last executing test programs:

1.483493663s ago: executing program 1 (id=1059):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000001240)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0f56b170df77c0784f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, r2, 0x91081000)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="9c", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000800, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881)
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8e", 0x3e)
accept4(r3, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
unshare(0x20040600)
socket$l2tp6(0xa, 0x2, 0x73)

921.311145ms ago: executing program 2 (id=1064):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r2=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4}, 0x50)
unshare(0x62040200)

739.788801ms ago: executing program 2 (id=1065):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async)
connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) (async)
write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r7, 0x89e0, &(0x7f0000000340)) (async)
ioctl$SIOCGETMIFCNT_IN6(r7, 0x89e0, &(0x7f0000000340))
bind$can_raw(r6, &(0x7f0000000000), 0x10) (async)
bind$can_raw(r6, &(0x7f0000000000), 0x10)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x52100400}, 0xc, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="8c1100001200080026bd7000fcdbdf2506060bbf4e214e2400000080", @ANYRES32=0x0, @ANYBLOB="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"], 0x118c}, 0x1, 0x0, 0x0, 0x24004050}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=""/214, 0x10a, 0xd6, 0x0, 0xc}, 0x28)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}]}, {0x4, 0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x64}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="000083a6", @ANYRES8=r8, @ANYRES32=r3, @ANYBLOB="2d000e"], 0x80}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="000083a6", @ANYRES8=r8, @ANYRES32=r3, @ANYBLOB="2d000e"], 0x80}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="001cde00", @ANYRES16=r9, @ANYBLOB="100028bd7000fddbdf255500000008000100600000000c0099000100000017000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26)
sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040)

670.300749ms ago: executing program 2 (id=1068):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={0x30, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x20}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x4798c000)
ioctl$FIOCLEX(r2, 0x5451)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x5)
write$tun(r4, &(0x7f0000001640)=ANY=[@ANYBLOB="6d6ff169000811fffe880000000000000000000000000001fc0100000000007800"/48], 0x30)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080))
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={0x30, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x20}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x4798c000) (async)
ioctl$FIOCLEX(r2, 0x5451) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x5) (async)
write$tun(r4, &(0x7f0000001640)=ANY=[@ANYBLOB="6d6ff169000811fffe880000000000000000000000000001fc0100000000007800"/48], 0x30) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async)
getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) (async)

669.378883ms ago: executing program 0 (id=1069):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000000c0)="8ddb4a27d5", 0x5}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async)
r2 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) (async)
sendto$inet(r3, &(0x7f00000000c0)="2d98244684f6cb8f5c66bdb53831361b86ba1c35ff299ec98fc9afacb0932b296dec1873736e4378af8528af335961f6b371d6ebbf00f449a9c965f45f9e19bc3e700ca2331c2e9c8482de5e", 0x4c, 0x4010, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="5715114e59cc8f3d4395da477f57273916cbb8b340f34f4c39abbab4fc4b4f71c234786af7ad15200532bdd9bde369e4e5a1f465187afb9164010c271827da3c50a88aa6f776992e89d2c5d6681c5f6656ba816e303dbbd6546775b1e3fa20562d1d22735dbd2d3edd", 0x69)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000540)={'veth0_vlan\x00', 0xfff})

532.102557ms ago: executing program 2 (id=1070):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6(0xa, 0x80001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[], 0x310)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, {0xa, 0x4e22, 0x1, @mcast1, 0x400}}}, 0x3a)

531.787904ms ago: executing program 1 (id=1071):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xf1, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, <r1=>0xffffffffffffffff}, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="060000000010"})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x38, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}, @alu={0x4, 0x0, 0x6, 0x1, 0x5, 0x100, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xdd}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa8}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x7, 0xa8, &(0x7f00000004c0)=""/168, 0x40f00, 0x38, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x8, 0xa, 0x80}, 0x10, 0x2c945, r7, 0x7, 0x0, &(0x7f0000000680)=[{0x5, 0x4, 0x1, 0xa}, {0x5, 0x1, 0xa, 0x1}, {0x2, 0x2, 0x5, 0x6}, {0x2, 0x4, 0xa, 0x7}, {0x5, 0x5, 0x10, 0x4}, {0x2, 0x5, 0x8, 0xc}, {0x1, 0x1, 0x3, 0xc}], 0x10, 0x33}, 0x94)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000080000000000000f0500000000000000000000030000000002000000010000000000000000000000000000030000000004000000040000000000000000003000000000002e"], &(0x7f0000000040)=""/249, 0x5e, 0xf9, 0x3}, 0x28)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r10, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)

481.386357ms ago: executing program 0 (id=1072):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x24, 0x301, 0x0, 0x80, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
unshare(0x22020400)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000100)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@RTM_NEWMDB={0xb8, 0x54, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x3, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x3, {@ip4=@private=0xa010101, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x1, {@ip4=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x4, {@ip4=@dev={0xac, 0x14, 0x14, 0x2c}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@ip4=@rand_addr=0x64010100}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc090}, 0x20000000)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x800)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e)

480.944279ms ago: executing program 2 (id=1073):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0xe}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002700)=@o_path={&(0x7f00000026c0)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000027c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000002740), &(0x7f0000002780)='%-5lx  \x00'}, 0x20)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002800)={0x1b, 0x0, 0x0, 0xf653, 0x0, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x11, 0x29, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x3ff}, [@exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x488}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x400}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}]}, &(0x7f0000001380)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x84, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0x2, 0x5, 0x3ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r3, 0xffffffffffffffff, r4], &(0x7f00000028c0)=[{0x1, 0x4, 0x10, 0xb}, {0x3, 0x1, 0xe, 0x8}], 0x10, 0x9}, 0x94)
ioctl$SIOCSIFMTU(r2, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8e", 0x3e)
accept4(r1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c830, 0xffffffffffffffff, 0x0)
unshare(0x20000400)
r5 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x80088a02, &(0x7f0000000000))
unshare(0x20040600)
socket$l2tp6(0xa, 0x2, 0x73)
shutdown(r0, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)

400.913393ms ago: executing program 1 (id=1074):
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x66000080)
unshare(0x100)
r0 = socket$netlink(0x10, 0x3, 0xa)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x6, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team_slave_1\x00'})
accept4$netrom(r2, &(0x7f0000000180)={{0x3, @null}, [@null, @bcast, @remote, @null, @default, @bcast, @netrom, @bcast]}, &(0x7f0000000200)=0x48, 0x80000)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x885)
socket$can_raw(0x1d, 0x3, 0x1)

400.452087ms ago: executing program 0 (id=1075):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7}, {0xb, 0xa}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
unshare(0x6a040000)
r1 = socket$netlink(0x10, 0x3, 0x8)
syz_genetlink_get_family_id$ethtool(0x0, r1)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$netlink(0x10, 0x3, 0x13)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
listen(r4, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd70c1a4d0ef082697769b5462e7150b11cea332b25eef178603000000df250200000808000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="02002dbd7000fedbdf2507000000300001801400020074756e6c3000"/38, @ANYRES32=r3, @ANYBLOB="0800030001000e59000000000000000c", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x8044005}, 0x4084)

271.089899ms ago: executing program 0 (id=1076):
syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @random="4ef1adb02bd2", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6403a6", 0x0, 0x32, 0x0, @empty, @mcast2}}}}, 0x0)
unshare(0x0)

71.905311ms ago: executing program 0 (id=1077):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
close(r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x3, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xf4, 0x2], 0x1, [0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0}) (async)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})

69.152816ms ago: executing program 1 (id=1078):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r2, 0x403, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff})

68.714468ms ago: executing program 0 (id=1079):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080)
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, 0x0)

67.317674ms ago: executing program 2 (id=1080):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async)
pipe(&(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000000)="fc0000", 0x3) (async)
splice(r1, 0x0, r0, 0x0, 0x1100002000f336, 0x5)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='afs_call\x00', r3}, 0x18) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
close(0x3) (async)
unshare(0x62040200) (async)
socketpair(0x8, 0x6, 0x401, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

886.613µs ago: executing program 1 (id=1081):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006200)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000000000000000000000000003000000000000000000000001fe0000000000000a"], 0xb8}}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000780)={'macsec0\x00', 0x4})

0s ago: executing program 1 (id=1082):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r2, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000100)={0x0, 0x989680})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r4 = socket(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8300, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400})
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0xc00})
ioctl$sock_ifreq(r4, 0x8930, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_addrs=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket(0x11, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000300)=0xe9, 0x4)
sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f018000e0dc14"], 0xdd12}, {&(0x7f0000002b00)=ANY=[@ANYBLOB="100000fedbdf25000000000000000200"], 0x10}], 0x2}, 0x20040051)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r9, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001f40)=""/180, 0xba}, {&(0x7f00000028c0)=""/238, 0xee}, {&(0x7f00000006c0)=""/44, 0x2c}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x84}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000740)=""/251, 0xfb}], 0x7}, 0x4}], 0x4, 0x4022, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000002000)=ANY=[@ANYBLOB="3004000089d084fc7382cfd520f862030374f5e39b4560a09300738b1610c44bd9b1569446f9c37affe36cc8947a8c449dcfab6fc4e8c0d1bccdde6b9c3d5659e1af288867a37c0c03777a42428dc20a558410cf22", @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf250e0000003000018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="14000200697036677265746170300000000000000800030001000000580001801400020076657468315f766c616e00000000000014000200766c616e30000000000000000000000008000300030000001400020076657468305f746f5f7465616d000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x430}, 0x1, 0x0, 0x0, 0x44004800}, 0x1000)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r10, 0x40047459, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:6712' (ED25519) to the list of known hosts.
syzkaller login: [   49.931968][ T5840] cgroup: Unknown subsys name 'net'
[   50.040367][ T5840] cgroup: Unknown subsys name 'cpuset'
[   50.044246][ T5840] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.402465][ T5840] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.688687][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.691928][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.694669][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.698491][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.702165][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.717946][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.721435][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.724420][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.728833][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.732179][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.773666][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.776756][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.785277][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.792978][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.796121][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.948485][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   55.973571][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   56.072347][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.075323][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.078657][ T5855] bridge_slave_0: entered allmulticast mode
[   56.081877][ T5855] bridge_slave_0: entered promiscuous mode
[   56.117076][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.122827][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.125895][ T5855] bridge_slave_1: entered allmulticast mode
[   56.130383][ T5855] bridge_slave_1: entered promiscuous mode
[   56.143757][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.146844][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.151902][ T5851] bridge_slave_0: entered allmulticast mode
[   56.155794][ T5851] bridge_slave_0: entered promiscuous mode
[   56.160666][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.163715][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.166767][ T5851] bridge_slave_1: entered allmulticast mode
[   56.171119][ T5851] bridge_slave_1: entered promiscuous mode
[   56.199527][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.214868][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   56.221118][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.226061][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.246422][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.291490][ T5855] team0: Port device team_slave_0 added
[   56.307312][ T5851] team0: Port device team_slave_0 added
[   56.317525][ T5855] team0: Port device team_slave_1 added
[   56.320781][ T5851] team0: Port device team_slave_1 added
[   56.373795][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.376121][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.387958][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.393417][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.396422][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.399541][ T5858] bridge_slave_0: entered allmulticast mode
[   56.402767][ T5858] bridge_slave_0: entered promiscuous mode
[   56.406310][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.410271][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.413164][ T5858] bridge_slave_1: entered allmulticast mode
[   56.416655][ T5858] bridge_slave_1: entered promiscuous mode
[   56.431518][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.434213][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.444286][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.449772][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.452423][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.462754][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.469923][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.472945][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.484106][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.525770][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.545868][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.593765][ T5858] team0: Port device team_slave_0 added
[   56.609754][ T5851] hsr_slave_0: entered promiscuous mode
[   56.613046][ T5851] hsr_slave_1: entered promiscuous mode
[   56.618123][ T5858] team0: Port device team_slave_1 added
[   56.623399][ T5855] hsr_slave_0: entered promiscuous mode
[   56.626162][ T5855] hsr_slave_1: entered promiscuous mode
[   56.629596][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   56.631584][ T5855] Cannot create hsr debugfs directory
[   56.723251][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.726241][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.737044][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.743094][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.745411][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.755347][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.848925][ T5858] hsr_slave_0: entered promiscuous mode
[   56.851661][ T5858] hsr_slave_1: entered promiscuous mode
[   56.853791][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   56.856118][ T5858] Cannot create hsr debugfs directory
[   56.980814][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.988806][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.006049][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.023531][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.050568][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.073243][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.080143][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.099298][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.122263][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.127102][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.134244][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.140957][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.236224][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.266325][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   57.276941][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.282065][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.288883][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.291588][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.314962][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   57.323952][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   57.329797][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.332395][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.351888][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.354388][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.358648][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.361021][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.364312][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.366670][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.383661][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.391342][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.393976][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.538144][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.556860][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.595510][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.620751][ T5855] veth0_vlan: entered promiscuous mode
[   57.641013][ T5851] veth0_vlan: entered promiscuous mode
[   57.644017][ T5855] veth1_vlan: entered promiscuous mode
[   57.661147][ T5858] veth0_vlan: entered promiscuous mode
[   57.667201][ T5851] veth1_vlan: entered promiscuous mode
[   57.675797][ T5858] veth1_vlan: entered promiscuous mode
[   57.704995][ T5855] veth0_macvtap: entered promiscuous mode
[   57.720832][ T5855] veth1_macvtap: entered promiscuous mode
[   57.724411][ T5851] veth0_macvtap: entered promiscuous mode
[   57.728406][ T5854] Bluetooth: hci0: command tx timeout
[   57.733534][ T5851] veth1_macvtap: entered promiscuous mode
[   57.749559][ T5858] veth0_macvtap: entered promiscuous mode
[   57.761581][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.766218][ T5858] veth1_macvtap: entered promiscuous mode
[   57.772695][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.780611][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.793223][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.801459][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.809105][ T5854] Bluetooth: hci2: command tx timeout
[   57.810344][   T54] Bluetooth: hci1: command tx timeout
[   57.815134][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.819699][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.830893][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.840941][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.849473][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.861062][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.880170][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.884799][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.905872][ T5879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.910417][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.913852][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.917263][ T5879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.928335][ T5879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.936169][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.940289][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.985901][ T1389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.992667][ T1389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.020157][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.022992][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.038162][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.041140][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.056521][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.067402][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.069006][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.102064][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.108406][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.195976][ T5921] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.204494][ T5922] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.328023][ T5922] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.436556][ T5943] syzkaller1: entered promiscuous mode
[   58.440165][ T5943] syzkaller1: entered allmulticast mode
[   58.986636][ T5948] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6'.
[   59.000440][ T5950] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET)
[   59.115817][ T5952] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7'.
[   59.258955][ T5958] bridge_slave_0: left allmulticast mode
[   59.261326][ T5958] bridge_slave_0: left promiscuous mode
[   59.264527][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.271458][ T5958] bridge_slave_1: left allmulticast mode
[   59.273340][ T5958] bridge_slave_1: left promiscuous mode
[   59.275249][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.282344][ T5958] bond0: (slave bond_slave_0): Releasing backup interface
[   59.287000][ T5958] bond0: (slave bond_slave_1): Releasing backup interface
[   59.300569][ T5958] team0: Port device team_slave_0 removed
[   59.311461][ T5958] team0: Port device team_slave_1 removed
[   59.318165][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.320651][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.328975][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.331449][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.523336][ T5974] Zero length message leads to an empty skb
[   59.697445][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17'.
[   59.725969][ T5981] batman_adv: batadv0: Adding interface: dummy0
[   59.733320][ T5981] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.749257][ T5981] batman_adv: batadv0: Interface activated: dummy0
[   59.757358][ T5981] batadv0: mtu less than device minimum
[   59.771286][ T5981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.776995][ T5981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.781575][ T5981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.785959][ T5981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.790792][ T5981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.795522][ T5981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.799775][ T5981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.803742][ T5981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.808036][ T5981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   59.812537][   T54] Bluetooth: hci0: command tx timeout
[   59.852617][ T5988] batman_adv: batadv0: Adding interface: ip6gretap1
[   59.855500][ T5988] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.867039][ T5988] batman_adv: batadv0: Interface activated: ip6gretap1
[   59.888176][   T54] Bluetooth: hci2: command tx timeout
[   59.890750][   T54] Bluetooth: hci1: command tx timeout
[   59.917010][ T5987] tipc: Started in network mode
[   59.919404][ T5987] tipc: Node identity 2e77f76bed72, cluster identity 4711
[   59.922836][ T5987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.926449][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'.
[   59.937179][ T5987] syzkaller0: entered promiscuous mode
[   59.942379][ T5987] syzkaller0: entered allmulticast mode
[   60.025670][ T5989] tipc: Resetting bearer <eth:syzkaller0>
[   60.036176][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'.
[   60.044534][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'.
[   60.073004][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'.
[   60.076929][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'.
[   60.096082][ T6001] !: renamed from dummy0 (while UP)
[   60.153215][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'.
[   60.159860][ T5986] tipc: Resetting bearer <eth:syzkaller0>
[   60.172201][ T5986] tipc: Disabling bearer <eth:syzkaller0>
[   60.277966][ T6012] bridge_slave_0: left allmulticast mode
[   60.280430][ T6012] bridge_slave_0: left promiscuous mode
[   60.283057][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.294359][ T6012] bridge_slave_1: left allmulticast mode
[   60.297087][ T6012] bridge_slave_1: left promiscuous mode
[   60.300324][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.306401][ T6012] bond0: (slave bond_slave_0): Releasing backup interface
[   60.315239][ T6012] bond0: (slave bond_slave_1): Releasing backup interface
[   60.329630][ T6012] team0: Port device team_slave_0 removed
[   60.336463][ T6012] team0: Port device team_slave_1 removed
[   60.340919][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.343498][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.347403][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.350660][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.367285][    C1] Illegal XDP return value 16128 on prog  (id 15) dev lo, expect packet loss!
[   61.888173][ T5854] Bluetooth: hci0: command tx timeout
[   61.968262][ T5854] Bluetooth: hci1: command tx timeout
[   61.968937][ T5237] Bluetooth: hci2: command tx timeout
[   62.119628][ T6143] batman_adv: batadv0: Interface deactivated: 0!
[   62.121902][ T6143] batman_adv: batadv0: Removing interface: 0!
[   62.126771][ T6143] bridge_slave_0: left allmulticast mode
[   62.134029][ T6143] bridge_slave_0: left promiscuous mode
[   62.136795][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.144594][ T6143] bridge_slave_1: left allmulticast mode
[   62.146545][ T6143] bridge_slave_1: left promiscuous mode
[   62.151075][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.158698][ T6143] bond0: (slave bond_slave_0): Releasing backup interface
[   62.163590][ T6143] bond0: (slave bond_slave_1): Releasing backup interface
[   62.173397][ T6143] team0: Port device team_slave_0 removed
[   62.182192][ T6143] team0: Port device team_slave_1 removed
[   62.185055][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.188899][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.193986][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.196740][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.209176][ T6143] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   62.212228][ T6143] batman_adv: batadv0: Removing interface: ip6gretap1
[   62.481319][ T6151] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002
[   62.650956][ T6170] netlink: 'syz.2.44': attribute type 4 has an invalid length.
[   62.738695][ T6179] netlink: 'syz.1.46': attribute type 13 has an invalid length.
[   62.782507][ T6184] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.844415][ T6192] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.860272][ T6192] warning: `syz.0.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.963919][ T6204] netlink: 'syz.1.56': attribute type 4 has an invalid length.
[   62.987875][ T6203] sctp: [Deprecated]: syz.0.54 (pid 6203) Use of int in maxseg socket option.
[   62.987875][ T6203] Use struct sctp_assoc_value instead
[   63.593932][ T6250] __nla_validate_parse: 11 callbacks suppressed
[   63.593946][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[   63.600918][ T6250] netlink: 7 bytes leftover after parsing attributes in process `syz.0.69'.
[   63.834292][ T6274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.75'.
[   63.970040][ T5237] Bluetooth: hci0: command tx timeout
[   64.050220][ T5237] Bluetooth: hci1: command tx timeout
[   64.050357][ T6139] Bluetooth: hci2: command 0x0419 tx timeout
[   64.287202][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'.
[   64.325855][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'.
[   64.451246][ T6336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.87'.
[   65.263960][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'.
[   65.375749][ T6382] netlink: 52 bytes leftover after parsing attributes in process `syz.1.102'.
[   65.596282][ T6404] syzkaller0: entered promiscuous mode
[   65.599127][ T6407] net_ratelimit: 36 callbacks suppressed
[   65.599136][ T6407] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   65.606302][ T6404] syzkaller0: entered allmulticast mode
[   65.824016][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'.
[   65.841027][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'.
[   65.872237][ T6436] ieee802154 phy0 wpan0: encryption failed: -22
[   65.973402][ T6427] netlink: 'syz.1.119': attribute type 1 has an invalid length.
[   66.130398][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[   66.175648][ T6458] sctp: [Deprecated]: syz.2.126 (pid 6458) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.175648][ T6458] Use struct sctp_sack_info instead
[   66.296006][ T6464] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   66.423704][ T6479] 8021q: VLANs not supported on ip6tnl0
[   66.472110][ T6482] netlink: 'syz.2.131': attribute type 3 has an invalid length.
[   66.477874][ T6482] netlink: 'syz.2.131': attribute type 1 has an invalid length.
[   66.481448][ T6482] NCSI netlink: No device for ifindex 0
[   66.496176][ T6484] openvswitch: netlink: Message has 8 unknown bytes.
[   66.751228][ T6502] batman_adv: batadv0: Adding interface: dummy0
[   66.754105][ T6502] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.764420][ T6502] batman_adv: batadv0: Interface activated: dummy0
[   66.780552][ T6502] batadv0: mtu less than device minimum
[   66.783042][ T6502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   66.787014][ T6502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   66.791190][ T6502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   66.795105][ T6502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   66.798257][ T6509] netlink: 'syz.1.139': attribute type 15 has an invalid length.
[   66.799566][ T6502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   66.806429][ T6502] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   66.831747][ T6502] batman_adv: batadv0: Adding interface: ip6gretap1
[   66.834462][ T6502] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.845703][ T6502] batman_adv: batadv0: Interface activated: ip6gretap1
[   67.095706][ T6541] netlink: 'syz.2.149': attribute type 3 has an invalid length.
[   67.131224][ T6546] batman_adv: batadv0: Adding interface: dummy0
[   67.133363][ T6546] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.144453][ T6546] batman_adv: batadv0: Interface activated: dummy0
[   67.201714][ T6553] netlink: 'syz.0.152': attribute type 2 has an invalid length.
[   67.212053][ T6553] netlink: 'syz.0.152': attribute type 2 has an invalid length.
[   67.402915][ T6561] syz.1.153 (6561) used greatest stack depth: 19224 bytes left
[   67.471513][  T794] IPVS: starting estimator thread 0...
[   67.536416][ T6584] batman_adv: batadv0: Interface deactivated: dummy0
[   67.540393][ T6584] batman_adv: batadv0: Removing interface: dummy0
[   67.551015][ T6584] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   67.553568][ T6584] batman_adv: batadv0: Removing interface: ip6gretap1
[   67.565189][ T6582] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   67.573475][ T6582] Bluetooth: MGMT ver 1.23
[   67.587719][ T6580] IPVS: using max 78 ests per chain, 187200 per kthread
[   67.672463][ T6598] netlink: 'syz.0.169': attribute type 26 has an invalid length.
[   67.726556][ T6606] tipc: Enabling of bearer <dp:s> rejected, media not registered
[   67.766774][ T6608] batman_adv: batadv0: Interface deactivated: dummy0
[   67.773797][ T6608] batman_adv: batadv0: Removing interface: dummy0
[   68.725113][ T6664] __nla_validate_parse: 22 callbacks suppressed
[   68.725128][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.189'.
[   68.734356][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'.
[   68.907111][ T6674] netlink: 'syz.1.192': attribute type 10 has an invalid length.
[   68.919533][ T6674] netlink: 152 bytes leftover after parsing attributes in process `syz.1.192'.
[   68.961385][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'.
[   68.975389][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'.
[   69.069968][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.195'.
[   69.074872][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'.
[   69.647886][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   69.647897][ T6139] Bluetooth: hci2: command 0x0419 tx timeout
[   69.667450][ T6715] netlink: 'syz.2.202': attribute type 1 has an invalid length.
[   69.774273][ T6718] netlink: 'syz.0.204': attribute type 1 has an invalid length.
[   69.811629][ T6718] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.823167][ T6718] ipvlan2: entered allmulticast mode
[   69.825554][ T6718] bond1: entered allmulticast mode
[   69.840482][ T6719] ipvlan3: entered allmulticast mode
[   69.855996][ T6719] bond1: (slave gretap1): making interface the new active one
[   69.860186][ T6719] gretap1: entered allmulticast mode
[   69.863670][ T6719] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   70.444329][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'.
[   70.464534][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'.
[   70.836716][ T6763] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   70.841598][ T6763] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   70.845468][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'.
[   71.017769][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[   71.022614][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[   71.387042][ T6843] batman_adv: batadv0: Adding interface: ip6gretap1
[   71.390208][ T6843] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.403242][ T6843] batman_adv: batadv0: Interface activated: ip6gretap1
[   72.279203][ T6901] sctp: [Deprecated]: syz.1.245 (pid 6901) Use of int in maxseg socket option.
[   72.279203][ T6901] Use struct sctp_assoc_value instead
[   72.287408][ T6903] net_ratelimit: 59 callbacks suppressed
[   72.287420][ T6903] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   72.299575][ T6903] openvswitch: netlink: Duplicate key (type 0).
[   72.343737][ T6903] bond1: (slave gretap1): Releasing active interface
[   72.346651][ T6903] gretap1: left allmulticast mode
[   72.353881][ T6903] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   72.356754][ T6903] batman_adv: batadv0: Removing interface: ip6gretap1
[   72.370324][ T6906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.395858][ T6907] syzkaller1: entered promiscuous mode
[   72.401414][ T6907] syzkaller1: entered allmulticast mode
[   72.796017][ T6935] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.828727][ T6937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.922054][ T6944] gtp0: entered promiscuous mode
[   73.045110][ T6948] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   73.859038][ T6993] syzkaller1: entered promiscuous mode
[   73.864856][ T6993] syzkaller1: entered allmulticast mode
[   74.047848][ T7002] veth0_to_hsr: mtu less than device minimum
[   74.229651][ T7016] __nla_validate_parse: 6 callbacks suppressed
[   74.229665][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[   74.280829][ T7022] IPVS: set_ctl: invalid protocol: 115 172.20.20.33:20002
[   74.445414][ T7032] netlink: 48 bytes leftover after parsing attributes in process `syz.0.283'.
[   74.506013][ T7032] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   74.512031][ T5880] IPVS: starting estimator thread 0...
[   74.599631][ T7036] IPVS: using max 50 ests per chain, 120000 per kthread
[   74.644911][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'.
[   74.774249][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'.
[   74.797630][ T7051] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.880558][ T7058] netlink: 68 bytes leftover after parsing attributes in process `syz.0.290'.
[   75.072764][ T7071] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   75.275620][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.296'.
[   75.501715][ T7092] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[   76.293108][ T7123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.356947][ T7135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.309'.
[   76.520247][ T7141] netlink: 'syz.1.311': attribute type 3 has an invalid length.
[   76.523467][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   77.066271][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.318'.
[   77.240428][ T7185] tipc: Started in network mode
[   77.242073][ T7185] tipc: Node identity 3a8ca3a45f46, cluster identity 4711
[   77.244453][ T7185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.247209][ T7185] syzkaller0: entered promiscuous mode
[   77.254732][ T7185] syzkaller0: entered allmulticast mode
[   77.261054][ T7185] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   77.272529][ T7185] tipc: Resetting bearer <eth:syzkaller0>
[   77.280016][ T7184] tipc: Resetting bearer <eth:syzkaller0>
[   77.288443][ T7184] tipc: Disabling bearer <eth:syzkaller0>
[   77.482980][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'.
[   77.699976][ T7200] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   77.854645][ T7207] netlink: 'syz.0.329': attribute type 4 has an invalid length.
[   78.472157][ T7238] netlink: 'syz.1.337': attribute type 10 has an invalid length.
[   78.478128][ T7238] team0: Port device 0! added
[   78.480595][ T7238] netlink: 'syz.1.337': attribute type 10 has an invalid length.
[   78.489302][ T7238] team0: Port device 0! removed
[   78.495184][ T7238] bond0: (slave 0!): Enslaving as an active interface with an up link
[   79.349512][ T7261] netlink: 'syz.1.345': attribute type 3 has an invalid length.
[   79.439783][ T7273] __nla_validate_parse: 3 callbacks suppressed
[   79.439793][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'.
[   79.504388][ T7278] sock: sock_timestamping_bind_phc: sock not bind to device
[   79.980777][ T7317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'.
[   81.004658][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'.
[   81.029832][ T7342] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   81.051076][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'.
[   81.240184][ T7350] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   81.272935][   T24] cfg80211: failed to load regulatory.db
[   81.403956][ T7370] lo speed is unknown, defaulting to 1000
[   81.410628][ T7370] lo speed is unknown, defaulting to 1000
[   81.413517][ T7370] lo speed is unknown, defaulting to 1000
[   81.530561][ T7370] infiniband syz0: set active
[   81.532891][   T24] lo speed is unknown, defaulting to 1000
[   81.535420][ T7370] infiniband syz0: added lo
[   81.567020][ T7379] lo speed is unknown, defaulting to 1000
[   81.573332][ T7370] RDS/IB: syz0: added
[   81.575141][ T7370] smc: adding ib device syz0 with port count 1
[   81.579648][ T7370] smc:    ib device syz0 port 1 has pnetid 
[   81.583960][   T24] lo speed is unknown, defaulting to 1000
[   81.673906][ T7383] sctp: [Deprecated]: syz.0.376 (pid 7383) Use of int in maxseg socket option.
[   81.673906][ T7383] Use struct sctp_assoc_value instead
[   81.737316][ T7370] lo speed is unknown, defaulting to 1000
[   81.789903][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'.
[   81.821995][ T7387] IPVS: Error joining to the multicast group
[   81.883056][ T7394] dummy0: entered promiscuous mode
[   81.912373][ T7370] lo speed is unknown, defaulting to 1000
[   81.945533][ T7396] netlink: 'syz.0.382': attribute type 10 has an invalid length.
[   81.950833][ T7396] team0: Port device dummy0 added
[   81.953415][ T7396] netlink: 'syz.0.382': attribute type 10 has an invalid length.
[   81.956230][ T7396] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   81.961047][ T7396] team0: Failed to send options change via netlink (err -105)
[   81.963503][ T7396] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   81.967381][ T7396] team0: Port device dummy0 removed
[   81.972240][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.383'.
[   82.029737][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   82.069299][ T7370] lo speed is unknown, defaulting to 1000
[   82.393230][ T7417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'.
[   82.393378][ T7418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'.
[   82.684484][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.391'.
[   83.013055][ T7446] netlink: 'syz.0.395': attribute type 4 has an invalid length.
[   83.032379][ T7446] vlan2: entered promiscuous mode
[   83.034164][ T7446] bridge0: entered promiscuous mode
[   83.036772][ T7446] bridge0: port 1(vlan2) entered blocking state
[   83.039491][ T7446] bridge0: port 1(vlan2) entered disabled state
[   83.041676][ T7446] vlan2: entered allmulticast mode
[   83.043368][ T7446] bridge0: entered allmulticast mode
[   83.046857][ T7446] vlan2: left allmulticast mode
[   83.049170][ T7446] bridge0: left allmulticast mode
[   83.185435][ T7459] lo speed is unknown, defaulting to 1000
[   83.461625][ T7478] bond0: (slave 0!): Releasing backup interface
[   83.475668][ T5899] lo speed is unknown, defaulting to 1000
[   83.513886][ T7477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.585984][ T7486] IPv6: NLM_F_REPLACE set, but no existing node found!
[   83.597212][ T7488] netlink: 'syz.1.407': attribute type 1 has an invalid length.
[   84.360900][ T7518] lo speed is unknown, defaulting to 1000
[   84.533889][ T7521] __nla_validate_parse: 4 callbacks suppressed
[   84.533898][ T7521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'.
[   84.546632][ T7521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.415'.
[   84.629516][ T7523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.416'.
[   84.759788][ T7527] lo speed is unknown, defaulting to 1000
[   84.821139][ T7536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.419'.
[   84.832308][ T7537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.419'.
[   84.846424][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'.
[   84.846495][ T7536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'.
[   84.993061][ T7541] lo speed is unknown, defaulting to 1000
[   85.183034][ T7553] lo speed is unknown, defaulting to 1000
[   85.289125][ T7566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.427'.
[   85.520251][ T7561] lo speed is unknown, defaulting to 1000
[   85.582699][ T7576] netlink: 64 bytes leftover after parsing attributes in process `syz.2.430'.
[   85.687320][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.432'.
[   85.847531][   T33] audit: type=1804 audit(1756237138.051:2): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.437" name="/newroot/146/cgroup.controllers" dev="tmpfs" ino=787 res=1 errno=0
[   85.875907][   T33] audit: type=1800 audit(1756237138.051:3): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.437" name="cgroup.controllers" dev="tmpfs" ino=787 res=0 errno=0
[   85.908115][ T7598] netlink: 'syz.1.436': attribute type 1 has an invalid length.
[   85.920217][ T7598] netlink: 'syz.1.436': attribute type 1 has an invalid length.
[   85.965833][ T7598] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.979853][ T7606] bond1: (slave geneve2): making interface the new active one
[   85.984992][ T7606] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   86.006801][ T7606] syz.1.436 (7606) used greatest stack depth: 19192 bytes left
[   86.244952][ T7623] lo speed is unknown, defaulting to 1000
[   86.347352][ T7631] bond1: (slave geneve2): Releasing active interface
[   86.655164][ T7648] lo speed is unknown, defaulting to 1000
[   87.063607][ T7659] lo speed is unknown, defaulting to 1000
[   87.097334][ T7663] tipc: Started in network mode
[   87.099561][ T7663] tipc: Node identity 4aa89db6ef47, cluster identity 4711
[   87.103838][ T7663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.117356][ T7663] syzkaller0: entered promiscuous mode
[   87.142873][ T7663] syzkaller0: entered allmulticast mode
[   87.279878][ T7658] tipc: Resetting bearer <eth:syzkaller0>
[   87.297408][ T7658] tipc: Disabling bearer <eth:syzkaller0>
[   87.490715][ T7690] syz_tun: entered allmulticast mode
[   87.596864][ T7687] syz_tun: left allmulticast mode
[   87.647042][ T7692] lo speed is unknown, defaulting to 1000
[   87.861904][ T7706] nbd: must specify a size in bytes for the device
[   87.880272][ T7703] lo speed is unknown, defaulting to 1000
[   88.416836][ T7731] bridge1: the hash_elasticity option has been deprecated and is always 16
[   88.420059][ T7731] bridge1: entered allmulticast mode
[   88.436824][ T7732] lo speed is unknown, defaulting to 1000
[   88.830515][ T7767] netlink: 'syz.1.483': attribute type 4 has an invalid length.
[   88.835332][ T7768] netlink: 'syz.1.483': attribute type 4 has an invalid length.
[   88.844213][ T5880] lo speed is unknown, defaulting to 1000
[   88.846154][ T5880] syz0: Port: 1 Link DOWN
[   88.849181][ T5880] lo speed is unknown, defaulting to 1000
[   88.852515][ T7767] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20000
[   88.876463][ T7772] lo speed is unknown, defaulting to 1000
[   89.164851][ T7787] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   89.203698][ T7789] lo speed is unknown, defaulting to 1000
[   89.567063][ T7795] lo speed is unknown, defaulting to 1000
[   89.715978][ T7797] __nla_validate_parse: 11 callbacks suppressed
[   89.715987][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'.
[   89.894541][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.492'.
[   89.959786][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.493'.
[   89.976704][ T7811] lo speed is unknown, defaulting to 1000
[   90.353250][ T7831] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   90.459932][ T7835] openvswitch: netlink: IP tunnel dst address not specified
[   90.996915][ T7838] lo speed is unknown, defaulting to 1000
[   91.118823][ T7841] netlink: 176 bytes leftover after parsing attributes in process `syz.2.500'.
[   91.271267][ T7840] lo speed is unknown, defaulting to 1000
[   91.403496][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'.
[   91.481251][ T7860] batadv_slave_1: entered promiscuous mode
[   91.483909][ T7859] batadv_slave_1: left promiscuous mode
[   91.522700][ T7864] Bluetooth: MGMT ver 1.23
[   91.623605][ T7871] lo speed is unknown, defaulting to 1000
[   91.684166][ T7875] netlink: 'syz.0.511': attribute type 1 has an invalid length.
[   91.762782][ T7877] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   91.766904][ T7877] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   91.794359][ T7875] gretap2: entered promiscuous mode
[   91.798887][ T7875] bond2: (slave gretap2): making interface the new active one
[   91.801800][ T7875] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   91.939166][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'.
[   91.942839][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'.
[   92.222732][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'.
[   92.294507][ T7896] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   92.355784][ T7897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.517'.
[   93.162893][ T7905] lo speed is unknown, defaulting to 1000
[   93.512951][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'.
[   94.768931][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.535'.
[   94.793829][ T7973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.793913][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'.
[   94.802664][ T5900] lo speed is unknown, defaulting to 1000
[   94.808354][ T5900] syz0: Port: 1 Link ACTIVE
[   94.809893][ T5900] lo speed is unknown, defaulting to 1000
[   94.946723][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'.
[   94.955904][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'.
[   94.974146][ T7997] bridge1: port 1(veth3) entered blocking state
[   94.976639][ T7997] bridge1: port 1(veth3) entered disabled state
[   94.980193][ T7997] veth3: entered allmulticast mode
[   94.984092][ T7997] veth3: entered promiscuous mode
[   94.999024][ T7997] bridge1: port 2(veth0_to_bond) entered blocking state
[   95.002118][ T7997] bridge1: port 2(veth0_to_bond) entered disabled state
[   95.005094][ T7997] veth0_to_bond: entered allmulticast mode
[   95.009185][ T7997] veth0_to_bond: entered promiscuous mode
[   95.021554][ T7997] vlan2: entered allmulticast mode
[   95.023784][ T7997] veth0_to_hsr: entered allmulticast mode
[   95.026466][ T7997] bridge1: port 3(vlan2) entered blocking state
[   95.030413][ T7997] bridge1: port 3(vlan2) entered disabled state
[   95.035431][ T7997] vlan2: entered promiscuous mode
[   95.041683][ T7997] veth0_to_hsr: entered promiscuous mode
[   95.057065][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'.
[   95.069394][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'.
[   95.090145][ T8010] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.546'.
[   95.194574][ T8014] netlink: 248 bytes leftover after parsing attributes in process `syz.1.547'.
[   95.329815][ T8018] lo speed is unknown, defaulting to 1000
[   95.757444][ T8027] Unsupported ieee802154 address type: 0
[   95.805986][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.552'.
[   95.815456][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.552'.
[   96.010685][ T8049] netlink: 'syz.2.559': attribute type 2 has an invalid length.
[   96.044074][ T8051] veth0_to_bond: left allmulticast mode
[   96.045951][ T8051] veth0_to_bond: left promiscuous mode
[   96.049382][ T8051] bridge1: port 2(veth0_to_bond) entered disabled state
[   96.062116][ T8051] veth3: left allmulticast mode
[   96.063779][ T8051] veth3: left promiscuous mode
[   96.065592][ T8051] bridge1: port 1(veth3) entered disabled state
[   96.083557][ T8051] vlan2: left promiscuous mode
[   96.085719][ T8051] veth0_to_hsr: left promiscuous mode
[   96.090358][ T8051] bridge1: port 3(vlan2) entered disabled state
[   96.114365][ T8051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.133574][ T8058] nbd: must specify an index to disconnect
[   96.174540][ T8062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.282467][ T8070] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   97.303784][ T8097] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   97.325683][ T8099] lo speed is unknown, defaulting to 1000
[   97.381721][ T8102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.403930][ T8102] netlink: 'syz.2.575': attribute type 1 has an invalid length.
[   97.565215][ T8111] lo speed is unknown, defaulting to 1000
[   97.608177][ T8112] netlink: 'syz.2.578': attribute type 21 has an invalid length.
[   98.013460][ T8129] lo speed is unknown, defaulting to 1000
[   99.127261][ T8180] lo speed is unknown, defaulting to 1000
[   99.389317][ T8192] openvswitch: netlink: Flow key attr not present in new flow.
[   99.916686][ T8231] lo speed is unknown, defaulting to 1000
[  100.140360][ T8246] __nla_validate_parse: 35 callbacks suppressed
[  100.140371][ T8246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.613'.
[  100.399363][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'.
[  100.562168][ T8263] rdma_rxe: rxe_newlink: failed to add lo
[  100.580677][ T8262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.894725][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.622'.
[  101.095592][ T8279] dummy0: left promiscuous mode
[  101.098548][ T8279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.163089][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'.
[  101.319879][ T8292] bond2: (slave gretap2): Releasing active interface
[  101.342391][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'.
[  101.425679][ T8296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.631'.
[  101.432350][ T8296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.631'.
[  101.440672][ T8296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.631'.
[  101.452083][ T8296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.631'.
[  101.650727][ T8313] lo speed is unknown, defaulting to 1000
[  101.696569][ T8320] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.636'.
[  101.912665][ T8329] lo speed is unknown, defaulting to 1000
[  102.364951][ T8350] lo speed is unknown, defaulting to 1000
[  102.530568][ T8354] lo speed is unknown, defaulting to 1000
[  102.634278][ T8361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.850952][ T8379] netlink: 'syz.2.656': attribute type 4 has an invalid length.
[  102.875520][ T8382] dummy0: mtu less than device minimum
[  103.021953][ T8394] sctp: [Deprecated]: syz.2.661 (pid 8394) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.021953][ T8394] Use struct sctp_sack_info instead
[  103.098460][ T8398] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  103.314436][ T8407] lo speed is unknown, defaulting to 1000
[  103.358582][ T8409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.361315][ T8409] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  103.363637][ T8409] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  103.367259][ T8409] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  103.371745][ T8409] tipc: Resetting bearer <eth:syzkaller0>
[  103.672362][ T8424] netlink: 'syz.0.668': attribute type 7 has an invalid length.
[  103.823474][ T8435] lo speed is unknown, defaulting to 1000
[  103.910727][ T8437] netlink: 'syz.1.672': attribute type 4 has an invalid length.
[  103.915617][ T5914] lo speed is unknown, defaulting to 1000
[  103.917508][ T5914] syz0: Port: 1 Link DOWN
[  103.922270][ T5914] lo speed is unknown, defaulting to 1000
[  104.140470][ T8457] veth1_macvtap: left promiscuous mode
[  104.142518][ T8457] macsec0: entered allmulticast mode
[  104.166953][ T8457] syzkaller1: entered promiscuous mode
[  104.171083][ T8457] syzkaller1: entered allmulticast mode
[  104.368255][   T51] tipc: Node number set to 3271948139
[  104.395075][ T8468] lo speed is unknown, defaulting to 1000
[  104.747654][ T8488] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  104.921461][ T8503] netlink: 'syz.1.691': attribute type 1 has an invalid length.
[  105.054153][ T8509] lo speed is unknown, defaulting to 1000
[  105.228984][ T8521] netlink: 'syz.1.694': attribute type 2 has an invalid length.
[  105.231480][ T8521] __nla_validate_parse: 19 callbacks suppressed
[  105.231487][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'.
[  105.336415][ T8517] lo speed is unknown, defaulting to 1000
[  105.821057][ T8527] veth0_vlan: mtu less than device minimum
[  106.038316][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'.
[  106.041772][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'.
[  106.051225][ T8542] lo speed is unknown, defaulting to 1000
[  106.232354][ T8558] lo speed is unknown, defaulting to 1000
[  106.586613][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.709'.
[  106.744260][ T8582] veth0_macvtap: left promiscuous mode
[  106.750738][ T8581] lo speed is unknown, defaulting to 1000
[  107.040250][ T8593] netlink: 'syz.0.715': attribute type 1 has an invalid length.
[  107.043598][ T8593] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  108.145753][ T8622] lo speed is unknown, defaulting to 1000
[  108.183309][ T8623] bridge_slave_0: default FDB implementation only supports local addresses
[  108.745721][ T8633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.727'.
[  108.884182][ T8637] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  108.889306][ T8638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.066066][ T8642] lo speed is unknown, defaulting to 1000
[  109.314344][ T8641] lo speed is unknown, defaulting to 1000
[  110.007346][ T8654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.733'.
[  110.020498][ T8655] netlink: 'syz.1.731': attribute type 5 has an invalid length.
[  110.235573][ T8668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.737'.
[  110.237428][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'.
[  110.253934][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'.
[  110.909928][ T8716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.916335][   T51] lo speed is unknown, defaulting to 1000
[  110.920973][   T51] syz0: Port: 1 Link ACTIVE
[  110.923341][   T51] lo speed is unknown, defaulting to 1000
[  110.927994][ T6139] Bluetooth: hci0: command tx timeout
[  110.952917][ T8720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'.
[  111.018903][ T8724] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  111.056752][ T8728] netlink: 'syz.2.755': attribute type 4 has an invalid length.
[  111.109081][ T8729] netlink: 'syz.1.752': attribute type 1 has an invalid length.
[  111.111934][ T8729] netlink: 'syz.1.752': attribute type 4 has an invalid length.
[  111.114760][ T8729] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.752'.
[  111.118755][ T8729] netlink: 'syz.1.752': attribute type 1 has an invalid length.
[  111.124573][ T8729] netlink: 'syz.1.752': attribute type 4 has an invalid length.
[  111.127064][ T8729] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.752'.
[  111.136619][ T8729] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  111.161747][ T8733] openvswitch: netlink: IPv4 tun info is not correct
[  111.204505][ T8736] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  111.337662][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'.
[  111.341845][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'.
[  111.345332][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'.
[  111.351235][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'.
[  111.355507][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'.
[  111.360414][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'.
[  111.424181][ T8749] netlink: 'syz.2.763': attribute type 1 has an invalid length.
[  111.477064][ T8751] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  111.635806][ T8760] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  111.734934][ T8771] delete_channel: no stack
[  111.906618][ T8791] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  111.937002][ T8789] vlan3: entered allmulticast mode
[  111.946985][ T8789] bridge0: entered allmulticast mode
[  111.950147][ T8789] bridge2: port 1(vlan3) entered blocking state
[  111.952854][ T8789] bridge2: port 1(vlan3) entered disabled state
[  111.957309][ T8789] vlan3: entered promiscuous mode
[  111.961831][ T8789] bridge0: entered promiscuous mode
[  111.972292][ T8789] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  112.360575][ T8808] lo speed is unknown, defaulting to 1000
[  112.667332][ T8818] lo speed is unknown, defaulting to 1000
[  112.838624][ T8828] lo speed is unknown, defaulting to 1000
[  113.153821][ T8842] lo speed is unknown, defaulting to 1000
[  113.679734][ T8860] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  113.693631][ T8860] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  114.461811][ T8892] lo speed is unknown, defaulting to 1000
[  129.426100][ T8898] netlink: 'syz.2.808': attribute type 39 has an invalid length.
[  129.498345][ T8908] netlink: 'syz.1.809': attribute type 64 has an invalid length.
[  130.378257][ T8921] __nla_validate_parse: 135 callbacks suppressed
[  130.378266][ T8921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.813'.
[  130.386459][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.813'.
[  130.509039][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'.
[  130.512085][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'.
[  130.575295][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'.
[  130.626788][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'.
[  130.747936][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.817'.
[  131.191489][ T8948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.819'.
[  131.331080][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'.
[  131.379590][ T8954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'.
[  131.422421][ T8956] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  131.441076][ T8956] lo speed is unknown, defaulting to 1000
[  131.633948][ T8959] lo speed is unknown, defaulting to 1000
[  131.822229][ T8965] netlink: 'syz.1.824': attribute type 13 has an invalid length.
[  131.824919][ T8965] netlink: 'syz.1.824': attribute type 17 has an invalid length.
[  131.916544][ T8965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.960818][ T8966] lo speed is unknown, defaulting to 1000
[  132.081896][ T8970] 8021q: VLANs not supported on tunl0
[  132.264485][ T8981] vlan3: left promiscuous mode
[  132.266264][ T8981] bridge0: left promiscuous mode
[  132.271830][ T8981] bridge2: port 1(vlan3) entered disabled state
[  132.357462][ T8983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  132.404704][ T8983] IPVS: persistence engine module ip_vs_pe_ not found
[  132.450913][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  133.062091][ T9033] lo speed is unknown, defaulting to 1000
[  133.496758][ T9044] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  133.509749][ T9047] netlink: 'syz.1.848': attribute type 1 has an invalid length.
[  133.520778][ T9047] netlink: 'syz.1.848': attribute type 4 has an invalid length.
[  133.784213][ T9073] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  134.020925][ T9088] lo speed is unknown, defaulting to 1000
[  134.160189][ T9099] netlink: 'syz.0.862': attribute type 4 has an invalid length.
[  134.753558][ T9122] pim6reg9: entered allmulticast mode
[  135.564284][ T9155] __nla_validate_parse: 12 callbacks suppressed
[  135.564296][ T9155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.877'.
[  135.696717][ T9158] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  135.704519][ T9158] gtp0: left promiscuous mode
[  135.818908][ T9170] lo speed is unknown, defaulting to 1000
[  136.090797][ T9192] lo speed is unknown, defaulting to 1000
[  136.355578][ T9204] lo speed is unknown, defaulting to 1000
[  136.363635][ T9205] ieee802154 phy0 wpan0: encryption failed: -22
[  136.618521][ T9220] lo speed is unknown, defaulting to 1000
[  136.717321][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'.
[  136.740655][ T9223] xfrm1: entered promiscuous mode
[  136.746038][ T9223] xfrm1: entered allmulticast mode
[  137.013953][ T9232] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  137.255275][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'.
[  137.486056][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'.
[  137.663256][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'.
[  137.889642][ T9273] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  138.409709][ T9283] netlink: 'syz.1.914': attribute type 1 has an invalid length.
[  138.412340][ T9283] netlink: 224 bytes leftover after parsing attributes in process `syz.1.914'.
[  138.635347][ T9290] netlink: 'syz.1.916': attribute type 2 has an invalid length.
[  138.647468][ T9290] netlink: 224 bytes leftover after parsing attributes in process `syz.1.916'.
[  138.848506][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[  138.938451][ T9308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.967224][ T9310] lo speed is unknown, defaulting to 1000
[  139.204342][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'.
[  139.210279][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'.
[  139.343930][ T9338] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  139.411956][ T9340] lo speed is unknown, defaulting to 1000
[  139.455694][ T9341] netlink: 'syz.0.931': attribute type 1 has an invalid length.
[  139.459519][ T9341] netlink: 120 bytes leftover after parsing attributes in process `syz.0.931'.
[  140.226414][ T9381] lo speed is unknown, defaulting to 1000
[  140.661171][ T9397] __nla_validate_parse: 3 callbacks suppressed
[  140.661181][ T9397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.949'.
[  140.713098][ T9397] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  140.813262][ T9404] netlink: 64 bytes leftover after parsing attributes in process `syz.2.950'.
[  140.920672][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'.
[  140.929575][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'.
[  140.934838][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.951'.
[  140.946199][ T9410] netlink: 68 bytes leftover after parsing attributes in process `syz.2.953'.
[  140.952472][ T9408] netlink: 'syz.0.951': attribute type 3 has an invalid length.
[  140.976894][ T9412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.954'.
[  140.993287][ T9408] lo speed is unknown, defaulting to 1000
[  141.154212][ T9414] lo speed is unknown, defaulting to 1000
[  141.501602][ T9446] netlink: 'syz.1.962': attribute type 83 has an invalid length.
[  141.553581][ T9448] netlink: 'syz.1.963': attribute type 4 has an invalid length.
[  141.561537][   T51] lo speed is unknown, defaulting to 1000
[  141.564151][   T51] syz0: Port: 1 Link DOWN
[  141.570243][   T51] lo speed is unknown, defaulting to 1000
[  141.703004][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'.
[  141.707141][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'.
[  142.702556][ T9487] lo speed is unknown, defaulting to 1000
[  142.994213][ T9508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.004895][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.977'.
[  143.106911][ T9514] lo speed is unknown, defaulting to 1000
[  143.265349][ T9520] lo speed is unknown, defaulting to 1000
[  143.309298][ T8450] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  143.312693][ T8450] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  143.316063][ T8450] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  143.319749][ T8450] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  143.691698][ T9553] delete_channel: no stack
[  143.754448][ T9556] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  143.802460][ T9560] netlink: 'syz.0.995': attribute type 3 has an invalid length.
[  143.806484][ T9560] netlink: 'syz.0.995': attribute type 3 has an invalid length.
[  143.811447][ T9560] netlink: 'syz.0.995': attribute type 3 has an invalid length.
[  143.814106][ T9560] netlink: 'syz.0.995': attribute type 3 has an invalid length.
[  143.816854][ T9560] netlink: 'syz.0.995': attribute type 3 has an invalid length.
[  143.825438][ T9560] netlink: 'syz.0.995': attribute type 3 has an invalid length.
[  143.831215][ T9560] netlink: 'syz.0.995': attribute type 3 has an invalid length.
[  143.834051][ T9560] netlink: 'syz.0.995': attribute type 3 has an invalid length.
[  143.836813][ T9560] netlink: 'syz.0.995': attribute type 3 has an invalid length.
[  143.841124][ T9560] netlink: 'syz.0.995': attribute type 3 has an invalid length.
[  144.077673][ T9569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.146925][ T9569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.269140][ T9569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.349320][ T9569] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.429928][ T5879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.443693][ T8450] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.454538][ T5879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.465154][ T5879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.632315][ T9584] lo speed is unknown, defaulting to 1000
[  144.717036][ T5900] IPVS: starting estimator thread 0...
[  144.717372][ T9588] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20001
[  144.808745][ T9590] IPVS: using max 42 ests per chain, 100800 per kthread
[  144.914688][ T9598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.926055][ T5899] lo speed is unknown, defaulting to 1000
[  144.931809][ T5899] syz0: Port: 1 Link ACTIVE
[  144.939801][ T5899] lo speed is unknown, defaulting to 1000
[  145.265192][ T9625] lo speed is unknown, defaulting to 1000
[  145.284898][ T9621] nbd: illegal input index -1
[  145.476458][ T9633] lo speed is unknown, defaulting to 1000
[  145.745632][ T9650] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  146.251108][ T9671] lo speed is unknown, defaulting to 1000
[  146.414173][ T9674] lo speed is unknown, defaulting to 1000
[  146.821084][ T9691] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.866513][ T9693] __nla_validate_parse: 47 callbacks suppressed
[  146.866523][ T9693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1032'.
[  146.981706][ T9701] lo speed is unknown, defaulting to 1000
[  147.039137][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1037'.
[  147.876876][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'.
[  148.481498][ T9737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.595097][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'.
[  148.611605][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'.
[  150.111484][ T9744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1049'.
[  150.823476][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'.
[  150.860208][ T9746] vlan2: entered allmulticast mode
[  150.862484][ T9746] bond2: entered allmulticast mode
[  151.106566][ T9773] veth0_virt_wifi: mtu less than device minimum
[  151.494105][ T9785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1060'.
[  151.573807][ T9789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1062'.
[  151.615611][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  151.674673][ T9793] lo speed is unknown, defaulting to 1000
[  151.838913][ T9796] validate_nla: 23 callbacks suppressed
[  151.838922][ T9796] netlink: 'syz.2.1065': attribute type 4 has an invalid length.
[  151.908792][ T9802] __nla_validate_parse: 1 callbacks suppressed
[  151.913211][ T9802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1067'.
[  152.181198][ T9830] lo speed is unknown, defaulting to 1000
[  152.268940][ T9840] netlink: 'syz.0.1075': attribute type 8 has an invalid length.
[  152.554367][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'.
[  152.585953][ T9858] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1081'.
[  152.620684][ T9854] lo speed is unknown, defaulting to 1000
[  152.633530][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'.
[  152.672664][ T9860] 
[  152.673725][ T9860] ======================================================
[  152.676555][ T9860] WARNING: possible circular locking dependency detected
[  152.679569][ T9860] syzkaller #0 Not tainted
[  152.681985][ T9860] ------------------------------------------------------
[  152.685194][ T9860] syz.1.1082/9860 is trying to acquire lock:
[  152.687565][ T9860] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  152.691636][ T9860] 
[  152.691636][ T9860] but task is already holding lock:
[  152.694747][ T9860] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  152.698703][ T9860] 
[  152.698703][ T9860] which lock already depends on the new lock.
[  152.698703][ T9860] 
[  152.703079][ T9860] 
[  152.703079][ T9860] the existing dependency chain (in reverse order) is:
[  152.706898][ T9860] 
[  152.706898][ T9860] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  152.710219][ T9860]        lock_acquire+0x120/0x360
[  152.712377][ T9860]        _raw_spin_lock_bh+0x36/0x50
[  152.714584][ T9860]        nr_rt_ioctl+0x390/0xd50
[  152.716754][ T9860]        sock_do_ioctl+0xdc/0x300
[  152.718909][ T9860]        sock_ioctl+0x576/0x790
[  152.720949][ T9860]        __se_sys_ioctl+0xfc/0x170
[  152.723175][ T9860]        do_syscall_64+0xfa/0x3b0
[  152.725359][ T9860]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.728162][ T9860] 
[  152.728162][ T9860] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  152.731557][ T9860]        lock_acquire+0x120/0x360
[  152.733811][ T9860]        _raw_spin_lock_bh+0x36/0x50
[  152.736084][ T9860]        nr_rt_ioctl+0x193/0xd50
[  152.738142][ T9860]        sock_do_ioctl+0xdc/0x300
[  152.740272][ T9860]        sock_ioctl+0x576/0x790
[  152.742327][ T9860]        __se_sys_ioctl+0xfc/0x170
[  152.744521][ T9860]        do_syscall_64+0xfa/0x3b0
[  152.746731][ T9860]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.749483][ T9860] 
[  152.749483][ T9860] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  152.752847][ T9860]        validate_chain+0xb9b/0x2140
[  152.755042][ T9860]        __lock_acquire+0xab9/0xd20
[  152.757221][ T9860]        lock_acquire+0x120/0x360
[  152.759401][ T9860]        _raw_spin_lock_bh+0x36/0x50
[  152.761709][ T9860]        nr_rt_device_down+0xa9/0x720
[  152.764028][ T9860]        nr_device_event+0x137/0x150
[  152.766288][ T9860]        notifier_call_chain+0x1b6/0x3e0
[  152.768691][ T9860]        netif_close_many+0x29c/0x410
[  152.770912][ T9860]        netif_close+0x158/0x210
[  152.773060][ T9860]        dev_close+0x10a/0x220
[  152.775081][ T9860]        bpq_device_event+0x377/0x6a0
[  152.777392][ T9860]        notifier_call_chain+0x1b6/0x3e0
[  152.779781][ T9860]        netif_close_many+0x29c/0x410
[  152.782058][ T9860]        netif_close+0x158/0x210
[  152.784185][ T9860]        dev_close+0x10a/0x220
[  152.786238][ T9860]        bond_setup_by_slave+0x5f/0x3f0
[  152.788587][ T9860]        bond_enslave+0x7a0/0x3a20
[  152.790792][ T9860]        bond_do_ioctl+0x635/0x9b0
[  152.793023][ T9860]        bond_siocdevprivate+0x17e/0x350
[  152.795429][ T9860]        dev_ifsioc+0xb57/0xf00
[  152.797511][ T9860]        dev_ioctl+0x84c/0x1150
[  152.799543][ T9860]        sock_ioctl+0x719/0x790
[  152.801668][ T9860]        __se_sys_ioctl+0xfc/0x170
[  152.803866][ T9860]        do_syscall_64+0xfa/0x3b0
[  152.806049][ T9860]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.808794][ T9860] 
[  152.808794][ T9860] other info that might help us debug this:
[  152.808794][ T9860] 
[  152.813164][ T9860] Chain exists of:
[  152.813164][ T9860]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  152.813164][ T9860] 
[  152.818930][ T9860]  Possible unsafe locking scenario:
[  152.818930][ T9860] 
[  152.822005][ T9860]        CPU0                    CPU1
[  152.824152][ T9860]        ----                    ----
[  152.826458][ T9860]   lock(nr_neigh_list_lock);
[  152.828520][ T9860]                                lock(&nr_node->node_lock);
[  152.831635][ T9860]                                lock(nr_neigh_list_lock);
[  152.834728][ T9860]   lock(nr_node_list_lock);
[  152.836734][ T9860] 
[  152.836734][ T9860]  *** DEADLOCK ***
[  152.836734][ T9860] 
[  152.840168][ T9860] 2 locks held by syz.1.1082/9860:
[  152.842382][ T9860]  #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150
[  152.846072][ T9860]  #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  152.850129][ T9860] 
[  152.850129][ T9860] stack backtrace:
[  152.852643][ T9860] CPU: 0 UID: 0 PID: 9860 Comm: syz.1.1082 Not tainted syzkaller #0 PREEMPT(full) 
[  152.852660][ T9860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.852667][ T9860] Call Trace:
[  152.852675][ T9860]  <TASK>
[  152.852682][ T9860]  dump_stack_lvl+0x189/0x250
[  152.852702][ T9860]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.852718][ T9860]  ? __pfx__printk+0x10/0x10
[  152.852737][ T9860]  ? print_lock_name+0xde/0x100
[  152.852755][ T9860]  print_circular_bug+0x2ee/0x310
[  152.852770][ T9860]  check_noncircular+0x134/0x160
[  152.852785][ T9860]  validate_chain+0xb9b/0x2140
[  152.852800][ T9860]  ? rt6_disable_ip+0x6b3/0x720
[  152.852818][ T9860]  ? __lock_acquire+0xab9/0xd20
[  152.852835][ T9860]  __lock_acquire+0xab9/0xd20
[  152.852854][ T9860]  ? nr_rt_device_down+0xa9/0x720
[  152.852867][ T9860]  lock_acquire+0x120/0x360
[  152.852883][ T9860]  ? nr_rt_device_down+0xa9/0x720
[  152.852899][ T9860]  ? nr_rt_device_down+0xa9/0x720
[  152.852912][ T9860]  _raw_spin_lock_bh+0x36/0x50
[  152.852927][ T9860]  ? nr_rt_device_down+0xa9/0x720
[  152.852940][ T9860]  nr_rt_device_down+0xa9/0x720
[  152.852953][ T9860]  ? do_raw_spin_unlock+0x4d/0x240
[  152.852970][ T9860]  nr_device_event+0x137/0x150
[  152.852983][ T9860]  notifier_call_chain+0x1b6/0x3e0
[  152.852998][ T9860]  netif_close_many+0x29c/0x410
[  152.853016][ T9860]  ? __pfx_netif_close_many+0x10/0x10
[  152.853033][ T9860]  ? bond_netdev_event+0x227/0xe80
[  152.853047][ T9860]  netif_close+0x158/0x210
[  152.853063][ T9860]  ? __pfx_netif_close+0x10/0x10
[  152.853077][ T9860]  ? tun_device_event+0x77/0x1020
[  152.853095][ T9860]  ? __pfx___neigh_ifdown+0x10/0x10
[  152.853110][ T9860]  ? macsec_notify+0x104/0x660
[  152.853123][ T9860]  dev_close+0x10a/0x220
[  152.853141][ T9860]  bpq_device_event+0x377/0x6a0
[  152.853159][ T9860]  notifier_call_chain+0x1b6/0x3e0
[  152.853173][ T9860]  netif_close_many+0x29c/0x410
[  152.853191][ T9860]  ? __pfx_netif_close_many+0x10/0x10
[  152.853210][ T9860]  netif_close+0x158/0x210
[  152.853225][ T9860]  ? __pfx_netif_close+0x10/0x10
[  152.853239][ T9860]  ? do_raw_spin_lock+0x121/0x290
[  152.853254][ T9860]  ? __local_bh_enable_ip+0x12d/0x1c0
[  152.853266][ T9860]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.853284][ T9860]  dev_close+0x10a/0x220
[  152.853302][ T9860]  bond_setup_by_slave+0x5f/0x3f0
[  152.853319][ T9860]  bond_enslave+0x7a0/0x3a20
[  152.853333][ T9860]  ? unwind_get_return_address+0x4d/0x90
[  152.853353][ T9860]  ? __pfx_stack_trace_save+0x10/0x10
[  152.853368][ T9860]  ? __pfx_bond_enslave+0x10/0x10
[  152.853387][ T9860]  ? apparmor_capable+0x137/0x1b0
[  152.853401][ T9860]  ? full_name_hash+0x92/0xe0
[  152.853414][ T9860]  ? netdev_name_node_lookup+0xdf/0x120
[  152.853429][ T9860]  bond_do_ioctl+0x635/0x9b0
[  152.853448][ T9860]  ? __pfx_bond_do_ioctl+0x10/0x10
[  152.853472][ T9860]  ? rcu_is_watching+0x15/0xb0
[  152.853487][ T9860]  bond_siocdevprivate+0x17e/0x350
[  152.853506][ T9860]  ? __pfx_bond_siocdevprivate+0x10/0x10
[  152.853531][ T9860]  ? __lock_acquire+0xab9/0xd20
[  152.853549][ T9860]  ? full_name_hash+0x92/0xe0
[  152.853562][ T9860]  ? netdev_name_node_lookup+0xdf/0x120
[  152.853576][ T9860]  dev_ifsioc+0xb57/0xf00
[  152.853593][ T9860]  dev_ioctl+0x84c/0x1150
[  152.853607][ T9860]  sock_ioctl+0x719/0x790
[  152.853650][ T9860]  ? __pfx_sock_ioctl+0x10/0x10
[  152.853663][ T9860]  ? __fget_files+0x3a0/0x420
[  152.853680][ T9860]  ? __fget_files+0x2a/0x420
[  152.853700][ T9860]  ? bpf_lsm_file_ioctl+0x9/0x20
[  152.853716][ T9860]  ? __pfx_sock_ioctl+0x10/0x10
[  152.853729][ T9860]  __se_sys_ioctl+0xfc/0x170
[  152.853744][ T9860]  do_syscall_64+0xfa/0x3b0
[  152.853760][ T9860]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.853774][ T9860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.853786][ T9860]  ? exc_page_fault+0x9f/0xf0
[  152.853801][ T9860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.853813][ T9860] RIP: 0033:0x7f99d078ebe9
[  152.853825][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.853835][ T9860] RSP: 002b:00007f99d16a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  152.853849][ T9860] RAX: ffffffffffffffda RBX: 00007f99d09b5fa0 RCX: 00007f99d078ebe9
[  152.853858][ T9860] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000006
[  152.853865][ T9860] RBP: 00007f99d0811e19 R08: 0000000000000000 R09: 0000000000000000
[  152.853872][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.853881][ T9860] R13: 00007f99d09b6038 R14: 00007f99d09b5fa0 R15: 00007ffea24edd48
[  152.853893][ T9860]  </TASK>
[  153.050421][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  153.054080][ T9860] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.059654][ T9860] bond0: (slave rose0): Enslaving as an active interface with an up link

VM DIAGNOSIS:
19:40:05  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000004e RBX=000000000000004e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000005919 RDI=000000000000591a RBP=00000000000003f8 RSP=ffffc90006d668b0
R8 =ffff88801fd48237 R9 =1ffff11003fa9046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98e5 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f99d16a76c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=00000000220e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f99d0812e53
XMM06=0000000000000000 00007f99d0812e4d XMM07=0000000000000000 00007f99d0812e61
XMM08=0000000000000000 00007f99d0812ee7 XMM09=0000000000000000 00007f99d0812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff8886b8b7 RCX=588677d57d746700 RDX=ffffc90007cd7001
RSI=ffffffff8be332e0 RDI=ffffffff8886b8b7 RBP=ffffc90007cd7090 RSP=ffffc90007cd6fb8
R8 =ffffc90007cd77d0 R9 =0000000000000000 R10=ffffc90007cd7058 R11=fffff52000f9ae0d
R12=ffff8880269c3980 R13=ffff8881128c9c30 R14=dffffc0000000000 R15=1ffff92000f9ae0a
RIP=ffffffff818c7f68 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa26ceac6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000010000 CR3=000000010ee74000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa26c187498 00007fa26c187470 XMM03=00007fa26c1874a8 00007fa26c1874a0
XMM04=00007fa26cced100 00007fa26c187460 XMM05=00007fa26c187478 00007fa26c1874c0
XMM06=00007fa26c1874b8 00007fa26c1874b0 XMM07=00007fa26c1874a8 00007fa26c1874a0
XMM08=0000000000000000 00007fa26c012ee7 XMM09=0000000000000000 00007fa26c012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
