ T5844] team0: Port device team_slave_1 added
[   46.380408][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.383026][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.393137][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.400525][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.403431][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.412478][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.416521][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.419220][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.427689][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.440153][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.442895][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.452940][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.472380][ T5846] hsr_slave_0: entered promiscuous mode
[   46.475238][ T5846] hsr_slave_1: entered promiscuous mode
[   46.478973][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   46.480969][ T5846] Cannot create hsr debugfs directory
[   46.510396][ T5844] hsr_slave_0: entered promiscuous mode
[   46.513245][ T5844] hsr_slave_1: entered promiscuous mode
[   46.515946][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   46.518438][ T5844] Cannot create hsr debugfs directory
[   46.539486][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.546971][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.560624][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.581216][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.643724][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.646160][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.648723][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.651241][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.682915][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.689816][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.696051][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.701353][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.736967][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.742472][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.754506][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.758493][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.760895][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.763314][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.765881][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.771513][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.781364][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.797919][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.800618][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.805106][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.808449][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.819634][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   46.826424][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.829264][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.836430][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.839186][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.870554][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.887285][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.905768][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.910865][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   46.919443][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.921930][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.939521][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   46.942500][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.944906][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.958587][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.960879][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.964210][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.966814][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.989898][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.008199][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.043544][ T5840] veth0_vlan: entered promiscuous mode
[   47.056124][ T5840] veth1_vlan: entered promiscuous mode
[   47.070113][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.084238][ T5840] veth0_macvtap: entered promiscuous mode
[   47.095045][ T5840] veth1_macvtap: entered promiscuous mode
[   47.109807][ T5846] veth0_vlan: entered promiscuous mode
[   47.113852][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.121701][ T5846] veth1_vlan: entered promiscuous mode
[   47.125550][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.137052][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.146665][ T5870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.150931][ T5869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.158599][ T5869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.167932][ T5869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.179340][ T5844] veth0_vlan: entered promiscuous mode
[   47.181877][ T5846] veth0_macvtap: entered promiscuous mode
[   47.196937][ T5846] veth1_macvtap: entered promiscuous mode
[   47.210425][ T5844] veth1_vlan: entered promiscuous mode
[   47.217212][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.219948][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.223258][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.236814][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.242271][ T5844] veth0_macvtap: entered promiscuous mode
[   47.248837][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.252435][ T5870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.256742][ T5844] veth1_macvtap: entered promiscuous mode
[   47.261082][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.266574][ T5870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.272445][ T5870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.284037][ T5870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.294256][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.299775][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.308392][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.325898][ T5869] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.337714][ T5869] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.344473][ T5869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.348732][ T5869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.363004][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.365830][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.385652][ T5906] netlink: 'syz.0.1': attribute type 4 has an invalid length.
[   47.410530][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.418734][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.433752][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.436732][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.451903][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.455277][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.497268][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   47.542580][ T5912] Zero length message leads to an empty skb
[   47.561925][ T5922] netlink: 'syz.2.3': attribute type 10 has an invalid length.
[   47.585950][ T5922] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   47.596257][ T5924] tipc: Started in network mode
[   47.599315][ T5924] tipc: Node identity 26051b6a206d, cluster identity 4711
[   47.601786][ T5924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.604801][ T5924] syzkaller0: entered promiscuous mode
[   47.606709][ T5924] syzkaller0: entered allmulticast mode
[   47.614763][ T5924] tipc: Resetting bearer <eth:syzkaller0>
[   47.617952][ T5923] tipc: Resetting bearer <eth:syzkaller0>
[   47.620643][ T5923] tipc: Disabling bearer <eth:syzkaller0>
[   47.652467][ T5930] Bluetooth: MGMT ver 1.23
[   47.661440][ T5930] syzkaller0: entered promiscuous mode
[   47.663882][ T5930] syzkaller0: entered allmulticast mode
[   47.747667][ T5843] Bluetooth: hci0: command tx timeout
[   47.827549][ T5848] Bluetooth: hci2: command tx timeout
[   47.829875][ T5843] Bluetooth: hci1: command tx timeout
[   47.835018][ T5940] netlink: 'syz.0.10': attribute type 2 has an invalid length.
[   47.839021][ T5940] netlink: 244 bytes leftover after parsing attributes in process `syz.0.10'.
[   48.091847][ T5957] netlink: 'syz.0.15': attribute type 12 has an invalid length.
[   48.118196][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'.
[   49.036719][ T5979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'.
[   49.062633][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'.
[   49.090189][ T5984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21'.
[   49.097215][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.106426][ T5984] netlink: 'syz.2.21': attribute type 8 has an invalid length.
[   49.130309][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20'.
[   49.134708][ T5982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'.
[   49.140704][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'.
[   49.166230][ T5986] bridge_slave_1: left allmulticast mode
[   49.169061][ T5986] bridge_slave_1: left promiscuous mode
[   49.171027][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.174359][ T5988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   49.177623][ T5986] bridge_slave_0: left allmulticast mode
[   49.179513][ T5986] bridge_slave_0: left promiscuous mode
[   49.181649][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.277007][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'.
[   49.283204][ T5998] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   49.310022][ T5998] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   49.332653][ T5998] syzkaller0: entered promiscuous mode
[   49.335026][ T5998] syzkaller0: entered allmulticast mode
[   49.469481][ T6005] sctp: [Deprecated]: syz.1.28 (pid 6005) Use of struct sctp_assoc_value in delayed_ack socket option.
[   49.469481][ T6005] Use struct sctp_sack_info instead
[   49.476000][ T6005] sctp: [Deprecated]: syz.1.28 (pid 6005) Use of struct sctp_assoc_value in delayed_ack socket option.
[   49.476000][ T6005] Use struct sctp_sack_info instead
[   49.482207][ T6005] netlink: 'syz.1.28': attribute type 9 has an invalid length.
[   49.486671][ T6005] hsr0: entered promiscuous mode
[   49.491025][ T6005] macvlan2: entered promiscuous mode
[   49.493184][ T6005] macvlan2: entered allmulticast mode
[   49.494923][ T6005] hsr0: entered allmulticast mode
[   49.496571][ T6005] hsr_slave_0: entered allmulticast mode
[   49.498693][ T6005] hsr_slave_1: entered allmulticast mode
[   49.503335][ T6005] IPVS: set_ctl: invalid protocol: 159 10.1.0.254:20003
[   49.505720][ T5909] IPVS: starting estimator thread 0...
[   49.597526][ T6006] IPVS: using max 135 ests per chain, 324000 per kthread
[   49.827620][ T5843] Bluetooth: hci0: command tx timeout
[   49.908054][ T5843] Bluetooth: hci1: command tx timeout
[   49.909100][ T5848] Bluetooth: hci2: command tx timeout
[   50.612565][ T6017] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET)
[   50.773047][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.006378][ T6039] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   51.369452][ T6075] openvswitch: netlink: Key type 251 is out of range max 32
[   51.908005][ T5848] Bluetooth: hci0: command tx timeout
[   51.987801][ T5848] Bluetooth: hci2: command tx timeout
[   51.987829][ T5843] Bluetooth: hci1: command tx timeout
[   52.251469][ T1270] cfg80211: failed to load regulatory.db
[   52.327819][ T6108] netlink: 'syz.2.59': attribute type 9 has an invalid length.
[   52.464921][ T6133] warning: `syz.2.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.487051][   T47] hid-generic 0005:0001:8002.0001: unknown main item tag 0x0
[   52.495917][   T47] hid-generic 0005:0001:8002.0001: unknown main item tag 0x0
[   52.503342][   T47] hid-generic 0005:0001:8002.0001: item fetching failed at offset 4/10
[   52.513008][   T47] hid-generic 0005:0001:8002.0001: probe with driver hid-generic failed with error -22
[   52.625261][ T6151] __nla_validate_parse: 20 callbacks suppressed
[   52.625272][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'.
[   52.662535][ T6156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.68'.
[   52.721896][ T6164] openvswitch: netlink: Message has 94 unknown bytes.
[   52.724483][ T6164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.729424][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'.
[   52.733352][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.734668][ T6164] tipc: Failed to remove unknown binding: 66,1,1/0:862141539/862141541
[   52.736023][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.740137][   T47] IPVS: starting estimator thread 0...
[   52.743810][ T6164] tipc: Failed to remove unknown binding: 66,1,1/0:862141539/862141541
[   52.746872][ T6164] tipc: Failed to remove unknown binding: 66,1,1/0:862141539/862141541
[   52.750525][ T6164] netlink: 788 bytes leftover after parsing attributes in process `syz.0.70'.
[   52.831103][ T6168] IPVS: using max 134 ests per chain, 321600 per kthread
[   52.846272][ T6175] netlink: 268 bytes leftover after parsing attributes in process `syz.0.74'.
[   52.850170][ T6175] unsupported nla_type 65024
[   52.864791][ T6177] netlink: 'syz.1.75': attribute type 10 has an invalid length.
[   52.872398][ T6177] team0: Device hsr_slave_0 failed to register rx_handler
[   52.915093][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'.
[   52.959441][ T6184] netlink: 'syz.1.78': attribute type 3 has an invalid length.
[   52.959692][ T6187] netlink: 'syz.0.79': attribute type 8 has an invalid length.
[   53.052639][ T6203] nbd: must specify a device to reconfigure
[   53.069650][ T6212] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   53.069666][ T6211] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   53.120551][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'.
[   53.140827][ T6217] bridge1: port 1(veth3) entered blocking state
[   53.143824][ T6217] bridge1: port 1(veth3) entered disabled state
[   53.148574][ T6217] veth3: entered allmulticast mode
[   53.152880][ T6217] veth3: entered promiscuous mode
[   53.164608][ T6217] bridge1: port 2(veth0_to_bond) entered blocking state
[   53.167869][ T6217] bridge1: port 2(veth0_to_bond) entered disabled state
[   53.171098][ T6217] veth0_to_bond: entered allmulticast mode
[   53.175280][ T6217] veth0_to_bond: entered promiscuous mode
[   53.189717][ T6217] vlan2: entered allmulticast mode
[   53.191549][ T6217] veth1: entered allmulticast mode
[   53.272490][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'.
[   53.298376][ T6241] vcan0: tx drop: invalid sa for name 0x0000000000000004
[   53.369455][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'.
[   53.396516][ T6256] netlink: 'syz.2.99': attribute type 1 has an invalid length.
[   53.401448][ T6254] netlink: 'syz.1.98': attribute type 1 has an invalid length.
[   53.405641][ T6254] netlink: 'syz.1.98': attribute type 4 has an invalid length.
[   53.414312][ T6254] netlink: 212 bytes leftover after parsing attributes in process `syz.1.98'.
[   53.415263][ T6256] bond1: entered promiscuous mode
[   53.420621][ T6256] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.435786][ T6259] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   53.481381][ T6267] tipc: Started in network mode
[   53.483235][ T6267] tipc: Node identity aaed841616a2, cluster identity 4711
[   53.485903][ T6267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.489083][ T6267] syzkaller0: entered promiscuous mode
[   53.491122][ T6267] syzkaller0: entered allmulticast mode
[   53.498593][ T6267] tipc: Resetting bearer <eth:syzkaller0>
[   53.509222][ T6266] tipc: Resetting bearer <eth:syzkaller0>
[   53.514406][ T6266] tipc: Disabling bearer <eth:syzkaller0>
[   53.522981][ T6273] syzkaller1: entered promiscuous mode
[   53.525358][ T6273] syzkaller1: entered allmulticast mode
[   53.570169][ T6279] vcan0: tx drop: invalid da for name 0x0000000000000003
[   53.796626][ T6298] syzkaller1: entered promiscuous mode
[   53.799366][ T6298] syzkaller1: entered allmulticast mode
[   53.997857][ T5843] Bluetooth: hci0: command tx timeout
[   54.067635][ T5843] Bluetooth: hci1: command tx timeout
[   54.080030][ T5843] Bluetooth: hci2: command tx timeout
[   54.483145][ T6313] bridge0: port 3(syz_tun) entered blocking state
[   54.497439][ T6313] bridge0: port 3(syz_tun) entered disabled state
[   54.499679][ T6313] syz_tun: entered allmulticast mode
[   54.502007][ T6313] syz_tun: entered promiscuous mode
[   54.503947][ T6313] bridge0: port 3(syz_tun) entered blocking state
[   54.506369][ T6313] bridge0: port 3(syz_tun) entered forwarding state
[   54.574075][ T6315] trusted_key: syz.0.114 sent an empty control message without MSG_MORE.
[   54.823404][ T6349] netlink: 'syz.0.122': attribute type 10 has an invalid length.
[   54.837224][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.852898][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.922278][ T6342] hsr0: left allmulticast mode
[   54.924343][ T6342] hsr_slave_0: left allmulticast mode
[   54.928129][ T6342] hsr_slave_1: left allmulticast mode
[   54.932023][ T6342] macvlan2: left promiscuous mode
[   54.934023][ T6342] macvlan2: left allmulticast mode
[   54.939154][ T6349] bond0: option arp_all_targets: invalid value (196616)
[   54.954293][ T5734] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.960767][ T5734] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.963762][ T5734] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.966811][ T5734] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.988143][ T5734] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[   55.042145][ T6363] syz_tun: left allmulticast mode
[   55.044151][ T6363] syz_tun: left promiscuous mode
[   55.044678][ T6365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   55.046310][ T6363] bridge0: port 3(syz_tun) entered disabled state
[   55.056482][ T6363] bridge_slave_0: left allmulticast mode
[   55.059659][ T6363] bridge_slave_0: left promiscuous mode
[   55.062132][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.066139][ T6363] bridge_slave_1: left allmulticast mode
[   55.068770][ T6363] bridge_slave_1: left promiscuous mode
[   55.070885][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.074410][ T6363] veth0_to_bond: left allmulticast mode
[   55.076277][ T6363] veth0_to_bond: left promiscuous mode
[   55.079134][ T6363] bridge1: port 2(veth0_to_bond) entered disabled state
[   55.082731][ T6363] bond0: (slave bond_slave_0): Releasing backup interface
[   55.087043][ T6363] bond0: (slave bond_slave_1): Releasing backup interface
[   55.095667][ T6366] netlink: 'syz.0.124': attribute type 10 has an invalid length.
[   55.098160][ T6363] team0: Port device team_slave_0 removed
[   55.103878][ T6363] team0: Port device team_slave_1 removed
[   55.106799][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.111737][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.115663][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.119462][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.128384][ T6363] veth3: left allmulticast mode
[   55.130441][ T6363] veth3: left promiscuous mode
[   55.132622][ T6363] bridge1: port 1(veth3) entered disabled state
[   55.157273][ T6366] bond0: (slave wlan1): Enslaving as an active interface with a down link
[   55.168517][ T6368] wlan0: mtu less than device minimum
[   55.351812][ T6380] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (6), value rounded to 6 ms
[   55.396338][ T6384] batadv1: entered promiscuous mode
[   55.399359][ T6384] batadv1: entered allmulticast mode
[   55.673233][ T6400] 8021q: adding VLAN 0 to HW filter on device bond2
[   55.680350][ T6400] bond2: (slave geneve2): making interface the new active one
[   55.683645][ T6400] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   55.816571][ T6419] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   55.824140][ T6419] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   55.849093][ T6421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   56.021282][ T6433] v: renamed from ip6_vti0 (while UP)
[   56.127544][ T6449] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   56.132340][ T6449] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   56.136232][ T6449] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   56.313683][ T6459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   56.353172][ T6459] syz.2.149 (6459) used greatest stack depth: 20048 bytes left
[   56.641395][ T6501] Unsupported ieee802154 address type: 0
[   56.664669][ T6504] batman_adv: batadv0: Adding interface: dummy0
[   56.666832][ T6504] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.675703][ T6504] batman_adv: batadv0: Interface activated: dummy0
[   56.752674][ T6514] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   56.756182][ T6514] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   56.978170][ T6535] nbd: socks must be embedded in a SOCK_ITEM attr
[   56.980427][ T6535] block nbd0: shutting down sockets
[   57.006003][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.010463][ T6535] 8021q: adding VLAN 0 to HW filter on device team0
[   57.014458][ T6535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.459546][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.464683][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.503208][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.508383][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.511715][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.515025][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.727934][ T6583] __nla_validate_parse: 62 callbacks suppressed
[   57.727948][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   57.958847][ T6597] netlink: 60 bytes leftover after parsing attributes in process `syz.1.186'.
[   57.988383][ T6600] Illegal XDP return value 65535 on prog  (id 56) dev N/A, expect packet loss!
[   58.006908][ T6600] validate_nla: 15 callbacks suppressed
[   58.006920][ T6600] netlink: 'syz.1.187': attribute type 3 has an invalid length.
[   58.013430][ T6600] netlink: 'syz.1.187': attribute type 1 has an invalid length.
[   58.016686][ T6600] netlink: 'syz.1.187': attribute type 1 has an invalid length.
[   58.058583][ T6606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.189'.
[   58.136664][ T6609] netlink: 48 bytes leftover after parsing attributes in process `syz.1.190'.
[   58.801012][ T6616] macsec1: entered promiscuous mode
[   58.803085][ T6616] macsec1: entered allmulticast mode
[   58.837198][ T6622] syzkaller1: entered promiscuous mode
[   58.840800][ T6622] syzkaller1: entered allmulticast mode
[   58.926858][ T6626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.932187][ T6626] syzkaller0: entered promiscuous mode
[   58.934428][ T6626] syzkaller0: entered allmulticast mode
[   58.942709][ T6630] bridge_slave_0: left allmulticast mode
[   58.944969][ T6630] bridge_slave_0: left promiscuous mode
[   58.947265][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.954113][ T6630] bridge_slave_1: left allmulticast mode
[   58.956469][ T6630] bridge_slave_1: left promiscuous mode
[   58.959238][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.963797][ T6630] bond0: (slave bond_slave_0): Releasing backup interface
[   58.969260][ T6630] bond0: (slave bond_slave_1): Releasing backup interface
[   58.973781][ T6630] team0: Port device team_slave_0 removed
[   58.977040][ T6630] team0: Port device team_slave_1 removed
[   58.980931][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.984573][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.992555][ T6626] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   59.013259][ T6625] tipc: Resetting bearer <eth:syzkaller0>
[   59.017713][ T6625] tipc: Disabling bearer <eth:syzkaller0>
[   59.035310][ T6628] team0: Mode "" not found
[   59.074188][ T6631] batman_adv: batadv0: Interface deactivated: dummy0
[   59.146128][ T5869] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.155653][ T5869] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.163670][ T5869] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.168165][ T5869] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.260248][ T6644] netlink: 'syz.2.202': attribute type 1 has an invalid length.
[   59.263231][ T6644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'.
[   59.276499][ T6652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.284975][ T6652] tipc: Failed to remove unknown binding: 66,1,1/0:1323412330/1323412332
[   59.290757][ T6652] tipc: Failed to remove unknown binding: 66,1,1/0:1323412330/1323412332
[   59.294020][ T6652] tipc: Failed to remove unknown binding: 66,1,1/0:1323412330/1323412332
[   59.318107][ T6655] netlink: 'syz.2.205': attribute type 4 has an invalid length.
[   59.350052][ T6660] netlink: 788 bytes leftover after parsing attributes in process `syz.0.204'.
[   59.654078][ T6678] sctp: [Deprecated]: syz.2.209 (pid 6678) Use of int in max_burst socket option.
[   59.654078][ T6678] Use struct sctp_assoc_value instead
[   59.660345][ T6678] sctp: [Deprecated]: syz.2.209 (pid 6678) Use of int in max_burst socket option.
[   59.660345][ T6678] Use struct sctp_assoc_value instead
[   59.691512][ T6681] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   59.696842][ T6681] netlink: 48 bytes leftover after parsing attributes in process `syz.2.210'.
[   59.701131][ T6681] netlink: 48 bytes leftover after parsing attributes in process `syz.2.210'.
[   59.784771][ T6687] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   59.788643][ T6687] bond1: left promiscuous mode
[   59.791467][ T6687] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   59.811915][ T6687] netlink: 68 bytes leftover after parsing attributes in process `syz.2.212'.
[   59.838980][ T6691] tipc: Enabling of bearer <dp:s> rejected, media not registered
[   59.841635][ T6690] tipc: Enabling of bearer <dp:s> rejected, media not registered
[   59.891842][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[   60.047889][ T6707] netlink: 'syz.2.221': attribute type 1 has an invalid length.
[   60.153276][ T6719] netlink: 'syz.1.226': attribute type 4 has an invalid length.
[   60.169544][ T6719] netlink: 'syz.1.226': attribute type 4 has an invalid length.
[   60.178927][ T6721] openvswitch: netlink: Flow actions attr not present in new flow.
[   60.212420][ T6726] netlink: 'syz.2.228': attribute type 1 has an invalid length.
[   60.238557][ T6735] tipc: Started in network mode
[   60.243821][ T6735] tipc: Node identity ac14140f, cluster identity 4711
[   60.249304][ T6735] tipc: New replicast peer: 255.255.255.255
[   60.252077][ T6735] tipc: Enabled bearer <udp:syz2>, priority 10
[   60.411844][ T6759] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   60.715599][ T6797] sctp: [Deprecated]: syz.1.250 (pid 6797) Use of int in max_burst socket option deprecated.
[   60.715599][ T6797] Use struct sctp_assoc_value instead
[   60.734210][ T6800] netlink: 'syz.2.251': attribute type 6 has an invalid length.
[   60.802423][ T6808] vxcan1: entered allmulticast mode
[   60.824883][ T6810] IPv6: Can't replace route, no match found
[   60.909633][ T6824] syz_tun: entered allmulticast mode
[   60.914960][ T6824] dvmrp1: entered allmulticast mode
[   60.918012][ T6823] syz_tun: left allmulticast mode
[   61.033090][ T6841] veth0_to_team: entered promiscuous mode
[   61.035036][ T6841] veth0_to_team: entered allmulticast mode
[   61.237432][ T6870] syz.1.274 uses old SIOCAX25GETINFO
[   61.277468][   T47] tipc: Node number set to 2886997007
[   61.520990][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.526038][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.528455][ T6898] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   61.528471][ T6898] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   61.745827][ T6915] IPVS: length: 138 != 8
[   61.806022][ T6926] vxcan1: entered allmulticast mode
[   61.811775][ T6926] vxcan1: left allmulticast mode
[   61.895624][ T6926] raw_sendmsg: syz.1.288 forgot to set AF_INET. Fix it!
[   61.972968][ T6947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.976626][ T6947] syzkaller0: entered promiscuous mode
[   61.979319][ T6947] syzkaller0: entered allmulticast mode
[   61.993493][ T6947] tipc: Resetting bearer <eth:syzkaller0>
[   61.997014][ T6946] tipc: Resetting bearer <eth:syzkaller0>
[   62.001534][ T6946] tipc: Disabling bearer <eth:syzkaller0>
[   62.085793][ T6958] tap0: tun_chr_ioctl cmd 1074025677
[   62.091465][ T6958] tap0: linktype set to 823
[   62.184154][ T6980] bridge2: the hash_elasticity option has been deprecated and is always 16
[   62.214641][ T6985] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.231626][ T6985] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.234047][ T6985] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   62.243586][ T6985] bond1: (slave vcan1): Error -95 calling set_mac_address
[   62.280198][ T6996] gretap1: entered promiscuous mode
[   62.291794][ T6996] bond1: (slave gretap1): making interface the new active one
[   62.296137][ T7000] Unsupported ieee802154 address type: 0
[   62.298962][ T6996] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   62.501339][ T7030] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   62.636484][ T7040] team0: Port device netdevsim0 added
[   62.639447][ T7040] ieee802154 phy1 wpan1: encryption failed: -22
[   62.734080][ T7064] (unnamed net_device) (uninitialized): option coupled_control: invalid value (18)
[   62.791056][ T7070] bond0: (slave bond_slave_0): Releasing backup interface
[   62.794621][ T7070] bond0: (slave bond_slave_1): Releasing backup interface
[   62.799068][ T7070] team0: Port device team_slave_0 removed
[   62.801701][ T7070] team0: Port device team_slave_1 removed
[   62.803729][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.807119][ T7070] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.812312][ T7070] bond0: (slave wlan1): Releasing backup interface
[   62.817220][ T7070] bond2: (slave geneve2): Releasing active interface
[   62.825152][ T7071] batman_adv: batadv0: Adding interface: ip6gretap1
[   62.827280][ T7071] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.841164][ T7071] batman_adv: batadv0: Interface activated: ip6gretap1
[   62.882300][ T7072] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   62.889695][ T7072] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   62.893682][ T7072] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   63.616229][ T7084] __nla_validate_parse: 45 callbacks suppressed
[   63.616240][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.325'.
[   63.655246][ T7084] 8021q: adding VLAN 0 to HW filter on device bond3
[   63.659846][ T7084] netlink: 44 bytes leftover after parsing attributes in process `syz.1.325'.
[   63.665773][ T7085] veth1_to_bond: entered allmulticast mode
[   63.700506][ T7085] veth1_to_bond: left allmulticast mode
[   63.735796][ T7091] validate_nla: 11 callbacks suppressed
[   63.735813][ T7091] netlink: 'syz.1.328': attribute type 10 has an invalid length.
[   63.744737][ T7091] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   63.745603][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'.
[   63.756271][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.327'.
[   63.788965][ T7100] netlink: 'syz.0.330': attribute type 1 has an invalid length.
[   63.792332][ T7100] netlink: 'syz.0.330': attribute type 3 has an invalid length.
[   63.795735][ T7100] netlink: 564 bytes leftover after parsing attributes in process `syz.0.330'.
[   63.802661][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'.
[   63.823944][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'.
[   63.924788][ T7112] vti0: entered promiscuous mode
[   64.169845][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[   64.173736][ T7125] netlink: 34 bytes leftover after parsing attributes in process `syz.1.339'.
[   64.203311][ T7127] bridge4: entered allmulticast mode
[   64.258872][ T7129] bond0: (slave wlan1): Releasing backup interface
[   64.381719][ T7142] netlink: 'syz.1.345': attribute type 10 has an invalid length.
[   64.405385][ T7146] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.346'.
[   64.406578][ T7150] netlink: 'syz.0.347': attribute type 7 has an invalid length.
[   64.437360][ T7150] bond2 (unregistering): Released all slaves
[   64.512986][ T7160] netlink: 'syz.1.351': attribute type 1 has an invalid length.
[   64.597236][ T7172] lo speed is unknown, defaulting to 1000
[   64.600034][ T7172] lo speed is unknown, defaulting to 1000
[   64.602238][ T7172] lo speed is unknown, defaulting to 1000
[   64.605016][ T7172] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   64.622990][ T7172] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   64.632981][ T7172] lo speed is unknown, defaulting to 1000
[   64.635723][ T7172] lo speed is unknown, defaulting to 1000
[   64.639125][ T7172] lo speed is unknown, defaulting to 1000
[   64.665715][ T7162] team0: Port device netdevsim0 removed
[   64.704161][ T7183] netlink: 'syz.2.357': attribute type 2 has an invalid length.
[   64.711749][ T7183] k*]: entered promiscuous mode
[   64.731875][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.736116][ T7183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.878754][ T7200] delete_channel: no stack
[   64.951025][ T5869] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.956803][ T5869] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.960840][ T5869] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.967845][ T5869] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   64.979139][ T7215] lo speed is unknown, defaulting to 1000
[   64.981227][ T7215] lo speed is unknown, defaulting to 1000
[   64.997659][ T7215] lo speed is unknown, defaulting to 1000
[   65.026114][ T7215] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   65.064387][ T7215] lo speed is unknown, defaulting to 1000
[   65.066606][ T7215] lo speed is unknown, defaulting to 1000
[   65.069195][ T7215] lo speed is unknown, defaulting to 1000
[   65.250642][ T1270] lo speed is unknown, defaulting to 1000
[   65.303547][ T7256] netlink: 'syz.2.377': attribute type 30 has an invalid length.
[   65.338380][ T7256] netlink: 'syz.2.377': attribute type 30 has an invalid length.
[   65.373768][ T7268] netlink: 'syz.1.380': attribute type 10 has an invalid length.
[   65.387204][ T7268] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   66.166323][ T7303] delete_channel: no stack
[   66.673393][ T7326] lo speed is unknown, defaulting to 1000
[   66.948824][ T7332] gretap0: entered promiscuous mode
[   66.951564][ T7332] 0{X: renamed from gretap0
[   66.955067][ T7332] 0{X: left promiscuous mode
[   66.958063][ T7332] 0{X: entered allmulticast mode
[   66.961662][ T7332] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   67.532700][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   67.535888][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   67.544676][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   67.549682][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   68.671294][ T7390] __nla_validate_parse: 20 callbacks suppressed
[   68.671308][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'.
[   68.676895][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'.
[   68.699883][ T7393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.412'.
[   68.823173][ T7393] lo speed is unknown, defaulting to 1000
[   68.921176][ T7406] netlink: 104 bytes leftover after parsing attributes in process `syz.2.414'.
[   69.018326][ T7416] lo speed is unknown, defaulting to 1000
[   69.234957][ T7425] netlink: 32 bytes leftover after parsing attributes in process `syz.1.419'.
[   69.268011][ T7427] validate_nla: 3 callbacks suppressed
[   69.268022][ T7427] netlink: 'syz.1.420': attribute type 1 has an invalid length.
[   69.272513][ T7427] netlink: 'syz.1.420': attribute type 4 has an invalid length.
[   69.291781][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'.
[   69.294863][ T7431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'.
[   69.499299][ T7457] netlink: 'syz.1.427': attribute type 1 has an invalid length.
[   69.619609][ T7470] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   69.623167][ T7470] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   69.658515][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'.
[   69.753930][ T7478] netlink: 'syz.1.435': attribute type 3 has an invalid length.
[   69.757031][ T7478] netlink: 'syz.1.435': attribute type 3 has an invalid length.
[   69.784440][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'.
[   69.791598][ T7482] vlan0: entered promiscuous mode
[   69.793444][ T7482] macvtap0: entered promiscuous mode
[   69.841923][ T7482] netlink: 104 bytes leftover after parsing attributes in process `syz.1.436'.
[   69.874807][ T7486] netlink: 'syz.1.437': attribute type 11 has an invalid length.
[   69.975188][ T7489] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   69.979019][ T7489] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   69.984288][ T7489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.037094][ T7494] netlink: 'syz.1.440': attribute type 3 has an invalid length.
[   70.040883][ T7494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.096807][ T7500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   70.113116][ T7500] tipc: Resetting bearer <eth:syzkaller0>
[   70.495261][ T7532] syzkaller1: entered promiscuous mode
[   70.497639][ T7532] syzkaller1: entered allmulticast mode
[   70.765504][ T7553] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   71.097112][ T7557] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   71.113559][ T7557] bond0 (unregistering): (slave bridge0): Releasing backup interface
[   71.119972][ T7557] bond0 (unregistering): Released all slaves
[   71.213340][ T7567] netlink: 'syz.1.458': attribute type 8 has an invalid length.
[   71.307134][ T7555] 8021q: adding VLAN 0 to HW filter on device bond3
[   71.668154][ T7603] Bluetooth: MGMT ver 1.23
[   71.679276][ T7603] netlink: 'syz.0.468': attribute type 21 has an invalid length.
[   71.779512][ T7610] netlink: 'syz.0.471': attribute type 26 has an invalid length.
[   71.808482][ T7612] openvswitch: netlink: Message has 20 unknown bytes.
[   71.811149][ T7612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.921443][ T1270] IPVS: starting estimator thread 0...
[   72.010130][ T7616] IPVS: using max 134 ests per chain, 321600 per kthread
[   72.229526][ T5843] Bluetooth: hci2: command tx timeout
[   72.265679][ T7639] bond0 (unregistering): Released all slaves
[   72.402940][ T7648] lo speed is unknown, defaulting to 1000
[   72.499443][ T7650] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   72.514118][ T7651] veth3: entered promiscuous mode
[   72.516888][ T7651] bond4: (slave veth3): Enslaving as a backup interface with a down link
[   72.559157][ T7650] veth5: entered promiscuous mode
[   72.561973][ T7650] bond4: (slave veth5): Enslaving as a backup interface with a down link
[   72.565871][ T5870] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   72.572792][ T7651] 8021q: adding VLAN 0 to HW filter on device bond4
[   72.677424][ T5870] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   72.753336][ T7675] syzkaller0: entered promiscuous mode
[   72.755121][ T7675] syzkaller0: entered allmulticast mode
[   72.767484][ T7673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.770805][ T7672] tipc: Resetting bearer <eth:syzkaller0>
[   72.835598][ T7672] tipc: Disabling bearer <eth:syzkaller0>
[   72.951705][ T7682] 8021q: adding VLAN 0 to HW filter on device bond5
[   72.958908][ T7682] bond5: (slave geneve3): making interface the new active one
[   72.961936][ T7682] bond5: (slave geneve3): Enslaving as an active interface with an up link
[   72.964923][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.969251][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.973280][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.976649][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.023238][ T7687] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   73.107416][ T7687] nbd0: detected capacity change from 0 to 127
[   73.110850][ T7690] block nbd0: Receive control failed (result -104)
[   73.254556][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.257967][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.261023][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.264083][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.412976][ T7726] 0X: renamed from caif0
[   73.422269][ T7726] 0X: entered allmulticast mode
[   73.424098][ T7726] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   73.516550][ T7739] lo speed is unknown, defaulting to 1000
[   74.038520][ T7745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.348789][ T7738] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   74.416320][ T7756] lo speed is unknown, defaulting to 1000
[   74.653279][ T7765] __nla_validate_parse: 23 callbacks suppressed
[   74.653332][ T7765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'.
[   74.981767][ T7789] netlink: 32 bytes leftover after parsing attributes in process `syz.2.523'.
[   75.195542][ T7814] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.530'.
[   75.247005][ T7820] netlink: 256 bytes leftover after parsing attributes in process `syz.0.533'.
[   75.339305][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'.
[   75.342655][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'.
[   75.346535][ T7830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.536'.
[   75.378969][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'.
[   75.409116][ T7839] netlink: 44 bytes leftover after parsing attributes in process `syz.1.540'.
[   75.439608][ T7841] validate_nla: 3 callbacks suppressed
[   75.439620][ T7841] netlink: 'syz.1.541': attribute type 12 has an invalid length.
[   75.448770][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'.
[   75.507851][ T5848] Bluetooth: hci0: command 0x0401 tx timeout
[   75.510227][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   76.169923][ T7902] lo speed is unknown, defaulting to 1000
[   76.194464][ T7908] netlink: 'syz.0.563': attribute type 21 has an invalid length.
[   76.256319][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.277167][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.282816][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.286071][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.302372][ T7922] batman_adv: batadv0: Adding interface: dummy0
[   76.305057][ T7922] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[   76.323319][ T7922] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   76.483146][ T7944] netlink: 'syz.0.571': attribute type 2 has an invalid length.
[   76.495880][ T7944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.522851][ T7950] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   76.528457][ T7950] netlink: 'syz.2.574': attribute type 39 has an invalid length.
[   76.555468][ T7948] netlink: 'syz.1.573': attribute type 7 has an invalid length.
[   76.925262][ T8007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.955734][ T8014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.960901][ T8013] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   76.966944][ T8014] syzkaller0: entered promiscuous mode
[   76.971133][ T8014] syzkaller0: entered allmulticast mode
[   76.979605][ T8013] tipc: Resetting bearer <eth:syzkaller0>
[   76.985913][ T8012] tipc: Resetting bearer <eth:syzkaller0>
[   76.990354][ T8012] tipc: Disabling bearer <eth:syzkaller0>
[   77.304751][ T8069] veth0_to_team: left promiscuous mode
[   77.309297][ T8069] veth0_to_team: left allmulticast mode
[   77.316079][ T8069] vxcan1: left allmulticast mode
[   77.322952][ T8069] veth3: left promiscuous mode
[   77.324890][ T8069] veth5: left promiscuous mode
[   77.597474][ T5843] Bluetooth: hci0: command 0x0401 tx timeout
[   77.738318][ T8106] vlan3: entered promiscuous mode
[   77.740646][ T8106] macvtap0: entered promiscuous mode
[   78.369382][ T8083] Set syz1 is full, maxelem 65536 reached
[   78.419410][ T8164] netlink: 'syz.2.623': attribute type 10 has an invalid length.
[   78.423156][ T8164] batman_adv: batadv0: Removing interface: dummy0
[   78.491657][ T8166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.498992][ T8166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.556224][ T8185] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   78.563418][ T8194] unsupported nlmsg_type 40
[   78.600370][ T5869] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.603414][ T5869] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.608323][ T8196] netlink: 'syz.2.632': attribute type 1 has an invalid length.
[   78.611612][ T5869] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.620349][ T5869] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.661814][ T8208] netlink: 'syz.2.636': attribute type 1 has an invalid length.
[   78.680327][ T8211] netlink: 'syz.1.637': attribute type 2 has an invalid length.
[   78.696546][ T8211] n: entered promiscuous mode
[   78.711379][ T8208] 8021q: adding VLAN 0 to HW filter on device bond6
[   78.792092][ T8221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.091910][ T8250] netlink: 'syz.2.646': attribute type 83 has an invalid length.
[   79.180021][ T8258] 8021q: adding VLAN 0 to HW filter on device bond7
[   79.193328][ T8258] veth7: entered promiscuous mode
[   79.197269][ T8258] erspan0: entered allmulticast mode
[   79.273043][ T8272] erspan0: left allmulticast mode
[   79.276770][ T8272] veth7: left promiscuous mode
[   79.330369][ T8277] 0{X: left allmulticast mode
[   79.361533][ T8277] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.364698][ T8277] 8021q: adding VLAN 0 to HW filter on device team0
[   79.368826][ T8277] batman_adv: batadv0: Interface activated: dummy0
[   79.372939][ T8277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.414390][ T8280] lo speed is unknown, defaulting to 1000
[   79.490864][ T8286] 8021q: adding VLAN 0 to HW filter on device bond8
[   79.499279][ T8286] bond0: (slave wlan1): Releasing backup interface
[   79.502437][ T8286] bond4: (slave ip6gretap1): Removing an active aggregator
[   79.505601][ T8286] bond4: (slave ip6gretap1): Releasing backup interface
[   79.508890][ T8286] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 66:25:60:14:b4:17 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   79.515510][ T8286] bond4: (slave veth3): Releasing backup interface
[   79.519862][ T8286] bond4: (slave veth5): Releasing backup interface
[   79.523355][ T8286] bond5: (slave geneve3): Releasing active interface
[   79.692067][ T8302] __nla_validate_parse: 77 callbacks suppressed
[   79.692083][ T8302] netlink: 56 bytes leftover after parsing attributes in process `syz.2.663'.
[   79.724894][ T8302] netlink: 52 bytes leftover after parsing attributes in process `syz.2.663'.
[   79.759520][ T8309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.764145][ T8309] tipc: Resetting bearer <eth:syzkaller0>
[   79.767059][ T8308] tipc: Disabling bearer <eth:syzkaller0>
[   79.890034][ T8313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.893048][ T8313] syzkaller0: entered promiscuous mode
[   79.894830][ T8313] syzkaller0: entered allmulticast mode
[   79.899545][ T8313] tipc: Resetting bearer <eth:syzkaller0>
[   80.038208][ T8324] netlink: 182 bytes leftover after parsing attributes in process `syz.1.670'.
[   80.073936][ T8333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.673'.
[   80.125784][ T8339] netlink: 32 bytes leftover after parsing attributes in process `syz.0.675'.
[   80.156519][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.159619][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.198383][ T8344] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.677'.
[   80.257089][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'.
[   80.707584][ T5843] Bluetooth: hci0: command 0x0401 tx timeout
[   80.729319][ T8313] tipc: Resetting bearer <eth:syzkaller0>
[   80.733210][ T8313] tipc: Disabling bearer <eth:syzkaller0>
[   80.784182][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'.
[   81.439639][ T8386] netlink: 248 bytes leftover after parsing attributes in process `syz.0.689'.
[   81.632021][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'.
[   82.122390][ T8448] validate_nla: 7 callbacks suppressed
[   82.122403][ T8448] netlink: 'syz.2.700': attribute type 1 has an invalid length.
[   82.305271][ T8473] netlink: 'syz.2.705': attribute type 1 has an invalid length.
[   82.310747][ T8473] netlink: 'syz.2.705': attribute type 3 has an invalid length.
[   82.313835][ T8473] NCSI netlink: No device for ifindex 246
[   82.320595][ T8473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.323702][ T8473] syzkaller0: entered promiscuous mode
[   82.325943][ T8473] syzkaller0: entered allmulticast mode
[   82.333323][ T8471] tipc: Resetting bearer <eth:syzkaller0>
[   82.339019][ T8471] tipc: Disabling bearer <eth:syzkaller0>
[   82.464769][ T8479] openvswitch: netlink: Duplicate or invalid key (type 0).
[   82.467095][ T8480] batman_adv: batadv0: Interface deactivated: dummy0
[   82.472295][ T8480] batman_adv: batadv0: Removing interface: dummy0
[   82.476711][ T8479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.493449][ T8485] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   82.518194][ T8490] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   82.545141][ T8495] lo speed is unknown, defaulting to 1000
[   82.845332][ T8519] lo speed is unknown, defaulting to 1000
[   83.509743][ T8542] syzkaller0: entered promiscuous mode
[   83.518113][ T8542] syzkaller0: entered allmulticast mode
[   83.521777][ T8545] netlink: 'syz.2.719': attribute type 1 has an invalid length.
[   83.534043][ T8541] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.588876][ T8541] tipc: Resetting bearer <eth:syzkaller0>
[   83.594293][ T8541] tipc: Disabling bearer <eth:syzkaller0>
[   83.890731][ T8578] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   83.938769][ T8586] netlink: 'syz.2.729': attribute type 1 has an invalid length.
[   84.462117][ T8595] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   84.606649][ T8606] sctp: [Deprecated]: syz.1.736 (pid 8606) Use of int in max_burst socket option.
[   84.606649][ T8606] Use struct sctp_assoc_value instead
[   84.631235][ T8608] openvswitch: netlink: Message has 16 unknown bytes.
[   84.767385][ T8624] Unsupported ieee802154 address type: 0
[   84.803515][ T8633] __nla_validate_parse: 19 callbacks suppressed
[   84.803532][ T8633] netlink: 44 bytes leftover after parsing attributes in process `syz.1.745'.
[   84.833897][ T8640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.747'.
[   84.920819][ T8646] syzkaller0: entered promiscuous mode
[   84.922655][ T8646] syzkaller0: entered allmulticast mode
[   84.979805][ T8655] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[   84.982773][ T8655] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[   84.986966][ T8655] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   84.995180][ T8655] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   85.269601][ T8694] netlink: 'syz.0.758': attribute type 4 has an invalid length.
[   85.278029][ T8694] netlink: 'syz.0.758': attribute type 4 has an invalid length.
[   85.280159][ T8697] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   86.056911][ T8709] netlink: 'syz.1.763': attribute type 8 has an invalid length.
[   86.061199][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'.
[   86.102307][ T8716] netlink: 'syz.1.765': attribute type 12 has an invalid length.
[   86.103470][ T8717] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   86.106083][ T8716] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.765'.
[   86.172906][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'.
[   86.215619][ T8731] syz_tun: entered allmulticast mode
[   86.221663][ T8731] dvmrp8: entered allmulticast mode
[   86.235534][ T8731] lo speed is unknown, defaulting to 1000
[   86.299569][ T8730] syz_tun: left allmulticast mode
[   86.301728][ T8730] dvmrp8: left allmulticast mode
[   86.368441][ T8737] netlink: 312 bytes leftover after parsing attributes in process `syz.2.770'.
[   86.913447][ T8742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.926095][ T8742] tipc: Disabling bearer <eth:syzkaller0>
[   87.163743][ T8775] IPVS: Scheduler module ip_vs_ not found
[   87.189694][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'.
[   87.196057][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'.
[   87.200054][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'.
[   87.316126][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.783'.
[   87.326929][ T8788] IPVS: length: 49 != 24
[   87.403045][ T8798] ------------[ cut here ]------------
[   87.405426][ T8798] WARNING: CPU: 1 PID: 8798 at net/mac80211/chan.c:844 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   87.410092][ T8798] Modules linked in:
[   87.412217][ T8798] CPU: 1 UID: 0 PID: 8798 Comm: syz.1.786 Not tainted syzkaller #0 PREEMPT(full) 
[   87.416847][ T8798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.421577][ T8798] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   87.424611][ T8798] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 eb 3f 25 f7 4d 8b 36 4d 39 fe 74 22 e8 0e d4 c1 f6 e9 ef f8 ff ff e8 04 d4 c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 f6 d3 c1 f6 e9 39 07 00 00 48 83 7c 24
[   87.432962][ T8798] RSP: 0018:ffffc9000675f220 EFLAGS: 00010287
[   87.435449][ T8798] RAX: ffffffff8afddf72 RBX: 0000000000000000 RCX: 0000000000080000
[   87.438919][ T8798] RDX: ffffc90008a82000 RSI: 00000000000168f5 RDI: 00000000000168f6
[   87.441936][ T8798] RBP: ffffc9000675f3e0 R08: ffff888031c61737 R09: 1ffff1100638c2e6
[   87.445044][ T8798] R10: dffffc0000000000 R11: ffffed100638c2e7 R12: dffffc0000000000
[   87.448682][ T8798] R13: 0000000000000070 R14: ffff8881240ba8c0 R15: ffff8881240ba8c0
[   87.451902][ T8798] FS:  00007f8553bf66c0(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[   87.455402][ T8798] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   87.458224][ T8798] CR2: 00007f722aee56c0 CR3: 0000000020a98000 CR4: 00000000000006f0
[   87.461096][ T8798] Call Trace:
[   87.462252][ T8798]  <TASK>
[   87.463388][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.465391][ T8798]  ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10
[   87.468866][ T8798]  ? __pfx___might_resched+0x10/0x10
[   87.471119][ T8798]  ? ieee80211_configure_filter+0x574/0xdb0
[   87.473550][ T8798]  ? __local_bh_enable_ip+0x12d/0x1c0
[   87.475740][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.477989][ T8798]  ieee80211_assign_link_chanctx+0x5ca/0xd70
[   87.480490][ T8798]  __ieee80211_link_release_channel+0x33b/0x4a0
[   87.483095][ T8798]  ? ieee80211_leave_mesh+0xad/0x130
[   87.485273][ T8798]  ieee80211_leave_mesh+0xc5/0x130
[   87.487890][ T8798]  cfg80211_leave_mesh+0x293/0x800
[   87.490022][ T8798]  cfg80211_netdev_notifier_call+0x1b3/0x1450
[   87.492481][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.494218][ T8798]  ? unwind_next_frame+0xa5/0x2390
[   87.496363][ T8798]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[   87.499562][ T8798]  ? unwind_next_frame+0xa5/0x2390
[   87.501683][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.503382][ T8798]  ? is_bpf_text_address+0x26/0x2b0
[   87.505176][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.507031][ T8798]  ? do_raw_spin_lock+0x121/0x290
[   87.509105][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.510768][ T8798]  ? netdevice_event+0x2dc/0x8a0
[   87.512751][ T8798]  ? inetdev_event+0x464/0x15b0
[   87.514665][ T8798]  ? __pfx_inetdev_event+0x10/0x10
[   87.516667][ T8798]  ? igmp_netdev_event+0x7c/0x770
[   87.518554][ T8798]  notifier_call_chain+0x1b6/0x3e0
[   87.520264][ T8798]  __dev_close_many+0x106/0x6f0
[   87.522060][ T8798]  ? __mutex_trylock_common+0x153/0x260
[   87.524243][ T8798]  ? __pfx___dev_close_many+0x10/0x10
[   87.526097][ T8798]  ? __mutex_trylock_common+0x153/0x260
[   87.528151][ T8798]  netif_close_many+0x225/0x410
[   87.529860][ T8798]  ? __pfx_netif_close_many+0x10/0x10
[   87.531817][ T8798]  ? __mutex_lock+0x335/0x1350
[   87.533732][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.535430][ T8798]  netif_close+0x158/0x210
[   87.536937][ T8798]  ? __pfx_netif_close+0x10/0x10
[   87.538852][ T8798]  ? __pfx___mutex_lock+0x10/0x10
[   87.540529][ T8798]  dev_close+0x10a/0x220
[   87.542150][ T8798]  cfg80211_shutdown_all_interfaces+0xd4/0x220
[   87.544443][ T8798]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[   87.547017][ T8798]  cfg80211_rfkill_set_block+0x2d/0x50
[   87.549459][ T8798]  rfkill_set_block+0x1d2/0x440
[   87.551476][ T8798]  rfkill_fop_write+0x44b/0x570
[   87.553471][ T8798]  ? __pfx_rfkill_fop_write+0x10/0x10
[   87.555691][ T8798]  ? security_kernfs_init_security+0x280/0x290
[   87.558199][ T8798]  ? rw_verify_area+0x255/0x4d0
[   87.560052][ T8798]  ? __pfx_rfkill_fop_write+0x10/0x10
[   87.561814][ T8798]  vfs_write+0x27e/0xb30
[   87.563232][ T8798]  ? __pfx_vfs_write+0x10/0x10
[   87.564960][ T8798]  ? lock_release+0x4b/0x3e0
[   87.566477][ T8798]  ? __fget_files+0x2a/0x420
[   87.568173][ T8798]  ? __fget_files+0x3a0/0x420
[   87.570163][ T8798]  ? __fget_files+0x2a/0x420
[   87.572110][ T8798]  ksys_write+0x145/0x250
[   87.573914][ T8798]  ? __pfx_ksys_write+0x10/0x10
[   87.575937][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.578051][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.580048][ T8798]  do_syscall_64+0xfa/0x3b0
[   87.581841][ T8798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.583880][ T8798]  ? exc_page_fault+0x9f/0xf0
[   87.585409][ T8798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.587453][ T8798] RIP: 0033:0x7f855598ebe9
[   87.588964][ T8798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.595478][ T8798] RSP: 002b:00007f8553bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   87.598261][ T8798] RAX: ffffffffffffffda RBX: 00007f8555bb5fa0 RCX: 00007f855598ebe9
[   87.600830][ T8798] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007
[   87.603379][ T8798] RBP: 00007f8555a11e19 R08: 0000000000000000 R09: 0000000000000000
[   87.605926][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.608714][ T8798] R13: 00007f8555bb6038 R14: 00007f8555bb5fa0 R15: 00007fff860c54e8
[   87.611730][ T8798]  </TASK>
[   87.612758][ T8798] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   87.615074][ T8798] CPU: 1 UID: 0 PID: 8798 Comm: syz.1.786 Not tainted syzkaller #0 PREEMPT(full) 
[   87.618036][ T8798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.621305][ T8798] Call Trace:
[   87.622433][ T8798]  <TASK>
[   87.623391][ T8798]  dump_stack_lvl+0x99/0x250
[   87.624910][ T8798]  ? __asan_memcpy+0x40/0x70
[   87.626455][ T8798]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.628168][ T8798]  ? __pfx__printk+0x10/0x10
[   87.629712][ T8798]  vpanic+0x281/0x750
[   87.631046][ T8798]  ? __pfx__printk+0x10/0x10
[   87.632541][ T8798]  ? __pfx_vpanic+0x10/0x10
[   87.634030][ T8798]  ? is_bpf_text_address+0x26/0x2b0
[   87.635734][ T8798]  panic+0xb9/0xc0
[   87.636987][ T8798]  ? __pfx_panic+0x10/0x10
[   87.638578][ T8798]  __warn+0x31b/0x4b0
[   87.640274][ T8798]  ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   87.642986][ T8798]  ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   87.645697][ T8798]  report_bug+0x2be/0x4f0
[   87.647497][ T8798]  ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   87.650196][ T8798]  ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   87.652947][ T8798]  ? ieee80211_recalc_chanctx_chantype+0x89f/0x10f0
[   87.655446][ T8798]  handle_bug+0x84/0x160
[   87.656982][ T8798]  exc_invalid_op+0x1a/0x50
[   87.658791][ T8798]  asm_exc_invalid_op+0x1a/0x20
[   87.660788][ T8798] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0
[   87.663618][ T8798] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 eb 3f 25 f7 4d 8b 36 4d 39 fe 74 22 e8 0e d4 c1 f6 e9 ef f8 ff ff e8 04 d4 c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 f6 d3 c1 f6 e9 39 07 00 00 48 83 7c 24
[   87.671227][ T8798] RSP: 0018:ffffc9000675f220 EFLAGS: 00010287
[   87.673360][ T8798] RAX: ffffffff8afddf72 RBX: 0000000000000000 RCX: 0000000000080000
[   87.676261][ T8798] RDX: ffffc90008a82000 RSI: 00000000000168f5 RDI: 00000000000168f6
[   87.679127][ T8798] RBP: ffffc9000675f3e0 R08: ffff888031c61737 R09: 1ffff1100638c2e6
[   87.682038][ T8798] R10: dffffc0000000000 R11: ffffed100638c2e7 R12: dffffc0000000000
[   87.685260][ T8798] R13: 0000000000000070 R14: ffff8881240ba8c0 R15: ffff8881240ba8c0
[   87.688522][ T8798]  ? ieee80211_recalc_chanctx_chantype+0x10e2/0x10f0
[   87.691253][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.693228][ T8798]  ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10
[   87.696030][ T8798]  ? __pfx___might_resched+0x10/0x10
[   87.698237][ T8798]  ? ieee80211_configure_filter+0x574/0xdb0
[   87.700757][ T8798]  ? __local_bh_enable_ip+0x12d/0x1c0
[   87.702930][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.704923][ T8798]  ieee80211_assign_link_chanctx+0x5ca/0xd70
[   87.707386][ T8798]  __ieee80211_link_release_channel+0x33b/0x4a0
[   87.709974][ T8798]  ? ieee80211_leave_mesh+0xad/0x130
[   87.712278][ T8798]  ieee80211_leave_mesh+0xc5/0x130
[   87.714410][ T8798]  cfg80211_leave_mesh+0x293/0x800
[   87.716527][ T8798]  cfg80211_netdev_notifier_call+0x1b3/0x1450
[   87.719082][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.721083][ T8798]  ? unwind_next_frame+0xa5/0x2390
[   87.723233][ T8798]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[   87.726015][ T8798]  ? unwind_next_frame+0xa5/0x2390
[   87.728194][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.730171][ T8798]  ? is_bpf_text_address+0x26/0x2b0
[   87.732333][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.734314][ T8798]  ? do_raw_spin_lock+0x121/0x290
[   87.736431][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.738431][ T8798]  ? netdevice_event+0x2dc/0x8a0
[   87.740471][ T8798]  ? inetdev_event+0x464/0x15b0
[   87.742423][ T8798]  ? __pfx_inetdev_event+0x10/0x10
[   87.744486][ T8798]  ? igmp_netdev_event+0x7c/0x770
[   87.746533][ T8798]  notifier_call_chain+0x1b6/0x3e0
[   87.748612][ T8798]  __dev_close_many+0x106/0x6f0
[   87.750606][ T8798]  ? __mutex_trylock_common+0x153/0x260
[   87.752851][ T8798]  ? __pfx___dev_close_many+0x10/0x10
[   87.754975][ T8798]  ? __mutex_trylock_common+0x153/0x260
[   87.757185][ T8798]  netif_close_many+0x225/0x410
[   87.759233][ T8798]  ? __pfx_netif_close_many+0x10/0x10
[   87.761437][ T8798]  ? __mutex_lock+0x335/0x1350
[   87.763407][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.765385][ T8798]  netif_close+0x158/0x210
[   87.767233][ T8798]  ? __pfx_netif_close+0x10/0x10
[   87.769233][ T8798]  ? __pfx___mutex_lock+0x10/0x10
[   87.771332][ T8798]  dev_close+0x10a/0x220
[   87.773107][ T8798]  cfg80211_shutdown_all_interfaces+0xd4/0x220
[   87.775647][ T8798]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[   87.778170][ T8798]  cfg80211_rfkill_set_block+0x2d/0x50
[   87.780480][ T8798]  rfkill_set_block+0x1d2/0x440
[   87.782524][ T8798]  rfkill_fop_write+0x44b/0x570
[   87.784566][ T8798]  ? __pfx_rfkill_fop_write+0x10/0x10
[   87.786758][ T8798]  ? security_kernfs_init_security+0x280/0x290
[   87.789243][ T8798]  ? rw_verify_area+0x255/0x4d0
[   87.791238][ T8798]  ? __pfx_rfkill_fop_write+0x10/0x10
[   87.793354][ T8798]  vfs_write+0x27e/0xb30
[   87.795152][ T8798]  ? __pfx_vfs_write+0x10/0x10
[   87.797132][ T8798]  ? lock_release+0x4b/0x3e0
[   87.799045][ T8798]  ? __fget_files+0x2a/0x420
[   87.800970][ T8798]  ? __fget_files+0x3a0/0x420
[   87.802939][ T8798]  ? __fget_files+0x2a/0x420
[   87.804844][ T8798]  ksys_write+0x145/0x250
[   87.806694][ T8798]  ? __pfx_ksys_write+0x10/0x10
[   87.808684][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.810652][ T8798]  ? rcu_is_watching+0x15/0xb0
[   87.812634][ T8798]  do_syscall_64+0xfa/0x3b0
[   87.814452][ T8798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.816789][ T8798]  ? exc_page_fault+0x9f/0xf0
[   87.818776][ T8798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.821168][ T8798] RIP: 0033:0x7f855598ebe9
[   87.823036][ T8798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.830644][ T8798] RSP: 002b:00007f8553bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   87.833991][ T8798] RAX: ffffffffffffffda RBX: 00007f8555bb5fa0 RCX: 00007f855598ebe9
[   87.837209][ T8798] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007
[   87.840380][ T8798] RBP: 00007f8555a11e19 R08: 0000000000000000 R09: 0000000000000000
[   87.843549][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.846816][ T8798] R13: 00007f8555bb6038 R14: 00007f8555bb5fa0 R15: 00007fff860c54e8
[   87.850082][ T8798]  </TASK>
[   87.852138][ T8798] Kernel Offset: disabled
[   87.853972][ T8798] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:41:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff9037be01 RCX=ffffc9000439fb58 RDX=ffffc9000439fa01
RSI=dffffc0000000000 RDI=ffffc9000439fa10 RBP=dffffc0000000000 RSP=ffffc9000439f930
R8 =ffffc9000439fb40 R9 =0000000000000000 R10=ffffc9000439fa58 R11=fffff52000873f4d
R12=ffffc9000439fb50 R13=ffffc90004398000 R14=ffffc9000439fa08 R15=ffffffff8172c195
RIP=ffffffff8b79deed RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555d144500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f722a24f5c0 CR3=00000001235c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ffff00000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000ff00000000 00000000000000ff XMM05=0000000000000000 00007f722a212e53
XMM06=0000000000000000 00007f722a212e4d XMM07=0000000000000000 00007f722a212e61
XMM08=0000000000000000 00007f722a212ee7 XMM09=0000000000000000 00007f722a212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000002709c RDI=000000000002709d RBP=00000000000003f8 RSP=ffffc9000675e9d0
R8 =ffff888106788237 R9 =1ffff11020cf1046 R10=dffffc0000000000 R11=ffffffff854f2400
R12=dffffc0000000000 R13=ffffffff99afd8dd R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f247c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8553bf66c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f722aee56c0 CR3=0000000020a98000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000001010a00 000000280a000000
XMM02=307a797300010009 00000002d5ff1a5e XMM03=0000002c03000000 4002000800000000
XMM04=0100110000001400 000000327a797300 XMM05=0300090000000030 7a79730001000900
XMM06=00000200000000ff e6000003010a0300 XMM07=00002c0300000040 0200080000000030
XMM08=0000000000000000 00007f0889e12ee7 XMM09=0000000000000000 00007f0889e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
