last executing test programs:

38.990798937s ago: executing program 2 (id=94):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x2020)
close(r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000004c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140))
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f0000000500)=0xd0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6)
sendmsg$alg(r6, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004011}, 0x4c040)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r7=>0x0})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000003c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x7c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xa0000}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x40}, @ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x7c}}, 0x4000000)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000039000000000200009c0000000000b7a6685fe364bee4c9cf6ab0773d14212e6eb3c4f336bdbd384771e85e7f41624ba3b2579ef174efc1e90e9513ce1f08d23f1671e77e3d862e2a39ef72e7a9f9ca95a0fccd93c6484c77ab2dc7b47622fa6ce06ec90eceb3538697e51f3d7cb38414bada22b1399df74686fbb4fd48dc6a6d471943234a5124fd196842b5d9fc1554ad542743b97aa5535b2f655394c9b948241a1ce1bc36f4f5abbf13ee37bede34daa8880c345dc62e473ddffb", @ANYRES32=r3, @ANYBLOB="d0e900"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000004000000030000000600"/28], 0x50)
r9 = accept4$alg(r3, 0x0, 0x0, 0x80000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r9, 0x0)
epoll_pwait(r3, 0x0, 0x0, 0x810000, &(0x7f0000000180)={[0x4]}, 0xfffffffffffffdf9)
socket$netlink(0x10, 0x3, 0x0)

38.776057047s ago: executing program 2 (id=97):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_IV'}]}}}]}, 0x44}}, 0x0)

38.687872492s ago: executing program 2 (id=99):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000001700000002000000000000040000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYBLOB="010028237000fddbdf250700000008000300", @ANYRES64=r3, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

38.561263956s ago: executing program 2 (id=103):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="24000000010401025fafbb61b9cbe71b0000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
close(r0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0xa, 0x4, 0x3a)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
close(0x4)

38.445863363s ago: executing program 2 (id=104):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x54040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4)
setsockopt$inet6_udp_int(r1, 0x88, 0x1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000040), 0x0}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000003e80)=[{{&(0x7f0000000440)={0xa, 0x4e21, 0x2, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@hopopts={{0x18, 0x29, 0x36, {0x29}}}], 0x18}}], 0x1, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffffffffffcca, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x6c}}, 0x4000010)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001003dbd700000000000c4c8"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
socketpair(0x10, 0x7b93b89219963686, 0x6, &(0x7f0000000080))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6000}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x6c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)="8b971ee932958904ef32549a0ef26b4485a2ecedd8bd1635", 0x18}, {&(0x7f0000000680)="83098406694b421f85b0e00715efa701bacdef54f441820c851027babffa963215bcb6847f4cabaf7fa3d317b2cfff6e55f049aa57b2ed2fed034c81f6a7afa2b12af9cffc3c81cdb387cee95451d1ccd4c5df07de09637854ac606ab2c479d0e02d7a8acc90af10e1057220c5e4c2636bf33ceaed7e3820cc6f70f7a0325a13e57adc57e51fbc049fc097f809b2bbad1c491732b0bc6ae8688bf1655e4b16b3b774199b80f49929382007afb359c8b792bd4e0fd32615f46343aad4a36cdc76edc431bd4a3a8cd3d3bc974b", 0xcc}], 0x2}, 0x0)
setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f00000002c0)=0x1, 0x4)
r11 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000100)=0xfffffffc, 0x4)
setsockopt$sock_int(r11, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4)

38.352242837s ago: executing program 2 (id=106):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x14, 0x0) (rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaa2aaaaaaffffffffffff08000001aaaaaaaaaaaa0000000000000000"], &(0x7f0000000380)={0x1, 0x2, [0xf9b, 0xeb1, 0x33f, 0x6ce]})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="50c20000000000001800128008000100677470000c000280050005000000000008000300", @ANYRES32=0x0, @ANYBLOB="7f36565e127f12bd64a1a9e6db2ec5bcbc5df36fd6157f67b2459027af0911fe8ca2b67c45c1a3382db6dbc7832cdc2a41a3e366ade20ef7951433f972c75bbcd615143c9d7aa53a09da4cbe6a0004a522111dccd86639847db8cb15cc30f6df1ad3ea58a326dfb54b5812f729498f85b15355c9f4de57f4cc6124849ec5908e4f16138c208818a9ac3f80bc03926a3b7f99509a4a8844bbaf90163db98fefad4e8d1aad120256cb0ca64498d3c3a324b0de085408e8e9ea10ae9d7c200e833b3fc451a2b75dd71a48355c3e29c66bcfd9f363a73f9e5c3d5140e50b15375c9266f45c2938d4b8e369b41e3fd7d04b"], 0x40}}, 0x0) (async)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r7}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0xea5bc50b6199d77e)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}}, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b40)={0x1c8, r9, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xfe, 0xa8, @random="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"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40401}, 0x10) (async)
sendto$packet(r3, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x18, r7, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r13, 0x439, 0xfffffffe, 0x20000, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004000) (async)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r11, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x840) (async)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

22.996614344s ago: executing program 32 (id=106):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x14, 0x0) (rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaa2aaaaaaffffffffffff08000001aaaaaaaaaaaa0000000000000000"], &(0x7f0000000380)={0x1, 0x2, [0xf9b, 0xeb1, 0x33f, 0x6ce]})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="50c20000000000001800128008000100677470000c000280050005000000000008000300", @ANYRES32=0x0, @ANYBLOB="7f36565e127f12bd64a1a9e6db2ec5bcbc5df36fd6157f67b2459027af0911fe8ca2b67c45c1a3382db6dbc7832cdc2a41a3e366ade20ef7951433f972c75bbcd615143c9d7aa53a09da4cbe6a0004a522111dccd86639847db8cb15cc30f6df1ad3ea58a326dfb54b5812f729498f85b15355c9f4de57f4cc6124849ec5908e4f16138c208818a9ac3f80bc03926a3b7f99509a4a8844bbaf90163db98fefad4e8d1aad120256cb0ca64498d3c3a324b0de085408e8e9ea10ae9d7c200e833b3fc451a2b75dd71a48355c3e29c66bcfd9f363a73f9e5c3d5140e50b15375c9266f45c2938d4b8e369b41e3fd7d04b"], 0x40}}, 0x0) (async)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r7}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0xea5bc50b6199d77e)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}}, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b40)={0x1c8, r9, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xfe, 0xa8, @random="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"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40401}, 0x10) (async)
sendto$packet(r3, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x18, r7, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r13, 0x439, 0xfffffffe, 0x20000, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004000) (async)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r11, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x840) (async)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

911.951182ms ago: executing program 0 (id=479):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000580)={0x4, 0x8002}, 0x4) (async)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async)
socket$packet(0x11, 0x3, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) (async)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0xffab, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c000000100085060000000000000000000000000d710bc7eaaa5a949f6fdb75b94100bd51b57f99dce2abc28084c71ff95315ed1bcc0d025e02d52cab9d9227d06c6e4fc321add826ec2587b672b737522c96f4bef4a51c5097a9bb9c531ddf3dc51a33d9f812f08c053167755a9b104f318539e92734e596975bf4fbc0825a7bcfa6df234fd176d6f5b694f4080ade2619e3516accea2857b0594e5ecf79493a5a22d3a92834a0d906de39e9791541194e64a9e6bcc0f6ac71978ff7c168e1687f0ee8d717d61ada4d2c15dfbb8b05", @ANYRESOCT, @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x2004c881}, 0x40) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
socketpair(0x21, 0x2, 0x7, &(0x7f0000000480)={<r5=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000004c0)={<r6=>0x0, 0x5}, &(0x7f0000000500)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r6, 0x0, 0xb, 0x0, 0x9, 0x6}, 0x14) (async)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000d0a010800000000000000000a0000060900020073797a31000073797a310000000004000380"], 0x30}}, 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket(0x22, 0x3, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r9, @ANYBLOB="dee58dab16ec862edff434cfa470f63d49ff1c5d67c82ee30e573182fd176613a97a83c79ca3a680db221f3eeba6d2bc16f937"], 0x44}}, 0x8000) (async)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="040029bd7000fedbdf250100000008000400f9ffffff0c000380060004000001000008000600767700000800050000000000280003800800010001000000080003000300000014000600fe8000000000000000000000000000aa1c0001800800050002000000060002005e000000060002002e000000080004006b020000080005000000000008000400d20d0000"], 0x94}}, 0x4004008)

792.839368ms ago: executing program 0 (id=480):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x9}, 0x0) (async)
r3 = epoll_create(0x7) (async)
r4 = epoll_create1(0x0) (async)
r5 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000000c0)={0x20000014}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000080)) (async)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000020}, 0x404c001)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)

791.691958ms ago: executing program 1 (id=481):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r3, 0x29, 0x4a, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0)

787.699018ms ago: executing program 0 (id=482):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000600)={<r2=>0xffffffffffffffff})
pipe(&(0x7f0000000500)={<r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r7)
getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r8, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0)
socket(0x2, 0x5, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r11)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x54, r12, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xf2, 0x8e, 0x3}, {0xc, 0x8f, 0x19c000000}, {0xc, 0x90, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r10, r10, 0x2f}, 0x20)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000340)={0x10002010})
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "edced6"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "3ef36203abc9c254ff"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cfb1f38af3"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f27ddde05b"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4804}, 0x40)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r13=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

701.428556ms ago: executing program 1 (id=483):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan1\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb35, 0x8183}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x49}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x80)
socket$inet_udplite(0x2, 0x2, 0x88)

563.9818ms ago: executing program 1 (id=486):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, @isdn={0x22, 0x7, 0xf5, 0x7, 0x3}, @isdn={0x22, 0x5, 0xff, 0x3, 0xff}, @phonet={0x23, 0x8, 0xb9, 0x5e}, 0x3, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)='vlan1\x00', 0x1000, 0xffffffffffff8481, 0xd462})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x6, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7f, 0xffffffc1, 0x0, 0x222e, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x80000000, 0x5}, 0x48)
r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_opts(r9, 0x0, 0x4, 0x0, &(0x7f0000000240))
connect$ax25(r8, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRESHEX=r6, @ANYRES8=0x0, @ANYRES32=r13], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

561.534162ms ago: executing program 0 (id=487):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000000000000000008600907800000000000000000000002c0000ee3f000000002b036fbb8084bde1a874fda892f01a97d42b6aad5cea932589e92d9d4d5342283e5fd01b0e3f26dcac536e92493f8a14e919b4f4e896a50ceedece7c47deecad6f3c7941665492a3862047f8c38a0feea892820a62c76964a84e519b2e581ca7daa0ffa71f8ea62f1607bd6950eb879bfeb18bc46e97b6d179916e1bfbf129839a"], 0xfdef)

393.831748ms ago: executing program 0 (id=488):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdb, 0xdb, 0x4, [@ptr={0xe, 0x0, 0x0, 0x2, 0x3}, @enum={0xf, 0x6, 0x0, 0x6, 0x4, [{0x0, 0x3}, {0x3, 0x4}, {0xc, 0x6}, {0xd, 0xd1b}, {0x3, 0x4}, {0xd, 0x10000}]}, @datasec={0x6, 0x5, 0x0, 0xf, 0x3, [{0x4, 0x7, 0x8}, {0x1, 0xfffffffd, 0x9}, {0x5, 0xffffff80, 0x7}, {0x3, 0x6, 0x1b6d}, {0x3, 0x3e8, 0x8}], "7cc3c4"}, @union={0xa, 0x2, 0x0, 0x5, 0x0, 0x3, [{0x0, 0x1, 0x8}, {0xf, 0x0, 0x40}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0xb01}}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000140)=""/113, 0xf8, 0x71, 0x1, 0x0, 0x10000}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r6, r7, 0x0, 0xffffffff000)
connect$phonet_pipe(r6, 0x0, 0x0)
connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0)

393.439724ms ago: executing program 1 (id=489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x2000c810}, 0x0) (async, rerun: 32)
setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f00000018c0), 0x4) (async, rerun: 32)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) (async, rerun: 32)
openat$ppp(0xffffffffffffff9c, 0x0, 0x121c02, 0x0) (async, rerun: 32)
write$tun(r4, &(0x7f0000001080)=ANY=[@ANYBLOB="000000f60204050008"], 0x124a) (async)
recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "e2"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000100001f024bd7000fe888a00000000002dfece02dc19f37a198fde89c0418626", @ANYRES32=r1, @ANYBLOB="10080400870a040008002800e590000004001880", @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (rerun: 64)

341.886878ms ago: executing program 3 (id=490):
r0 = socket(0x25, 0x803, 0x80000)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10)

273.823691ms ago: executing program 3 (id=491):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', <r1=>0x0}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20)
write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x8)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340002800800080006000000060002004e200000080007000800000005000ddec229b321a950b000090000000800080009000100"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a00000006000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040), 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20) (async)
write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x8) (async)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340002800800080006000000060002004e200000080007000800000005000ddec229b321a950b000090000000800080009000100"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a00000006000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040), 0x4) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async)

203.395981ms ago: executing program 3 (id=492):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) (async)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0}) (async, rerun: 64)
getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000100), &(0x7f0000000280)=0x4) (rerun: 64)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x8e, 0x1}, 0x6) (async)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) (async)
sendmmsg$inet(r0, 0x0, 0x0, 0x20000010) (async, rerun: 32)
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a140000001100010000000a000000000000000000d5665b017b9698449542b2d1be78a9f2816760a54c911e0e4b7e44c7320b9dfadb93e9ff85a1c658695896bf6cc8137ead1bfe4a3c80595ba9f322e9b1cfb4037d9877518d8a6918307d436fe2468b4cbee45399bb6597008c4de4799371cc4439b7b8a3d145fa888d32886cd3360743a47b3f9550bac7e5cc09649ea360cc7bb8a3e15ab977f50e9b8ab7a017ed69a9ad333bca73322342f970b86b6b40ceebcc8e4eb8568782b6420000000000000000"], 0x28}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31832abd7000000000001900000018000180140002007369743000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
close(r3) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010013000000438c660e5217"], 0x20}}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) (async)
close(r3) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00000002c0)=0x3, 0x4) (async)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000001940)=@in={0x2, 0x4e21, @multicast1}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)="b0b65bbe774962aa1a5538e92039cb05a3e40b9d2146a5492f11d777e3231da4c16c4ddf2d39e184f5d3464844de40400a175f3d3548f56d29dff288e3549825bbac64990c192612319affd148139e2a8fa5a86cb2f8bce021cd0400000000000000f3a8201885e2000200000000000053bac8e25843741c8efd19f687c0bf18c48ef43f9d8d07cdf57cba7840e037", 0x8f}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001c00)="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", 0xa7}, {&(0x7f0000001d00)="d111a958afb1d6e95c6b3106972e01255e5e0f5931e672f5d305bcd40393fdcbdc94412d3b89341f085df3911a36f782c6b8b4b75beb1404f03669654b0851ce5fa9fea0ac88300e2f0737b8685974cca6c712de45f1d2f510dcc5357e9663c4d5f25e9de5596cc841c1bdd8e79dfd64f544aefb4bcca20dd8da4505c23c9ab32da3333bfd2308cc01e6017c86acbd76fadaee45ebc1608824209ffdc58a64a2bebddec1a5349b185028c39ffb85cfcbcd3b228a9d0f7f09fafa49436d7e7290e18fe9335e4e157f684ecafb2cff53bbc77f808330d9fe49760dc5f38a1c27a297e3cf76f17474e692673b1cdb327054dc890f013a38ef7cd9bb073be84d89db164c4e654d6e0db26c7885747232afaeb5aa737b74d5a6", 0xffffffffffffff7a}, {&(0x7f00000007c0)="e72325a69beaebb60cb4e935e2cb674894355d87d2080ef938a295f402af4dae9f784b6b80e3baf7d7d9ccf02668cf4105117cc51b064f770602c82f8491cd72488612bc9adc2ad6f90ea44d64b1e1383ab028e59e795ea496059eda3816cbfc293036caa91db8c961b19c5232f1cdec982745b07d5c37533f393e0bc4bb7593694eb77c6c8e00e84f22a5dd601f5a7ea335999ff45c531a9db963a5be3d", 0x9e}], 0x5}, 0x880) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f00000008c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000001a40)=ANY=[@ANYBLOB="cda0208556d873edaafa", @ANYRES16=0x0, @ANYBLOB="040225bd7000fedbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x84}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) (async)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)

143.920131ms ago: executing program 3 (id=493):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r0, 0x8004af80, &(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1d, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
r6 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14f2ffffea03010000000000000000000000000a14000000f503010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0)
socket(0x27, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @ldst={0x1, 0x1, 0x3, 0x0, 0x1, 0x65}]}, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x3}, {0xfff3}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x20000000)

112.803718ms ago: executing program 1 (id=494):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000330000ee3f000000002b036fbb8084bde1a874fda892f01a97d42b6aad5cea932589e92d9d4d5342283e5fd01b0e3f26dcac536e92493f8a14e919b4f4e896a50ceedece7c47deecad6f3c7941665492a3862047f8c38a0feea892820a62c76964a84e519b2e581ca7daa0ffa71f8ea62f1607bd6950eb879bfeb18bc46e97b6d179916e1bfbf129839a"], 0xfdef)

64.571762ms ago: executing program 3 (id=495):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000cc0)={'virt_wifi0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "ff918db4b2ea864f5815795e5c517b777bf7d391e3a422329473449b6549c7ed", "1a324626a66fea4c37e166fb9b76dbb0b34a4b52c396450339b98a84de4a9567", "b767d3283bdd19a0bac6fc57d24dc8ec638ab26a47bc5f7cf96061a759cdef6c", "bea2a66f7ab0e327991883899b8aa68cbdb0cdcc65ba8de2a80f983f3bc5c9b5", "bf445359f87c8d9d44597e290cfd1c5ef93ac3eabc63287ff01f140e67ad238a", "7fb9d290634203eb8f9ca834", 0x8, 0x7fff, 0x6, 0x5, 0x6}})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = accept(r1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
close(0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000080)=""/13, 0x2}, 0x20)
r7 = socket$inet6(0xa, 0x80001, 0x0)
poll(&(0x7f0000000040)=[{}], 0x20000000000002d6, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x6, 0x2, 0x3, 0x1, 0x0, 0x4}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000440)=0x9, 0x4)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x380000, @rand_addr=' \x01\x00'}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200}, &(0x7f0000000040)=0x20)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f00000004c0)=0xf78b, 0x4)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
write(r9, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140), &(0x7f00000001c0)=0x8)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206fe"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x0)

2.009687ms ago: executing program 3 (id=496):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x5f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x55}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000d811}, 0x4000080)
recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4073, 0xe7c}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x75}, 0x40000020)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)
socket$kcm(0x2, 0xa, 0x2)
socket(0x200000000000011, 0x2, 0x1)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xfffffffb}, 0x1f)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0xfffd, @multicast1}}, 0xfffb}, 0x90)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000240)=<r8=>0x0)
syz_open_procfs$namespace(r8, &(0x7f0000000280)='ns/uts\x00')
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080))
socket$inet_tcp(0x2, 0x1, 0x0)

667.157µs ago: executing program 0 (id=497):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000003c0), &(0x7f0000000440)=0x6)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r3, 0x0, 0x417}, 0x18)
r4 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="15", 0x1}], 0x1}, 0x4000080)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e25, 0x0, 0x3, 0x0, 0x2}, {0x2, 0x53, 0xfff, 0x0, 0xfffffffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@remote, 0x0, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0x0, 0x3439, 0x400009}}, 0xe8)
r7 = socket(0xa, 0x3, 0x3a)
r8 = socket$kcm(0x2, 0x2, 0x73)
ioctl$sock_SIOCINQ(r8, 0x541b, 0x0)
setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
connect$inet6(r6, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000002daad000a"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x5)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x4b8e41, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000006c0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8)
sendmsg$nl_generic(r10, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, 0x21, 0x4, 0x70bd29, 0x25dfdbfc, {0x10}, [@nested={0x66, 0x7b, 0x0, 0x1, [@generic="2e0afc8cebce63965e9bb6170fda2b94c8df4d0f322f197dc57a89ba56c8d7190af00f91fc9d2ded4ea784fe9218e619b72acabc3d2f8876e11c9def65edd16c404d1de635fc3382c0fc26bcf9b08bdaaf5cf10998f709291cc3", @typed={0x8, 0x1a, 0x0, 0x0, @uid=r11}]}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r9}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000045}, 0x4000040)
r12 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

0s ago: executing program 1 (id=498):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0) (async)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140))
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0)) (async)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
sendto$inet(r2, &(0x7f0000000100)="09268a92024e658a2f5a1fb9d0283e16b1f73d0b4d88b9", 0x17, 0x20004011, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8)
sendto$inet6(r4, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000800)={0x5, 0x3, 0x4, 0xb, 0x3, 0x3ff, 0xc1, 0x7}, 0x20) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000800)={0x5, 0x3, 0x4, 0xb, 0x3, 0x3ff, 0xc1, 0x7}, 0x20)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36011' (ED25519) to the list of known hosts.
syzkaller login: [   49.093180][ T5773] cgroup: Unknown subsys name 'net'
[   49.259887][ T5773] cgroup: Unknown subsys name 'cpuset'
[   49.266182][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.683374][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.758749][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.774335][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.778604][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.782098][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.796351][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.800467][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.803815][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.825859][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.830124][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.833138][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.836364][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.839713][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.847432][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.850743][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.853759][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.161430][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   57.189934][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   57.210435][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   57.282751][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.285722][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.288167][ T5845] bridge_slave_0: entered allmulticast mode
[   57.290925][ T5845] bridge_slave_0: entered promiscuous mode
[   57.313572][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.316334][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.318615][ T5845] bridge_slave_1: entered allmulticast mode
[   57.321323][ T5845] bridge_slave_1: entered promiscuous mode
[   57.382286][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.385970][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.388980][ T5853] bridge_slave_0: entered allmulticast mode
[   57.393436][ T5853] bridge_slave_0: entered promiscuous mode
[   57.399959][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.403013][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.406345][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.410147][ T5853] bridge_slave_1: entered allmulticast mode
[   57.414201][ T5853] bridge_slave_1: entered promiscuous mode
[   57.434017][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.480804][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.483792][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.486855][ T5849] bridge_slave_0: entered allmulticast mode
[   57.490608][ T5849] bridge_slave_0: entered promiscuous mode
[   57.505220][ T5845] team0: Port device team_slave_0 added
[   57.511065][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.515954][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.518996][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.521833][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.524679][ T5849] bridge_slave_1: entered allmulticast mode
[   57.528761][ T5849] bridge_slave_1: entered promiscuous mode
[   57.532819][ T5845] team0: Port device team_slave_1 added
[   57.594370][ T5853] team0: Port device team_slave_0 added
[   57.616596][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.621567][ T5853] team0: Port device team_slave_1 added
[   57.625853][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.630997][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.633779][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.645452][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.689714][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.692286][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.702801][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.723127][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.726854][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.736749][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.742427][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.745087][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.755010][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.769346][ T5849] team0: Port device team_slave_0 added
[   57.773574][ T5849] team0: Port device team_slave_1 added
[   57.848622][ T5853] hsr_slave_0: entered promiscuous mode
[   57.851550][ T5853] hsr_slave_1: entered promiscuous mode
[   57.855084][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.858400][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.868641][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.889309][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.892184][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.902660][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.918638][ T5845] hsr_slave_0: entered promiscuous mode
[   57.921761][ T5845] hsr_slave_1: entered promiscuous mode
[   57.924705][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   57.927756][ T5845] Cannot create hsr debugfs directory
[   58.002970][ T5849] hsr_slave_0: entered promiscuous mode
[   58.006182][ T5849] hsr_slave_1: entered promiscuous mode
[   58.008681][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   58.010660][ T5849] Cannot create hsr debugfs directory
[   58.276503][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.288432][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.298876][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.315077][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.362100][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.383621][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.403731][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.410824][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.459766][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.470335][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.478248][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.499433][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.620716][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.652410][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   58.667301][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.669918][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.687947][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.694379][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.697442][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.727001][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.740407][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   58.758261][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.760501][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.776138][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   58.781316][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.784304][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.801545][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.804485][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.826240][   T55] Bluetooth: hci1: command tx timeout
[   58.838175][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.840536][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.864002][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   58.869192][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.901444][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.909576][   T55] Bluetooth: hci0: command tx timeout
[   58.910182][ T5238] Bluetooth: hci2: command tx timeout
[   59.007803][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.034741][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.060085][ T5853] veth0_vlan: entered promiscuous mode
[   59.077634][ T5853] veth1_vlan: entered promiscuous mode
[   59.090832][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.098023][ T5845] veth0_vlan: entered promiscuous mode
[   59.124834][ T5845] veth1_vlan: entered promiscuous mode
[   59.147743][ T5853] veth0_macvtap: entered promiscuous mode
[   59.157359][ T5853] veth1_macvtap: entered promiscuous mode
[   59.190374][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.195172][ T5849] veth0_vlan: entered promiscuous mode
[   59.208125][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.211877][ T5845] veth0_macvtap: entered promiscuous mode
[   59.233341][ T5849] veth1_vlan: entered promiscuous mode
[   59.237870][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.242355][ T5845] veth1_macvtap: entered promiscuous mode
[   59.256169][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.271541][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.286812][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.328005][ T5849] veth0_macvtap: entered promiscuous mode
[   59.339376][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.348343][ T5849] veth1_macvtap: entered promiscuous mode
[   59.398645][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.411885][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.421124][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.431964][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.439526][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.442967][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.459645][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.472016][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.480213][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.483803][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.491693][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.505840][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.509294][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.512551][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.537086][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.569305][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.614814][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.619847][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.658125][ T5913] _Z`Ԁ@: entered promiscuous mode
[   59.662576][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.670112][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.714205][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.718715][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.767451][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.770541][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.848123][ T5921] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   59.852480][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   59.878882][ T5923] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   59.916505][ T5923] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   60.022490][ T5933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.025815][ T5939] netlink: 'syz.1.9': attribute type 11 has an invalid length.
[   60.031476][ T5939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9'.
[   60.039456][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'.
[   60.043691][ T5934] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   60.202574][ T5949] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.211693][ T5949] team0: Port device bond1 added
[   60.224429][ T5949] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12'.
[   60.230669][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   60.264785][ T5952] gretap0: entered promiscuous mode
[   60.272766][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   60.380285][ T5960] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15'.
[   60.401170][ T5962] bridge_slave_0: left allmulticast mode
[   60.403110][ T5962] bridge_slave_0: left promiscuous mode
[   60.408591][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.439569][ T5962] bridge_slave_1: left allmulticast mode
[   60.446763][ T5962] bridge_slave_1: left promiscuous mode
[   60.449312][ T5963] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16'.
[   60.451321][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.463477][ T5962] bond0: (slave bond_slave_0): Releasing backup interface
[   60.471155][ T5962] bond0: (slave bond_slave_1): Releasing backup interface
[   60.480154][ T5962] team0: Port device team_slave_0 removed
[   60.484747][ T5962] team0: Port device team_slave_1 removed
[   60.488281][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.491152][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.494355][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.497575][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.512142][ T5963] team0: Mode changed to "broadcast"
[   60.531165][ T5967] vlan0: entered promiscuous mode
[   60.540385][ T5967] team0: Port device vlan0 added
[   60.710246][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'.
[   60.765033][ T5975] netlink: 'syz.1.19': attribute type 10 has an invalid length.
[   60.779971][ T5975] team0: Port device netdevsim0 added
[   60.906522][ T5238] Bluetooth: hci1: command tx timeout
[   60.924935][ T5985] unknown channel width for channel at 909000KHz?
[   60.927966][ T5985] unknown channel width for channel at 909000KHz?
[   60.930550][ T5985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.22'.
[   60.988067][ T5238] Bluetooth: hci0: command tx timeout
[   60.988100][   T55] Bluetooth: hci2: command tx timeout
[   60.997276][ T5989] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   61.244059][ T6015] bond2: entered promiscuous mode
[   61.249926][ T6015] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.253238][ T6022] batadv_slave_1: entered promiscuous mode
[   61.330221][ T6021] batadv_slave_1: left promiscuous mode
[   61.738521][ T6060] netlink: 'syz.1.40': attribute type 1 has an invalid length.
[   61.802398][ T6065] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000
[   61.808921][ T6065] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20000
[   61.961452][ T6070] bridge0: entered allmulticast mode
[   61.967564][ T6070] pim6reg: entered allmulticast mode
[   62.014786][ T6082] sit2: entered promiscuous mode
[   62.353629][ T5877] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.361429][ T5877] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.364234][ T5877] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.369003][ T5877] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.447730][ T6098] tipc: Started in network mode
[   62.449908][ T6098] tipc: Node identity b23c5b038fa6, cluster identity 4711
[   62.452862][ T6098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.459222][ T6098] syzkaller0: entered promiscuous mode
[   62.464537][ T6098] syzkaller0: entered allmulticast mode
[   62.470886][ T6098] tipc: Resetting bearer <eth:syzkaller0>
[   62.474737][ T6097] tipc: Resetting bearer <eth:syzkaller0>
[   62.491146][ T6097] tipc: Disabling bearer <eth:syzkaller0>
[   62.509282][ T6100] vlan0: left promiscuous mode
[   62.513666][ T6100] sit2: left promiscuous mode
[   62.519103][ T6101] @: renamed from veth0_vlan
[   62.586692][ T6104] wg1: entered promiscuous mode
[   62.590843][ T6104] wg1: entered allmulticast mode
[   62.734141][ T6115] netlink: 'syz.0.57': attribute type 12 has an invalid length.
[   62.734377][ T6117] syz_tun: entered allmulticast mode
[   62.744567][ T6117] dvmrp8: entered allmulticast mode
[   62.782785][ T6116] syz_tun: left allmulticast mode
[   62.784369][ T6116] dvmrp8: left allmulticast mode
[   62.880932][ T6121] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.985704][   T55] Bluetooth: hci1: command tx timeout
[   63.068631][   T55] Bluetooth: hci0: command tx timeout
[   63.076605][   T55] Bluetooth: hci2: command tx timeout
[   63.630474][ T6153] netlink: 'syz.1.68': attribute type 1 has an invalid length.
[   63.633192][ T6153] netlink: 'syz.1.68': attribute type 1 has an invalid length.
[   63.807246][ T6157] unsupported nlmsg_type 40
[   63.868686][ T6165] netlink: 'syz.0.72': attribute type 1 has an invalid length.
[   63.945021][ T6165] bond0: (slave bond_slave_1): Releasing backup interface
[   64.068438][ T6175] netlink: 'syz.2.75': attribute type 4 has an invalid length.
[   64.160577][ T6181] Zero length message leads to an empty skb
[   64.284741][ T6193] 0X: renamed from caif0
[   64.291202][ T6193] 0X: entered allmulticast mode
[   64.293596][ T6193] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   64.298174][ T6195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.313692][ T6193] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.327610][ T6193] team0: Port device bond0 added
[   64.337366][ T6195] vlan2: entered allmulticast mode
[   64.339471][ T6195] vlan1: entered allmulticast mode
[   64.341450][ T6195] veth0_vlan: entered allmulticast mode
[   64.492404][ T6204] syzkaller1: entered promiscuous mode
[   64.494569][ T6204] syzkaller1: entered allmulticast mode
[   64.592541][ T6210] veth1: entered promiscuous mode
[   64.748037][ T6217] vlan2: entered allmulticast mode
[   64.749759][ T6217] gretap0: entered allmulticast mode
[   64.822116][ T6226] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   64.884853][ T6230] netlink: 'syz.2.91': attribute type 11 has an invalid length.
[   64.904977][ T6232] netlink: 'syz.2.91': attribute type 11 has an invalid length.
[   64.949327][ T6234] openvswitch: netlink: IP tunnel dst address not specified
[   65.052193][ T6241] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.058549][ T6241] team0: Port device bond1 added
[   65.067852][   T55] Bluetooth: hci1: command tx timeout
[   65.146274][ T5238] Bluetooth: hci0: command tx timeout
[   65.148148][   T55] Bluetooth: hci2: command tx timeout
[   65.167999][ T6254] validate_nla: 4 callbacks suppressed
[   65.168022][ T6254] netlink: 'syz.1.96': attribute type 1 has an invalid length.
[   65.172881][ T6254] netlink: 'syz.1.96': attribute type 1 has an invalid length.
[   65.293750][ T6261] netlink: 'syz.1.96': attribute type 1 has an invalid length.
[   65.311879][ T6261] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.327210][ T6254] bond2: (slave wlan0): Enslaving as an active interface with a down link
[   65.379427][ T6269] netlink: 'syz.2.99': attribute type 10 has an invalid length.
[   65.405021][ T6269] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   65.464826][ T6280] __nla_validate_parse: 29 callbacks suppressed
[   65.464839][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'.
[   65.478528][ T6280] pim6reg: left allmulticast mode
[   65.480203][ T6280] bridge0: left allmulticast mode
[   65.591442][ T6287] netlink: 64 bytes leftover after parsing attributes in process `syz.2.104'.
[   65.599456][ T6290] netlink: 'syz.0.105': attribute type 4 has an invalid length.
[   65.613633][ T6290] netlink: 'syz.0.105': attribute type 4 has an invalid length.
[   65.673734][ T6288] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   65.700650][ T6298] netlink: 248 bytes leftover after parsing attributes in process `syz.0.107'.
[   65.886717][ T6301] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   65.890725][ T6301] macsec0: entered promiscuous mode
[   65.893162][ T6301] macsec0: entered allmulticast mode
[   65.896088][ T6301] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   65.910420][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f48d800: rx timeout, send abort
[   65.916213][ T6301] team0: Port device bond0 removed
[   65.919751][ T6301] bridge_slave_0: left allmulticast mode
[   65.921766][ T6301] bridge_slave_0: left promiscuous mode
[   65.923601][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.929430][ T6301] bridge_slave_1: left allmulticast mode
[   65.931279][ T6301] bridge_slave_1: left promiscuous mode
[   65.933123][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.939879][ T6301] bond0: (slave bond_slave_0): Releasing backup interface
[   65.947519][ T6301] team0: Port device team_slave_0 removed
[   65.952371][ T6301] team0: Port device team_slave_1 removed
[   65.954613][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.958259][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.962420][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.966041][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.978662][ T6301] bond0: (slave wlan1): Releasing backup interface
[   65.989540][ T6301] team0: Port device bond1 removed
[   66.279110][ T6314] netlink: 44 bytes leftover after parsing attributes in process `syz.0.111'.
[   66.359355][ T6322] syzkaller0: entered promiscuous mode
[   66.361397][ T6322] syzkaller0: entered allmulticast mode
[   66.411161][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f48e000: rx timeout, send abort
[   66.414333][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f48d800: abort rx timeout. Force session deactivation
[   66.437239][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   66.460217][ T6327] wg1: left promiscuous mode
[   66.461846][ T6327] wg1: left allmulticast mode
[   66.482013][ T6331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.116'.
[   66.604526][ T6345] netlink: 84 bytes leftover after parsing attributes in process `syz.0.119'.
[   66.648516][ T6347] netlink: 'syz.1.120': attribute type 1 has an invalid length.
[   66.655162][ T6347] netlink: 204 bytes leftover after parsing attributes in process `syz.1.120'.
[   66.663170][ T6347] netlink: 'syz.1.120': attribute type 1 has an invalid length.
[   66.687157][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f48f800: rx timeout, send abort
[   66.760667][ T6355] netlink: 212008 bytes leftover after parsing attributes in process `syz.1.123'.
[   66.760954][ T6352] netlink: 'syz.0.122': attribute type 9 has an invalid length.
[   66.772346][ T6352] netlink: 200 bytes leftover after parsing attributes in process `syz.0.122'.
[   66.864391][ T6365] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   66.900428][ T6367] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   67.143537][ T6380] netlink: 64 bytes leftover after parsing attributes in process `syz.0.131'.
[   67.189749][ T6382] lo speed is unknown, defaulting to 1000
[   67.189948][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f48f800: abort rx timeout. Force session deactivation
[   67.193172][ T6382] lo speed is unknown, defaulting to 1000
[   67.198577][ T6382] lo speed is unknown, defaulting to 1000
[   67.212904][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   67.247323][ T6383] gretap0: left promiscuous mode
[   67.280525][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.284924][ T6383] 8021q: adding VLAN 0 to HW filter on device team0
[   67.301429][ T6383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.354439][ T6382] infiniband syz0: set active
[   67.358194][ T1271] lo speed is unknown, defaulting to 1000
[   67.360912][ T1271] syz0: Port: 1 Link ACTIVE
[   67.364755][ T6382] infiniband syz0: added lo
[   67.382473][ T6391] team0: Device gtp0 is up. Set it down before adding it as a team port
[   67.410253][ T6382] RDS/IB: syz0: added
[   67.412559][ T6382] smc: adding ib device syz0 with port count 1
[   67.413815][ T6389] team0: Device gtp0 is up. Set it down before adding it as a team port
[   67.418758][ T6382] smc:    ib device syz0 port 1 has pnetid 
[   67.429558][ T1271] lo speed is unknown, defaulting to 1000
[   67.434466][ T6382] lo speed is unknown, defaulting to 1000
[   67.462916][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810f48c800: rx timeout, send abort
[   67.558631][ T6402] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 2, id = 0
[   67.617405][ T6382] lo speed is unknown, defaulting to 1000
[   67.635714][ T6405] warning: `syz.0.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.796897][ T6411] 0X: left allmulticast mode
[   67.936675][ T6411] bond2: left promiscuous mode
[   67.939919][ T6411] vlan2: left allmulticast mode
[   67.942097][ T6411] gretap0: left allmulticast mode
[   67.944989][ T6411] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[   67.949506][ T6411] macsec0: left promiscuous mode
[   67.951723][ T6411] macsec0: left allmulticast mode
[   67.958758][ T6382] lo speed is unknown, defaulting to 1000
[   67.964915][ T5877] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.968728][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810f48c800: abort rx timeout. Force session deactivation
[   67.972896][ T5877] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.976729][ T5877] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.980470][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   67.988278][ T5877] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.083437][ T6416] ipvlan2: entered promiscuous mode
[   68.088629][ T6416] bridge0: port 1(ipvlan2) entered blocking state
[   68.091081][ T6416] bridge0: port 1(ipvlan2) entered disabled state
[   68.093092][ T6416] ipvlan2: entered allmulticast mode
[   68.094672][ T6416] gretap0: entered allmulticast mode
[   68.098522][ T6416] ipvlan2: left allmulticast mode
[   68.100088][ T6416] gretap0: left allmulticast mode
[   68.230487][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810f48d400: rx timeout, send abort
[   68.342393][ T6424] batadv_slave_1: entered promiscuous mode
[   68.546132][ T6423] batadv_slave_1: left promiscuous mode
[   68.684397][ T6430] lo speed is unknown, defaulting to 1000
[   68.733088][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810f48d400: abort rx timeout. Force session deactivation
[   68.757439][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   69.007478][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810f48d000: rx timeout, send abort
[   69.294877][ T6455] 8021q: adding VLAN 0 to HW filter on device bond3
[   69.310767][ T6455] gretap1: entered promiscuous mode
[   69.315739][ T6455] bond3: (slave gretap1): making interface the new active one
[   69.318967][ T6455] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   69.321813][ T6458] syzkaller0: entered promiscuous mode
[   69.324059][ T6458] syzkaller0: entered allmulticast mode
[   69.349542][ T6458] netem: change failed
[   69.508365][ T6466] bridge0: entered allmulticast mode
[   69.510730][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810f48d000: abort rx timeout. Force session deactivation
[   69.514088][ T6466] pim6reg: entered allmulticast mode
[   69.534062][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   69.643816][ T6480] bridge0: entered promiscuous mode
[   69.646734][ T6480] ip6gretap0: entered promiscuous mode
[   69.649177][ T6480] bridge0: left promiscuous mode
[   69.651350][ T6480] ip6gretap0: left promiscuous mode
[   69.784086][    C0] vcan0: j1939_tp_rxtimer: 0xffff888116212800: rx timeout, send abort
[   70.067360][ T6485] bond3: entered promiscuous mode
[   70.068979][ T6485] bond3: entered allmulticast mode
[   70.070778][ T6485] 8021q: adding VLAN 0 to HW filter on device bond3
[   70.113326][ T6493] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   70.117285][ T6493] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   70.120767][ T6493] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   70.287269][    C0] vcan0: j1939_tp_rxtimer: 0xffff888116212800: abort rx timeout. Force session deactivation
[   70.316457][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   70.555619][ T6497] __nla_validate_parse: 41 callbacks suppressed
[   70.555633][ T6497] netlink: 60 bytes leftover after parsing attributes in process `syz.1.162'.
[   70.568943][    C1] vcan0: j1939_tp_rxtimer: 0xffff888116211000: rx timeout, send abort
[   71.017627][ T6499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.163'.
[   71.072187][    C1] vcan0: j1939_tp_rxtimer: 0xffff888116211000: abort rx timeout. Force session deactivation
[   71.096571][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   71.100829][ T6504] !: renamed from dummy0
[   71.149819][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.151925][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.292009][ T6512] lo speed is unknown, defaulting to 1000
[   71.346602][    C1] vcan0: j1939_tp_rxtimer: 0xffff888116213400: rx timeout, send abort
[   71.509082][ T6521] netlink: 224 bytes leftover after parsing attributes in process `syz.1.166'.
[   71.849464][    C1] vcan0: j1939_tp_rxtimer: 0xffff888116213400: abort rx timeout. Force session deactivation
[   71.860049][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'.
[   71.877004][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   72.126923][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880271de800: rx timeout, send abort
[   72.629687][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880271de800: abort rx timeout. Force session deactivation
[   72.644130][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   72.740719][ T6594] bond3: left promiscuous mode
[   72.742712][ T6594] bond3: left allmulticast mode
[   72.833884][ T6600] tipc: Started in network mode
[   72.836769][ T6600] tipc: Node identity 080211000001, cluster identity 4711
[   72.839075][ T6600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.842037][ T6600] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   72.846981][ T6600] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   72.850857][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.172'.
[   72.894166][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810c565800: rx timeout, send abort
[   72.898825][ T6601] tipc: Resetting bearer <eth:syzkaller0>
[   73.004735][ T6613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.031356][ T6612] tipc: Resetting bearer <eth:syzkaller0>
[   73.050826][ T6612] tipc: Disabling bearer <eth:syzkaller0>
[   73.208236][ T6631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.223274][ T6623] syzkaller0: entered promiscuous mode
[   73.225771][ T6623] syzkaller0: entered allmulticast mode
[   73.240031][ T6623] sctp: [Deprecated]: syz.0.178 (pid 6623) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.240031][ T6623] Use struct sctp_sack_info instead
[   73.270619][ T6623] tipc: Resetting bearer <eth:syzkaller0>
[   73.278503][ T6622] tipc: Resetting bearer <eth:syzkaller0>
[   73.287702][ T6622] tipc: Disabling bearer <eth:syzkaller0>
[   73.298875][ T6638] bridge0: entered promiscuous mode
[   73.300597][ T6638] bridge0: entered allmulticast mode
[   73.364491][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'.
[   73.397702][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810c565800: abort rx timeout. Force session deactivation
[   73.424946][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   73.521021][ T6654] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   73.675003][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c565000: rx timeout, send abort
[   73.826840][ T6677] netlink: 52 bytes leftover after parsing attributes in process `syz.0.191'.
[   73.830347][ T6677] netlink: 52 bytes leftover after parsing attributes in process `syz.0.191'.
[   73.833721][ T6677] netlink: 52 bytes leftover after parsing attributes in process `syz.0.191'.
[   73.839818][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.191'.
[   73.896258][    T9] tipc: Node number set to 134418688
[   73.900461][ T6679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.903742][ T6679] syzkaller0: entered promiscuous mode
[   73.907991][ T6679] syzkaller0: entered allmulticast mode
[   73.938928][ T6681] tipc: Resetting bearer <eth:syzkaller0>
[   73.950630][ T6681] tipc: Disabling bearer <eth:syzkaller0>
[   74.178020][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c565000: abort rx timeout. Force session deactivation
[   74.204557][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   74.454566][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c565c00: rx timeout, send abort
[   74.562081][ T6693] bond0 (unregistering): Released all slaves
[   74.665666][ T6696] Bluetooth: MGMT ver 1.23
[   74.957733][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c565c00: abort rx timeout. Force session deactivation
[   74.969528][ T6709] validate_nla: 7 callbacks suppressed
[   74.969541][ T6709] netlink: 'syz.1.202': attribute type 1 has an invalid length.
[   74.986973][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   75.051559][ T6715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.067801][ T6716] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   75.082517][ T6717] tipc: Disabling bearer <eth:syzkaller0>
[   75.150839][ T6721] lo speed is unknown, defaulting to 1000
[   75.237032][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c566000: rx timeout, send abort
[   75.298768][ T6722] lo speed is unknown, defaulting to 1000
[   75.468879][ T6725] lo speed is unknown, defaulting to 1000
[   75.740408][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c566000: abort rx timeout. Force session deactivation
[   75.755122][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   75.866375][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.869293][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.962110][ T6734] __nla_validate_parse: 2 callbacks suppressed
[   75.962122][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'.
[   75.968630][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'.
[   76.006953][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c566400: rx timeout, send abort
[   76.306406][   T33] audit: type=1800 audit(1755846666.683:2): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.213" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=451 res=0 errno=0
[   76.500772][    T9] IPVS: starting estimator thread 0...
[   76.509807][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c566400: abort rx timeout. Force session deactivation
[   76.523676][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   76.586244][ T6768] IPVS: using max 39 ests per chain, 93600 per kthread
[   76.606457][ T6770] netlink: 'syz.1.217': attribute type 1 has an invalid length.
[   76.616736][ T6772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.216'.
[   76.689398][ T6770] bond4: (slave veth3): Enslaving as an active interface with a down link
[   76.699358][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'.
[   76.709746][ T6770] 8021q: adding VLAN 0 to HW filter on device bond4
[   76.748325][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout
[   76.751483][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   76.773656][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c567400: rx timeout, send abort
[   76.915502][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.918852][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.185057][ T6781] lo speed is unknown, defaulting to 1000
[   77.276420][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c567400: abort rx timeout. Force session deactivation
[   77.297159][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   77.526021][ T6791] netlink: 224 bytes leftover after parsing attributes in process `syz.0.222'.
[   77.547185][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c566800: rx timeout, send abort
[   77.868649][ T6804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.925055][ T6810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.227'.
[   77.958579][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.980035][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'.
[   78.017763][ T6817] netlink: 'syz.0.229': attribute type 8 has an invalid length.
[   78.021290][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'.
[   78.050126][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c566800: abort rx timeout. Force session deactivation
[   78.071506][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   78.103201][ T6824] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.107309][ T6826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.232'.
[   78.107981][ T6824] syzkaller0: entered promiscuous mode
[   78.112022][ T6824] syzkaller0: entered allmulticast mode
[   78.145974][ T6828] tipc: Resetting bearer <eth:syzkaller0>
[   78.150600][ T6823] tipc: Resetting bearer <eth:syzkaller0>
[   78.161663][ T6823] tipc: Disabling bearer <eth:syzkaller0>
[   78.210688][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.234'.
[   78.270826][ T6836] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.274168][ T6836] syzkaller0: entered promiscuous mode
[   78.279137][ T6836] syzkaller0: entered allmulticast mode
[   78.298730][ T6836] tipc: Resetting bearer <eth:syzkaller0>
[   78.302457][ T6835] tipc: Resetting bearer <eth:syzkaller0>
[   78.312630][ T6835] tipc: Disabling bearer <eth:syzkaller0>
[   78.321481][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c564800: rx timeout, send abort
[   78.360594][ T6838] chnl_net:caif_netlink_parms(): no params data found
[   78.740281][ T6853] netlink: 'syz.1.241': attribute type 1 has an invalid length.
[   78.743440][ T6853] netlink: 'syz.1.241': attribute type 1 has an invalid length.
[   78.758391][ T6853] : entered promiscuous mode
[   78.824330][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c564800: abort rx timeout. Force session deactivation
[   78.848631][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   78.985452][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.988112][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   79.020251][ T6864] lo speed is unknown, defaulting to 1000
[   79.071430][ T6865] geneve2: entered promiscuous mode
[   79.073561][ T6865] geneve2: entered allmulticast mode
[   79.098535][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c567000: rx timeout, send abort
[   79.390380][ T6869] lo speed is unknown, defaulting to 1000
[   79.601237][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c567000: abort rx timeout. Force session deactivation
[   79.614706][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   79.864753][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c567800: rx timeout, send abort
[   79.923528][ T6877] netlink: 'syz.1.248': attribute type 1 has an invalid length.
[   79.947329][ T6877] bond5: entered promiscuous mode
[   79.952999][ T6877] bond5: entered allmulticast mode
[   79.956123][ T6877] 8021q: adding VLAN 0 to HW filter on device bond5
[   79.982883][ T6877] 8021q: adding VLAN 0 to HW filter on device bond6
[   79.990353][ T6877] bond6: entered promiscuous mode
[   79.992147][ T6877] bond6: entered allmulticast mode
[   79.994082][ T6877] bond5: (slave bond6): Enslaving as a backup interface with a down link
[   80.025574][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.240762][ T6890] netlink: 'syz.1.251': attribute type 13 has an invalid length.
[   80.268728][ T6900] macvlan2: entered allmulticast mode
[   80.271363][ T6900] veth1_vlan: entered allmulticast mode
[   80.275074][ T6900] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[   80.290542][ T6890] lo speed is unknown, defaulting to 1000
[   80.344421][ T6903] tap0: tun_chr_ioctl cmd 1074025680
[   80.350887][ T6903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.367480][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c567800: abort rx timeout. Force session deactivation
[   80.390853][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   80.409652][ T6901] tipc: Disabling bearer <eth:syzkaller0>
[   80.640856][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c566c00: rx timeout, send abort
[   81.066959][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.070006][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.143518][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c566c00: abort rx timeout. Force session deactivation
[   81.160184][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   81.306304][ T6914] gretap1: left promiscuous mode
[   81.313426][ T6914] tipc: Resetting bearer <eth:syzkaller0>
[   81.345676][ T6914] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[   81.348115][ T6914] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[   81.351921][ T6914] bridge0: left promiscuous mode
[   81.353918][ T6914] bridge0: left allmulticast mode
[   81.378115][ T6914] bond5: left promiscuous mode
[   81.380244][ T6914] bond6: left promiscuous mode
[   81.382412][ T6914] bond5: left allmulticast mode
[   81.384459][ T6914] bond6: left allmulticast mode
[   81.394896][    T9] lo speed is unknown, defaulting to 1000
[   81.402546][    T9] syz0: Port: 1 Link DOWN
[   81.405683][   T10] cfg80211: failed to load regulatory.db
[   81.410156][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c564400: rx timeout, send abort
[   81.414940][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.419875][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.442893][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.448278][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.458548][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.547944][ T6920] trusted_key: syz.1.259 sent an empty control message without MSG_MORE.
[   81.571034][   T10] lo speed is unknown, defaulting to 1000
[   81.635046][ T6917] lo speed is unknown, defaulting to 1000
[   81.729430][ T6924] __nla_validate_parse: 11 callbacks suppressed
[   81.729447][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'.
[   81.912757][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c564400: abort rx timeout. Force session deactivation
[   81.931180][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   81.950083][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'.
[   82.017797][ T6917] chnl_net:caif_netlink_parms(): no params data found
[   82.105999][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.108730][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.111295][ T6917] bridge_slave_0: entered allmulticast mode
[   82.115018][ T6917] bridge_slave_0: entered promiscuous mode
[   82.119262][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.122519][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.124972][ T6917] bridge_slave_1: entered allmulticast mode
[   82.128767][ T6917] bridge_slave_1: entered promiscuous mode
[   82.150806][ T6917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.157204][ T6917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.181166][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c564c00: rx timeout, send abort
[   82.209137][ T6917] team0: Port device team_slave_0 added
[   82.216751][ T6917] team0: Port device team_slave_1 added
[   82.266478][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.268829][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.280246][ T6917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.289285][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.292408][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.303343][ T6917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.339441][ T6917] hsr_slave_0: entered promiscuous mode
[   82.342197][ T6917] hsr_slave_1: entered promiscuous mode
[   82.345095][ T6917] debugfs: 'hsr0' already exists in 'hsr'
[   82.347181][ T6917] Cannot create hsr debugfs directory
[   82.520010][ T6917] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.529899][ T6917] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.539283][ T6917] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.549212][ T6917] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.684403][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c564c00: abort rx timeout. Force session deactivation
[   82.711222][ T6917] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.714236][    C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   82.753388][ T6917] 8021q: adding VLAN 0 to HW filter on device team0
[   82.769645][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.772769][ T3630] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.788785][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.791887][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.964173][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c564000: rx timeout, send abort
[   83.092905][ T6917] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.154148][ T6917] veth0_vlan: entered promiscuous mode
[   83.170619][ T6917] veth1_vlan: entered promiscuous mode
[   83.210048][ T6917] veth0_macvtap: entered promiscuous mode
[   83.217787][ T6917] veth1_macvtap: entered promiscuous mode
[   83.236523][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.248251][ T6917] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.259796][ T5877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.263684][ T5877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.275155][ T5877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.275884][ T6963] netlink: 'syz.0.267': attribute type 1 has an invalid length.
[   83.311091][ T5877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.430530][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.436741][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.456610][ T6973] netlink: 'syz.1.269': attribute type 1 has an invalid length.
[   83.458124][ T6972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.467739][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810c564000: abort rx timeout. Force session deactivation
[   83.475390][ T6973] netlink: 236 bytes leftover after parsing attributes in process `syz.1.269'.
[   83.482858][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.488167][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   83.492995][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.496379][ T6973] pim6reg: entered allmulticast mode
[   83.501214][ T6970] pim6reg: left allmulticast mode
[   83.545770][   T55] Bluetooth: hci3: command tx timeout
[   83.668710][ T6981] Illegal XDP return value 4294967274 on prog  (id 65) dev syz_tun, expect packet loss!
[   83.690392][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'.
[   83.737981][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810a6af800: rx timeout, send abort
[   83.828233][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'.
[   83.843904][ T6997] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   83.851241][ T6999] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   83.884288][ T6999] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   83.888173][ T6999] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   83.928053][ T7003] lo speed is unknown, defaulting to 1000
[   84.066729][ T7012] syzkaller1: entered promiscuous mode
[   84.068649][ T7012] syzkaller1: entered allmulticast mode
[   84.086590][ T7001] lo speed is unknown, defaulting to 1000
[   84.241498][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810a6af800: abort rx timeout. Force session deactivation
[   84.265190][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'.
[   84.266892][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88810f48e000: connection exists (fe ff). last cmd: 20
[   84.273086][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.277'.
[   84.279235][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.277'.
[   84.283574][ T7004] netlink: 'syz.3.277': attribute type 13 has an invalid length.
[   84.287136][ T7004] netlink: 'syz.3.277': attribute type 17 has an invalid length.
[   84.345744][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.349059][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.353509][ T7004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.516957][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810a6ac000: rx timeout, send abort
[   84.697180][ T7027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.282'.
[   84.849956][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'.
[   84.854125][ T7031] hsr_slave_0: left promiscuous mode
[   84.860004][ T7031] hsr_slave_1: left promiscuous mode
[   84.901458][ T7034] netlink: 'syz.0.285': attribute type 21 has an invalid length.
[   84.951184][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.954222][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.962477][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.967045][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.019857][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810a6ac000: abort rx timeout. Force session deactivation
[   85.107896][ T6414] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.264857][ T6414] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.324093][ T6414] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.385795][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.388712][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   85.402227][ T7063] syzkaller0: entered promiscuous mode
[   85.404561][ T7063] syzkaller0: entered allmulticast mode
[   85.429763][ T6414] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.555141][ T6414] bridge_slave_1: left allmulticast mode
[   85.557838][ T6414] bridge_slave_1: left promiscuous mode
[   85.561531][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.570371][ T6414] bridge_slave_0: left allmulticast mode
[   85.572210][ T6414] bridge_slave_0: left promiscuous mode
[   85.574137][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.627105][   T55] Bluetooth: hci3: command tx timeout
[   85.844136][ T6414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.850139][ T6414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   85.854632][ T6414] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   85.865133][ T6414] bond0 (unregistering): Released all slaves
[   85.977635][ T7082] netem: change failed
[   85.982445][ T6414] _Z`Ԁ@: left promiscuous mode
[   86.140144][ T7098] netlink: 'syz.1.298': attribute type 4 has an invalid length.
[   86.154153][ T7098] vlan2: entered allmulticast mode
[   86.159061][ T7098] dummy0: entered allmulticast mode
[   86.425672][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.324702][ T7102] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   87.373818][ T7102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.394625][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.419293][ T7107] __nla_validate_parse: 7 callbacks suppressed
[   87.419305][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'.
[   87.424313][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.300'.
[   87.445837][ T7107] bridge0: port 1(vlan2) entered blocking state
[   87.465728][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.468954][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.475532][ T7107] bridge0: port 1(vlan2) entered disabled state
[   87.480958][ T7107] vlan2: entered allmulticast mode
[   87.483042][ T7107] bridge0: entered allmulticast mode
[   87.506830][ T7107] vlan2: left allmulticast mode
[   87.508971][ T7107] bridge0: left allmulticast mode
[   87.561312][ T7110] bridge_slave_0: left allmulticast mode
[   87.563573][ T7110] bridge_slave_0: left promiscuous mode
[   87.566175][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.572331][ T7110] bridge_slave_1: left allmulticast mode
[   87.574126][ T7110] bridge_slave_1: left promiscuous mode
[   87.576685][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.587040][ T7110] bond0: (slave bond_slave_0): Releasing backup interface
[   87.593830][ T7110] bond0: (slave bond_slave_1): Releasing backup interface
[   87.608201][ T7110] team0: Port device team_slave_0 removed
[   87.620586][ T7110] team0: Port device team_slave_1 removed
[   87.623792][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.638791][ T7110] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.720142][   T55] Bluetooth: hci3: command tx timeout
[   87.720157][ T7112] team0: Failed to send options change via netlink (err -105)
[   87.728430][ T7112] team0: Mode changed to "activebackup"
[   87.747517][ T6414] hsr_slave_0: left promiscuous mode
[   87.754786][ T6414] hsr_slave_1: left promiscuous mode
[   87.759113][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.762437][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.768805][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.771801][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.806997][ T6414] veth1_macvtap: left promiscuous mode
[   87.808985][ T6414] veth0_macvtap: left promiscuous mode
[   87.810859][ T6414] veth1_vlan: left promiscuous mode
[   87.812502][ T6414] veth0_vlan: left promiscuous mode
[   87.927236][ T7122] raw_sendmsg: syz.3.306 forgot to set AF_INET. Fix it!
[   88.509373][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   88.531460][ T6414] team0 (unregistering): Port device team_slave_1 removed
[   88.563670][ T6414] team0 (unregistering): Port device team_slave_0 removed
[   88.963042][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'.
[   89.062407][ T7144] netlink: 'syz.3.312': attribute type 10 has an invalid length.
[   89.078705][ T7144] 8021q: adding VLAN 0 to HW filter on device team0
[   89.083451][ T7144] bond0: (slave team0): Enslaving as an active interface with an up link
[   89.164861][ T7149] veth4: entered allmulticast mode
[   89.183590][ T7151] tipc: Started in network mode
[   89.185639][ T7151] tipc: Node identity aee9daf031ab, cluster identity 4711
[   89.188597][ T7151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.191368][ T7151] syzkaller0: entered promiscuous mode
[   89.193602][ T7151] syzkaller0: entered allmulticast mode
[   89.214019][ T7151] tipc: Resetting bearer <eth:syzkaller0>
[   89.217894][ T7150] tipc: Resetting bearer <eth:syzkaller0>
[   89.226811][ T7150] tipc: Disabling bearer <eth:syzkaller0>
[   89.321517][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.315'.
[   89.341321][ T7153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.316'.
[   89.372231][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.387955][ T7157] lo speed is unknown, defaulting to 1000
[   89.395584][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.399249][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.402896][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.545754][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.548693][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   89.564166][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'.
[   89.625026][ T7169] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   89.717299][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'.
[   89.778813][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'.
[   89.782557][ T7182] block nbd0: not configured, cannot reconfigure
[   89.798880][   T55] Bluetooth: hci3: command tx timeout
[   89.808094][ T7182] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20002
[   89.955168][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'.
[   89.982132][ T7194] lo speed is unknown, defaulting to 1000
[   90.060061][ T7197] veth1_to_bond: entered allmulticast mode
[   90.103060][ T7197] bond_slave_1: entered promiscuous mode
[   90.108971][ T7196] bond_slave_1: left promiscuous mode
[   90.111190][ T7196] veth1_to_bond: left allmulticast mode
[   90.154592][ T7202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.163471][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'.
[   90.439084][ T7218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.441710][ T7218] syzkaller0: entered promiscuous mode
[   90.443479][ T7218] syzkaller0: entered allmulticast mode
[   90.448914][ T7218] tipc: Resetting bearer <eth:syzkaller0>
[   90.451782][ T7217] tipc: Resetting bearer <eth:syzkaller0>
[   90.463316][ T7217] tipc: Disabling bearer <eth:syzkaller0>
[   90.584509][ T7224] batadv1: entered promiscuous mode
[   90.587042][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.590290][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.052858][ T7249] lo speed is unknown, defaulting to 1000
[   91.135756][ T7242] geneve0: entered allmulticast mode
[   91.176215][ T7251] netlink: 'syz.3.346': attribute type 10 has an invalid length.
[   91.183857][ T5860] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.187483][ T5860] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.206912][ T7251] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   91.210586][ T5860] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.224244][ T5860] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[   91.433708][ T7264] pim6reg: left allmulticast mode
[   91.436288][ T7264] bridge0: left allmulticast mode
[   91.635886][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.846146][ T7278] netlink: 'syz.1.354': attribute type 1 has an invalid length.
[   91.858526][ T7276] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.861865][ T7276] team0: Port device bond1 added
[   91.891041][ T7278] 8021q: adding VLAN 0 to HW filter on device bond7
[   91.927075][ T7278] vlan2: entered promiscuous mode
[   91.928801][ T7278] bond7: entered promiscuous mode
[   91.930547][ T7278] vlan2: entered allmulticast mode
[   91.932206][ T7278] bond7: entered allmulticast mode
[   91.950478][ T7278] bond7: (slave gretap2): making interface the new active one
[   91.953411][ T7278] gretap2: entered promiscuous mode
[   91.956654][ T7278] gretap2: entered allmulticast mode
[   91.959656][ T7278] bond7: (slave gretap2): Enslaving as an active interface with an up link
[   92.173384][ T7297] nbd: couldn't find device at index 536870912
[   92.176886][ T7299] netlink: 'syz.1.361': attribute type 1 has an invalid length.
[   92.204413][ T7299] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   92.210958][ T7299] bond8 (unregistering): (slave ip6gretap2): Releasing backup interface
[   92.215823][ T7299] bond8 (unregistering): Released all slaves
[   92.284860][ T7305] netlink: 'syz.0.362': attribute type 2 has an invalid length.
[   92.659348][ T7320] team0: Port device vlan0 removed
[   92.666162][ T7320] team0: Port device netdevsim0 removed
[   92.669772][ T7320] bond2: (slave wlan0): Releasing active interface
[   92.675830][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.677273][ T7320] team0: Port device bond1 removed
[   92.678977][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.688402][ T7320] bond3: (slave gretap1): Releasing active interface
[   92.698205][ T7320] bond4: (slave veth3): Releasing active interface
[   92.716878][ T7320] bond5: (slave bond6): Releasing backup interface
[   92.723946][ T7320] bond7: (slave gretap2): Releasing active interface
[   92.726712][ T7320] gretap2: left promiscuous mode
[   92.728767][ T7320] gretap2: left allmulticast mode
[   93.099349][ T7332] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:0
[   93.263292][ T7334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.268683][ T7334] syzkaller0: entered promiscuous mode
[   93.271131][ T7334] syzkaller0: entered allmulticast mode
[   93.287467][ T7334] tipc: Resetting bearer <eth:syzkaller0>
[   93.291962][ T7333] tipc: Resetting bearer <eth:syzkaller0>
[   93.304736][ T7333] tipc: Disabling bearer <eth:syzkaller0>
[   93.401907][ T7343] __nla_validate_parse: 16 callbacks suppressed
[   93.401922][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'.
[   93.418680][ T7346] netlink: 9 bytes leftover after parsing attributes in process `syz.0.372'.
[   93.422808][ T7345] netlink: 9 bytes leftover after parsing attributes in process `syz.0.372'.
[   93.470038][ T7348] netlink: 5 bytes leftover after parsing attributes in process `syz.0.372'.
[   93.491833][ T7341] IPVS: Error connecting to the multicast addr
[   93.496113][ T7346] gretap0: entered promiscuous mode
[   93.499546][ T7348] 0{X: renamed from gretap0
[   93.503837][ T7348] 0{X: left promiscuous mode
[   93.507681][ T7348] 0{X: entered allmulticast mode
[   93.511757][ T7348] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   93.563957][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'.
[   93.569690][ T7355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.375'.
[   93.667216][ T7359] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   93.706409][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   93.773010][ T7360] tipc: Resetting bearer <eth:syzkaller0>
[   93.799648][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'.
[   93.947932][ T7385] netlink: 'syz.1.381': attribute type 10 has an invalid length.
[   94.190109][ T7395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.195791][ T7395] syzkaller0: entered promiscuous mode
[   94.198030][ T7395] syzkaller0: entered allmulticast mode
[   94.228000][ T7395] lo speed is unknown, defaulting to 1000
[   94.458310][ T7397] lo speed is unknown, defaulting to 1000
[   94.542414][ T7394] tipc: Resetting bearer <eth:syzkaller0>
[   94.564447][ T7394] tipc: Disabling bearer <eth:syzkaller0>
[   94.883881][ T7408] lo speed is unknown, defaulting to 1000
[   95.123258][ T7419] netlink: 72 bytes leftover after parsing attributes in process `syz.3.389'.
[   95.297605][ T7422] syzkaller1: entered promiscuous mode
[   95.299821][ T7422] syzkaller1: entered allmulticast mode
[   95.340207][ T7436] netlink: 'syz.1.393': attribute type 12 has an invalid length.
[   96.059123][ T7427] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   96.061760][ T7427] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   96.064075][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'.
[   96.069996][ T7439] chnl_net:caif_netlink_parms(): no params data found
[   96.081455][ T7427] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   96.084967][ T7427] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   96.105054][ T7427] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   96.110988][ T7427] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[   96.210535][ T7443] netlink: 'syz.0.396': attribute type 10 has an invalid length.
[   96.272676][ T7450] syz.0.399 uses old SIOCAX25GETINFO
[   96.283238][ T7452] netlink: 'syz.3.398': attribute type 10 has an invalid length.
[   96.320996][ T7454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.400'.
[   96.369445][ T7458] netlink: 'syz.3.402': attribute type 1 has an invalid length.
[   96.401044][ T7458] bond3: entered promiscuous mode
[   96.403443][ T7458] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.462908][ T7458] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.467138][ T7458] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   96.471509][ T7458] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[   96.484201][ T7458] bond3: (slave vxcan3): making interface the new active one
[   96.488400][ T7458] vxcan3: entered promiscuous mode
[   96.492871][ T7458] bond3: (slave vxcan3): Enslaving as an active interface with an up link
[   96.506246][ T7456] lo speed is unknown, defaulting to 1000
[   96.912642][ T7469] netlink: 'syz.3.405': attribute type 1 has an invalid length.
[   97.263834][ T7486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.328515][ T7489] pim6reg: entered allmulticast mode
[   97.338964][ T7489] pim6reg: left allmulticast mode
[   97.515215][ T7497] netlink: 'syz.3.413': attribute type 1 has an invalid length.
[   97.540601][ T7497] 8021q: adding VLAN 0 to HW filter on device bond5
[   97.605169][ T7504] lo speed is unknown, defaulting to 1000
[   97.902648][ T7511] lo speed is unknown, defaulting to 1000
[   98.551232][ T7546] __nla_validate_parse: 6 callbacks suppressed
[   98.551258][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'.
[   98.659355][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.424'.
[   98.762582][ T7550] netlink: 'syz.1.425': attribute type 2 has an invalid length.
[   98.777351][ T7550] netlink: 'syz.1.425': attribute type 2 has an invalid length.
[   98.797291][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'.
[   99.156523][ T7555] lo speed is unknown, defaulting to 1000
[   99.701383][ T7564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.430'.
[   99.983336][ T7580] IPVS: length: 209 != 24
[   99.988684][ T7580] netlink: 100 bytes leftover after parsing attributes in process `syz.3.435'.
[   99.995059][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.435'.
[   99.998275][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'.
[  100.071227][ T7586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.437'.
[  100.096769][ T5911] IPVS: starting estimator thread 0...
[  100.185476][ T7588] IPVS: using max 61 ests per chain, 146400 per kthread
[  100.281365][ T7597] xt_policy: too many policy elements
[  100.381809][ T7600] netlink: 'syz.0.440': attribute type 5 has an invalid length.
[  100.438178][ T7602] netlink: 'syz.0.441': attribute type 10 has an invalid length.
[  100.443862][ T7602] team0: Port device 0! added
[  100.596469][ T7610] netlink: 'syz.0.441': attribute type 10 has an invalid length.
[  100.618961][ T7610] team0: Port device 0! removed
[  100.627718][ T7610] bond0: (slave 0!): Enslaving as an active interface with an up link
[  100.641551][ T7611] 8021q: VLANs not supported on xfrm0
[  100.762364][ T7615] netlink: 'syz.1.445': attribute type 11 has an invalid length.
[  100.767794][ T7615] netlink: 'syz.1.445': attribute type 11 has an invalid length.
[  100.770412][ T7615] netlink: 224 bytes leftover after parsing attributes in process `syz.1.445'.
[  100.872020][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'.
[  100.993002][ T7623] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  101.104253][ T7626] 8021q: adding VLAN 0 to HW filter on device bond6
[  101.120823][ T7626] 8021q: adding VLAN 0 to HW filter on device bond6
[  101.123926][ T7626] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[  101.129862][ T7626] bond6: (slave vcan1): Error -95 calling set_mac_address
[  101.175437][ T7629] bond9 (unregistering): Released all slaves
[  101.202299][ T7631] gretap1: entered promiscuous mode
[  101.209365][ T7631] bond6: (slave gretap1): making interface the new active one
[  101.213096][ T7631] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  101.299465][ T7634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.302660][ T7634] syzkaller0: entered promiscuous mode
[  101.304883][ T7634] syzkaller0: entered allmulticast mode
[  101.318617][ T7634] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  101.342499][ T7634] tipc: Resetting bearer <eth:syzkaller0>
[  101.351273][ T7633] tipc: Resetting bearer <eth:syzkaller0>
[  101.363314][ T7633] tipc: Disabling bearer <eth:syzkaller0>
[  101.451389][ T7644] validate_nla: 2 callbacks suppressed
[  101.451407][ T7644] netlink: 'syz.1.455': attribute type 1 has an invalid length.
[  101.647378][ T7665] netlink: 'syz.1.462': attribute type 10 has an invalid length.
[  101.652117][ T7661] netlink: 'syz.0.461': attribute type 1 has an invalid length.
[  101.653495][ T7665] team0: Port device dummy0 added
[  101.673313][ T7665] netlink: 'syz.1.462': attribute type 10 has an invalid length.
[  101.686792][ T7661] 8021q: adding VLAN 0 to HW filter on device bond6
[  101.693171][ T7665] team0: Port device dummy0 removed
[  101.707583][ T7661] bond6: (slave veth5): Enslaving as an active interface with a down link
[  101.727868][ T7661] 8021q: adding VLAN 0 to HW filter on device batadv2
[  101.730075][ T7661] bond6: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  101.758841][ T7670] vlan0: entered promiscuous mode
[  101.763522][ T7670] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  101.770163][ T7670] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  101.829852][ T7676] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  101.854180][ T7679] erspan0: entered promiscuous mode
[  101.859858][ T7679] batadv_slave_1: entered promiscuous mode
[  101.862987][ T7679] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  101.867776][ T7679] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.971305][ T7688] netlink: 'syz.0.466': attribute type 1 has an invalid length.
[  102.169369][ T7695] lo speed is unknown, defaulting to 1000
[  102.289388][ T7694] lo speed is unknown, defaulting to 1000
[  102.558777][ T7702] 8021q: VLANs not supported on ip6_vti0
[  102.694853][ T7705] netlink: 'syz.1.470': attribute type 1 has an invalid length.
[  102.718801][ T7705] 8021q: adding VLAN 0 to HW filter on device bond9
[  102.730859][ T7705] vlan3: entered promiscuous mode
[  102.732948][ T7705] bond9: entered promiscuous mode
[  102.735387][ T7705] vlan3: entered allmulticast mode
[  102.737619][ T7705] bond9: entered allmulticast mode
[  102.785866][ T7708] netlink: 'syz.1.471': attribute type 21 has an invalid length.
[  102.788987][ T7709] gretap0: Device is already in use.
[  102.791291][ T7708] gretap0: Device is already in use.
[  102.846266][ T7713] bridge4: entered promiscuous mode
[  102.848098][ T7713] bridge4: entered allmulticast mode
[  102.947564][ T7722] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.952677][ T7722] syzkaller0: entered promiscuous mode
[  102.954487][ T7722] syzkaller0: entered allmulticast mode
[  102.975203][ T7722] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) !
[  102.993081][ T7722] tipc: Resetting bearer <eth:syzkaller0>
[  102.998485][ T7721] tipc: Resetting bearer <eth:syzkaller0>
[  103.012270][ T7721] tipc: Disabling bearer <eth:syzkaller0>
[  103.020494][ T7724] netlink: 'syz.1.478': attribute type 1 has an invalid length.
[  103.046836][ T7724] bond10: entered promiscuous mode
[  103.048860][ T7724] 8021q: adding VLAN 0 to HW filter on device bond10
[  103.057827][ T7724] batadv0: entered promiscuous mode
[  103.059597][ T7724] batadv0: entered allmulticast mode
[  103.063054][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.067354][ T7724] bond10: (slave batadv0): making interface the new active one
[  103.070479][ T7724] bond10: (slave batadv0): Enslaving as an active interface with an up link
[  103.252042][ T7740] netlink: 'syz.1.481': attribute type 2 has an invalid length.
[  103.267667][ T7742] netlink: 'syz.0.482': attribute type 7 has an invalid length.
[  103.309590][ T7745] macsec2: entered promiscuous mode
[  103.312190][ T7745] macvlan1: entered promiscuous mode
[  103.318249][ T7745] macvlan1: left promiscuous mode
[  103.430811][ T7756] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  103.457934][ T7756] 8021q: adding VLAN 0 to HW filter on device bond11
[  103.481347][ T7756] 8021q: adding VLAN 0 to HW filter on device bond11
[  103.484286][ T7756] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address
[  103.491060][ T7756] bond11: (slave vxcan5): Error -95 calling set_mac_address
[  103.502618][ T7753] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[  103.505213][ T7753] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  103.584620][ T7756] __nla_validate_parse: 14 callbacks suppressed
[  103.584634][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'.
[  103.683520][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'.
[  103.717876][ T7772] bridge0: entered promiscuous mode
[  103.720901][ T7772] bridge0: port 1(macvlan3) entered blocking state
[  103.727282][ T7772] bridge0: port 1(macvlan3) entered disabled state
[  103.731326][ T7772] macvlan3: entered allmulticast mode
[  103.733466][ T7772] bridge0: entered allmulticast mode
[  103.741987][ T7774] IPv6: Can't replace route, no match found
[  103.751318][ T7772] macvlan3: left allmulticast mode
[  103.753952][ T7772] bridge0: left allmulticast mode
[  103.760114][ T7772] bridge0: left promiscuous mode
[  103.890500][ T7784] can: request_module (can-proto-0) failed.
[  103.893684][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'.
[  103.958837][ T7789] : entered promiscuous mode
Connection to localhost closed by remote host.
[  124.204030][    C1] ==================================================================
[  124.206741][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  124.209402][    C1] Write of size 8 at addr ffff888115d78db0 by task swapper/1/0
[  124.212252][    C1] 
[  124.213071][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  124.213086][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.213094][    C1] Call Trace:
[  124.213101][    C1]  <IRQ>
[  124.213121][    C1]  dump_stack_lvl+0x189/0x250
[  124.213141][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  124.213155][    C1]  ? rcu_is_watching+0x15/0xb0
[  124.213163][    C1]  ? __kasan_check_byte+0x12/0x40
[  124.213174][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.213182][    C1]  ? rcu_is_watching+0x15/0xb0
[  124.213190][    C1]  ? lock_release+0x4b/0x3e0

VM DIAGNOSIS:
07:11:44  Registers:
info registers vcpu 0

CPU#0
RAX=437b5a9354cad200 RBX=ffffffff819683a8 RCX=437b5a9354cad200 RDX=0000000000000001
RSI=ffffffff8d9b6a5a RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7963f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055de333607c8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000010000000000
XMM02=0000000000000000 0000550078756166 XMM03=0000000000000000 ffffff0000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000030 0000000000000030
XMM06=ffffffffffffff00 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffff00 XMM09=0000000000000030 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=578e64e9e3dda800 RBX=ffffffff819683a8 RCX=578e64e9e3dda800 RDX=0000000000000001
RSI=ffffffff8d9b6a5a RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7963f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055de332cfda0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffff000000 0000000000000000 XMM05=0000000000000030 0000000000000030
XMM06=ffffffffffffff00 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffff00 XMM09=0000000000000030 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
