last executing test programs:

1.042027942s ago: executing program 1 (id=1008):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0xfffffffffffffffe)

1.041846021s ago: executing program 1 (id=1009):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@mpls_delroute={0xa0, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0x100}, {0x5, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0xea75}, {0x200, 0x0, 0x1}, {0xf}, {0xf}, {0x25f5, 0x0, 0x1}, {0x2}, {0x9}, {0x8001}, {0x2, 0x0, 0x1}, {0xd}, {0x0, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0xffffd, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x45a6}, {0x42ef7}, {0x3, 0x0, 0x1}, {0x784, 0x0, 0x1}, {0xffff}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x2}, {0x1}, {0xff, 0x0, 0x1}, {0x7}, {0x8, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x1ff}]}]}, 0xa0}}, 0x0)

1.041570815s ago: executing program 1 (id=1010):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

980.091022ms ago: executing program 1 (id=1011):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xe, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x18001, 0x83}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0)

978.864973ms ago: executing program 1 (id=1012):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PORT={0x6}]}, 0x4c}}, 0x0)

953.187545ms ago: executing program 1 (id=1013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket(0x1e, 0x4, 0x0)
r8 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

497.397132ms ago: executing program 0 (id=1021):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

411.889041ms ago: executing program 2 (id=1022):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x6}, 0x18)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)

411.543518ms ago: executing program 0 (id=1023):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000)
close(r0)

339.14344ms ago: executing program 0 (id=1024):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)

335.457297ms ago: executing program 2 (id=1025):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0)

272.95458ms ago: executing program 2 (id=1026):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0)

267.724921ms ago: executing program 0 (id=1027):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)

261.163822ms ago: executing program 2 (id=1028):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x800)

260.467291ms ago: executing program 0 (id=1029):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x8000, 0x80000000})

191.11268ms ago: executing program 2 (id=1030):
r0 = socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1d, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f0400000000000000000085000000bb00000085000000d100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x40000)
accept4(r0, &(0x7f0000000280)=@isdn, &(0x7f0000000200)=0x80, 0x80000)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}]}}}]}, 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x182, 0x9, {0x77359400}, {}, {0x2, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "c251541693f8cfd1"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {0x306, @local}, 0x4, {0x2, 0x4e20, @multicast1}})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast1}, 0x10)

190.746877ms ago: executing program 0 (id=1031):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f00000001c0)="7dff7278b0bf0a5cf2f683213e2d719c362828b893da54c15e837d73baffe6fc76ea90c999cc28d2db9a4469cd32a2f28b90fb88314ffa46c80f6d2cab854fd9633d03df4ee462d4a7b5062238c4742f8f7ae91398054819a428d53b18317438c0dd67cffac352c8e3e07f9423b0df92ec5b1930b003e1d5cf3066d9b285cad3262ed6e94f3810dafea0a85295d7a82943fd51dcafeab6fad7cc30fbbdb5810d54bb6f0bcd23b82c626b6830e019e954c734fc09bc8147284b73")
syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40d4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto(r4, &(0x7f0000000080)="0f1a10", 0x3, 0x20000000, &(0x7f0000000140)=@rc={0x1f, @none, 0x81}, 0x80)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0)

0s ago: executing program 2 (id=1032):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38538' (ED25519) to the list of known hosts.
syzkaller login: [   47.748251][ T5821] cgroup: Unknown subsys name 'net'
[   47.846600][ T5821] cgroup: Unknown subsys name 'cpuset'
[   47.850176][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.252264][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.047938][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.077642][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.088255][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.133890][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.136461][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.589920][ T5902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.590970][ T5900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.594098][ T5902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.597079][ T5900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.598681][ T5902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.601470][ T5900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.604286][ T5902] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.606794][ T5900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.608594][ T5902] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.611245][ T5900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.689811][ T5900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.694509][ T5900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.697638][ T5900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.704281][ T5900] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.707647][ T5900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.849828][ T5898] chnl_net:caif_netlink_parms(): no params data found
[   60.860232][ T5897] chnl_net:caif_netlink_parms(): no params data found
[   60.981851][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.984879][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.987700][ T5897] bridge_slave_0: entered allmulticast mode
[   60.990938][ T5897] bridge_slave_0: entered promiscuous mode
[   60.995858][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.998609][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.001360][ T5898] bridge_slave_0: entered allmulticast mode
[   61.006251][ T5898] bridge_slave_0: entered promiscuous mode
[   61.011295][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.013517][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.016665][ T5897] bridge_slave_1: entered allmulticast mode
[   61.019512][ T5897] bridge_slave_1: entered promiscuous mode
[   61.022545][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.025784][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.028596][ T5898] bridge_slave_1: entered allmulticast mode
[   61.031601][ T5898] bridge_slave_1: entered promiscuous mode
[   61.036060][ T5905] chnl_net:caif_netlink_parms(): no params data found
[   61.075298][ T5898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.083937][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.088534][ T5898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.093189][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.140078][ T5898] team0: Port device team_slave_0 added
[   61.143329][ T5897] team0: Port device team_slave_0 added
[   61.146490][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.148878][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.151316][ T5905] bridge_slave_0: entered allmulticast mode
[   61.154550][ T5905] bridge_slave_0: entered promiscuous mode
[   61.157364][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.159874][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.162563][ T5905] bridge_slave_1: entered allmulticast mode
[   61.166089][ T5905] bridge_slave_1: entered promiscuous mode
[   61.169992][ T5898] team0: Port device team_slave_1 added
[   61.173263][ T5897] team0: Port device team_slave_1 added
[   61.199742][ T5905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.218365][ T5905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.222051][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.225176][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.234866][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.238756][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.241345][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.251593][ T5898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.257521][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.260025][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.269560][ T5898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.281632][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.284487][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.292652][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.335407][ T5898] hsr_slave_0: entered promiscuous mode
[   61.337918][ T5898] hsr_slave_1: entered promiscuous mode
[   61.340994][ T5905] team0: Port device team_slave_0 added
[   61.346192][ T5897] hsr_slave_0: entered promiscuous mode
[   61.348563][ T5897] hsr_slave_1: entered promiscuous mode
[   61.351053][ T5897] debugfs: 'hsr0' already exists in 'hsr'
[   61.352785][ T5897] Cannot create hsr debugfs directory
[   61.364571][ T5905] team0: Port device team_slave_1 added
[   61.384234][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.386829][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.396106][ T5905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.412107][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.414681][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.424346][ T5905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.503180][ T5905] hsr_slave_0: entered promiscuous mode
[   61.506471][ T5905] hsr_slave_1: entered promiscuous mode
[   61.508528][ T5905] debugfs: 'hsr0' already exists in 'hsr'
[   61.510459][ T5905] Cannot create hsr debugfs directory
[   61.602679][ T5898] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.607664][ T5898] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.624737][ T5898] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.635694][ T5898] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.658151][ T5897] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.664964][ T5897] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.672495][ T5897] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.681656][ T5897] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.699989][ T5905] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.709688][ T5905] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.719609][ T5905] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.725288][ T5905] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.750601][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.752863][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.755489][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.758122][ T5905] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.812696][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.832877][ T5905] 8021q: adding VLAN 0 to HW filter on device team0
[   61.837116][  T148] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.840059][  T148] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.855525][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.858156][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.865656][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.869415][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.872000][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.886834][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.900306][ T5897] 8021q: adding VLAN 0 to HW filter on device team0
[   61.909719][ T5898] 8021q: adding VLAN 0 to HW filter on device team0
[   61.923388][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.926180][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.936897][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.939744][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.954749][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.957512][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.967548][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.970441][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.027133][ T5898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.089647][ T5905] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.148976][ T5905] veth0_vlan: entered promiscuous mode
[   62.157696][ T5905] veth1_vlan: entered promiscuous mode
[   62.163503][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.190106][ T5905] veth0_macvtap: entered promiscuous mode
[   62.199509][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.202394][ T5905] veth1_macvtap: entered promiscuous mode
[   62.212075][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.220676][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.242294][ T5945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.246960][ T5945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.256322][ T5945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.266153][ T5897] veth0_vlan: entered promiscuous mode
[   62.269766][ T5945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.283030][ T5897] veth1_vlan: entered promiscuous mode
[   62.300823][ T5898] veth0_vlan: entered promiscuous mode
[   62.317721][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.322240][ T5898] veth1_vlan: entered promiscuous mode
[   62.326870][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.351161][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.352438][ T5897] veth0_macvtap: entered promiscuous mode
[   62.357635][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.359671][ T5897] veth1_macvtap: entered promiscuous mode
[   62.371545][ T5898] veth0_macvtap: entered promiscuous mode
[   62.389387][ T5898] veth1_macvtap: entered promiscuous mode
[   62.408558][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.418136][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.426812][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.441028][ T5893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.446091][ T5893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.453452][ T5893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.464098][ T5893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.471090][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.492015][ T5893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.501681][ T5893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.507246][ T5893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.523677][ T5893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.564492][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.567301][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.592530][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.600352][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.602624][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.615500][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.643960][ T5900] Bluetooth: hci0: command tx timeout
[   62.644149][ T5902] Bluetooth: hci1: command tx timeout
[   62.648220][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.650737][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.724126][ T5902] Bluetooth: hci2: command tx timeout
[   62.755013][ T5981] netlink: 104 bytes leftover after parsing attributes in process `syz.0.31'.
[   62.769294][ T5986] tipc: Started in network mode
[   62.771279][ T5986] tipc: Node identity , cluster identity 4711
[   62.773487][ T5986] tipc: Failed to obtain node identity
[   62.776787][ T5986] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   62.883635][ T5999] netlink: 'syz.0.40': attribute type 21 has an invalid length.
[   62.887541][ T5999] netlink: 152 bytes leftover after parsing attributes in process `syz.0.40'.
[   62.893408][ T5996] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET)
[   62.897893][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   63.153338][ T6025] netlink: 120 bytes leftover after parsing attributes in process `syz.1.52'.
[   63.161853][ T6028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.226733][ T6033] netlink: 'syz.1.56': attribute type 10 has an invalid length.
[   63.230756][ T6033] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   63.405354][ T6049] : renamed from wg2 (while UP)
[   63.631345][ T6071] Zero length message leads to an empty skb
[   63.655803][ T6071] TC_ACT_REPEAT abuse ?
[   63.657768][ T6071] TC_ACT_REPEAT abuse ?
[   63.659715][ T6071] TC_ACT_REPEAT abuse ?
[   63.665550][ T6070] TC_ACT_REPEAT abuse ?
[   63.672682][ T6070] TC_ACT_REPEAT abuse ?
[   63.846452][ T5945] TC_ACT_REPEAT abuse ?
[   63.848368][ T5945] TC_ACT_REPEAT abuse ?
[   63.856972][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'.
[   63.978258][ T6103] netlink: 'syz.1.90': attribute type 58 has an invalid length.
[   63.993752][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'.
[   64.016798][ T6107] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.93'.
[   64.044120][    T9] TC_ACT_REPEAT abuse ?
[   64.107672][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'.
[   64.123186][ T6118] IPVS: Error connecting to the multicast addr
[   64.197890][ T6128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.103'.
[   64.257934][ T6134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.324371][    C1] Illegal XDP return value 16128 on prog  (id 16) dev lo, expect packet loss!
[   64.417873][ T6149] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   64.458431][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'.
[   64.569323][ T6161] tipc: Started in network mode
[   64.571461][ T6161] tipc: Node identity aea4ed4e66c1, cluster identity 4711
[   64.575731][ T6161] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.580840][ T6161] syzkaller0: entered promiscuous mode
[   64.586804][ T6161] syzkaller0: entered allmulticast mode
[   64.610720][ T6161] tipc: Resetting bearer <eth:syzkaller0>
[   64.616909][ T6160] tipc: Resetting bearer <eth:syzkaller0>
[   64.621226][ T6160] tipc: Disabling bearer <eth:syzkaller0>
[   64.725187][ T5902] Bluetooth: hci0: command tx timeout
[   64.734070][ T5902] Bluetooth: hci1: command tx timeout
[   64.763368][ T6175] syz_tun: entered promiscuous mode
[   64.766521][ T6175] batadv_slave_0: entered promiscuous mode
[   64.769673][ T6175] hsr1: entered allmulticast mode
[   64.775426][ T6175] syz_tun: entered allmulticast mode
[   64.781744][ T6175] batadv_slave_0: entered allmulticast mode
[   64.814117][ T5902] Bluetooth: hci2: command tx timeout
[   64.862038][ T6183] netlink: 'syz.2.128': attribute type 303 has an invalid length.
[   65.477317][ T6247] Bluetooth: MGMT ver 1.23
[   65.602535][ T6264] vlan2: entered allmulticast mode
[   65.608133][ T6264] bond0: entered allmulticast mode
[   65.610976][ T6264] bond_slave_0: entered allmulticast mode
[   65.613443][ T6264] bond_slave_1: entered allmulticast mode
[   65.811790][ T6290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   65.814858][ T6290] IPv6: NLM_F_CREATE should be set when creating new route
[   65.817774][ T6290] IPv6: NLM_F_CREATE should be set when creating new route
[   65.931345][ T6304] team_slave_0: entered promiscuous mode
[   65.934028][ T6304] team_slave_1: entered promiscuous mode
[   65.938800][ T6304] macvtap1: entered promiscuous mode
[   65.941134][ T6304] team0: entered promiscuous mode
[   65.943727][ T6304] macvtap1: entered allmulticast mode
[   65.951312][ T6304] team0: entered allmulticast mode
[   65.953488][ T6304] team_slave_0: entered allmulticast mode
[   65.957425][ T6304] team_slave_1: entered allmulticast mode
[   65.961550][ T6304] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   65.980296][ T6304] team0: left allmulticast mode
[   65.982273][ T6304] team_slave_0: left allmulticast mode
[   65.984725][ T6304] team_slave_1: left allmulticast mode
[   65.987150][ T6304] team0: left promiscuous mode
[   65.989547][ T6304] team_slave_0: left promiscuous mode
[   65.991858][ T6304] team_slave_1: left promiscuous mode
[   66.197149][ T6339] netlink: 'syz.0.197': attribute type 27 has an invalid length.
[   66.334149][ T6352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.338298][ T6352] syzkaller0: entered promiscuous mode
[   66.341190][ T6352] syzkaller0: entered allmulticast mode
[   66.350097][ T6352] tipc: Resetting bearer <eth:syzkaller0>
[   66.353496][ T6351] tipc: Resetting bearer <eth:syzkaller0>
[   66.379251][ T6351] tipc: Disabling bearer <eth:syzkaller0>
[   66.660326][ T6380] syzkaller1: entered promiscuous mode
[   66.663440][ T6380] syzkaller1: entered allmulticast mode
[   66.690278][ T6379] netlink: 'syz.0.214': attribute type 10 has an invalid length.
[   66.699052][ T6379] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   66.706271][ T6379] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   66.804101][ T5900] Bluetooth: hci1: command tx timeout
[   66.806497][ T5232] Bluetooth: hci0: command tx timeout
[   66.869541][ T6394] IPv6: Can't replace route, no match found
[   66.884738][ T5900] Bluetooth: hci2: command tx timeout
[   67.069053][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.072553][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.076065][    T9] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[   67.080561][    T9] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   67.527119][ T5902] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   67.656136][ T6443] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   67.776592][ T6453] IPv6: sit1: Disabled Multicast RS
[   67.880726][ T6463] pimreg3: entered allmulticast mode
[   67.959197][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.961936][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.008664][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.016723][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.073391][ T6469] vlan2: left allmulticast mode
[   68.076019][ T6469] bond0: left allmulticast mode
[   68.078437][ T6469] bond_slave_0: left allmulticast mode
[   68.080690][ T6469] bond_slave_1: left allmulticast mode
[   68.082994][ T6469] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[   68.088755][ T6469] macvtap1: left promiscuous mode
[   68.090782][ T6469] macvtap1: left allmulticast mode
[   68.095246][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.098477][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.104606][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.112331][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.131920][ T6475] syz_tun: entered allmulticast mode
[   68.244372][ T6474] syz_tun: left allmulticast mode
[   68.318941][ T6487] "syz.0.266" (6487) uses obsolete ecb(arc4) skcipher
[   68.377135][ T6502] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96
[   68.430339][ T6512] __nla_validate_parse: 6 callbacks suppressed
[   68.430355][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.274'.
[   68.592597][ T6532] net_ratelimit: 10 callbacks suppressed
[   68.592615][ T6532] TC_ACT_REPEAT abuse ?
[   68.598094][ T6532] TC_ACT_REPEAT abuse ?
[   68.600483][ T6531] TC_ACT_REPEAT abuse ?
[   68.602219][ T6531] TC_ACT_REPEAT abuse ?
[   68.884163][ T5902] Bluetooth: hci1: command tx timeout
[   68.886496][ T5900] Bluetooth: hci0: command tx timeout
[   68.965082][ T5902] Bluetooth: hci2: command 0x0419 tx timeout
[   68.972708][ T6571] bridge_slave_0: left allmulticast mode
[   68.976589][ T6571] bridge_slave_0: left promiscuous mode
[   68.979071][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.985805][ T6571] bridge_slave_1: left allmulticast mode
[   68.988142][ T6571] bridge_slave_1: left promiscuous mode
[   68.996869][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.003758][ T6571] bond0: (slave bond_slave_0): Releasing backup interface
[   69.011213][ T6571] bond0: (slave bond_slave_1): Releasing backup interface
[   69.019757][ T6571] team0: Port device team_slave_0 removed
[   69.027475][ T6571] team0: Port device team_slave_1 removed
[   69.030179][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.033215][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.037468][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.040636][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.057599][ T6576] team0: Mode changed to "loadbalance"
[   69.096230][ T6578] netlink: 'syz.1.307': attribute type 3 has an invalid length.
[   69.117074][ T6581] warning: `syz.2.308' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.127424][ T6583] TC_ACT_REPEAT abuse ?
[   69.411793][ T6624] tipc: Started in network mode
[   69.413436][ T6624] tipc: Node identity 7e62875c07ee, cluster identity 4711
[   69.416853][ T6624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.420586][ T6624] syzkaller0: entered promiscuous mode
[   69.423198][ T6624] syzkaller0: entered allmulticast mode
[   69.439882][ T6624] tipc: Resetting bearer <eth:syzkaller0>
[   69.449701][ T6623] tipc: Resetting bearer <eth:syzkaller0>
[   69.455199][ T6623] tipc: Disabling bearer <eth:syzkaller0>
[   69.536867][ T6632] smc: net device bond0 applied user defined pnetid SYZ2
[   69.631010][ T6642] ieee802154 phy0 wpan0: encryption failed: -22
[   69.941507][ T6661] TC_ACT_REPEAT abuse ?
[   69.943384][ T6661] TC_ACT_REPEAT abuse ?
[   69.945487][ T6661] TC_ACT_REPEAT abuse ?
[   69.949580][ T6661] TC_ACT_REPEAT abuse ?
[   69.951877][ T6661] TC_ACT_REPEAT abuse ?
[   70.076593][ T6679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.355'.
[   70.325074][ T6696] netlink: 152 bytes leftover after parsing attributes in process `syz.0.360'.
[   70.328572][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.360'.
[   70.458795][ T6715] syzkaller0: entered promiscuous mode
[   70.460573][ T6715] syzkaller0: entered allmulticast mode
[   70.580802][ T6722] tap0: tun_chr_ioctl cmd 1074025677
[   70.583234][ T6722] tap0: linktype set to 805
[   70.689480][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'.
[   71.054139][ T5902] Bluetooth: hci2: command 0x0419 tx timeout
[   71.113321][ T6787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.117888][ T6787] syzkaller0: entered promiscuous mode
[   71.120067][ T6787] syzkaller0: entered allmulticast mode
[   71.129812][ T6787] tipc: Resetting bearer <eth:syzkaller0>
[   71.135198][ T6786] tipc: Resetting bearer <eth:syzkaller0>
[   71.139911][ T6786] tipc: Disabling bearer <eth:syzkaller0>
[   71.176013][ T6793] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.205871][ T6795] netlink: 'syz.1.406': attribute type 8 has an invalid length.
[   71.208819][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'.
[   71.218177][ T6795] bond0: entered promiscuous mode
[   71.220227][ T6795] bond_slave_0: entered promiscuous mode
[   71.222531][ T6795] bond_slave_1: entered promiscuous mode
[   71.232674][ T6795] bond0: left promiscuous mode
[   71.234822][ T6795] bond_slave_0: left promiscuous mode
[   71.237840][ T6795] bond_slave_1: left promiscuous mode
[   71.308749][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'.
[   71.376592][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.379187][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   72.116698][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'.
[   73.052901][ T6894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.056766][ T6894] syzkaller0: entered promiscuous mode
[   73.059151][ T6894] syzkaller0: entered allmulticast mode
[   73.110180][ T6894] tipc: Resetting bearer <eth:syzkaller0>
[   73.116588][ T6893] tipc: Resetting bearer <eth:syzkaller0>
[   73.124355][ T6893] tipc: Disabling bearer <eth:syzkaller0>
[   73.375284][   T34] audit: type=1800 audit(1756433787.633:2): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.452" name="memory.events" dev="tmpfs" ino=866 res=0 errno=0
[   73.702602][ T6928] netlink: 'syz.0.462': attribute type 1 has an invalid length.
[   73.708030][ T6929] netlink: 240 bytes leftover after parsing attributes in process `syz.1.460'.
[   73.713958][ T6928] netlink: 'syz.0.462': attribute type 1 has an invalid length.
[   73.727644][ T6928] netlink: 160 bytes leftover after parsing attributes in process `syz.0.462'.
[   73.731535][ T6928] netlink: 'syz.0.462': attribute type 1 has an invalid length.
[   73.742670][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'.
[   73.925797][    T9] net_ratelimit: 6 callbacks suppressed
[   73.925810][    T9] TC_ACT_REPEAT abuse ?
[   74.215631][ T6951] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   74.220268][ T6951] netlink: 14 bytes leftover after parsing attributes in process `syz.1.471'.
[   74.241416][ T6951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.249367][ T6951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.258824][ T6951] bond0 (unregistering): Released all slaves
[   74.608409][ T6963] netlink: 'syz.1.476': attribute type 1 has an invalid length.
[   74.611463][ T6963] netlink: 'syz.1.476': attribute type 1 has an invalid length.
[   74.829920][ T6977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.483'.
[   74.988156][ T7001] netlink: 788 bytes leftover after parsing attributes in process `syz.0.494'.
[   75.010680][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'.
[   76.485655][  T792] TC_ACT_REPEAT abuse ?
[   76.917949][ T7046] TC_ACT_REPEAT abuse ?
[   76.919867][    C0] TC_ACT_REPEAT abuse ?
[   76.921781][ T7046] TC_ACT_REPEAT abuse ?
[   76.925005][ T5945] TC_ACT_REPEAT abuse ?
[   76.928175][ T7045] TC_ACT_REPEAT abuse ?
[   76.930097][    C0] TC_ACT_REPEAT abuse ?
[   77.483393][ T7106] netlink: 34 bytes leftover after parsing attributes in process `syz.2.543'.
[   77.497120][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'.
[   77.501765][ T7104] team0: No ports can be present during mode change
[   77.552573][ T7115] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.544'.
[   78.745728][ T7208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.748633][ T7208] syzkaller0: entered promiscuous mode
[   78.750899][ T7208] syzkaller0: entered allmulticast mode
[   78.758223][ T7208] tipc: Resetting bearer <eth:syzkaller0>
[   78.934658][ T7223] __nla_validate_parse: 4 callbacks suppressed
[   78.934674][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'.
[   79.035568][ T7225] tap0: tun_chr_ioctl cmd 35108
[   79.360986][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.364110][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.509353][ T7238] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.529024][ T7238] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.693403][ T7238] hsr1: left allmulticast mode
[   79.695671][ T7238] syz_tun: left allmulticast mode
[   79.697794][ T7238] batadv_slave_0: left allmulticast mode
[   79.713345][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.717558][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.721312][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.727108][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.774632][ T5938] tipc: Node number set to 2039252828
[   80.197534][ T7280] netlink: 47 bytes leftover after parsing attributes in process `syz.1.613'.
[   80.434831][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'.
[   81.316566][ T7352] netlink: 232 bytes leftover after parsing attributes in process `syz.0.645'.
[   81.319527][ T7352] netlink: 232 bytes leftover after parsing attributes in process `syz.0.645'.
[   81.323645][ T7352] netlink: 44 bytes leftover after parsing attributes in process `syz.0.645'.
[   81.588920][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.653'.
[   81.606681][   T24] cfg80211: failed to load regulatory.db
[   81.681010][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'.
[   81.742933][ T7385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.660'.
[   81.839358][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'.
[   81.928698][ T7409] syzkaller1: entered promiscuous mode
[   81.931085][ T7409] syzkaller1: entered allmulticast mode
[   82.045403][ T7419] syzkaller1: entered promiscuous mode
[   82.047887][ T7419] syzkaller1: entered allmulticast mode
[   82.062805][ T7422] netlink: 'syz.2.678': attribute type 7 has an invalid length.
[   82.338654][ T7462] trusted_key: syz.2.699 sent an empty control message without MSG_MORE.
[   82.363481][ T7468] netlink: 'syz.2.702': attribute type 1 has an invalid length.
[   82.370414][ T7468] NCSI netlink: No device for ifindex 813332851
[   82.437381][ T7476] netlink: 'syz.2.706': attribute type 10 has an invalid length.
[   82.440498][ T7476] dummy0: entered promiscuous mode
[   82.442559][ T7476] dummy0: entered allmulticast mode
[   82.446624][ T7476] bridge0: port 1(dummy0) entered blocking state
[   82.449203][ T7476] bridge0: port 1(dummy0) entered disabled state
[   82.453040][ T7476] bridge0: port 1(dummy0) entered blocking state
[   82.455569][ T7476] bridge0: port 1(dummy0) entered forwarding state
[   82.608213][ T7497] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   83.484267][ T7532] nbd0: detected capacity change from 0 to 127
[   83.488374][ T7534] block nbd0: Receive control failed (result -32)
[   83.488759][ T7143] block nbd0: Send control failed (result -32)
[   83.492989][ T7143] block nbd0: Request send failed, requeueing
[   83.496041][ T1119] block nbd0: Dead connection, failed to find a fallback
[   83.499009][ T1119] block nbd0: shutting down sockets
[   83.501154][ T1119] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.505033][ T1119] Buffer I/O error on dev nbd0, logical block 0, async page read
[   83.505891][ T7143] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.512938][ T7143] Buffer I/O error on dev nbd0, logical block 1, async page read
[   83.516392][ T7143] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.520085][ T7143] Buffer I/O error on dev nbd0, logical block 2, async page read
[   83.523677][ T7143] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.528521][ T7143] Buffer I/O error on dev nbd0, logical block 3, async page read
[   83.532454][ T7143] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.536210][ T7143] Buffer I/O error on dev nbd0, logical block 0, async page read
[   83.539348][ T7143] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.543424][ T7143] Buffer I/O error on dev nbd0, logical block 1, async page read
[   83.546964][ T7143] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.550802][ T7143] Buffer I/O error on dev nbd0, logical block 2, async page read
[   83.556749][ T7143] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.557280][ T7538] unknown channel width for channel at 909000KHz?
[   83.560601][ T7143] Buffer I/O error on dev nbd0, logical block 3, async page read
[   83.562619][ T7538] unknown channel width for channel at 909000KHz?
[   83.562630][ T7538] unknown channel width for channel at 909000KHz?
[   83.571608][ T7143] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.580207][ T7143] Buffer I/O error on dev nbd0, logical block 0, async page read
[   83.587055][ T7143] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.594161][ T7143] Buffer I/O error on dev nbd0, logical block 1, async page read
[   83.602442][ T7143] ldm_validate_partition_table(): Disk read failed.
[   83.606764][ T7143] Dev nbd0: unable to read RDB block 0
[   83.611318][ T7143]  nbd0: unable to read partition table
[   83.620322][ T7143] ldm_validate_partition_table(): Disk read failed.
[   83.629907][ T7143] Dev nbd0: unable to read RDB block 0
[   83.635131][ T7143]  nbd0: unable to read partition table
[   83.767826][ T7566] tipc: Started in network mode
[   83.769941][ T7566] tipc: Node identity 5a22ab44e872, cluster identity 4711
[   83.772617][ T7566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.778218][ T7566] syzkaller0: entered promiscuous mode
[   83.780114][ T7566] syzkaller0: entered allmulticast mode
[   83.789263][ T7566] tipc: Resetting bearer <eth:syzkaller0>
[   83.793291][ T7565] tipc: Resetting bearer <eth:syzkaller0>
[   83.800037][ T7565] tipc: Disabling bearer <eth:syzkaller0>
[   84.713534][ T7600] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   85.613871][ T7611] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[   86.352793][ T7673] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   86.624525][ T7694] syzkaller0: entered promiscuous mode
[   86.626805][ T7694] syzkaller0: entered allmulticast mode
[   86.907373][ T7710] syzkaller1: entered promiscuous mode
[   86.909690][ T7710] syzkaller1: entered allmulticast mode
[   87.060368][ T7719] netlink: 'syz.1.812': attribute type 1 has an invalid length.
[   87.062872][ T7719] __nla_validate_parse: 7 callbacks suppressed
[   87.062882][ T7719] netlink: 244 bytes leftover after parsing attributes in process `syz.1.812'.
[   87.148450][ T7736] nft_compat: unsupported protocol 0
[   87.229412][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.821'.
[   87.232948][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'.
[   87.433264][ T7771] pim6reg1: entered promiscuous mode
[   87.435648][ T7771] pim6reg1: entered allmulticast mode
[   87.751184][ T7808] netlink: 'syz.0.842': attribute type 10 has an invalid length.
[   87.939112][ T7814] bond0: (slave netdevsim0): Releasing backup interface
[   88.138422][ T7844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.860'.
[   88.160782][ T7849] sctp: [Deprecated]: syz.0.862 (pid 7849) Use of int in maxseg socket option.
[   88.160782][ T7849] Use struct sctp_assoc_value instead
[   88.205088][ T7856] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   88.278218][ T7864] vlan3: entered promiscuous mode
[   88.286244][ T7868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.872'.
[   88.648911][ T7896] vlan0: entered promiscuous mode
[   88.650791][ T7896] macvtap0: entered promiscuous mode
[   88.699244][ T7896] netlink: 104 bytes leftover after parsing attributes in process `syz.1.884'.
[   90.168053][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.906'.
[   90.240767][ T7953] netlink: 'syz.1.909': attribute type 1 has an invalid length.
[   90.244648][ T7953] netlink: 224 bytes leftover after parsing attributes in process `syz.1.909'.
[   90.260864][ T7955] IPv6: Can't replace route, no match found
[   90.467825][ T7974] netlink: 240 bytes leftover after parsing attributes in process `syz.2.917'.
[   90.543107][ T7980] netlink: 'syz.2.920': attribute type 3 has an invalid length.
[   91.888198][ T8019] netlink: 128 bytes leftover after parsing attributes in process `syz.2.936'.
[   92.463358][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'.
[   92.497175][   T34] audit: type=1800 audit(1756433806.753:3): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.958" name="memory.events" dev="tmpfs" ino=1626 res=0 errno=0
[   92.513333][   T34] audit: type=1804 audit(1756433806.763:4): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.958" name="memory.events" dev="tmpfs" ino=1626 res=1 errno=0
[   92.666247][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'.
[   92.669577][ T8078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.020835][ T8102] netlink: 'syz.2.975': attribute type 1 has an invalid length.
[   93.026001][ T8102] netlink: 224 bytes leftover after parsing attributes in process `syz.2.975'.
[   93.168149][ T8106] smc: net device bond0 applied user defined pnetid SYZ2
[   93.288974][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.981'.
[   93.400424][ T8126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.979'.
[   93.407442][ T8112] netlink: 'syz.2.979': attribute type 13 has an invalid length.
[   93.409936][ T8112] netlink: 'syz.2.979': attribute type 17 has an invalid length.
[   93.426648][ T8112] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   93.485152][ T8134] netlink: 'syz.0.989': attribute type 12 has an invalid length.
[   93.528627][ T8138] netlink: 'syz.1.990': attribute type 99 has an invalid length.
[   93.621093][ T8149] netlink: 332 bytes leftover after parsing attributes in process `syz.0.996'.
[   93.624811][ T8149] netlink: 104 bytes leftover after parsing attributes in process `syz.0.996'.
[   93.628342][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.996'.
[   93.743612][ T8162] netlink: 'syz.1.1002': attribute type 1 has an invalid length.
[   93.755956][ T8162] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.774751][ T8162] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.777519][ T8162] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[   93.781498][ T8162] bond0: (slave vxcan3): Error -95 calling set_mac_address
[   93.802507][ T8165] bridge_slave_0: left allmulticast mode
[   93.806677][ T8165] bridge_slave_0: left promiscuous mode
[   93.809058][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.813847][ T8165] bridge_slave_1: left allmulticast mode
[   93.816065][ T8165] bridge_slave_1: left promiscuous mode
[   93.818316][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.823152][ T8165] bond0: (slave bond_slave_0): Releasing backup interface
[   93.826738][ T8165] bond0: (slave bond_slave_1): Releasing backup interface
[   93.830930][ T8165] team0: Port device team_slave_0 removed
[   93.834026][ T8165] team0: Port device team_slave_1 removed
[   93.837313][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.840382][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.844862][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.847867][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.870583][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.999'.
[   94.177881][ T8187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1011'.
[   94.281082][ T8191] geneve0: entered promiscuous mode
[   94.282866][ T8191] geneve0: entered allmulticast mode
[   94.730467][ T8211] netem: change failed
[   94.999494][ T8229] ip6gre1: entered promiscuous mode
[   95.077986][ T8233] dvmrp8: entered allmulticast mode
[   95.100330][ T8228] dvmrp8: left allmulticast mode
Connection to localhost closed by remote host.
[   95.483333][ T5897] syz_tun (unregistering): left promiscuous mode

VM DIAGNOSIS:
02:16:59  Registers:
info registers vcpu 0

CPU#0
RAX=66c3e8930b07c700 RBX=ffffffff819683b8 RCX=66c3e8930b07c700 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79d3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562d1a987ec0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000010000000000
XMM02=0000000000000000 0000560078756166 XMM03=0000000000000000 ffff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000061 000000306968702f
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 00000000000000ff
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=61eecba6e0dce800 RBX=ffffffff819683b8 RCX=61eecba6e0dce800 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38330 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b79d3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562d1a9c15c0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000febb916 0000000000000034 XMM01=7a79730000000000 000000000324b7f5
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=f5e651ff01000000 00000000000002ff
XMM06=f5e651ff01000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
