last executing test programs:

1.557277468s ago: executing program 1 (id=1171):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="a00000002100390d000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000300000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03001e4f6cbd0000500011"], 0xa0}}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>r0})
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xcd6226eb58b65b2f}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={<r3=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, [0xf, 0x2, 0x3, 0xffffffffffff63c0, 0xa, 0xcd, 0xffffffff, 0x5, 0xd, 0x10000, 0x7, 0x9, 0x6151, 0x80000001, 0x5]}, &(0x7f00000000c0)=0x100)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000009340)={0x0, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @loopback}, @l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3, 0x1})
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="a00000002100390d000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000300000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03001e4f6cbd0000500011"], 0xa0}}, 0x10) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xcd6226eb58b65b2f}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) (async)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, [0xf, 0x2, 0x3, 0xffffffffffff63c0, 0xa, 0xcd, 0xffffffff, 0x5, 0xd, 0x10000, 0x7, 0x9, 0x6151, 0x80000001, 0x5]}, &(0x7f00000000c0)=0x100) (async)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000009340)={0x0, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @loopback}, @l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x3, 0x1}) (async)

1.556270818s ago: executing program 1 (id=1172):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x18, 0x16}, 0x20)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0xffffffa7, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0)

1.471341641s ago: executing program 1 (id=1173):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002600ffff00000800000000000f0000001dae2f06cfddadb2abb18ad2f6185b23d664872d9db32b1c9f3bdc084bad729171"], 0x14}}, 0x4000010)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x20000010)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x8, 0x8, 0x81, 0x4}, {0x81, 0x4, 0x4, 0xec8c}, {0x5, 0x7, 0x7, 0x6}, {0x3ff, 0x6, 0x4, 0x9}, {0x6, 0x1, 0xd, 0xe0}]}, 0x10)

1.470906527s ago: executing program 1 (id=1174):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r0, 0x5e829000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="c9b9e52e000000007b538c770000000000e16c9bc634bc00"]) (async)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="c9b9e52e000000007b538c770000000000e16c9bc634bc00"])
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2000003}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x60a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf7}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb3d7e85a}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
getpeername(r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
unshare(0x400) (async)
unshare(0x400)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
read(r4, &(0x7f0000000100)=""/41, 0x29)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, 0x0, 0x0) (async)
setsockopt$inet_int(r5, 0x0, 0x33, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000240)=0x4)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
socket$packet(0x11, 0x0, 0x300)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

1.00088736s ago: executing program 2 (id=1184):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000007f0000000000009600000028000000850000000000411e00000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c0001400000000000000101"], 0xf4}}, 0x0)
unshare(0x24020400)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r4, 0x100)
r5 = accept4(r4, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000400)={0x7, 0x0, 0x1, 0x45, 0x4, 0x0, [{0xfffffffffffffff9, 0x9, 0x7fffffffffffffff, '\x00', 0x2086}, {0x100000000, 0x7, 0x14, '\x00', 0x2281}, {0x1, 0x7, 0x3, '\x00', 0x2808}, {0x448, 0x8000000000000000, 0x80}]})
shutdown(r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0xb0000003})
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x8001}, 0x1c)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r7, 0x0, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="050000007f000040cc0db960cf0a4f88"], 0x10)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000000), 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a1400000010"], 0x28}}, 0x0)
sendmsg$can_bcm(r10, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r9}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="04000000000000000000010000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x2}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4)
sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b00)="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", 0x4b1}], 0x1}, 0x0)

690.076076ms ago: executing program 0 (id=1187):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)}, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@loopback, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x1, 0x0, 0xfc, 0x1}]}]}, 0x23c}}, 0x0)
r4 = socket(0x10, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r5, 0x29, 0x7d, 0x9, 0x1, 0x60, @remote, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}})

586.164675ms ago: executing program 1 (id=1188):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040084}, 0x20048844)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)={0xdc, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r2}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0xdc}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x20004800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r7 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f0000000540)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000000)=0x7, 0x4)
connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r10, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

585.380187ms ago: executing program 0 (id=1189):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x80000000000000a, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0)
r8 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r13, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40)

501.429203ms ago: executing program 1 (id=1190):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000005800)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000140)
socket$netlink(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0xffff, 0x101, 0x9, 0x4, 0x0, 0x5, 0xd4c}, 0xc)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000000c0), &(0x7f00000002c0)=0xc)
sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000002200010a00000080fedbdf25020001"], 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r4)
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x20, r5, 0xa15, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x40448d4)
listen(r0, 0x1000)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', <r6=>0x0})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r9, 0x6, 0x10}, &(0x7f0000000140)=0x8)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

431.727817ms ago: executing program 0 (id=1191):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
syz_open_procfs$namespace(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r8, &(0x7f0000000280)={0x1f, @none}, 0x8)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r9)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r10, 0x5, 0x0, 0x1, {0x22}}, 0x14}}, 0x2000c094)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fe000000000000000400f400"/34], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc840)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xfffffffffffffffe, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xffffffff, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x80008, 0x5, 0x5f82, 0x6, 0x17, 0xd, 0x8, 0x1, {0xffff1c76, 0x3, 0x1000, 0x101, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

191.519138ms ago: executing program 0 (id=1192):
socket(0x2b, 0x80801, 0x1)
socket$inet6(0xa, 0x80003, 0xff)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6", 0x38, 0x0, 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async)
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970007b83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x9}, 0x50) (rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async, rerun: 32)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xfff2}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

117.705156ms ago: executing program 2 (id=1193):
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x4e22, @empty}}, 0x811e, 0x2, 0xff, 0x1000005, 0x40, 0xcd, 0x7}, &(0x7f0000000580)=0x9c)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000020000000c000000000000000200000000000000000000060400000000000000000000000000000000000000000000000000000000000000000000000000a1de821dd506c4eba2e46b4c413fc960cc4bc46c36be92f28e0afdcdb6de9c"], &(0x7f0000002b80)=""/176, 0x26, 0xb0}, 0x28)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2001)
recvmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3, &(0x7f00000015c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x40)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) (async)
socket$inet(0x2, 0x3, 0x2) (async)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
shutdown(r1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x4e22, @empty}}, 0x811e, 0x2, 0xff, 0x1000005, 0x40, 0xcd, 0x7}, &(0x7f0000000580)=0x9c) (async)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000020000000c000000000000000200000000000000000000060400000000000000000000000000000000000000000000000000000000000000000000000000a1de821dd506c4eba2e46b4c413fc960cc4bc46c36be92f28e0afdcdb6de9c"], &(0x7f0000002b80)=""/176, 0x26, 0xb0}, 0x28) (async)
socket(0x28, 0x5, 0x0) (async)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async)
recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2001) (async)
recvmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3, &(0x7f00000015c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x40) (async)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) (async)

117.00958ms ago: executing program 0 (id=1194):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000040)=0x1) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) (rerun: 32)
bind$can_raw(r1, &(0x7f0000000200)={0x1d, r3}, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r9, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100039042bd47000bddbdf2500190000", @ANYRES32=r9, @ANYBLOB="000000000000000020001280080001006772650014000280060010004e220000060011004e210000"], 0x40}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x80, 0x10, 0x5, 0x0, 0x3, 0x0, 0xb, 0x3000}}, 0x1c}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r5, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f01640000000500530001000000080005000c"], 0x54}}, 0x0) (async, rerun: 32)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000100)={&(0x7f00000013c0)=""/4096, 0x1000}) (rerun: 32)

114.27291ms ago: executing program 2 (id=1195):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x34, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x34}}, 0x40000)
r3 = socket$inet6(0xa, 0x80000, 0x3ffff)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

61.218042ms ago: executing program 2 (id=1196):
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604d0a0000000600fe8000000000000080020000000000aafe8000000000000000000000140000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)

60.504015ms ago: executing program 2 (id=1197):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x8880)
socket$inet(0x2, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6e2, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000940)="1111", 0x6, 0x0, 0x43db}, 0x50)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x4040880)
r3 = socket$kcm(0x2, 0x2, 0x0)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x2f, &(0x7f0000000280), 0x4)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)={0x118, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20040800}, 0x20048010)

805.187µs ago: executing program 2 (id=1198):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) (async)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x7fffffff, 0x9, 0xb3b, 0x3300, 0x1, 0x20000400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50)
sendfile(r0, r1, &(0x7f0000000040)=0x4, 0x2)
r2 = socket$kcm(0xa, 0x1, 0x0) (async)
r3 = socket$kcm(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2], 0x48) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3})
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) (async)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r7, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) (async)
r8 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r11 = openat$cgroup_int(r10, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18180049c82da55721f1aa068e5aed1adc4700000000000000000000000000852000000500950000000000000033a17244e604fdb0437bca71b2e4b6fbd5180b45cd278da717e3ca27a8250c35c8216ef602a7db56f28872bd4cf47d7128f7b9c96d469f7292b7b3669758a45e4528352eff999fd655ec"], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20}, 0x94)
write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[], 0x31) (async)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) (async)
getpeername$unix(r9, &(0x7f0000000200), &(0x7f0000000280)=0x6e)

0s ago: executing program 0 (id=1199):
r0 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x6060600) (async)
bind$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @any, 0x4}, 0xa) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket(0x10, 0x803, 0x0) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_TARGET={0x8, 0x1, 0x6}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x1ff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async, rerun: 64)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23481' (ED25519) to the list of known hosts.
syzkaller login: [   41.053085][ T5773] cgroup: Unknown subsys name 'net'
[   41.135228][ T5773] cgroup: Unknown subsys name 'cpuset'
[   41.138738][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.845781][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.401549][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.407457][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.410663][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.414623][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.417730][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.564675][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.567003][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.569239][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.571924][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.574961][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.591963][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   46.606386][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.608765][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.611035][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.613686][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.616096][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.692032][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.694960][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.697870][ T5845] bridge_slave_0: entered allmulticast mode
[   46.700681][ T5845] bridge_slave_0: entered promiscuous mode
[   46.705280][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.707421][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.709705][ T5845] bridge_slave_1: entered allmulticast mode
[   46.713129][ T5845] bridge_slave_1: entered promiscuous mode
[   46.740554][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.759888][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.796948][ T5845] team0: Port device team_slave_0 added
[   46.802481][ T5845] team0: Port device team_slave_1 added
[   46.834843][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.837183][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.846589][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.864742][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.867283][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.876503][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.905729][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   46.936473][ T5845] hsr_slave_0: entered promiscuous mode
[   46.939716][ T5845] hsr_slave_1: entered promiscuous mode
[   46.958340][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   47.018832][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.021373][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.024345][ T5852] bridge_slave_0: entered allmulticast mode
[   47.027423][ T5852] bridge_slave_0: entered promiscuous mode
[   47.037508][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.039665][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.041878][ T5852] bridge_slave_1: entered allmulticast mode
[   47.044544][ T5852] bridge_slave_1: entered promiscuous mode
[   47.076411][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.092033][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.099630][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.103008][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.105871][ T5855] bridge_slave_0: entered allmulticast mode
[   47.108988][ T5855] bridge_slave_0: entered promiscuous mode
[   47.124489][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.127299][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.130014][ T5855] bridge_slave_1: entered allmulticast mode
[   47.133144][ T5855] bridge_slave_1: entered promiscuous mode
[   47.143368][ T5852] team0: Port device team_slave_0 added
[   47.159145][ T5852] team0: Port device team_slave_1 added
[   47.166594][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.189270][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.195313][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.197500][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.206929][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.221644][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.226095][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.234732][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.251018][ T5855] team0: Port device team_slave_0 added
[   47.255510][ T5855] team0: Port device team_slave_1 added
[   47.286808][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.289703][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.300083][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.312274][ T5852] hsr_slave_0: entered promiscuous mode
[   47.314673][ T5852] hsr_slave_1: entered promiscuous mode
[   47.316617][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   47.318354][ T5852] Cannot create hsr debugfs directory
[   47.320523][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.323678][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.332297][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.363236][ T5855] hsr_slave_0: entered promiscuous mode
[   47.365287][ T5855] hsr_slave_1: entered promiscuous mode
[   47.367494][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   47.369220][ T5855] Cannot create hsr debugfs directory
[   47.370972][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.376935][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.394975][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.410296][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.492192][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.494444][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.496698][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.499096][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.552450][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.566839][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.577043][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.585198][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.590008][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.594334][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.624134][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.629477][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.639719][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.647185][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.654124][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.661214][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   47.677369][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.679811][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.693984][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.696494][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.765882][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.787688][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   47.800267][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.814222][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.817116][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.821952][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.824933][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.858988][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   47.866450][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.880714][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.888317][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.891082][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.897246][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.900006][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.946500][ T5845] veth0_vlan: entered promiscuous mode
[   47.958004][ T5845] veth1_vlan: entered promiscuous mode
[   47.977611][ T5845] veth0_macvtap: entered promiscuous mode
[   47.983648][ T5845] veth1_macvtap: entered promiscuous mode
[   48.005391][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.019909][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.029349][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.048175][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.059921][ T5861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.063446][ T5861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.066338][ T5861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.094237][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.098250][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.100827][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.125851][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.128260][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.128699][ T5852] veth0_vlan: entered promiscuous mode
[   48.142164][ T5852] veth1_vlan: entered promiscuous mode
[   48.159977][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.169522][ T5855] veth0_vlan: entered promiscuous mode
[   48.177972][ T5852] veth0_macvtap: entered promiscuous mode
[   48.188957][ T5852] veth1_macvtap: entered promiscuous mode
[   48.199502][ T5855] veth1_vlan: entered promiscuous mode
[   48.215661][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.229038][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.241317][ T5865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.245321][ T5865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.248687][ T5865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.251740][ T5865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.276599][ T5855] veth0_macvtap: entered promiscuous mode
[   48.289009][ T5855] veth1_macvtap: entered promiscuous mode
[   48.320519][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.336511][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.337254][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.340357][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.365066][ T5865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.378362][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.381752][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.392350][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.397487][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.401196][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.408912][ T5919] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6'.
[   48.412040][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'.
[   48.454577][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.461639][ T5926] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.463216][ T5240] Bluetooth: hci0: command tx timeout
[   48.467255][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.493474][ T5925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   48.502213][ T5925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   48.506784][ T5925] bond0 (unregistering): Released all slaves
[   48.526720][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.530147][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.565894][ T5931] syzkaller0: entered promiscuous mode
[   48.567732][ T5931] syzkaller0: entered allmulticast mode
[   48.622908][ T5240] Bluetooth: hci2: command tx timeout
[   48.625037][ T5240] Bluetooth: hci1: command tx timeout
[   48.781092][ T5955] vlan2: entered promiscuous mode
[   48.785573][ T5955] macvtap0: entered promiscuous mode
[   48.836165][ T5955] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13'.
[   48.891859][ T5966] netlink: 'syz.2.15': attribute type 1 has an invalid length.
[   48.895270][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'.
[   48.941369][ T5968] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   48.947043][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'.
[   49.037039][ T5978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20'.
[   49.039936][ T5980] tipc: Started in network mode
[   49.041605][ T5980] tipc: Node identity ZLdE7s, cluster identity 4711
[   49.044765][ T5980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.048150][ T5980] syzkaller0: entered promiscuous mode
[   49.049848][ T5980] syzkaller0: entered allmulticast mode
[   49.083944][ T5980] tipc: Resetting bearer <eth:syzkaller0>
[   49.086760][ T5980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.100429][ T5979] tipc: Resetting bearer <eth:syzkaller0>
[   49.105383][ T5979] tipc: Disabling bearer <eth:syzkaller0>
[   49.136116][ T5982] netlink: 352 bytes leftover after parsing attributes in process `syz.2.22'.
[   49.139119][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'.
[   49.180728][ T5985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'.
[   49.281902][ T5993] netlink: 'syz.1.26': attribute type 1 has an invalid length.
[   49.308990][ T5995] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[   49.348026][ T5998] veth3: entered promiscuous mode
[   49.364411][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   49.380486][ T5995] bond0: (slave bond_slave_1): Releasing backup interface
[   49.391192][ T5993] erspan0: entered allmulticast mode
[   49.437120][ T6005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   49.441504][ T6005] netlink: 'syz.1.29': attribute type 2 has an invalid length.
[   49.644644][ T6011] netlink: 'syz.0.32': attribute type 5 has an invalid length.
[   49.648754][ T6011] netlink: 'syz.0.32': attribute type 1 has an invalid length.
[   50.067359][ T6026] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   50.543287][ T5240] Bluetooth: hci0: command tx timeout
[   50.569845][ T6038] netlink: 'syz.2.39': attribute type 30 has an invalid length.
[   50.572448][ T6038] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   50.577079][ T6038] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   50.702769][   T55] Bluetooth: hci2: command tx timeout
[   50.704878][ T5240] Bluetooth: hci1: command tx timeout
[   51.006218][ T6052] Zero length message leads to an empty skb
[   51.175429][ T6065] syz.1.47 uses obsolete (PF_INET,SOCK_PACKET)
[   51.420489][ T6080] netlink: 'syz.0.48': attribute type 10 has an invalid length.
[   51.421177][ T6079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   51.433858][ T6080] team0: Port device dummy0 added
[   51.437100][ T6080] netlink: 'syz.0.48': attribute type 10 has an invalid length.
[   51.443241][ T6080] team0: Port device dummy0 removed
[   52.028674][ T6109] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   52.262343][ T6131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.290031][ T6136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.293032][ T6136] syzkaller0: entered promiscuous mode
[   52.295134][ T6136] syzkaller0: entered allmulticast mode
[   52.299608][ T6136] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   52.302010][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.308867][ T6136] tipc: Resetting bearer <eth:syzkaller0>
[   52.313127][ T6135] tipc: Resetting bearer <eth:syzkaller0>
[   52.318795][ T6135] tipc: Disabling bearer <eth:syzkaller0>
[   52.622726][ T5240] Bluetooth: hci0: command tx timeout
[   52.625119][ T6150] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65511)
[   52.629079][ T6150] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   52.783557][ T5240] Bluetooth: hci1: command tx timeout
[   52.785393][   T55] Bluetooth: hci2: command tx timeout
[   53.298274][ T6188] veth1_macvtap: left promiscuous mode
[   53.308051][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.313542][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.468905][ T6192] tipc: Started in network mode
[   53.470491][ T6192] tipc: Node identity 8ac455e8a697, cluster identity 4711
[   53.473854][ T6192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.482824][ T6192] syzkaller0: entered promiscuous mode
[   53.484669][ T6192] syzkaller0: entered allmulticast mode
[   53.511611][ T6194] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   53.559758][ T6206] __nla_validate_parse: 11 callbacks suppressed
[   53.559769][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'.
[   53.565573][ T6206] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   53.595487][ T6191] tipc: Resetting bearer <eth:syzkaller0>
[   53.602079][ T6191] tipc: Disabling bearer <eth:syzkaller0>
[   53.668792][ T6217] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   53.681525][ T6217] netlink: 220 bytes leftover after parsing attributes in process `syz.1.88'.
[   53.703483][ T6226] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 2, id = 0
[   53.705431][ T6222] netlink: 68 bytes leftover after parsing attributes in process `syz.2.90'.
[   53.710747][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   53.713841][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   53.716649][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   53.720965][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   53.724030][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   53.802438][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'.
[   53.849975][ T6242] vlan0: entered promiscuous mode
[   53.870902][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'.
[   53.899151][ T6242] lo speed is unknown, defaulting to 1000
[   53.901322][ T6242] lo speed is unknown, defaulting to 1000
[   53.912094][ T6242] lo speed is unknown, defaulting to 1000
[   54.030368][ T6242] infiniband syz0: set active
[   54.031906][ T6242] infiniband syz0: added lo
[   54.035539][ T6267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.042249][ T6268] syzkaller0: entered promiscuous mode
[   54.044377][ T6268] syzkaller0: entered allmulticast mode
[   54.051087][ T5856] lo speed is unknown, defaulting to 1000
[   54.058370][ T6242] RDS/IB: syz0: added
[   54.060012][ T6242] smc: adding ib device syz0 with port count 1
[   54.062461][ T6242] smc:    ib device syz0 port 1 has pnetid 
[   54.072041][ T6265] tipc: Resetting bearer <eth:syzkaller0>
[   54.076537][ T6265] tipc: Disabling bearer <eth:syzkaller0>
[   54.080718][ T5856] lo speed is unknown, defaulting to 1000
[   54.084966][ T6242] lo speed is unknown, defaulting to 1000
[   54.168828][ T6242] lo speed is unknown, defaulting to 1000
[   54.227930][ T6284] validate_nla: 2 callbacks suppressed
[   54.227962][ T6284] netlink: 'syz.1.108': attribute type 1 has an invalid length.
[   54.246368][ T6284] bond1: entered promiscuous mode
[   54.248702][ T6284] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.252003][ T6242] lo speed is unknown, defaulting to 1000
[   54.260354][ T6284] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.265854][ T6284] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   54.270007][ T6284] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   54.285144][ T6284] bond1: (slave wireguard0): making interface the new active one
[   54.288978][ T6284] wireguard0: entered promiscuous mode
[   54.292235][ T6284] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[   54.346555][ T6295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.393380][ T6297] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   54.401126][ T6301] tipc: Cannot configure node identity twice
[   54.435860][ T6303] batman_adv: batadv0: Adding interface: dummy0
[   54.437958][ T6303] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.445796][ T6303] batman_adv: batadv0: Interface activated: dummy0
[   54.453145][ T6303] batadv0: mtu less than device minimum
[   54.455509][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   54.459709][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   54.464394][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   54.468814][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   54.473346][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   54.476907][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   54.480674][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   54.650702][ T6314] netlink: 'syz.0.119': attribute type 21 has an invalid length.
[   54.658234][ T6314] ipvlan2: entered promiscuous mode
[   54.661709][ T6314] bridge0: port 3(ipvlan2) entered blocking state
[   54.665397][ T6314] bridge0: port 3(ipvlan2) entered disabled state
[   54.667549][ T6314] ipvlan2: entered allmulticast mode
[   54.669213][ T6314] erspan0: entered allmulticast mode
[   54.671543][ T6314] ipvlan2: left allmulticast mode
[   54.674829][ T6314] erspan0: left allmulticast mode
[   54.713682][   T55] Bluetooth: hci0: command tx timeout
[   54.756250][ T6330] 0: renamed from hsr0 (while UP)
[   54.761925][ T6330] 0: entered allmulticast mode
[   54.765181][ T6330] hsr_slave_0: entered allmulticast mode
[   54.768079][ T6330] hsr_slave_1: entered allmulticast mode
[   54.805585][ T6339] bond0: invalid ARP target 0.0.0.0 specified for addition
[   54.808956][ T6339] bond0: option arp_ip_target: invalid value (0)
[   54.821738][ T6339] veth0: entered promiscuous mode
[   54.862701][   T55] Bluetooth: hci2: command tx timeout
[   54.862741][ T5240] Bluetooth: hci1: command tx timeout
[   54.885996][ T6342] tipc: Started in network mode
[   54.888168][ T6342] tipc: Node identity 5ee84e98c7d8, cluster identity 4711
[   54.890696][ T6342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.900966][ T6342] syzkaller0: entered promiscuous mode
[   54.902908][ T6342] syzkaller0: entered allmulticast mode
[   54.937805][ T6342] tipc: Resetting bearer <eth:syzkaller0>
[   54.941638][ T6341] tipc: Resetting bearer <eth:syzkaller0>
[   54.949241][ T6341] tipc: Disabling bearer <eth:syzkaller0>
[   54.993945][ T6350] block nbd2: not configured, cannot reconfigure
[   55.191160][ T6367] netlink: 'syz.2.135': attribute type 10 has an invalid length.
[   55.197522][ T6367] 8021q: adding VLAN 0 to HW filter on device team0
[   55.200614][ T6367] bond0: (slave team0): Enslaving as an active interface with an up link
[   55.280952][ T6377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.286940][ T6377] syzkaller0: entered promiscuous mode
[   55.288862][ T6377] syzkaller0: entered allmulticast mode
[   55.299712][ T6377] tipc: Resetting bearer <eth:syzkaller0>
[   55.311585][ T6376] tipc: Resetting bearer <eth:syzkaller0>
[   55.322382][ T6376] tipc: Disabling bearer <eth:syzkaller0>
[   55.512493][ T6391] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[   55.534551][ T6391] bond0: (slave bridge1): making interface the new active one
[   55.537640][ T6391] bond0: (slave bridge1): Enslaving as an active interface with an up link
[   55.569512][ T6397] netlink: 'syz.1.143': attribute type 16 has an invalid length.
[   55.572698][ T6397] netlink: 'syz.1.143': attribute type 17 has an invalid length.
[   55.600113][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.602897][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.642964][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.647927][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.674242][ T6405] netlink: 'syz.0.146': attribute type 10 has an invalid length.
[   55.737299][ T6405] syz_tun: entered promiscuous mode
[   55.742160][ T5861] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.747867][ T5861] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.751535][ T5861] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.756036][ T5861] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.797650][  T792] IPVS: starting estimator thread 0...
[   55.847337][ T6425] netlink: 'syz.2.152': attribute type 11 has an invalid length.
[   55.862097][ T6422] netlink: 'syz.0.151': attribute type 6 has an invalid length.
[   55.884573][ T6416] IPVS: using max 92 ests per chain, 220800 per kthread
[   55.991217][ T6435] vlan2: entered promiscuous mode
[   55.993062][ T6435] bridge0: entered promiscuous mode
[   55.997258][ T6435] IPVS: Unknown mcast interface: vcan0
[   55.999157][ T6436] IPVS: Unknown mcast interface: vcan0
[   56.073661][ T6438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.076916][ T6438] syzkaller0: entered promiscuous mode
[   56.079227][ T6438] syzkaller0: entered allmulticast mode
[   56.083303][ T6438] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   56.086094][ T6438] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[   56.089485][ T6438] tipc: Resetting bearer <eth:syzkaller0>
[   56.094566][ T6439] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   56.104936][ T6439] tipc: Resetting bearer <eth:syzkaller0>
[   56.107488][ T6439] tipc: Disabling bearer <eth:syzkaller0>
[   56.159964][ T6443] netlink: 'syz.0.157': attribute type 2 has an invalid length.
[   56.355639][ T6463] syzkaller0: entered promiscuous mode
[   56.358090][ T6463] syzkaller0: entered allmulticast mode
[   56.466306][ T6465] lo speed is unknown, defaulting to 1000
[   56.655523][ T6475] ip6gretap0: entered promiscuous mode
[   56.657675][ T6475] macsec1: entered promiscuous mode
[   56.659634][ T6475] macsec1: entered allmulticast mode
[   56.661289][ T6475] ip6gretap0: entered allmulticast mode
[   56.936906][ T6499] bridge0: port 3(vlan3) entered blocking state
[   56.940186][ T6499] bridge0: port 3(vlan3) entered disabled state
[   56.944556][ T6499] vlan3: entered allmulticast mode
[   56.946615][ T6499] bridge0: entered allmulticast mode
[   56.950394][ T6499] vlan3: left allmulticast mode
[   56.952393][ T6499] bridge0: left allmulticast mode
[   57.265303][ T6516] bridge0: entered allmulticast mode
[   57.267333][ T6516] bridge_slave_1: left allmulticast mode
[   57.269131][ T6516] bridge_slave_1: left promiscuous mode
[   57.270952][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.275799][ T6516] bridge_slave_0: left allmulticast mode
[   57.278021][ T6516] bridge_slave_0: left promiscuous mode
[   57.280106][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.284871][ T6516] bridge0 (unregistering): left allmulticast mode
[   57.488341][ T6525] tc_dump_action: action bad kind
[   57.518023][ T6532] bridge_slave_0: left allmulticast mode
[   57.521068][ T6532] bridge_slave_0: left promiscuous mode
[   57.526352][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.533358][ T6532] bridge_slave_1: left allmulticast mode
[   57.535726][ T6532] bridge_slave_1: left promiscuous mode
[   57.538150][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.550989][ T6532] team0: Port device team_slave_0 removed
[   57.557444][ T6532] team0: Port device team_slave_1 removed
[   57.560643][ T6532] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.564840][ T6532] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.574419][ T6532] bond0: (slave bridge1): Releasing active interface
[   57.580336][ T5856] lo speed is unknown, defaulting to 1000
[   57.656590][ T6544] IPv6: sit1: Disabled Multicast RS
[   57.660503][ T6544] sit1: entered allmulticast mode
[   57.803483][ T6555] lo speed is unknown, defaulting to 1000
[   57.942700][ T6565] syzkaller0: entered promiscuous mode
[   57.944622][ T6565] syzkaller0: entered allmulticast mode
[   58.292021][ T6622] tipc: New replicast peer: 255.255.255.255
[   58.295503][ T6622] tipc: Enabled bearer <udp:syz2>, priority 10
[   58.298863][ T6620] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   58.382450][ T6632] 8021q: adding VLAN 0 to HW filter on device bond2
[   58.398531][ T6632] gretap1: entered promiscuous mode
[   58.401878][ T6632] bond2: (slave gretap1): making interface the new active one
[   58.407510][ T6632] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   58.565824][ T6639] IPVS: length: 24 != 55320
[   58.580387][ T6656] __nla_validate_parse: 43 callbacks suppressed
[   58.580399][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'.
[   58.581173][ T6658] sctp: [Deprecated]: syz.0.221 (pid 6658) Use of int in max_burst socket option deprecated.
[   58.581173][ T6658] Use struct sctp_assoc_value instead
[   58.588403][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'.
[   58.596340][ T6657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.222'.
[   58.693691][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'.
[   58.874214][ T6686] netlink: 52 bytes leftover after parsing attributes in process `syz.0.227'.
[   59.001442][ T6693] Bluetooth: MGMT ver 1.23
[   59.059195][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'.
[   59.063794][ T6700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'.
[   59.116763][ T6706] netlink: 76 bytes leftover after parsing attributes in process `syz.0.232'.
[   59.206512][ T6712] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.214389][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.217246][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.255720][ T6716] pim6reg1: entered promiscuous mode
[   59.258017][ T6716] pim6reg1: entered allmulticast mode
[   59.292734][ T5881] tipc: Node number set to 2570079896
[   59.359067][ T6717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.234'.
[   59.375872][ T6717] 8021q: adding VLAN 0 to HW filter on device bond2
[   59.378723][ T6717] team0: Port device bond2 added
[   59.508414][ T6727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.513461][ T6727] syzkaller0: entered promiscuous mode
[   59.515330][ T6727] syzkaller0: entered allmulticast mode
[   59.521023][ T6731] warning: `syz.1.239' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.538873][ T6727] tipc: Resetting bearer <eth:syzkaller0>
[   59.545951][ T6724] tipc: Resetting bearer <eth:syzkaller0>
[   59.551026][ T6724] tipc: Disabling bearer <eth:syzkaller0>
[   59.603711][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'.
[   59.645349][ T6745] net_ratelimit: 14 callbacks suppressed
[   59.645365][ T6745] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   59.698010][ T6751] validate_nla: 9 callbacks suppressed
[   59.698027][ T6751] netlink: 'syz.0.244': attribute type 5 has an invalid length.
[   59.712826][ T6751] netlink: 'syz.0.244': attribute type 7 has an invalid length.
[   59.719371][ T6751] : entered promiscuous mode
[   59.953837][ T6771] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   59.956377][ T6771] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   59.969599][ T6772] tap0: tun_chr_ioctl cmd 1074025677
[   59.971779][ T6772] tap0: linktype set to 805
[   60.093331][ T6782] syz_tun: left promiscuous mode
[   60.259655][ T6782] vlan2: left promiscuous mode
[   60.262155][ T6782] bridge0: left promiscuous mode
[   60.265231][ T6782] ip6gretap0: left allmulticast mode
[   60.266978][ T6782] macsec1: left promiscuous mode
[   60.268538][ T6782] macsec1: left allmulticast mode
[   60.272883][ T6782] sit1: left allmulticast mode
[   60.280225][ T1269] lo speed is unknown, defaulting to 1000
[   60.287546][ T1269] syz0: Port: 1 Link DOWN
[   60.293908][ T6793] hsr_slave_0: left promiscuous mode
[   60.296707][ T6793] hsr_slave_1: left promiscuous mode
[   60.314745][ T5861] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.318118][ T5861] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.326704][    T9] lo speed is unknown, defaulting to 1000
[   60.326861][ T5861] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.337319][ T5861] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.342920][ T6807] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002
[   60.446017][ T6815] bond0: (slave bond_slave_0): Releasing backup interface
[   60.452150][ T6815] bond0: (slave bond_slave_1): Releasing backup interface
[   60.456382][ T6815] team0: Port device team_slave_0 removed
[   60.459405][ T6815] team0: Port device team_slave_1 removed
[   60.461646][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.464605][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.467748][ T6815] bond1: (slave wireguard0): Releasing backup interface
[   60.469905][ T6815] wireguard0: left promiscuous mode
[   60.473671][ T6815] bond2: (slave gretap1): Releasing active interface
[   60.644581][ T6828] batman_adv: batadv0: Interface deactivated: dummy0
[   60.648934][ T6828] batman_adv: batadv0: Removing interface: dummy0
[   60.708788][ T6830] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[   61.269137][ T6847] pimreg3: entered allmulticast mode
[   61.423600][ T6851] syzkaller0: entered promiscuous mode
[   61.425588][ T6851] syzkaller0: entered allmulticast mode
[   61.435651][ T6860] netlink: 'syz.0.274': attribute type 3 has an invalid length.
[   61.440648][ T6860] syz_tun: entered allmulticast mode
[   61.444769][ T6860] siw: device registration error -23
[   61.457964][ T6860] ip6gretap0: left promiscuous mode
[   61.462223][ T6860] 8021q: adding VLAN 0 to HW filter on device team0
[   61.468472][ T6860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.475013][ T6802] lo speed is unknown, defaulting to 1000
[   61.477161][ T6802] syz0: Port: 1 Link ACTIVE
[   61.478677][ T6802] lo speed is unknown, defaulting to 1000
[   61.485363][ T6859] syz_tun: left allmulticast mode
[   62.229235][ T6888] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   62.481516][ T6903] syzkaller0: entered promiscuous mode
[   62.483464][ T6903] syzkaller0: entered allmulticast mode
[   62.705171][ T6921] lo speed is unknown, defaulting to 1000
[   62.835853][ T6921] netlink: 'syz.2.292': attribute type 13 has an invalid length.
[   62.838579][ T6921] netlink: 'syz.2.292': attribute type 17 has an invalid length.
[   62.847235][ T6921] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   62.860651][ T6921] syz.2.292 (6921) used greatest stack depth: 20048 bytes left
[   63.020208][ T6932] lo speed is unknown, defaulting to 1000
[   63.159756][ T6941] lo speed is unknown, defaulting to 1000
[   63.200347][ T6943] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   63.380291][ T6947] netlink: 'syz.1.297': attribute type 1 has an invalid length.
[   63.388935][ T6947] 8021q: adding VLAN 0 to HW filter on device bond3
[   63.396112][ T6946] 8021q: adding VLAN 0 to HW filter on device bond3
[   63.398772][ T6946] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[   63.403410][ T6946] bond3: (slave vxcan1): Error -95 calling set_mac_address
[   63.417571][ T6951] netlink: 'syz.2.298': attribute type 1 has an invalid length.
[   63.431948][ T6951] 8021q: adding VLAN 0 to HW filter on device bond2
[   63.442919][  T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.446721][  T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.456682][ T6951] 8021q: adding VLAN 0 to HW filter on device bond2
[   63.459797][ T6951] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   63.465361][ T6951] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   63.503665][ T6951] bond2: (slave bridge3): Enslaving as an active interface with a down link
[   63.602481][ T6962] __nla_validate_parse: 21 callbacks suppressed
[   63.602493][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.301'.
[   63.607926][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.301'.
[   63.685925][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.302'.
[   63.946370][ T6975] bond0: entered promiscuous mode
[   63.948441][ T6975] bond0: entered allmulticast mode
[   63.950628][ T6975] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.972071][ T6977] netlink: 'syz.1.305': attribute type 9 has an invalid length.
[   63.975884][ T6977] netlink: 224 bytes leftover after parsing attributes in process `syz.1.305'.
[   63.980680][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'.
[   64.048308][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.307'.
[   64.050990][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.307'.
[   64.075912][ T6986] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   64.075925][ T6984] IPVS: stopping backup sync thread 6986 ...
[   64.141561][ T6992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.154025][ T6992] syzkaller0: entered promiscuous mode
[   64.157768][ T6992] syzkaller0: entered allmulticast mode
[   64.172061][ T6992] tipc: Resetting bearer <eth:syzkaller0>
[   64.174791][ T6994] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[   64.180729][ T6995] netlink: 32 bytes leftover after parsing attributes in process `syz.1.311'.
[   64.186451][ T6991] tipc: Resetting bearer <eth:syzkaller0>
[   64.190207][ T6991] tipc: Disabling bearer <eth:syzkaller0>
[   64.250931][ T6997] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   64.253348][ T6997] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   64.255722][ T6997] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   64.468811][ T7030] netlink: 260 bytes leftover after parsing attributes in process `syz.1.319'.
[   64.472203][ T7032] netlink: 788 bytes leftover after parsing attributes in process `syz.0.321'.
[   64.605582][ T7044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.608329][ T7044] syzkaller0: entered promiscuous mode
[   64.610270][ T7044] syzkaller0: entered allmulticast mode
[   64.678548][ T7043] tipc: Resetting bearer <eth:syzkaller0>
[   64.687974][ T7043] tipc: Disabling bearer <eth:syzkaller0>
[   64.767800][ T7049] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   64.851620][ T7056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.858843][ T7056] syzkaller0: entered promiscuous mode
[   64.860629][ T7056] syzkaller0: entered allmulticast mode
[   64.877221][ T7055] tipc: Resetting bearer <eth:syzkaller0>
[   64.883442][ T7055] tipc: Disabling bearer <eth:syzkaller0>
[   64.986256][ T7061] bond0: left promiscuous mode
[   64.988547][ T7061] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   64.991215][ T7061] bond1: left promiscuous mode
[   64.993488][ T7061] gretap1: left promiscuous mode
[   65.436007][ T7097] syz_tun: entered allmulticast mode
[   65.441237][ T7097] dvmrp8: entered allmulticast mode
[   65.445340][ T7097] syz_tun: left allmulticast mode
[   65.447060][ T7097] dvmrp8: left allmulticast mode
[   65.556371][ T7097] lo speed is unknown, defaulting to 1000
[   66.355917][ T7154] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[   66.355918][ T7155] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[   66.391917][ T7157] syzkaller1: entered promiscuous mode
[   66.394429][ T7157] syzkaller1: entered allmulticast mode
[   66.406797][ T7154] Illegal XDP return value 1858603819 on prog  (id 111) dev syz_tun, expect packet loss!
[   66.479952][ T7164] netlink: 'syz.0.360': attribute type 1 has an invalid length.
[   66.564984][ T7176] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[   66.598331][ T7180] openvswitch: netlink: Flow actions attr not present in new flow.
[   66.635238][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.638133][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.645211][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.648050][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.673606][ T7196] netlink: 'syz.0.373': attribute type 8 has an invalid length.
[   66.738855][ T7207] netlink: 'syz.2.378': attribute type 1 has an invalid length.
[   66.774799][ T7207] 8021q: adding VLAN 0 to HW filter on device bond3
[   66.780843][ T7207] netlink: 'syz.2.378': attribute type 1 has an invalid length.
[   66.784297][ T7208] 8021q: adding VLAN 0 to HW filter on device bond3
[   66.786563][ T7208] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   66.790476][ T7208] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   66.848778][ T7219] netlink: 'syz.2.381': attribute type 11 has an invalid length.
[   66.870158][ T7221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.876537][ T7221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.078995][ T7237] team0: Port device bond2 removed
[   67.087610][ T7240] netlink: 'syz.1.388': attribute type 12 has an invalid length.
[   67.093039][ T7237] team0: Mode changed to "loadbalance"
[   67.133812][ T7244] netlink: 'syz.1.390': attribute type 1 has an invalid length.
[   67.166803][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[   67.178204][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[   67.186741][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[   67.189459][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[   67.276287][ T5861] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.279837][ T5861] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.284785][ T5861] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.292680][ T5861] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.378449][ T7259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.381084][ T7259] syzkaller0: entered promiscuous mode
[   67.383001][ T7259] syzkaller0: entered allmulticast mode
[   67.391339][ T7259] tipc: Resetting bearer <eth:syzkaller0>
[   67.396940][ T7258] tipc: Resetting bearer <eth:syzkaller0>
[   67.399612][ T7258] tipc: Disabling bearer <eth:syzkaller0>
[   67.450674][ T7266] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   67.462243][ T7266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.467599][ T7266] bond0 (unregistering): (slave team0): Releasing backup interface
[   67.470897][ T7266] bond0 (unregistering): Released all slaves
[   67.519621][ T7269] netlink: 'syz.1.400': attribute type 3 has an invalid length.
[   67.614054][ T7280] pim6reg1: entered promiscuous mode
[   67.615997][ T7280] pim6reg1: entered allmulticast mode
[   67.912515][ T7288] can: request_module (can-proto-5) failed.
[   67.932355][ T7291] ieee802154 phy0 wpan0: encryption failed: -22
[   67.988731][  T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.991755][  T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.131367][ T7301] bridge_slave_0: left allmulticast mode
[   68.134761][ T7301] bridge_slave_0: left promiscuous mode
[   68.137220][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.183299][ T7301] bridge_slave_1: left allmulticast mode
[   68.185214][ T7301] bridge_slave_1: left promiscuous mode
[   68.187226][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.192422][ T7301] team0: Port device team_slave_0 removed
[   68.198137][ T7301] team0: Port device team_slave_1 removed
[   68.200273][ T7301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.202869][ T7301] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.205779][ T7301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.208113][ T7301] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.215449][ T7301] bond2: (slave bridge3): Releasing active interface
[   68.426416][ T7334] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   68.607155][ T7349] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.610273][ T7349] syzkaller0: MTU too low for tipc bearer
[   68.612311][ T7349] tipc: Disabling bearer <eth:syzkaller0>
[   68.622643][ T7349] 8021q: adding VLAN 0 to HW filter on device bond3
[   68.677275][ T7352] __nla_validate_parse: 363 callbacks suppressed
[   68.677291][ T7352] netlink: 88 bytes leftover after parsing attributes in process `syz.0.428'.
[   68.968076][ T7385] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.974637][ T7385] vlan4: entered promiscuous mode
[   68.976652][ T7385] bond0: entered promiscuous mode
[   68.978639][ T7385] vlan4: entered allmulticast mode
[   68.980253][ T7385] bond0: entered allmulticast mode
[   68.987255][ T7385] bond0: (slave gretap1): making interface the new active one
[   68.989824][ T7385] gretap1: entered promiscuous mode
[   68.991710][ T7385] gretap1: entered allmulticast mode
[   68.995141][ T7385] bond0: (slave gretap1): Enslaving as an active interface with an up link
[   69.007045][ T7385] syz.2.435 (7385) used greatest stack depth: 19960 bytes left
[   69.077517][ T7389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.080687][ T7389] syzkaller0: entered promiscuous mode
[   69.083092][ T7389] syzkaller0: entered allmulticast mode
[   69.174323][ T7389] tipc: Resetting bearer <eth:syzkaller0>
[   69.854675][ T7387] tipc: Resetting bearer <eth:syzkaller0>
[   69.859589][ T7387] tipc: Disabling bearer <eth:syzkaller0>
[   70.000606][ T7417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.041130][ T7422] : entered promiscuous mode
[   70.190435][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'.
[   70.192813][ T7437] openvswitch: netlink: IP tunnel TTL not specified.
[   70.414598][ T7443] vcan0: tx drop: invalid sa for name 0x0020000000000000
[   70.517782][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'.
[   70.567212][ T7448] ipvlan2: entered promiscuous mode
[   70.575773][ T7448] netlink: 36 bytes leftover after parsing attributes in process `syz.1.450'.
[   70.644796][ T7453] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000
[   70.669029][ T7455] vlan2: entered promiscuous mode
[   70.670819][ T7455] vlan2: entered allmulticast mode
[   70.672513][ T7455] hsr_slave_1: entered allmulticast mode
[   70.675787][ T7455] netlink: 32 bytes leftover after parsing attributes in process `syz.1.452'.
[   70.785962][    T9] IPVS: starting estimator thread 0...
[   70.873419][ T7463] IPVS: using max 70 ests per chain, 168000 per kthread
[   70.920285][ T7469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   70.945982][ T7469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   70.973303][ T7470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.995994][ T7469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   71.036052][ T7469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   71.080811][ T5861] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   71.088207][ T5861] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   71.095750][ T5861] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   71.101425][ T5861] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   71.265116][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.267861][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.980774][ T7475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   72.088635][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[   72.096847][ T7499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.465'.
[   72.205182][ T7517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.290248][ T7531] validate_nla: 7 callbacks suppressed
[   72.290260][ T7531] netlink: 'syz.0.473': attribute type 15 has an invalid length.
[   72.850501][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.478'.
[   72.871341][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'.
[   72.876860][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'.
[   72.893975][ T7550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.508262][ T7571] IPv6: sit1: Disabled Multicast RS
[   73.617405][ T7580] gretap2: entered promiscuous mode
[   73.619723][ T7580] gretap2: entered allmulticast mode
[   73.645615][ T7582] netlink: 'syz.2.489': attribute type 83 has an invalid length.
[   73.683945][ T7586] __nla_validate_parse: 6 callbacks suppressed
[   73.683962][ T7586] netlink: 72 bytes leftover after parsing attributes in process `syz.2.490'.
[   73.790715][ T7591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.794144][ T7591] syzkaller0: entered promiscuous mode
[   73.796526][ T7591] syzkaller0: entered allmulticast mode
[   73.804186][ T7591] tipc: Resetting bearer <eth:syzkaller0>
[   73.807332][ T7590] tipc: Resetting bearer <eth:syzkaller0>
[   73.810417][ T7590] tipc: Disabling bearer <eth:syzkaller0>
[   73.852090][ T7593] netlink: 'syz.0.493': attribute type 1 has an invalid length.
[   73.883747][ T7596] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   73.887506][ T7596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.494'.
[   73.914718][ T7599] lo speed is unknown, defaulting to 1000
[   73.926916][ T7596] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   73.982184][ T7606] netlink: 'syz.1.497': attribute type 2 has an invalid length.
[   73.984002][ T7603] syzkaller0: entered promiscuous mode
[   73.986444][ T7603] syzkaller0: entered allmulticast mode
[   74.066633][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'.
[   74.160742][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'.
[   74.168797][ T7613] dvmrp8: entered allmulticast mode
[   74.235398][ T7612] dvmrp8: left allmulticast mode
[   74.290769][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'.
[   75.361453][ T7620] bridge_slave_1: entered promiscuous mode
[   75.365081][ T7620] bridge_slave_1: left promiscuous mode
[   77.168606][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.505'.
[   77.175678][ T7630] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004
[   77.209818][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[   77.218166][ T7636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.507'.
[   77.225484][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'.
[   77.266662][ T7636] netlink: 'syz.1.507': attribute type 9 has an invalid length.
[   77.269215][ T7636] netlink: 'syz.1.507': attribute type 7 has an invalid length.
[   77.272342][ T7636] netlink: 'syz.1.507': attribute type 8 has an invalid length.
[   77.389379][ T7651] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   77.789218][ T7684] netlink: 32 bytes leftover after parsing attributes in process `syz.1.520'.
[   78.001475][ T7694] bridge0: entered allmulticast mode
[   78.341190][ T7708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.343892][ T7708] IPv6: NLM_F_CREATE should be set when creating new route
[   78.346449][ T7708] IPv6: NLM_F_CREATE should be set when creating new route
[   78.349353][ T7708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.464496][ T7726] netlink: 'syz.1.532': attribute type 1 has an invalid length.
[   78.497768][ T7718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.504435][ T7718] syzkaller0: entered promiscuous mode
[   78.506641][ T7718] syzkaller0: entered allmulticast mode
[   78.517233][ T7717] tipc: Resetting bearer <eth:syzkaller0>
[   78.525325][ T7717] tipc: Disabling bearer <eth:syzkaller0>
[   78.536949][ T7721] netlink: 'syz.2.531': attribute type 1 has an invalid length.
[   78.536949][ T7722] netlink: 'syz.2.531': attribute type 1 has an invalid length.
[   78.551587][ T7721] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[   78.559275][ T7721] gretap3: entered promiscuous mode
[   78.656546][ T7746] syzkaller1: entered promiscuous mode
[   78.658702][ T7746] syzkaller1: entered allmulticast mode
[   78.661900][ T7746] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[   78.662639][ T7749] block nbd2: not configured, cannot reconfigure
[   78.863330][ T7771] __nla_validate_parse: 13 callbacks suppressed
[   78.863342][ T7771] netlink: 72 bytes leftover after parsing attributes in process `syz.1.545'.
[   78.983981][ T7793] syzkaller0: entered promiscuous mode
[   78.986207][ T7793] syzkaller0: entered allmulticast mode
[   78.998643][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'.
[   79.759420][ T7799] netlink: 232 bytes leftover after parsing attributes in process `syz.2.552'.
[   79.763802][ T7799] netlink: 232 bytes leftover after parsing attributes in process `syz.2.552'.
[   79.766521][ T7799] netlink: 44 bytes leftover after parsing attributes in process `syz.2.552'.
[   79.776094][ T7799] 8021q: adding VLAN 0 to HW filter on device team0
[   79.780168][ T7799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.790466][ T7802] erspan0: left allmulticast mode
[   79.794104][ T7802] bond0: left allmulticast mode
[   79.798088][ T7802] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   79.811790][ T7802] ipvlan2: left promiscuous mode
[   79.814770][ T7802] vlan2: left promiscuous mode
[   79.816698][ T7802] vlan2: left allmulticast mode
[   79.818395][ T7802] hsr_slave_1: left allmulticast mode
[   79.820554][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.824597][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.827771][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.830670][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.862321][ T7804] netlink: 48 bytes leftover after parsing attributes in process `syz.2.555'.
[   80.032335][ T7824] lo speed is unknown, defaulting to 1000
[   80.110260][ T7825] lo speed is unknown, defaulting to 1000
[   80.194472][ T7817] netlink: 156 bytes leftover after parsing attributes in process `syz.0.559'.
[   80.349359][ T7837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.355266][ T7838] syzkaller0: entered promiscuous mode
[   80.357456][ T7838] syzkaller0: entered allmulticast mode
[   80.422325][ T7837] tipc: Resetting bearer <eth:syzkaller0>
[   80.462641][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'.
[   80.515307][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'.
[   80.689741][ T7856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.568'.
[   80.831881][ T7861] lo speed is unknown, defaulting to 1000
[   81.299929][ T7877] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   81.402714][    T9] tipc: Node number set to 743658984
[   81.513136][   T47] cfg80211: failed to load regulatory.db
[   81.680595][ T7902] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   81.756730][ T7902] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   81.805332][ T7902] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   81.845971][ T7902] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[   81.892054][ T6805] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   81.897725][ T6805] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   81.903844][ T6805] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   81.908875][ T6805] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   81.972314][ T7911] syzkaller0: entered promiscuous mode
[   81.974449][ T7911] syzkaller0: entered allmulticast mode
[   81.981122][ T7911] syzkaller0: left promiscuous mode
[   81.984917][ T7911] syzkaller0: left allmulticast mode
[   82.221550][ T7914] netlink: 'syz.2.584': attribute type 10 has an invalid length.
[   82.249804][ T7916] 8021q: adding VLAN 0 to HW filter on device bond4
[   82.365953][ T7934] netlink: 'syz.2.588': attribute type 10 has an invalid length.
[   83.418394][ T7965] pim6reg: entered allmulticast mode
[   83.421368][ T7965] pim6reg: left allmulticast mode
[   84.103998][ T7996] netlink: 'syz.0.604': attribute type 1 has an invalid length.
[   84.116422][ T7996] bond5: entered promiscuous mode
[   84.118688][ T7996] 8021q: adding VLAN 0 to HW filter on device bond5
[   84.129310][ T7996] 8021q: adding VLAN 0 to HW filter on device bond5
[   84.132252][ T7996] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[   84.137597][ T7996] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   84.144710][ T7996] bond5: (slave wireguard0): making interface the new active one
[   84.147887][ T7996] wireguard0: entered promiscuous mode
[   84.151057][ T7996] bond5: (slave wireguard0): Enslaving as an active interface with an up link
[   84.157207][ T7996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.160235][ T7996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.167082][ T7996] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address
[   84.173915][ T7996] bond5: (slave wireguard1): Enslaving as a backup interface with an up link
[   84.178836][ T8000] netlink: 'syz.0.604': attribute type 1 has an invalid length.
[   84.561760][ T8016] netlink: 'syz.2.609': attribute type 10 has an invalid length.
[   84.605525][ T8021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.290374][ T8044] __nla_validate_parse: 18 callbacks suppressed
[   85.290387][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'.
[   85.316467][ T8046] netlink: 128 bytes leftover after parsing attributes in process `syz.0.619'.
[   85.320334][ T8046] netlink: 128 bytes leftover after parsing attributes in process `syz.0.619'.
[   85.325065][ T8046] netlink: 128 bytes leftover after parsing attributes in process `syz.0.619'.
[   85.329348][ T8046] netlink: 128 bytes leftover after parsing attributes in process `syz.0.619'.
[   85.332408][ T8046] netlink: 128 bytes leftover after parsing attributes in process `syz.0.619'.
[   85.336572][ T8046] netlink: 128 bytes leftover after parsing attributes in process `syz.0.619'.
[   85.339981][ T8046] netlink: 128 bytes leftover after parsing attributes in process `syz.0.619'.
[   85.343404][ T8046] netlink: 128 bytes leftover after parsing attributes in process `syz.0.619'.
[   85.346527][ T8046] netlink: 128 bytes leftover after parsing attributes in process `syz.0.619'.
[   85.356354][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.359157][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.416323][ T8019] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   85.622307][ T8070] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   85.704801][ T8079] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   85.726298][ T8079] bond5: left promiscuous mode
[   85.728232][ T8079] wireguard0: left promiscuous mode
[   85.736458][   T47] lo speed is unknown, defaulting to 1000
[   85.736505][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[   85.738715][   T47] syz0: Port: 1 Link DOWN
[   85.747479][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[   85.757038][   T47] lo speed is unknown, defaulting to 1000
[   85.758130][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[   85.768810][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[   85.831268][ T8083] netlink: 'syz.2.631': attribute type 1 has an invalid length.
[   85.858423][ T8083] bond5: entered promiscuous mode
[   85.860843][ T8083] 8021q: adding VLAN 0 to HW filter on device bond5
[   86.250274][ T8099] netlink: 'syz.2.636': attribute type 15 has an invalid length.
[   86.397428][ T8114] netlink: 'syz.1.643': attribute type 1 has an invalid length.
[   86.411137][ T8114] bond5: (slave geneve2): making interface the new active one
[   86.414680][ T8114] bond5: (slave geneve2): Enslaving as an active interface with an up link
[   86.417911][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   86.421551][ T8114] 8021q: adding VLAN 0 to HW filter on device bond5
[   86.424595][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   86.427374][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   86.430809][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   86.532215][ T8125] lo speed is unknown, defaulting to 1000
[   86.696878][ T8131] lo speed is unknown, defaulting to 1000
[   87.571002][ T8180] openvswitch: netlink: Flow actions attr not present in new flow.
[   87.629952][ T8189] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   87.642779][ T8189] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[   87.666179][ T8191] openvswitch: netlink: Flow actions attr not present in new flow.
[   87.696009][ T8195] 8021q: adding VLAN 0 to HW filter on device bond6
[   88.123282][ T8230] netlink: 'syz.2.678': attribute type 1 has an invalid length.
[   88.138969][ T8230] 8021q: adding VLAN 0 to HW filter on device bond7
[   88.149570][ T8230] 8021q: adding VLAN 0 to HW filter on device bond7
[   88.152596][ T8230] bond7: (slave vcan1): The slave device specified does not support setting the MAC address
[   88.157378][ T8230] bond7: (slave vcan1): Error -95 calling set_mac_address
[   88.208112][ T8234] lo speed is unknown, defaulting to 1000
[   89.224480][ T8282] netlink: 'syz.0.694': attribute type 1 has an invalid length.
[   89.241342][ T8282] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   89.250596][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   89.255849][ T8282] 8021q: adding VLAN 0 to HW filter on device bond8
[   89.362844][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   89.440877][ T8319] syzkaller1: entered promiscuous mode
[   89.443473][ T8319] syzkaller1: entered allmulticast mode
[   89.713959][ T8331] 0: left allmulticast mode
[   89.715428][ T8331] hsr_slave_0: left allmulticast mode
[   89.717077][ T8331] hsr_slave_1: left allmulticast mode
[   89.737892][   T10] IPVS: starting estimator thread 0...
[   89.789781][ T8331] vlan4: left promiscuous mode
[   89.791314][ T8331] bond0: left promiscuous mode
[   89.796698][ T8331] gretap1: left promiscuous mode
[   89.798622][ T8331] vlan4: left allmulticast mode
[   89.800481][ T8331] bond0: left allmulticast mode
[   89.802113][ T8331] gretap1: left allmulticast mode
[   89.806297][ T8331] tipc: Resetting bearer <eth:syzkaller0>
[   89.808951][ T8331] syzkaller0: left promiscuous mode
[   89.810780][ T8331] syzkaller0: left allmulticast mode
[   89.817829][ T8331] gretap2: left promiscuous mode
[   89.819446][ T8331] gretap2: left allmulticast mode
[   89.822727][ T8336] IPVS: using max 92 ests per chain, 220800 per kthread
[   89.825502][ T8331] gretap3: left promiscuous mode
[   89.833340][ T8331] bond5: left promiscuous mode
[   89.843734][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.848982][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.852103][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.856068][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.858916][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.861813][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.865177][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   89.868145][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.151166][ T8346] geneve3: entered promiscuous mode
[   90.153710][ T8346] geneve3: entered allmulticast mode
[   90.156784][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 53029 - 0
[   90.173097][   T13] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 33071 - 0
[   90.176739][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 53029 - 0
[   90.180904][   T13] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 33071 - 0
[   90.186421][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 53029 - 0
[   90.190005][   T13] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 33071 - 0
[   90.193967][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 53029 - 0
[   90.197558][   T13] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 33071 - 0
[   90.240607][ T8349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   90.244339][ T8349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53029 - 0
[   90.247757][ T8349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 33071 - 0
[   90.296038][ T8349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   90.300065][ T8349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53029 - 0
[   90.304717][ T8349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 33071 - 0
[   90.366606][ T8349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   90.370807][ T8349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53029 - 0
[   90.377733][ T8349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 33071 - 0
[   90.403645][ T8355] __nla_validate_parse: 130 callbacks suppressed
[   90.403656][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.713'.
[   90.416949][ T8355] 8021q: adding VLAN 0 to HW filter on device bond9
[   90.424335][ T8349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   90.432732][ T8349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53029 - 0
[   90.437890][ T8349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 33071 - 0
[   90.445975][ T8363] netlink: 'syz.0.716': attribute type 10 has an invalid length.
[   90.455034][ T8364] rdma_op ffff8881229ae1f0 conn xmit_rdma 0000000000000000
[   90.490683][ T6805] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 33071 - 0
[   90.495125][ T6805] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 53029 - 0
[   90.497804][ T6805] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[   90.506189][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 33071 - 0
[   90.508786][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 53029 - 0
[   90.511441][   T13] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[   90.517544][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 33071 - 0
[   90.520248][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 53029 - 0
[   90.523153][   T13] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[   90.535681][ T6805] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 33071 - 0
[   90.539626][ T6805] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 53029 - 0
[   90.542692][ T6805] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[   90.582281][ T8367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.717'.
[   90.613197][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'.
[   90.680769][ T8377] lo speed is unknown, defaulting to 1000
[   90.703111][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   90.795793][ T8391] netlink: 168 bytes leftover after parsing attributes in process `syz.0.722'.
[   90.965938][ T8396] netlink: 428 bytes leftover after parsing attributes in process `syz.1.723'.
[   90.968926][ T8396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.723'.
[   91.034507][ T8402] syz_tun: entered allmulticast mode
[   91.090906][ T8403] syz_tun: left allmulticast mode
[   91.201668][ T8414] netlink: 'syz.1.728': attribute type 8 has an invalid length.
[   91.266082][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'.
[   91.272188][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'.
[   91.333568][ T8430] bridge0: port 1(veth0_to_team) entered blocking state
[   91.335695][ T8430] bridge0: port 1(veth0_to_team) entered disabled state
[   91.337977][ T8430] veth0_to_team: entered allmulticast mode
[   91.340378][ T8430] veth0_to_team: entered promiscuous mode
[   91.345286][ T8430] veth0_to_team: left allmulticast mode
[   91.347154][ T8430] veth0_to_team: left promiscuous mode
[   91.349166][ T8430] bridge0: port 1(veth0_to_team) entered disabled state
[   91.503156][ T8438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.561511][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'.
[   91.564808][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'.
[   91.567649][ T8446] netlink: 'syz.1.737': attribute type 15 has an invalid length.
[   91.585485][ T8437] tipc: Resetting bearer <eth:syzkaller0>
[   91.609215][ T8437] tipc: Disabling bearer <eth:syzkaller0>
[   91.636248][ T8445] syzkaller0: entered promiscuous mode
[   91.637962][ T8445] syzkaller0: entered allmulticast mode
[   91.657627][ T8454] netlink: 'syz.0.741': attribute type 1 has an invalid length.
[   91.689852][ T8460] netlink: 'syz.1.743': attribute type 4 has an invalid length.
[   91.871910][ T8487] veth1_to_bond: entered allmulticast mode
[   91.883733][ T8487] veth1_to_bond (unregistering): left allmulticast mode
[   92.171928][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.176766][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.182174][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.379884][ T8509] netlink: 'syz.0.756': attribute type 8 has an invalid length.
[   92.506623][ T8516] openvswitch: netlink: Flow key attr not present in new flow.
[   92.528210][ T8521] bridge0: entered promiscuous mode
[   92.530668][ T8521] bridge0: port 1(macvlan0) entered blocking state
[   92.533745][ T8521] bridge0: port 1(macvlan0) entered disabled state
[   92.536154][ T8521] macvlan0: entered allmulticast mode
[   92.537823][ T8521] bridge0: entered allmulticast mode
[   92.540341][ T8521] macvlan0: left allmulticast mode
[   92.541976][ T8521] bridge0: left allmulticast mode
[   92.545078][ T8521] bridge0: left promiscuous mode
[   92.560192][ T8523] dvmrp8: entered allmulticast mode
[   92.569810][ T8523] dvmrp8: left allmulticast mode
[   92.749579][ T8540] netlink: 'syz.2.763': attribute type 13 has an invalid length.
[   92.753400][ T8540] netlink: 'syz.2.763': attribute type 17 has an invalid length.
[   92.801033][ T8540] 8021q: adding VLAN 0 to HW filter on device team0
[   92.804444][ T8540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.860019][ T8552] syzkaller1: entered promiscuous mode
[   92.862186][ T8552] syzkaller1: entered allmulticast mode
[   92.982929][ T8557] netlink: 'syz.1.768': attribute type 12 has an invalid length.
[   93.398191][ T8576] geneve2: entered promiscuous mode
[   93.401727][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.405827][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.409374][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.413449][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.361788][ T8612] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   94.366942][ T8616] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   94.459784][ T8633] validate_nla: 2 callbacks suppressed
[   94.459794][ T8633] netlink: 'syz.2.790': attribute type 13 has an invalid length.
[   94.469572][ T8633] netlink: 'syz.2.790': attribute type 17 has an invalid length.
[   94.478265][ T8633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.511342][ T8637] netlink: 'syz.2.791': attribute type 1 has an invalid length.
[   94.554189][ T8638] syzkaller0: entered allmulticast mode
[   94.569230][ T8638] syzkaller0 (unregistering): left allmulticast mode
[   95.026074][ T8671] nft_compat: unsupported protocol 0
[   95.078520][ T8682] netlink: 'syz.1.806': attribute type 142 has an invalid length.
[   95.163397][ T8692] lo speed is unknown, defaulting to 1000
[   95.411060][ T8705] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   95.415977][ T8705] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   95.981143][ T8716] syzkaller1: entered promiscuous mode
[   95.990948][ T8716] syzkaller1: entered allmulticast mode
[   96.005331][ T8718] __nla_validate_parse: 30 callbacks suppressed
[   96.005348][ T8718] netlink: 128 bytes leftover after parsing attributes in process `syz.2.816'.
[   96.014768][  T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.020524][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'.
[   96.024240][  T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.072047][ T8719] netlink: 'syz.2.816': attribute type 10 has an invalid length.
[   96.077140][ T8719] team0: Device ipvlan1 failed to register rx_handler
[   96.237670][ T5240] Bluetooth: hci2: link tx timeout
[   96.238907][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.820'.
[   96.239948][ T5240] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   96.258495][ T8705] syz.1.811 (8705) used greatest stack depth: 19344 bytes left
[   96.377646][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[   96.387000][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[   96.390535][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[   96.403581][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[   96.426743][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.826'.
[   96.429947][ T8753] openvswitch: netlink: EtherType 0 is less than min 600
[   96.489331][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'.
[   96.517037][ T8759] lo speed is unknown, defaulting to 1000
[   96.590203][ T8764] netlink: 11382 bytes leftover after parsing attributes in process `syz.2.829'.
[   96.811107][ T8769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.830'.
[   97.250865][ T8778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.254814][ T8778] syzkaller0: entered promiscuous mode
[   97.257061][ T8778] syzkaller0: entered allmulticast mode
[   97.265100][ T8778] tipc: Resetting bearer <eth:syzkaller0>
[   97.268290][ T8777] tipc: Resetting bearer <eth:syzkaller0>
[   97.272133][ T8777] tipc: Disabling bearer <eth:syzkaller0>
[   97.400492][ T8784] pim6reg9: entered allmulticast mode
[   97.424454][ T8788] bond0: (slave gretap1): Releasing active interface
[   97.448028][ T8788] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[   97.547855][ T8807] netlink: 830 bytes leftover after parsing attributes in process `syz.2.841'.
[   97.643199][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'.
[   97.646939][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.843'.
[   97.744818][ T8828] netlink: 'syz.1.848': attribute type 4 has an invalid length.
[   97.758437][ T8829] netlink: 'syz.1.848': attribute type 4 has an invalid length.
[   97.803051][ T8837] tipc: Invalid UDP bearer configuration
[   97.803070][ T8837] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   97.860697][ T8844] bond5: (slave wireguard0): Releasing backup interface
[   97.872750][ T8844] bond5: (slave wireguard1): making interface the new active one
[   97.879998][ T8844] bond5: (slave wireguard1): Releasing backup interface
[   97.883660][ T8844] bond8: (slave ip6gretap1): Removing an active aggregator
[   97.886605][ T8844] bond8: (slave ip6gretap1): Releasing backup interface
[   97.904412][ T8844] IPv6: Can't replace route, no match found
[   98.160057][ T8876] lo speed is unknown, defaulting to 1000
[   98.196067][ T8880] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   98.292451][ T8882] netlink: 'syz.1.864': attribute type 9 has an invalid length.
[   98.303794][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   98.628572][ T8897] netlink: 'syz.1.869': attribute type 15 has an invalid length.
[   98.860092][ T8916] syzkaller0: entered promiscuous mode
[   98.861955][ T8916] syzkaller0: entered allmulticast mode
[   98.867122][ T8916] ip6_vti0: mtu less than device minimum
[   99.634886][ T8937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.637945][ T8934] syzkaller0: entered promiscuous mode
[   99.639877][ T8934] syzkaller0: entered allmulticast mode
[   99.647250][ T8934] tipc: Resetting bearer <eth:syzkaller0>
[   99.650379][ T8933] tipc: Resetting bearer <eth:syzkaller0>
[   99.657182][ T8933] tipc: Disabling bearer <eth:syzkaller0>
[   99.716248][ T8942] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   99.869499][ T8959] unsupported nlmsg_type 40
[   99.944930][ T8968] openvswitch: netlink: IP tunnel dst address not specified
[   99.955868][ T8970] ieee802154 phy0 wpan0: encryption failed: -22
[  101.033137][ T9001] __nla_validate_parse: 18 callbacks suppressed
[  101.033156][ T9001] netlink: 68 bytes leftover after parsing attributes in process `syz.1.896'.
[  101.126578][ T9007] lo speed is unknown, defaulting to 1000
[  101.283317][ T9029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.902'.
[  101.288132][ T9029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.902'.
[  101.290981][ T9029] netlink: 43 bytes leftover after parsing attributes in process `syz.2.902'.
[  101.302199][ T9029] netlink: 'syz.2.902': attribute type 6 has an invalid length.
[  101.306030][ T9029] netlink: 'syz.2.902': attribute type 5 has an invalid length.
[  101.309510][ T9029] netlink: 43 bytes leftover after parsing attributes in process `syz.2.902'.
[  101.317339][ T9031] sctp: [Deprecated]: syz.1.903 (pid 9031) Use of int in max_burst socket option deprecated.
[  101.317339][ T9031] Use struct sctp_assoc_value instead
[  101.340941][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'.
[  101.449679][ T9043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.908'.
[  101.455803][ T9044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.908'.
[  101.597437][ T9052] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.754191][ T9070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.915'.
[  101.757947][ T9070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.915'.
[  101.791798][ T9073] netlink: 'syz.0.916': attribute type 1 has an invalid length.
[  101.808352][ T9073] 8021q: adding VLAN 0 to HW filter on device bond12
[  101.819573][ T9073] 8021q: adding VLAN 0 to HW filter on device bond12
[  101.824556][ T9073] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  101.832709][ T9073] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  101.874275][ T9077] veth3: entered promiscuous mode
[  101.878483][ T9077] bond12: (slave veth3): Enslaving as an active interface with a down link
[  101.885377][ T9073] erspan0: entered allmulticast mode
[  101.889055][ T9073] bond12: (slave erspan0): making interface the new active one
[  101.892067][ T9073] bond12: (slave erspan0): Enslaving as an active interface with an up link
[  102.175668][ T9095] netlink: 'syz.2.923': attribute type 10 has an invalid length.
[  102.179498][ T9095] netlink: 'syz.2.923': attribute type 10 has an invalid length.
[  102.446802][ T9105] lo speed is unknown, defaulting to 1000
[  102.674337][ T9115] IPv6: NLM_F_CREATE should be specified when creating new route
[  102.826985][ T9123] netlink: 'syz.1.930': attribute type 1 has an invalid length.
[  102.862420][ T9126] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.865026][ T9126] syzkaller0: entered promiscuous mode
[  102.866847][ T9126] syzkaller0: entered allmulticast mode
[  102.871804][ T9123] 8021q: adding VLAN 0 to HW filter on device bond6
[  102.874679][ T9125] tipc: Resetting bearer <eth:syzkaller0>
[  102.877881][ T9125] tipc: Disabling bearer <eth:syzkaller0>
[  102.938524][ T9128] netlink: 'syz.1.932': attribute type 21 has an invalid length.
[  102.941077][ T9128] netlink: 'syz.1.932': attribute type 22 has an invalid length.
[  102.943985][ T9128] netlink: 'syz.1.932': attribute type 23 has an invalid length.
[  102.946535][ T9128] netlink: 'syz.1.932': attribute type 25 has an invalid length.
[  103.020016][ T9142] tipc: Invalid UDP bearer configuration
[  103.020035][ T9142] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  103.091801][ T9154] dvmrp8: entered allmulticast mode
[  103.096665][ T9153] dvmrp8: left allmulticast mode
[  103.122001][ T9152] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  103.219724][ T9168] gretap0: entered promiscuous mode
[  103.222165][ T9168] vlan5: entered promiscuous mode
[  103.295281][ T9175] openvswitch: netlink: Message has 20 unknown bytes.
[  103.302156][ T9175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.603474][ T9193] lo speed is unknown, defaulting to 1000
[  104.048567][ T9209] syzkaller1: entered promiscuous mode
[  104.050697][ T9209] syzkaller1: entered allmulticast mode
[  104.104328][ T9212] : entered promiscuous mode
[  104.197303][ T9219] batman_adv: batadv0: Adding interface: ip6gretap2
[  104.199476][ T9219] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.217231][ T9219] batman_adv: batadv0: Interface activated: ip6gretap2
[  104.438308][ T9251] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  104.567535][ T9268] tipc: Enabled bearer <eth:team0>, priority 10
[  104.667049][ T9277] lo speed is unknown, defaulting to 1000
[  105.005722][ T9291] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  105.495862][ T9308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.498339][ T9308] IPv6: NLM_F_CREATE should be set when creating new route
[  105.648273][ T9312] lo speed is unknown, defaulting to 1000
[  105.689323][ T9313] syzkaller0: entered promiscuous mode
[  105.691547][ T9313] syzkaller0: entered allmulticast mode
[  105.980870][ T9325] erspan0: left allmulticast mode
[  105.994679][ T9325] 8021q: adding VLAN 0 to HW filter on device team0
[  105.999803][ T9325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.009065][ T5899] lo speed is unknown, defaulting to 1000
[  106.011785][ T5899] s: Port: 1 Link ACTIVE
[  106.017812][ T5899] lo speed is unknown, defaulting to 1000
[  106.180414][ T9334] __nla_validate_parse: 67 callbacks suppressed
[  106.180426][ T9334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.990'.
[  106.185527][ T9334] openvswitch: netlink: Flow key attr not present in new flow.
[  106.317741][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'.
[  106.321267][ T9339] Unsupported xt match
[  106.321279][ T9339] unable to load match
[  106.690226][ T9350] netlink: 277 bytes leftover after parsing attributes in process `syz.0.994'.
[  106.852631][ T9357] validate_nla: 6 callbacks suppressed
[  106.852649][ T9357] netlink: 'syz.2.997': attribute type 64 has an invalid length.
[  106.889924][ T9363] bridge0: port 1(wlan0) entered blocking state
[  106.893651][ T9363] bridge0: port 1(wlan0) entered disabled state
[  106.896344][ T9363] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  106.899967][ T9363] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  106.946977][   T12] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  107.004432][ T9372] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  107.128753][ T9374] lo speed is unknown, defaulting to 1000
[  107.152015][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'.
[  107.184369][ T9388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1005'.
[  107.205567][ T9386] netlink: 'syz.0.1003': attribute type 2 has an invalid length.
[  107.205610][ T9385] netlink: 'syz.0.1003': attribute type 2 has an invalid length.
[  107.208382][ T9386] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1003'.
[  107.211113][ T9385] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1003'.
[  107.251949][ T9375] lo speed is unknown, defaulting to 1000
[  107.312228][ T9398] bond0: default FDB implementation only supports local addresses
[  107.559653][ T9405] team0: Port device sit4 added
[  107.831683][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'.
[  107.835436][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'.
[  107.838994][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'.
[  107.846392][ T9417] netlink: 'syz.2.1012': attribute type 1 has an invalid length.
[  108.128838][ T9425] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  108.218477][ T9449] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  108.386185][ T9472] netlink: 'syz.1.1026': attribute type 1 has an invalid length.
[  108.409718][ T9472] bond7: entered promiscuous mode
[  108.411701][ T9472] 8021q: adding VLAN 0 to HW filter on device bond7
[  108.420779][ T9472] 8021q: adding VLAN 0 to HW filter on device bond7
[  108.424823][ T9472] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  108.428103][ T9472] bond7: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  108.437111][ T9472] bond7: (slave wireguard1): making interface the new active one
[  108.439952][ T9472] wireguard1: entered promiscuous mode
[  108.444176][ T9472] bond7: (slave wireguard1): Enslaving as an active interface with an up link
[  108.514620][ T9498] netlink: 'syz.2.1034': attribute type 1 has an invalid length.
[  108.557470][ T9498] 8021q: adding VLAN 0 to HW filter on device bond8
[  108.565754][ T9500] bond8: (slave geneve4): making interface the new active one
[  108.569416][ T9500] bond8: (slave geneve4): Enslaving as an active interface with an up link
[  108.573607][ T9500] syz.2.1034 (9500) used greatest stack depth: 18216 bytes left
[  108.782736][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  108.788392][ T9517] netlink: 'syz.2.1036': attribute type 16 has an invalid length.
[  108.791439][ T9517] netlink: 'syz.2.1036': attribute type 17 has an invalid length.
[  108.829633][ T9517] tipc: Resetting bearer <eth:team0>
[  108.846728][ T9517] tipc: Resetting bearer <eth:syzkaller0>
[  108.858529][ T9517] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  108.871084][ T5861] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.876820][ T5861] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0
[  108.879882][ T5861] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.882791][ T9517] IPv6: NLM_F_REPLACE set, but no existing node found!
[  108.884795][ T5861] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0
[  108.888911][ T5861] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.892387][ T5861] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0
[  108.905608][ T5861] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.909599][ T5861] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0
[  109.337943][ T9536] : renamed from bond_slave_0
[  109.486752][ T9544] openvswitch: netlink: Message has 24 unknown bytes.
[  109.489459][ T9544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.495382][ T9544] netlink: 'syz.0.1046': attribute type 2 has an invalid length.
[  109.667029][ T9566] pim6reg: entered allmulticast mode
[  109.670454][ T9566] pim6reg: left allmulticast mode
[  109.717008][ T9568] syzkaller0: entered promiscuous mode
[  109.719217][ T9568] syzkaller0: entered allmulticast mode
[  110.019936][ T9596] netlink: zone id is out of range
[  110.022427][ T9596] netlink: zone id is out of range
[  110.024623][ T9596] netlink: zone id is out of range
[  110.026489][ T9596] netlink: zone id is out of range
[  110.028357][ T9596] netlink: zone id is out of range
[  110.030114][ T9596] netlink: zone id is out of range
[  110.031889][ T9596] netlink: zone id is out of range
[  110.035319][ T9596] netlink: zone id is out of range
[  110.180926][ T9625] 8021q: adding VLAN 0 to HW filter on device bond13
[  110.436213][ T9629] pim6reg: entered allmulticast mode
[  110.438737][ T9629] pim6reg: left allmulticast mode
[  110.447031][ T9631] lo speed is unknown, defaulting to 1000
[  110.500610][ T9630] lo speed is unknown, defaulting to 1000
[  110.657326][ T9637] syzkaller1: entered promiscuous mode
[  110.662450][ T9637] syzkaller1: entered allmulticast mode
[  110.702676][    C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  110.771884][ T9640] netlink: 'syz.1.1073': attribute type 7 has an invalid length.
[  110.850087][ T9646] tipc: Cannot configure node identity twice
[  110.873576][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  110.924509][ T9652] veth0: entered promiscuous mode
[  110.928234][ T9652] veth0 (unregistering): left promiscuous mode
[  111.044378][ T9660] 8021q: adding VLAN 0 to HW filter on device bond15
[  111.048216][ T9660] bond14: (slave bond15): making interface the new active one
[  111.050902][ T9660] bond14: (slave bond15): Enslaving as an active interface with an up link
[  111.057114][ T9660] bond14: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  111.061104][ T9660] bond14: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  111.211273][ T9673] __nla_validate_parse: 25 callbacks suppressed
[  111.211285][ T9673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1086'.
[  111.260204][ T9682] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1089'.
[  111.294087][ T9686] 8021q: adding VLAN 0 to HW filter on device bond16
[  111.304015][ T9686] veth1: entered promiscuous mode
[  111.307287][ T9686] bond16: (slave veth1): Enslaving as an active interface with an up link
[  111.339788][ T9689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.342972][ T9689] syzkaller0: entered promiscuous mode
[  111.344922][ T9689] syzkaller0: entered allmulticast mode
[  111.351126][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'.
[  111.356221][ T9689] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1091'.
[  111.361794][ T9689] tipc: Resetting bearer <eth:syzkaller0>
[  111.365250][ T9688] tipc: Resetting bearer <eth:syzkaller0>
[  111.368351][ T9688] tipc: Disabling bearer <eth:syzkaller0>
[  111.382999][ T9691] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1092'.
[  111.509969][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'.
[  111.517002][ T9699] batman_adv: batadv0: Adding interface: ipvlan3
[  111.519128][ T9699] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.532117][ T9699] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  111.686774][ T9709] : entered promiscuous mode
[  111.758906][ T9716] lo speed is unknown, defaulting to 1000
[  111.873133][ T9727] lo speed is unknown, defaulting to 1000
[  112.145606][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1105'.
[  112.388401][ T9767] validate_nla: 4 callbacks suppressed
[  112.388419][ T9767] netlink: 'syz.0.1111': attribute type 1 has an invalid length.
[  112.457496][ T9775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1113'.
[  112.689111][ T9790] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1119'.
[  112.694383][ T9788] lo speed is unknown, defaulting to 1000
[  112.831993][ T9796] pimreg: entered allmulticast mode
[  112.847139][ T9798] pimreg: left allmulticast mode
[  112.915161][ T9802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.918453][ T9802] syzkaller0: entered promiscuous mode
[  112.920830][ T9802] syzkaller0: entered allmulticast mode
[  112.930344][ T9802] tipc: Resetting bearer <eth:syzkaller0>
[  112.933847][ T9801] tipc: Resetting bearer <eth:syzkaller0>
[  112.939862][ T9801] tipc: Disabling bearer <eth:syzkaller0>
[  112.950980][ T9806] netlink: 16174 bytes leftover after parsing attributes in process `syz.1.1124'.
[  113.064419][ T9814] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.071055][ T9814] syzkaller0: entered promiscuous mode
[  113.083233][ T9814] syzkaller0: entered allmulticast mode
[  113.090765][ T9813] tipc: Resetting bearer <eth:syzkaller0>
[  113.096756][ T9813] tipc: Disabling bearer <eth:syzkaller0>
[  113.229191][ T9826] syzkaller0: entered promiscuous mode
[  113.231414][ T9826] syzkaller0: entered allmulticast mode
[  113.243852][ T9826] vlan3: entered allmulticast mode
[  113.609166][ T9839] lo speed is unknown, defaulting to 1000
[  114.191479][ T9849] syzkaller1: entered promiscuous mode
[  114.195377][ T9849] syzkaller1: entered allmulticast mode
[  114.224608][ T9867] netlink: 'syz.1.1142': attribute type 4 has an invalid length.
[  114.228987][ T9867] netlink: 'syz.1.1142': attribute type 4 has an invalid length.
[  114.278666][ T9871] netlink: 'syz.0.1144': attribute type 4 has an invalid length.
[  114.295766][ T9874] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  114.299355][ T9874] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  114.354996][ T9887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.581910][ T9902] netlink: 'syz.0.1152': attribute type 1 has an invalid length.
[  114.620098][ T9904] gretap2: entered promiscuous mode
[  114.622321][ T9904] gretap2: entered allmulticast mode
[  114.674718][ T9909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.677975][ T9908] syzkaller0: entered promiscuous mode
[  114.679916][ T9908] syzkaller0: entered allmulticast mode
[  114.703846][ T9907] tipc: Resetting bearer <eth:syzkaller0>
[  114.708999][ T9907] tipc: Disabling bearer <eth:syzkaller0>
[  114.939941][ T9923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  114.996108][ T9932] netlink: 'syz.0.1160': attribute type 1 has an invalid length.
[  115.057881][ T9939] syzkaller1: entered promiscuous mode
[  115.059915][ T9939] syzkaller1: entered allmulticast mode
[  115.116782][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  115.118023][ T9948] pimreg: entered allmulticast mode
[  115.119180][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  115.125803][    T9] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[  115.131403][ T9947] macvlan1: entered promiscuous mode
[  115.134303][    T9] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  115.139382][ T9947] macvlan1: left promiscuous mode
[  115.146781][ T9951] sctp: [Deprecated]: syz.0.1165 (pid 9951) Use of struct sctp_assoc_value in delayed_ack socket option.
[  115.146781][ T9951] Use struct sctp_sack_info instead
[  115.255497][ T9955] netlink: 'syz.1.1167': attribute type 4 has an invalid length.
[  115.259436][ T9955] : renamed from bond0
[  115.337618][ T9973] netlink: 'syz.1.1172': attribute type 1 has an invalid length.
[  115.354707][ T9973] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.682959][T10004] tap0: tun_chr_ioctl cmd 1074812118
[  115.684966][T10004] tap0: tun_chr_ioctl cmd 35108
[  115.932108][T10022] netlink: 'syz.2.1184': attribute type 4 has an invalid length.
[  116.273783][T10035] __nla_validate_parse: 25 callbacks suppressed
[  116.273800][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1188'.
[  116.286494][T10037] netlink: 'syz.0.1189': attribute type 1 has an invalid length.
[  116.299725][T10037] 8021q: adding VLAN 0 to HW filter on device bond18
[  116.315485][T10037] netlink: 'syz.0.1189': attribute type 11 has an invalid length.
[  116.430774][T10044] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  116.766104][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  116.770824][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  116.777249][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  116.780546][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  116.784670][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  116.787843][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  116.791011][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  116.796151][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  116.800316][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  116.806205][T10062] netlink: 'syz.0.1194': attribute type 11 has an invalid length.
[  116.809042][T10062] netlink: 'syz.0.1194': attribute type 11 has an invalid length.
[  116.812229][T10062] netlink: 'syz.0.1194': attribute type 11 has an invalid length.
[  116.814864][T10062] netlink: 'syz.0.1194': attribute type 11 has an invalid length.
[  116.817423][T10062] netlink: 'syz.0.1194': attribute type 11 has an invalid length.
[  116.820209][T10062] netlink: 'syz.0.1194': attribute type 11 has an invalid length.
[  116.822822][T10062] netlink: 'syz.0.1194': attribute type 11 has an invalid length.
[  116.826686][T10062] netlink: 'syz.0.1194': attribute type 11 has an invalid length.
[  116.829837][T10062] netlink: 'syz.0.1194': attribute type 11 has an invalid length.
[  116.867653][T10082] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
Connection to localhost closed by remote host.
[  117.494204][ T9949] ==================================================================
[  117.496974][ T9949] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  117.499649][ T9949] Read of size 8 at addr ffff8881121580a0 by task khidpd_16bf5505/9949
[  117.503227][ T9949] 
[  117.504473][ T9949] CPU: 0 UID: 0 PID: 9949 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  117.504485][ T9949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.504491][ T9949] Call Trace:
[  117.504508][ T9949]  <TASK>
[  117.504513][ T9949]  dump_stack_lvl+0x189/0x250
[  117.504527][ T9949]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.504536][ T9949]  ? lock_release+0x4b/0x3e0
[  117.504548][ T9949]  ? __virt_addr_valid+0x4a5/0x5c0
[  117.504564][ T9949]  print_report+0xca/0x240
[  117.504571][ T9949]  ? __mutex_lock+0x801/0x1350
[  117.504578][ T9949]  kasan_report+0x118/0x150
[  117.504589][ T9949]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  117.504599][ T9949]  ? __mutex_lock+0x801/0x1350
[  117.504607][ T9949]  __mutex_lock+0x801/0x1350
[  117.504614][ T9949]  ? __mutex_lock+0x5bb/0x1350
[  117.504621][ T9949]  ? l2cap_unregister_user+0x6a/0x1b0
[  117.504632][ T9949]  ? __pfx___mutex_lock+0x10/0x10
[  117.504639][ T9949]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  117.504650][ T9949]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  117.504660][ T9949]  l2cap_unregister_user+0x6a/0x1b0
[  117.504671][ T9949]  hidp_session_thread+0x3c9/0x410
[  117.504681][ T9949]  ? __pfx_hidp_session_thread+0x10/0x10
[  117.504690][ T9949]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  117.504699][ T9949]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  117.504710][ T9949]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  117.504719][ T9949]  ? __kthread_parkme+0x7b/0x200
[  117.504727][ T9949]  ? __kthread_parkme+0x1a1/0x200
[  117.504736][ T9949]  kthread+0x711/0x8a0
[  117.504745][ T9949]  ? __pfx_hidp_session_thread+0x10/0x10
[  117.504754][ T9949]  ? __pfx_kthread+0x10/0x10
[  117.504762][ T9949]  ? rcu_is_watching+0x15/0xb0
[  117.504770][ T9949]  ? __pfx_kthread+0x10/0x10
[  117.504778][ T9949]  ret_from_fork+0x3fc/0x770
[  117.504787][ T9949]  ? __pfx_ret_from_fork+0x10/0x10
[  117.504795][ T9949]  ? __switch_to_asm+0x39/0x70
[  117.504804][ T9949]  ? __switch_to_asm+0x33/0x70
[  117.504814][ T9949]  ? __pfx_kthread+0x10/0x10
[  117.504822][ T9949]  ret_from_fork_asm+0x1a/0x30
[  117.504835][ T9949]  </TASK>
[  117.504838][ T9949] 
[  117.577786][ T9949] Allocated by task 5855:
[  117.579468][ T9949]  kasan_save_track+0x3e/0x80
[  117.581278][ T9949]  __kasan_kmalloc+0x93/0xb0
[  117.583085][ T9949]  __kmalloc_noprof+0x27a/0x4f0
[  117.584992][ T9949]  hci_alloc_dev_priv+0x28/0x2060
[  117.586909][ T9949]  vhci_create_device+0x120/0x6e0
[  117.588816][ T9949]  vhci_write+0x3ce/0x4a0
[  117.590430][ T9949]  vfs_write+0x5c9/0xb30
[  117.592040][ T9949]  ksys_write+0x145/0x250
[  117.593671][ T9949]  do_syscall_64+0xfa/0x3b0
[  117.595435][ T9949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.597658][ T9949] 
[  117.598396][ T9949] Freed by task 5855:
[  117.599780][ T9949]  kasan_save_track+0x3e/0x80
[  117.601279][ T9949]  kasan_save_free_info+0x46/0x50
[  117.602891][ T9949]  __kasan_slab_free+0x5b/0x80
[  117.604525][ T9949]  kfree+0x18e/0x440
[  117.606117][ T9949]  bt_host_release+0x82/0x90
[  117.607965][ T9949]  device_release+0x9c/0x1c0
[  117.609774][ T9949]  kobject_put+0x22b/0x480
[  117.611190][ T9949]  vhci_release+0x88/0xd0
[  117.612635][ T9949]  __fput+0x44c/0xa70
[  117.614023][ T9949]  task_work_run+0x1d4/0x260
[  117.615632][ T9949]  do_exit+0x6b5/0x2300
[  117.617146][ T9949]  do_group_exit+0x21c/0x2d0
[  117.619008][ T9949]  __x64_sys_exit_group+0x3f/0x40
[  117.621112][ T9949]  x64_sys_call+0x21f7/0x2200
[  117.623097][ T9949]  do_syscall_64+0xfa/0x3b0
[  117.624957][ T9949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.627327][ T9949] 
[  117.628291][ T9949] Last potentially related work creation:
[  117.630686][ T9949]  kasan_save_stack+0x3e/0x60
[  117.632576][ T9949]  kasan_record_aux_stack+0xbd/0xd0
[  117.634680][ T9949]  insert_work+0x3d/0x330
[  117.636443][ T9949]  __queue_work+0xcd2/0xfb0
[  117.638275][ T9949]  queue_work_on+0x181/0x270
[  117.640089][ T9949]  l2cap_start_connection+0x20e/0x310
[  117.641877][ T9949]  l2cap_chan_connect+0xa7f/0xe30
[  117.643698][ T9949]  l2cap_sock_connect+0x5c8/0x7a0
[  117.645278][ T9949]  __sys_connect+0x316/0x440
[  117.647014][ T9949]  __x64_sys_connect+0x7a/0x90
[  117.648700][ T9949]  do_syscall_64+0xfa/0x3b0
[  117.650175][ T9949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.652330][ T9949] 
[  117.653284][ T9949] Second to last potentially related work creation:
[  117.655826][ T9949]  kasan_save_stack+0x3e/0x60
[  117.657741][ T9949]  kasan_record_aux_stack+0xbd/0xd0
[  117.659796][ T9949]  insert_work+0x3d/0x330
[  117.661370][ T9949]  __queue_work+0xbaf/0xfb0
[  117.663025][ T9949]  queue_work_on+0x181/0x270
[  117.664883][ T9949]  process_scheduled_works+0xae1/0x17b0
[  117.667101][ T9949]  worker_thread+0x8a0/0xda0
[  117.668955][ T9949]  kthread+0x711/0x8a0
[  117.670602][ T9949]  ret_from_fork+0x3fc/0x770
[  117.672464][ T9949]  ret_from_fork_asm+0x1a/0x30
[  117.674125][ T9949] 
[  117.674869][ T9949] The buggy address belongs to the object at ffff888112158000
[  117.674869][ T9949]  which belongs to the cache kmalloc-8k of size 8192
[  117.679401][ T9949] The buggy address is located 160 bytes inside of
[  117.679401][ T9949]  freed 8192-byte region [ffff888112158000, ffff88811215a000)
[  117.684758][ T9949] 
[  117.685709][ T9949] The buggy address belongs to the physical page:
[  117.688209][ T9949] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112158
[  117.691734][ T9949] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  117.694933][ T9949] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  117.698041][ T9949] page_type: f5(slab)
[  117.699618][ T9949] raw: 057ff00000000040 ffff88801a442280 0000000000000000 dead000000000001
[  117.702880][ T9949] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  117.706233][ T9949] head: 057ff00000000040 ffff88801a442280 0000000000000000 dead000000000001
[  117.709276][ T9949] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  117.712744][ T9949] head: 057ff00000000003 ffffea0004485601 00000000ffffffff 00000000ffffffff
[  117.716143][ T9949] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  117.719554][ T9949] page dumped because: kasan: bad access detected
[  117.722088][ T9949] page_owner tracks the page as allocated
[  117.724346][ T9949] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5594, tgid 5594 (dhcpcd-run-hook), ts 28009931992, free_ts 26069076918
[  117.731656][ T9949]  post_alloc_hook+0x240/0x2a0
[  117.733598][ T9949]  get_page_from_freelist+0x21e4/0x22c0
[  117.735835][ T9949]  __alloc_frozen_pages_noprof+0x181/0x370
[  117.737835][ T9949]  alloc_pages_mpol+0x232/0x4a0
[  117.739497][ T9949]  allocate_slab+0x8a/0x370
[  117.740932][ T9949]  ___slab_alloc+0xbeb/0x1410
[  117.742564][ T9949]  __kmalloc_cache_noprof+0x296/0x3d0
[  117.744462][ T9949]  tomoyo_init_log+0x111f/0x1f70
[  117.746426][ T9949]  tomoyo_supervisor+0x340/0x1480
[  117.748391][ T9949]  tomoyo_env_perm+0x149/0x1e0
[  117.750248][ T9949]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  117.752200][ T9949]  tomoyo_bprm_check_security+0x11c/0x180
[  117.753989][ T9949]  security_bprm_check+0x89/0x270
[  117.755592][ T9949]  bprm_execve+0x8ee/0x1450
[  117.757038][ T9949]  do_execveat_common+0x510/0x6a0
[  117.758641][ T9949]  __x64_sys_execve+0x94/0xb0
[  117.760136][ T9949] page last free pid 5300 tgid 5300 stack trace:
[  117.762146][ T9949]  __free_frozen_pages+0xbc4/0xd30
[  117.763788][ T9949]  __put_partials+0x156/0x1a0
[  117.765269][ T9949]  put_cpu_partial+0x17c/0x250
[  117.766814][ T9949]  __slab_free+0x2d5/0x3c0
[  117.768210][ T9949]  qlist_free_all+0x97/0x140
[  117.769687][ T9949]  kasan_quarantine_reduce+0x148/0x160
[  117.771401][ T9949]  __kasan_slab_alloc+0x22/0x80
[  117.772834][ T9949]  __kmalloc_cache_noprof+0x1be/0x3d0
[  117.774516][ T9949]  kernfs_fop_open+0x397/0xca0
[  117.776019][ T9949]  do_dentry_open+0x953/0x13f0
[  117.777839][ T9949]  vfs_open+0x3b/0x340
[  117.779444][ T9949]  path_openat+0x2ee5/0x3830
[  117.781321][ T9949]  do_filp_open+0x1fa/0x410
[  117.783152][ T9949]  do_sys_openat2+0x121/0x1c0
[  117.785006][ T9949]  __x64_sys_openat+0x138/0x170
[  117.786959][ T9949]  do_syscall_64+0xfa/0x3b0
[  117.788738][ T9949] 
[  117.789713][ T9949] Memory state around the buggy address:
[  117.791957][ T9949]  ffff888112157f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  117.795140][ T9949]  ffff888112158000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  117.798307][ T9949] >ffff888112158080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  117.801337][ T9949]                                ^
[  117.803115][ T9949]  ffff888112158100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  117.806348][ T9949]  ffff888112158180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  117.809615][ T9949] ==================================================================
[  117.813008][ T9949] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  117.815633][ T9949] CPU: 0 UID: 0 PID: 9949 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  117.818782][ T9949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.822083][ T9949] Call Trace:
[  117.823202][ T9949]  <TASK>
[  117.824237][ T9949]  dump_stack_lvl+0x99/0x250
[  117.826079][ T9949]  ? __asan_memcpy+0x40/0x70
[  117.827625][ T9949]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.829212][ T9949]  ? __pfx__printk+0x10/0x10
[  117.830839][ T9949]  vpanic+0x281/0x750
[  117.832317][ T9949]  ? __pfx_vpanic+0x10/0x10
[  117.833798][ T9949]  ? rcu_is_watching+0x15/0xb0
[  117.835340][ T9949]  panic+0xb9/0xc0
[  117.836611][ T9949]  ? __pfx_panic+0x10/0x10
[  117.838340][ T9949]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  117.840687][ T9949]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  117.842966][ T9949]  ? __mutex_lock+0x801/0x1350
[  117.844551][ T9949]  check_panic_on_warn+0x89/0xb0
[  117.846191][ T9949]  ? __mutex_lock+0x801/0x1350
[  117.847842][ T9949]  end_report+0x78/0x160
[  117.849365][ T9949]  kasan_report+0x129/0x150
[  117.850999][ T9949]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  117.853085][ T9949]  ? __mutex_lock+0x801/0x1350
[  117.854764][ T9949]  __mutex_lock+0x801/0x1350
[  117.856346][ T9949]  ? __mutex_lock+0x5bb/0x1350
[  117.858125][ T9949]  ? l2cap_unregister_user+0x6a/0x1b0
[  117.860214][ T9949]  ? __pfx___mutex_lock+0x10/0x10
[  117.861841][ T9949]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  117.864100][ T9949]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  117.866390][ T9949]  l2cap_unregister_user+0x6a/0x1b0
[  117.868363][ T9949]  hidp_session_thread+0x3c9/0x410
[  117.870386][ T9949]  ? __pfx_hidp_session_thread+0x10/0x10
[  117.872565][ T9949]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  117.874935][ T9949]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  117.877416][ T9949]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  117.879876][ T9949]  ? __kthread_parkme+0x7b/0x200
[  117.881840][ T9949]  ? __kthread_parkme+0x1a1/0x200
[  117.883850][ T9949]  kthread+0x711/0x8a0
[  117.885520][ T9949]  ? __pfx_hidp_session_thread+0x10/0x10
[  117.887739][ T9949]  ? __pfx_kthread+0x10/0x10
[  117.889590][ T9949]  ? rcu_is_watching+0x15/0xb0
[  117.891466][ T9949]  ? __pfx_kthread+0x10/0x10
[  117.893269][ T9949]  ret_from_fork+0x3fc/0x770
[  117.895126][ T9949]  ? __pfx_ret_from_fork+0x10/0x10
[  117.897159][ T9949]  ? __switch_to_asm+0x39/0x70
[  117.899012][ T9949]  ? __switch_to_asm+0x33/0x70
[  117.900919][ T9949]  ? __pfx_kthread+0x10/0x10
[  117.902817][ T9949]  ret_from_fork_asm+0x1a/0x30
[  117.904613][ T9949]  </TASK>
[  117.906196][ T9949] Kernel Offset: disabled
[  117.907650][ T9949] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:22:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000068 RBX=0000000000000068 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003bbf370
R8 =ffff88801eda8237 R9 =1ffff11003db5046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb909 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9ef2f93fc8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=72a1330000000000 0000950005000020 XMM03=0b18d5fbb6e4b271 ca7b43b0fd04e644
XMM04=ec55d69f99ff2e35 28455ea4589766b3 XMM05=b792729f466dc9b9 f728717df44cbd72
XMM06=88f256dba702f66e 21c8350c25a827ca XMM07=e317a78d27cd450b 18d5fbb6e4b271ca
XMM08=0000000000000000 00007f7270a12ee7 XMM09=0000000000000000 00007f7270a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000800001 RBX=ffffffff8e0005ac RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8e000250 RBP=0000000000000190 RSP=ffffc900030bf260
R8 =ffffffff8e000257 R9 =1ffffffff1c0004a R10=dffffc0000000000 R11=fffffbfff1c0004b
R12=000000000009715f R13=1ffff11026cc47e2 R14=ffffffff8e000250 R15=ffff88813663aa88
RIP=ffffffff819b8064 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc23b3d56c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9ef2ee7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000006f6c
XMM02=00007fc23d387498 00007fc23d387470 XMM03=00007fc23d3874a8 00007fc23d3874a0
XMM04=00007fc23deed100 00007fc23d387460 XMM05=00007fc23d387478 00007fc23d3874c0
XMM06=00007fc23d3874b8 00007fc23d3874b0 XMM07=00007fc23d3874a8 00007fc23d3874a0
XMM08=0000000000000000 00007fc23d212ee7 XMM09=0000000000000000 00007fc23d212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
